Stenfox

/ NIST 800-88 compliance

NIST 800-88, done right. Every media class.

Stenfox follows the Clear and Purge guidance of NIST SP 800-88 Rev. 1 and Rev. 2: the right method per media type, verified by read-back and recorded in a signed report per device.

NIST SP 800-88

Rev. 1 · Rev. 2
MediaLevelMethod
HDDClearOverwrite · verified
HDDPurgeATA Secure Erase
SATA SSDPurgeATA Secure Erase
NVMePurgeNVMe Sanitize

Verified by read-back

What you get

01

ATA Secure Erase

Purge on SATA drives through the drive's own ATA Secure Erase command, where the media supports it.

02

NVMe Sanitize and Format

Purge on NVMe drives through the drive's own Sanitize or Format commands, where the media supports them.

03

Clear by overwrite

Overwrite methods for Clear, including the NIST SP 800-88 Clear method and other selectable methods such as DoD 5220.22-M, HMG IS5 and Gutmann, out of 22 in total.

04

Phones, tablets, Macs and TVs

Mobile devices get a factory reset or a full firmware restore, Macs a firmware restore (DFU), smart TVs a factory reset through a relay unit, each with a verified outcome.

05

Read-back verification

Drive erasure is verified by reading the media back. The result goes into the signed report, pass or fail.

06

No quiet passes

A failed verification is reported as a fail, and an unconfirmed outcome never counts as a pass. The workflow's fail branch decides what happens next.

Stenfox Portal

Workflows, grading forms, reports
  1. Intake

  2. Diagnose

  3. Erase

  4. Report

  5. Route

/ FAQ

Frequently asked questions

What is NIST SP 800-88?

NIST Special Publication 800-88, 'Guidelines for Media Sanitization', is the US National Institute of Standards and Technology's guidance on sanitizing media before reuse or disposal. It describes the Clear, Purge and Destroy levels. It is the reference most enterprise data-destruction contracts cite.

What changed between Rev. 1 and Rev. 2?

Rev. 2 was published in September 2025 and restructured the guidance of Rev. 1. Because contracts and audit checklists cite either revision, Orion follows the Clear and Purge guidance of both, and each signed report records the method that was applied.

What is the difference between Clear and Purge?

Clear applies logical techniques, such as overwriting, that protect against simple, non-invasive recovery. Purge applies techniques, such as a drive's own sanitize commands, that make recovery infeasible even with laboratory techniques. Orion chooses the method per media type and lets you select Clear, Purge or one of the other listed methods for your policy.

How does Orion handle SSDs and NVMe drives?

Overwrite alone is not reliable on flash media because wear-levelling hides physical blocks from the host. For Purge, Orion uses the drive's own sanitize commands, ATA Secure Erase for SATA and NVMe Sanitize or Format for NVMe, where the media supports them. The result is verified by read-back and recorded in the signed report.

How are iPhones, Android devices, Macs and smart TVs erased?

Phones and tablets get a factory reset (erase all content and settings) or a full firmware restore, with a verified outcome; on Android, Orion runs an on-device wipe and then a factory reset. Macs are restored through firmware restore (DFU) end to end. Smart TVs of any brand get a factory reset through a relay unit, with a pass, fail or unconfirmed outcome.

What does the report record for an 800-88 audit?

Each signed report records the device, the method applied (for example NIST SP 800-88 Clear or Purge, ATA Secure Erase or NVMe Sanitize), the verification result, the operator and the time. A scannable label links the unit to its record, and the full history stays in Stenfox Portal.

Next step

See it run on your own devices.

  • Live demo on your own devices
  • Pilot in your workshop before you commit
  • Direct line to our engineers
  • Onboarding and training for your team

Tell us what you process and at what volume. We reply within one business day.