🔒 Free Onsite Hard Drive Shredding · Witnessed Destruction · Greater Phoenix AreaSee Mobile Shredding
NIST 800-88 Rev. 2 · Compliance Guide

Data Destruction Methods: A Complete Guide to NIST 800-88 Rev. 2 Compliance

Compare shredding, degaussing, data wiping, and cryptographic erasure — and choose the right method for every device, every compliance framework, and every data sensitivity level.

PIBy Phoenix ITAD Compliance Team, Certified ITAD & Data Security Specialists | Phoenix ITADPublished June 6, 2026Last updated June 6, 2026

Not all data destruction is equal. The method you choose should be determined by the sensitivity of the data, the type of storage media, and whether the device will be reused after sanitization. Using the wrong method — or worse, no certified method at all — leaves your organization exposed to data breaches, regulatory penalties, and reputational damage.

This guide explains the four primary data destruction methods recognized by NIST Special Publication 800-88 Rev. 2 (released September 2025), when to use each, and how Phoenix ITAD applies them to protect our clients' most sensitive data.

Understanding NIST 800-88 Rev. 2: The Three-Tier Framework

NIST 800-88 Rev. 2 defines three sanitization categories. Each represents a different level of recovery resistance and maps to specific methods.

Sanitization LevelMethodWhen to UseRecovery Risk
ClearSoftware overwriteLower-sensitivity data, reuse intendedMinimal with proper implementation
PurgeDegaussing, cryptographic erasureModerate-sensitivity dataInfeasible with state-of-the-art techniques
DestroyPhysical shredding, pulverizationHighest-sensitivity dataPhysically impossible

Physical Hard Drive Shredding

Physical shredding feeds storage media through industrial cutting heads that reduce drives to small particles. NSA/CSS specifications require a final particle size of 2mm or less for classified media, and Phoenix ITAD's equipment meets that standard. Shredding works on every storage type — HDDs, SSDs, NVMe, tape, optical media, smartphones, and USB drives — because it eliminates the medium itself rather than the bits stored on it.

Shredding is classified as Destroy under NIST 800-88 Rev. 2 and is required whenever data recovery must be physically impossible. Because the device is destroyed, no value recovery is possible — shredding is the right choice when security outweighs residual value.

Use case: Best for: Highest-sensitivity data, healthcare ePHI, financial records, government/defense data, any device that will not be reused.

Hard Drive Degaussing

Degaussing applies a powerful magnetic field that scrambles the magnetic domains on a hard disk drive or tape, leaving the data unreadable. NSA/CSS-listed degaussers generate fields strong enough to sanitize modern high-coercivity HDDs in seconds. Because degaussing relies on magnetism, it has no effect on solid-state media.

Degaussing is classified as Purge under NIST 800-88 Rev. 2 for HDDs and magnetic tape, and is often paired with physical destruction for the highest-sensitivity workloads.

Use case: Best for: Traditional hard disk drives (HDDs) and magnetic tape. NOT effective on SSDs, NVMe drives, or optical media.

Certified Data Wiping and Erasure

Software-based data erasure overwrites every addressable sector on a drive with deterministic patterns and then verifies the overwrite. When performed with NIST 800-88-aligned tools such as Blancco, wiping produces a tamper-evident certificate that documents the device serial, method, and verification result.

Wiping is classified as Clear or Purge under NIST 800-88 Rev. 2 depending on the underlying method, and is the right method for devices that will be remarketed or redeployed because the drive remains fully functional and retains its market value.

Use case: Best for: Devices that will be remarketed or donated. Provides a certificate of erasure and allows the device to retain its value.

Cryptographic Erasure for Self-Encrypting Drives

Cryptographic erasure (crypto erase) destroys the encryption key on a self-encrypting drive, instantly rendering the encrypted data unrecoverable. Because the underlying ciphertext can no longer be decrypted, the data is functionally gone in seconds even on multi-terabyte drives.

NIST 800-88 Rev. 2 explicitly recognizes crypto erase as a Purge-level method for SEDs, and it is the preferred sanitization path for modern enterprise SSDs, NVMe drives, and cloud storage where physical destruction is impractical.

Use case: Best for: Self-encrypting drives (SEDs), cloud storage, and modern enterprise SSDs where physical destruction is not required.

Which Data Destruction Method Is Right for Your Device?

Different storage media require different sanitization strategies. Use this matrix to map devices to the right NIST 800-88 Rev. 2 method.

Device TypeRecommended MethodNIST 800-88 LevelNotes
Traditional HDD (spinning disk)Degaussing + ShreddingPurge / DestroyDegaussing alone sufficient for Purge; shredding for Destroy
SSD (SATA)Shredding or Cryptographic ErasurePurge / DestroyDegaussing NOT effective
NVMe DriveShreddingDestroyPhysical destruction recommended for highest security
Self-Encrypting Drive (SED)Cryptographic Erasure or ShreddingPurge / DestroyCrypto erase sufficient if encryption key is properly managed
Laptop (for reuse)Certified Data WipingClear / PurgeBlancco-certified erasure with certificate
Smartphone / TabletFactory Reset + Certified WipeClearVerify with manufacturer's guidance
Magnetic TapeDegaussing + Physical DestructionPurge / DestroyHigh-sensitivity tape should be shredded
USB / Flash DrivePhysical ShreddingDestroySmall form factor makes wiping unreliable
Optical Media (CDs / DVDs)Physical ShreddingDestroyCannot be degaussed or wiped
Photocopier Hard DriveCertified Data Wiping or ShreddingClear / DestroyOften overlooked — contains copies of all scanned documents

Data Destruction Methods — FAQ

Quick answers to the most common questions about NIST 800-88 Rev. 2 methods.

Physical shredding is the most secure data destruction method, as it physically destroys the storage media into particles small enough that data recovery is physically impossible. Phoenix ITAD's shredding equipment reduces drives to particles of 2mm or less, meeting NSA/CSS requirements for the destruction of classified media.

No. Degaussing is only effective on magnetic storage media (traditional hard disk drives and magnetic tape). Solid-state drives (SSDs), NVMe drives, and flash-based storage are not affected by magnetic fields and require physical shredding or cryptographic erasure for secure data destruction.

NIST Special Publication 800-88 Rev. 2, released in September 2025, is the updated federal guideline for media sanitization. It defines three sanitization categories (Clear, Purge, Destroy) and provides specific guidance for modern storage technologies including NVMe drives, self-encrypting drives, and solid-state media.

For most commercial applications, certified data wiping is sufficient for devices that will be remarketed or reused. However, for the highest-sensitivity data — including classified government information, healthcare PHI, and financial records — physical destruction is recommended because it eliminates any theoretical recovery risk.

Who we can serve: businesses only

We collect from offices, facilities, warehouses, server rooms, and data centers. We do not service residences — no household pickups and no consumer drop-off. Free pickup runs roughly 60 miles from our Scottsdale processing facility (all of Maricopa County), with scheduled routes for the rest of Arizona. Minimum pickup is 5+ devices, one pallet, or a single rack. Pickup criteria →

Need every NIST 800-88 method under one certified roof?

Phoenix ITAD delivers shredding, degaussing, certified wiping, and cryptographic erasure with NAID AAA and R2v3 certification — onsite or at our Phoenix facility.

Request a Destruction Quote Call (877) 321-4823