Certus Data Destruction:
Certified “Certus” from Certus Erasure Software - Germany:
see https://www.certustech.com/
We permanently remove data from IT assets such as PCs, Servers, Storage Arrays, Laptops, iPhones, Smartphones, iPads, Tablets, Switches, Routers, Photocopiers and Data Centre Equipment.
Data Erased by us using “Certus” from German based Certus Erasure Software cannot be recovered with any existing technology. The certified detailed report provided is proof of a successful data erasure.
This tamper-proof and verifiable reporting is an essential part of compliance, regulatory and legal auditing requirements. A comprehensive audit trail is a critical requirement for compliance with IT security standards such as ISO27001, ISO15408, PCI, FISMA, Common Criteria EAL3+ (CCRA) and National Cyber Security Centre (NCSC) among many. The first-class Dashboard makes it simple and is efficient to manage, archive and access all the erasure information.
Certus is a leading international provider of certified data erasure software and hardware products used by companies of all sizes around the world to completely remove and sanitize all data from hard drive storage devices.
The failure to remove data can have far-reaching consequences. It can lead to identity theft, fines, lawsuits, or prison time not to mention the loss in business or the blow to your organisation's reputation.
The confidential and sensitive information stored on large volumes of drives poses a risk. Before those drives can be reused, recycled or donated, that data must be completely and irrevocably removed. Companies are required by law to comply with regulations to safely and completely ensure that this sensitive and confidential information not be exposed to others or they will suffer from non-compliance with these regulations.
Whether you have one drive or thousands of drives you need a certified data erasure plan. A system or service that can not only perform the data wipe process you need but be able to provide reporting and management tools so that you have the peace of mind that comes with complete confidence you're in compliance.
The Certus Reports gives evidence for the certified data erasure of devices and is therefore in compliance with article 17 of the GDPR (General Data Protection Regulations).
Certus has a dynamic new interface, it can work standalone, remotely and in PXW’s. It’s customisable to suit your needs and reports in the format you choose.
Certus Erasure Software - Key Features:
Supports BIOS & UEFI
Verification level support up to 100%
TPM Erasure
RAID preparation
Remove freeze locks
Automate Erasure process
Certified mechanism for data integrity checking
Embedded erasure verification tool (hexviewer)
API Interface
Erasure reports securely delivered as PDF, XML, HTML or XLS format to either the USB drive or to the remote management server
Certus Erasure Software - Erasure Methods:
Standard Overwrite ATA Secure Erase
British HMG IS5 Baseline ATA Sanitize Block Erase
British HMG IS5 Enhanced ATA Sanitize Crypto Scramble
Russian GOST R 50739-95 Baseline for Android (BFA)
NSA 130-2 Enhanced for Android (EFA)
US DoD 5220.22-M Baseline for iOS (BFI)
US DoD 5220.22-ECE Enhanced for iOS (EFI)
NCSC-TG-025 iOS Factory Reset (IFR)
Navso P-5329-26 NVMe Format
US Air Force 5020 NVMe Format Crypto
Bruce Schneier TCG PSID Revert
Canadian OPS-11 NIST SP 800-88 Rev.1 Clear
BSI VSITR NIST SP 800-88 Rev.1 Purge
BSI-GS Gutmann Algorithm
BSI-GSE
Certus Erasure Software - Certifications & Accreditations:
Certus Software offers a wide range of Certified Data Erasure products, currently certified by the following organisations:
Common Criteria (ISO 15408)
Common Criteria is an internationally recognized independent security certification recognized by governments in 31 countries across Europe, Australia, Asia and North America. Certus Erasure Software is Common Criteria certified.
NATO
Certus Erasure Software is recommended by NATO and included in the prestigious NATO Information Assurance Product Catalogue (NIAPC).
Asset Disposal & Information Security Alliance (ADISA)
The ADISA audit process is multi-layered and includes full audits, unannounced operational audits and forensic audits. Certus’s SSD Erasure Method passed Level II (attack by a threat adversary using standard intrusive/destructive testing tools designed to read data directly off a chip) and for Mobile Devices Level I (attack by a threat adversary using COTS forensic tools and techniques) testing.
Hunguard
Hunguard is the leading IT security services provider in Hungary focused on security evaluation, auditing and the assessment of IT systems, and IT security consultancy. CECE Software System v1.1.0 developed by Certus Software is certified by Hunguard and complies with the Security Target at the EAL3 assurance level according to MSZ EN ISO/IEC 15408-3:2020.
Norwegian National Security Authority
NSM grants approval for the use of Certus Erasure Software to delete data on storage media. After an overall assessment of the documentation it is concluded that the deletion tool satisfies requirements for secure deletion of data in accordance with the Norwegian Security Act, Common Criteria, NSM’s Handbook on the destruction of documents and storage media and current standards.
National Cyber Security Centre (NCSC)
Certus Erasure Software is certified by the National Cyber Security Centre, the UK Government’s National Technical Authority for Information Assurance. Certus Erasure Software exceeded the highest security specifications detailed in the HMG Infosec Standard No: 5.