Skip to content 
Löschverifikation
In brief
Erasure verification is the check of whether an erasure process on a data carrier was completed fully and without errors. It evaluates the status of the erasure tool, detects errors and anomalies and, depending on the method, can also read out the content on a sample basis or completely. Its result belongs in the erasure report and the erasure certificate for each device.
Verification and validation
The US guideline NIST SP 800-88 has distinguished two steps since its Revision 2 of September 2025:
| Step | Question | Example |
|---|---|---|
| Verification | Was the process completed as intended? | Status of the erasure software, error messages, condition of the drive |
| Validation | Has the data been effectively removed, and is the residual risk acceptable? | Evaluation of the results, decision: release, or erase or destroy by other means |
According to NIST SP 800-88 Rev. 2, an elaborate read-out of the content after erasure is not necessary, unless your own policy expressly requires it. Many erasure programs nevertheless offer a check on a sample basis or of the entire data carrier.
Why verification matters
An erasure command can run through without errors without reaching the data, for example if the method does not suit the data carrier. Defective sectors can leave areas untouched. Verification makes such cases visible. If it turns out negative, erasure is carried out with a different method or the data carrier is destroyed. More on the methods in the guide Securely erasing hard drives and SSDs.
At Second IT, erasure processes are monitored with Blancco and documented for each device with a digitally signed erasure certificate. Data carriers that cannot be erased in an audit-proof manner are destroyed in-house.
Frequently asked questions about erasure verification
Does every erasure have to be verified?
Yes, at least by checking the status and errors of the erasure process. Whether the content is additionally read out is determined by your policy.
What happens if verification fails?
The data carrier does not count as erased. It is erased again with a suitable method or physically destroyed, and the result is documented.
Is the verification stated in the erasure certificate?
It should be. A good erasure certificate states the method, verification method and result per serial number.
What is the difference between verification and validation in erasure?
Verification asks whether the process was completed as intended, for example based on status and error messages. Validation asks whether the data has been effectively removed and the residual risk is acceptable. After that, the data carrier is released or treated differently.
Does the content of the data carrier have to be read out after erasure?
Not necessarily. According to NIST SP 800-88 Rev. 2, an elaborate read-out is not necessary, unless your own policy requires it. Many erasure programs nevertheless offer a check on a sample basis or of the entire data carrier.
Verified erasure – documented per serial number.
Send us your device list. You will receive your offer in 48 hours on average.