CertErase is a Windows application for controlled, file-level data erasure. It overwrites selected files using a configured software profile and can verify overwritten data. It removes the file only after the overwrite stage reports success, and records the operation in an output log. Pro, Enterprise and Audit editions add advanced controls such as alternate data stream handling, identity and timestamp modification, free-space wiping, reusable defaults, and PDF export. Enterprise edition adds a formal sanitization report and permits supported use on Windows Server and virtual machines. Audit edition adds digitally signed reports, validation and management.
This documentation explains the product’s observable behavior, configuration choices, output records, and operating limits. It is intended to support repeatable procedures and defensible evidence, not to replace an organization’s data-classification policy, media-sanitization standard, legal obligations, or device-disposition process.
Warning — irreversible operation
A completed erasure operation is designed to completely destroy the selected data. Confirm the target list, storage location, backups, retention obligations, legal holds, and authorization before starting.
Documentation sections
Getting Started explains installation, supported environments, editions, and the interface.
Selecting Data and Integration covers files, folders, saved target lists, drag-and-drop, and Windows Explorer integration.
Erasure Controls explains overwrite profiles, verification, alternate data streams, file identity changes, timestamp handling, metadata churn, and free-space cleanup.
-
Understand the CertErase Erasure Lifecycle
-
Choose a CertErase Erasure Method
-
Use CertErase Sanitization Profiles
-
Configure Verification and Failure Handling
-
Process NTFS Alternate Data Streams
-
Change File Names, Extensions, and Timestamps Before Deletion
-
Use Best-Effort File-System Metadata Churn
-
Understand Free-Space Wiping
Running Erasure Operations provides operational procedures, confirmation checks, cancellation behavior, and result interpretation.
Reporting and Evidence covers the live output log, TXT and PDF export, Enterprise sanitization reports, fingerprints, verification records, and evidential limits.
Security, Standards, and Governance explains logical erasure scope, storage-media constraints, standards alignment, chain of custody, and control recommendations.
Licensing, Environments, and Support covers activation, offline validation, license transfer, virtual machines, use in Windows Server, and common errors.
Frequently Asked Questions (FAQ)
Start here
New users should read the following topics in order:
- CertErase System Requirements and Supported Environments
- Install and Start CertErase
- Understand CertErase Editions and Feature Availability
- Understand the CertErase Erasure Lifecycle
- Run a Controlled File or Folder Erasure
- Interpret CertErase Logs, Verification, and Reports
- Understand the Limits of Logical File Erasure