DriveErase

Secure Drive Erasure and Data Sanitization for Windows

DriveErase sanitizes complete HDDs, SSDs, NVMe devices and removable media through a controlled workflow combining device assessment, secure erasure and reporting.

DriveErase supports firmware-based and overwrite-based sanitization methods selected according to the storage technology and operational requirements. Operations requiring direct access to the selected device are performed through a dedicated Windows Privileged Execution Environment.

• Firmware-based sanitization for NVMe, SATA SSD and Enterprise SAS SSD
• Overwrite-based sanitization for SATA HDD, SAS HDD, and removable media
• NIST SP 800-88 Revision 2 and IEEE 2883-2022 informed Clear and Purge sanitization
• Certified data sanitization reports
• Pre and post-erasure device health assessment
• Windows-managed workflow with no external boot media required
• Supports independent sanitization profiles for each selected device

Secure disk erasure — beyond formatting and deletion

Formatting a disk, deleting its partitions, or reinstalling an operating system does not necessarily remove the underlying data. Information can remain recoverable until the relevant storage areas are securely sanitized.

DriveErase securely processes the complete storage device using a selected erasure method. Operations that require direct and unrestricted access to the disk are performed from a dedicated Windows Privileged Execution Environment, outside the normal Windows operating system.

Whether you are preparing computers for reuse, decommissioning storage devices, returning leased equipment, or enforcing internal data disposal policies, DriveErase provides a controlled and repeatable whole-device sanitization workflow.

How DriveErase works

1. Select the devices: Review device identity, capacity and connection information, then select the physical storage devices to sanitize.
2. Configure each device independently: Choose the pre-erasure SMART assessment, sanitization method, verification or fallback behavior, and post-erasure assessment.
3. Review and confirm: DriveErase runs preflight checks and presents the complete target and settings summary before the irreversible operation is approved.
4. Restart automatically: DriveErase prepares a protected one-time job and restarts into the Privileged Execution Environment. No external boot media is required.
5. Validate and sanitize: The environment validates the job and device identities, performs the configured assessments and sanitization method, and records the result for each device.
6. Return to Windows: After completion, the computer restarts into Windows so that the operator can review the results.
7. Generate Audit evidence: Create a digitally signed data sanitization report and validate or manage it through the SaaS reporting service.

The workflow can include pre-erasure SMART assessment, device sanitization and post-erasure health assessment, depending on the selected configuration and device capabilities. DriveErase records each stage and result separately for every selected device.

Start in Windows and end in Windows—no external boot media required

Configure the complete sanitization workflow through the DriveErase Windows application. When direct device access is required, DriveErase automatically restarts into a Privileged Execution Environment, performs the configured operation and returns the computer to Windows.

No separate boot image or bootable USB drive is required, and there is no external boot environment to prepare manually.

Configure mixed-device jobs without a fixed device-count limit

DriveErase is designed for systems containing different storage technologies. Configure each selected device independently, assigning the appropriate sanitization method, verification and post-erasure assessment for that device.

A single job can include supported HDDs, SATA SSDs, NVMe devices and enterprise SAS storage. DriveErase imposes no fixed software limit on the number of devices in the job; practical capacity depends on the host system, storage controllers and available connections.

Key benefits

Whole-Device Data Sanitization

Per-device workflow control

Dedicated Windows Privileged Execution Environment

Device Assessment Before and After Erasure

Audit-Ready Documentation

Reduced Residual Data Risk

Edition Comparison

Choose the right DriveErase edition for your needs. From personal device sanitization to enterprise compliance and audit workflows, DriveErase scales with your security, deployment, and reporting requirements.

Pro and Enterprise licenses are perpetual and licensed per device. Each purchase includes access to software versions released during the 12 months following purchase. Eligible versions remain licensed for continued use after the update period ends. Access to versions released later requires renewal of the update entitlement.

Features

Storage Device Detection

• Automatic scanning of connected storage devices
• Clear presentation of disk identity, capacity, interface, and status
• Manual device-list refresh when storage hardware changes
• Selection of one or more target devices

Secure Erasure Methods

• Modern sanitization profiles aligned with recognized best practices
• Configurable overwrite methods and pass sequences
• Optional verification of overwrite operations
• Firmware-based sanitization for supported SATA, NVMe and SCSI devices
• Firmware-first operation with configurable overwrite fallback
• Final result based on the method actually completed

Three-Stage Sanitization Workflow

• Initial device identification and available SMART assessment
• Sanitization using the selected supported method
• Post-erasure health or validation assessment

Windows Privileged Execution Environment

• Automatic preparation of the secure erasure environment
• Automatic restart into the environment
• Direct execution of supported storage-device operations
• Automatic return to Windows after completion

Reporting & Evidence

• TXT, PDF, CSV and JSON result exports in supported editions
• Structured Enterprise and Audit reports
• Storage-device identification
• Selected and completed sanitization method
• Initial SMART information where available
• Execution timestamps and duration
• Verification and completion status
• Post-erasure assessment results where configured
• Digitally signed Audit reports
• SaaS validation and management for Audit reports

Use cases

DriveErase is suitable for:

• IT and security teams sanitizing computers and storage devices before reuse
• Compliance and audit teams requiring documented evidence of data sanitization
• Businesses and professionals decommissioning equipment that contained sensitive information
• Managed service providers performing secure disk sanitization for customers
• Computer refurbishers and resellers preparing devices for a new owner
• Data centres and enterprise environments managing storage-device retirement workflows
• Organizations returning leased hardware that need assurance that residual data has been removed

Ready to securely erase your storage devices?