Data Sanitization

Data Sanitization · Chaska, Minnesota

Retire your hardware without wondering what happened to the data.

Every drive we handle is erased to NIST SP 800-88 Rev. 1 and verified, or physically destroyed. You get a signed certificate for every serial number — and we can still produce it seven years from now.

How it works commercially

Most vendors charge you to haul it away. Often, we pay you.

We’re a hardware broker first. Retired enterprise equipment is worth something to us, which means the money frequently moves in the direction you don’t expect.

We buy the hardware

Sanitization at no charge, and we pay you for the equipment. This is the usual answer for newer servers, storage arrays and name-brand systems that still carry resale value.

We sanitize per drive

A flat per-drive rate when the equipment has little resale value, or when you’re keeping the hardware. Same process, same certificates, same records.

Mixed lots

Most real jobs are both. We price the valuable equipment one way and the rest the other, then show you the net — which is often a check in your favor.

Send us the make, model, age and quantity and we’ll tell you which way your lot falls. Quotes are free and we’ll tell you honestly when the answer is “this isn’t worth much.”

The process

How a drive moves through

Six steps, every drive, no exceptions. The controls exist because “we wiped it” is not evidence.

  1. Logged on arrivalSerial, model, capacity, source machine and date received. Serials are read from the drive itself rather than transcribed, because a hand-copied serial is wrong exactly when it matters most.
  2. SegregatedUn-sanitized media never shares a container with cleared media.
  3. SanitizedThe strongest method the drive’s firmware supports, falling back only when it must — and recording which method was actually used.
  4. VerifiedRead-back at randomly selected locations, or the drive’s own completion report where the method was a cryptographic erase.
  5. Independently checkedAt least 5% of every batch, minimum one drive, selected at random by our tooling rather than chosen by the operator, and examined by someone who did not perform the wipe. Our tooling refuses to close a batch that was verified by the person who sanitized it.
  6. Released against its recordBefore anything ships, the serial is checked for a successful sanitization, a verification pass, and a certificate that exists and is signed. No record, no release.

Documentation

What you get back

For every drive, whatever the outcome.

  • A signed certificate naming the serial number, model, capacity, method used, NIST level achieved, verification result, operator and date. Signed RSA-PSS-SHA256.
  • A verification record — either the sample count and locations read back, or the drive’s own completion report where the method was a cryptographic erase.
  • A tamper-evident log entry. Records are hash-chained, so one can’t be altered afterwards without breaking the chain.
  • A certificate of destruction instead, for any drive that couldn’t be sanitized.
  • Seven-year retrieval. Ask us in 2033 what happened to a particular serial number and we can answer.

Methods

And the evidence behind them

Each method below was validated against ground truth before it was used on anyone’s media: a recognizable marker written across the full capacity of a drive, confirmed readable, the drive sanitized by our normal process, and the marker required to be gone.

MethodNIST levelValidated onDateResult
ATA SANITIZE crypto scramblePurgeSeagate ST3000NC000, 3 TB SATA HDD31 Aug 20265 of 5 markers destroyed
ATA SANITIZE crypto scramblePurgeMicron MTFDDAV480TDS, M.2 SATA1 Sep 20265 of 5 markers destroyed
ATA SANITIZE block erasePurgeLITEON CV8-8E128, M.2 SATA3 Sep 2026Confirmed by device
SCSI SANITIZE crypto erasePurgeKioxia KPM5WRUG3T84, 3.84 TB SAS SSD31 Aug 20265 of 5 markers destroyed
Host overwrite + read-backClearHGST HUC151414CSS600, 15K SAS HDD3 Sep 2026250 locations verified clean

Swipe the table sideways to see every column.

Purge and Clear are not the same thing, and we record which one you got. A firmware-level sanitize reaches the entire medium, including reallocated sectors and any hidden areas, and is recorded as Purge. A host overwrite reaches only addressable blocks and is recorded as Clear. Drives whose firmware doesn’t support sanitize get the accurate label, not the flattering one.

Capacity

Built to run batches, not one drive at a time

Two dedicated sanitization hosts, with SAS shelves daisy-chained off them, process well over a hundred drives in parallel. That is why a job that a national vendor quotes in weeks generally comes back from us in days.

Physical destruction happens here too, so a drive that fails sanitization doesn’t sit in a queue waiting on somebody else’s schedule.

Local to the southwest metro. We’re in Chaska, twenty minutes from Minneapolis. You’re welcome to deliver drives in person and watch them go in — a courtesy the national vendors structurally cannot offer.

Pickup can be arranged for larger lots.

Scope

Media we handle

Accepted

SATA hard drives and SSDs, including M.2 SATA. SAS hard drives and SSDs. Media inside enclosures, caddies and USB adapters. Drives still installed in servers — including the ones that hide: rear and mid-plane cages, internal M.2, boot-optimized storage cards, and drives behind RAID controllers.

Not currently accepted

NVMe, magnetic tape, optical media, mobile devices, and flash soldered to a board. If your lot contains these, tell us up front and we’ll say plainly what we can and can’t take.

When media can’t be sanitized

Drives that fail, can’t be read, or whose sanitization can’t be verified are never released for resale. They’re recorded, segregated and destroyed, and you get a certificate of destruction naming the serial.

Hard drives are crushed on site, deforming the platters. SSDs and other flash go to a downstream destruction partner for shredding — NAND lives in a few small chips that can survive a press intact, and chip-off recovery is a service anyone can buy, so a crusher isn’t good enough. Destroyed media and recovered components go to a materials recycler.

Partners

For MSPs, VARs and IT consultants

When your client asks what to do with a rack of old equipment, you should have an answer that makes you money instead of one that makes you a middleman.

What you get

White-label certificates carrying your logo if you want them. Partner pricing with room to mark up. Pickup and logistics handled. Turnaround measured in days, because we’re down the road rather than three states away.

And the part nobody else offers

If the hardware has resale value, we cut you in on it. That’s revenue on equipment you were previously arranging to have taken away for free — or paying someone to remove.

You keep the client relationship and the credit. We do the work and stay invisible if that’s what you want. Start a conversation →

Standards

What we follow, and where we stand

We work to NIST SP 800-88 Rev. 1 — the same standard the large ITAD vendors cite — and we can produce the evidence for any individual drive we’ve handled.

We are not R2 or NAID AAA certified, and we don’t represent ourselves as certified. Certification is on our roadmap; it isn’t behind us. If your compliance program requires a certified vendor, say so at the start and we’ll tell you straight away whether we’re a fit rather than waste your time.

We’d rather be the vendor you can check than the one you have to take on faith.

Get started

Tell us what you’ve got

Make, model, age and rough quantity is enough for a first answer. If you’re local you’re welcome to bring it by.

Regan Tollefson — Sales & Data Sanitization

Sales@jotantech.com  ·  (952) 405-8711
125 Columbia Ct N, Bay 1, Chaska, MN 55318

Shopping Cart