Erasure Controls

This section explains how CertErase transforms and deletes selected data. It distinguishes overwrite profiles from supporting controls such as verification, alternate data stream processing, identity changes, timestamp handling, metadata churn, and free-space wiping.

Choose controls according to the data, media, threat model, operating environment, and evidence requirement. Pass count alone is not a complete sanitization policy.