Certified erasure and physical destruction for HDDs, SSDs, and digital media — with full documentation to meet GDPR, ISO, NHS, and MOD requirements.

Deleting or formatting isn’t enough—data can often be recovered using simple tools.
UK businesses lose on average £3M+ per breach from compromised end-of-life devices.
GDPR and sector-specific regulations demand verifiable, certified data destruction.
We use multiple secure methods to ensure that all data is permanently destroyed, tailored to the media type and your compliance requirements. Full reports and certificates are issued with every job.
We use an in-house developed software protocol that performs multiple overwrites followed by verification checks. Each device is securely erased and accompanied by a verifiable erasure report.
Modern HDDs and SSDs have built-in secure erase commands defined by the ATA standard, sometimes called “Sanitise” or “Enhanced Secure Erase.” Where supported, we trigger these on-board commands to scramble all stored data at the firmware level, making recovery impossible.
For clients requiring formal certification, we provide erasure using audited tools such as Blancco, WhiteCanyon, or KillDisk. These solutions generate tamper-proof reports accepted under ISO, GDPR, NHS, MOD and other regulatory frameworks.
For drives beyond erasure, we provide shredding or crushing services to physically destroy the media. This guarantees permanent data elimination and is always accompanied by a Certificate of Destruction.
We securely erase or physically destroy all common forms of digital media, ensuring nothing leaves your organisation recoverable.
Complete erasure or shredding of all spinning and solid-state drives.
Secure destruction of legacy LTO and DAT backup media.
Shredding and disposal of CDs, DVDs, and Blu-ray discs.
Certified erasure or destruction of smartphones and tablets.
Our data destruction services are designed to meet the strictest international and sector-specific standards. Every erasure or destruction process is fully documented and accompanied by a tamper-proof certificate.

Flash-based solid-state drives cannot be reliably sanitised using simple overwriting. Peer-reviewed research (Wei et al., UCSD, 2011) confirms that SSDs retain digital remnants even after many overwrite passes due to controller behaviour and the internal architecture of flash memory.
To achieve a verifiable and auditor-acceptable sanitisation outcome, the workflow must include:
This multi-stage process is the foundation of TFix's SSD sanitisation workflow, ensuring GDPR-compliant, NIST 800-88r2 and NCSC Secure Sanitisation Guidance aligned, audit-ready data sanitisation for all flash-based media.
Key details about our certified data erasure and destruction services.
We securely erase or destroy HDDs, SSDs, backup tapes, optical discs, servers, and mobile devices. Each method is matched to the media type to ensure data is permanently unrecoverable.
Yes. Every erasure or destruction job is documented and supplied with a tamper-proof Certificate of Destruction or Erasure Report, accepted under GDPR, ISO 27001, NHS, and MOD compliance frameworks.
We use in-house multi-pass overwrite routines, ATA Secure Erase, NVMe Sanitise, PRNG-based random overwriting, and physical destruction when required. The method chosen depends on the device type and compliance needs.
If a device cannot be sanitised or verified, it is diverted immediately to physical destruction. This guarantees data elimination and ensures full compliance with GDPR and NIST 800-88r1 expectations.
SSD sanitisation requires multiple stages: PRNG random overwriting, full-data verification, and finally ATA Secure Erase or NVMe Sanitise. SSD controllers remap and compress data, meaning simple overwriting is insufficient. This extended workflow increases processing time and therefore incurs a higher cost.
Our SSD workflow follows research-based standards: random overwriting to fill over-provisioned areas, verification of written data, and a final firmware-level secure erase. If verification fails, the device is physically destroyed. This ensures data is permanently unrecoverable, even from stale flash blocks.
Certified GDPR/ISO-compliant erasure or destruction with tamper-proof certificates
Prices exclude VAT. Pricing applies per data-bearing device (HDD, SSD, tape, mobile). SSDs incur a surcharge due to mandatory multi-stage sanitisation (firmware secure erase + random overwrite) required to meet GDPR/NIST 800-88r2 and NCSC Secure Sanitisation Guidance standards. Complex systems requiring extended disassembly may incur an additional extraction fee, confirmed at survey.
We’ll confirm media type, compliance requirements, and processing method before scheduling.