Skip to content 
Löschprotokoll
In brief
An erasure report is the documentation of a data erasure that records, for a specific data carrier, when, with what and with what result it was erased. It typically states the serial number, erasure method, start and end time, verification result and operator. For accountability under the GDPR, it is the proof that decommissioned data carriers no longer contain readable data.
Erasure report and erasure certificate
The terms are often used interchangeably. The erasure report describes the technical process, usually generated automatically by the erasure software. An Erasure certificate confirms the result to the client, often summarized and signed or digitally signed. In practice, the report forms the basis of the certificate.
A reliable report is exact to the device and serial number, names a recognized method and contains an Erasure verification. A collective receipt "100 hard drives erased" is not enough, because it cannot be assigned to an individual data carrier. Which mandatory details belong in it is explained in our guide Certificate of destruction and erasure report: what they must contain.
Erasure reports at Second IT
Second IT erases with Blancco, including hidden areas such as HPA and DCO, and creates an erasure report per serial number. You receive a digitally signed erasure certificate for every device; audit reports are available in the customer portal.
Frequently asked questions about the erasure report
Is an erasure report required by law?
No law mentions it expressly. However, the GDPR requires that you can demonstrate compliance with the data protection principles. A report per data carrier is the usual way to do so.
How long should I keep erasure reports?
You define that in your erasure policy. A sensible period is one during which audits or inquiries about the devices are still possible.
Can I create a report myself?
Yes, if your software generates it. A manually completed form without technical verification, by contrast, is of little reliability.
What belongs in an erasure report?
Serial number of the data carrier, erasure method, start and end time, verification result and operator. A reliable report is exact to the device and serial number and contains an erasure verification. Only then can it be assigned to an individual data carrier.
Is a collective receipt for all erased hard drives enough?
No. A receipt such as "100 hard drives erased" cannot be assigned to an individual data carrier. For accountability, you need a report per serial number that documents method and result in a traceable way.
Erasure report per serial number – for every device, without gaps.
Send us your device list. You will receive your offer in 48 hours on average.