ITAD & Data Sanitization Glossary
The definitive encyclopedia for sanitization, compliance, and diagnostics.

The gold standard for media sanitization guidelines published by NIST.

Special Publication 800-88 (Revision 2) provides recommendations for sanitizing computer storage media before disposal or reuse. It categorizes sanitization actions into Clear, Purge, and Destroy, placing strong emphasis on flash media controller protocols over legacy magnetic overwrite passes.

Logical data sanitization across all user-addressable storage locations.

A logical erasure method (such as single-pass zero overwrite) that protects against simple non-invasive data recovery techniques using standard system utilities. Suitable when devices remain within the same security boundary.

Physical/firmware-level sanitization rendering data unrecoverable even in labs.

Executes controller-level and firmware-directed commands (ATA Secure Erase, NVMe Sanitize, Cryptographic Erase) that bypass the OS filesystem to purge all user data, over-provisioned blocks, and reallocated sectors. Protects against advanced forensic lab recovery.

Physical destruction of storage media (shredding, incineration, degaussing).

The ultimate sanitization action applied when physical media is corrupted, unreadable, or classified, rendering media permanently unusable.

The modern standard specifically designed for solid-state storage sanitization.

Developed by the IEEE Computer Society, this standard addresses modern flash media (NVMe, SATA SSDs, persistent memory) and outlines precise commands for Clear, Purge, and Destructive Purge.

Asset Disposal and Information Security Alliance certification standard.

An industry certification scheme that audits ITAD facilities and certifies data sanitization software to verify that erased drives cannot be recovered under forensic scrutiny.

Low-level NVMe controller command resetting all physical NAND blocks.

A hardware command defined in NVMe specifications where the SSD controller electrically alters all physical flash memory blocks (including wear-leveling reserves) to a sanitized state.

Instantaneous destruction of the Media Encryption Key on self-encrypting SSDs.

Secure Erase Setting 2 (SES=2) instructs the NVMe controller to overwrite or generate a new internal encryption key, rendering all existing ciphertext on the flash chips mathematically undecipherable in under 10 seconds.

Firmware-level hardware purge for SATA/IDE solid-state and hard disk drives.

An ATA command protocol executed by the drive controller that writes predetermined vendor hardware patterns across all user and reallocated sectors, bypassing host operating system drivers.

Internal SSD controller software managing block mapping and wear leveling.

The FTL abstracts physical flash blocks from host logical block addresses (LBAs). Because of dynamic remapping, OS-level file overwrites cannot guarantee all physical cells are cleared without controller-level purge commands.

Hidden flash reserves used to extend SSD lifespan and sustain write performance.

Spare physical flash memory reserved by SSD manufacturers that is not accessible via standard logical block addressing. Only hardware Sanitize and Purge commands reach these reserved cells.

Hidden drive sectors configured outside the visible user partition table.

Host Protected Area (HPA) and Device Configuration Overlay (DCO) are hidden reserved disk zones. Enterprise wiping solutions must reset HPA and DCO boundaries to sanitize hidden data.

The global benchmark standard for responsible electronics recycling and reuse.

The Responsible Recycling standard version 3 establishes core environmental, data security, and testing requirements for electronics recyclers. Core requirements include Appendix B (Data Sanitization) and Appendix C (Test and Repair).

Security control ensuring the wiping operator cannot verify their own certificates.

A fundamental internal control required by NIST SP 800-88 and R2v3. In reCore, the technician performing the wipe cannot approve the final compliance certificate, preventing fraudulent sign-offs.

Cryptographically verifiable PDF document proving permanent data destruction.

A digital certificate containing drive serial numbers, sanitization method, read-back verification hashes, technician IDs, and a SHA-256 integrity hash verifiable against database records.

Chronological audit trail documenting asset custody from intake to disposition.

The unbroken record documenting who handled, transported, tested, wiped, and refurbished an IT asset, ensuring compliance with data privacy regulations (GDPR, HIPAA, GLBA).

SERI standardized grading system for functional and cosmetic condition.

The classification matrix under R2v3 assigning specific functional codes (e.g., F1 to F6) and cosmetic scores (e.g., C0 to C9) to refurbished hardware prior to resale.

Comprehensive automated and interactive hardware health inspection.

Automated evaluation of CPU, RAM, GPU, storage SMART metrics, battery degradation, thermal sensors, display dead pixels, keyboard matrix, audio transducers, and physical I/O ports.

Standardized physical defect grading across key device sub-assemblies.

Structured evaluation of LCD screen, top cover, bottom cover, palmrest, keyboard, corners, and ports, automatically calculating an overall Grade A/B/C/D/F for resale valuation.

Measurement of battery design capacity vs current full charge capacity.

Hardware telemetry extracted from the device battery management controller (BMS) displaying current health percentage, maximum milliamp-hours, and historical cycle counts.

Lightweight in-memory Windows environment for zero-footprint triage.

A bootable environment loaded into RAM from USB or network PXE that inspects hardware, runs diagnostics, and sanitizes storage without writing any files or altering the host operating system.

Outbound TLS streaming of bench progress directly to the web dashboard.

Architecture where client boot devices initiate secure outbound HTTPS/WSS connections to the central SaaS platform, eliminating the need for local on-premise servers or firewall configuration.