/ NIST 800-88 compliance
NIST 800-88, done right. Every media class.
Stenfox follows the Clear and Purge guidance of NIST SP 800-88 Rev. 1 and Rev. 2: the right method per media type, verified by read-back and recorded in a signed report per device.
NIST SP 800-88
Rev. 1 · Rev. 2Verified by read-back
What you get
ATA Secure Erase
Purge on SATA drives through the drive's own ATA Secure Erase command, where the media supports it.
NVMe Sanitize and Format
Purge on NVMe drives through the drive's own Sanitize or Format commands, where the media supports them.
Clear by overwrite
Overwrite methods for Clear, including the NIST SP 800-88 Clear method and other selectable methods such as DoD 5220.22-M, HMG IS5 and Gutmann, out of 22 in total.
Phones, tablets, Macs and TVs
Mobile devices get a factory reset or a full firmware restore, Macs a firmware restore (DFU), smart TVs a factory reset through a relay unit, each with a verified outcome.
Read-back verification
Drive erasure is verified by reading the media back. The result goes into the signed report, pass or fail.
No quiet passes
A failed verification is reported as a fail, and an unconfirmed outcome never counts as a pass. The workflow's fail branch decides what happens next.
Stenfox Portal
Workflows, grading forms, reportsIntake
Diagnose
Erase
Report
Route
/ FAQ
Frequently asked questions
What is NIST SP 800-88?
NIST Special Publication 800-88, 'Guidelines for Media Sanitization', is the US National Institute of Standards and Technology's guidance on sanitizing media before reuse or disposal. It describes the Clear, Purge and Destroy levels. It is the reference most enterprise data-destruction contracts cite.
What changed between Rev. 1 and Rev. 2?
Rev. 2 was published in September 2025 and restructured the guidance of Rev. 1. Because contracts and audit checklists cite either revision, Orion follows the Clear and Purge guidance of both, and each signed report records the method that was applied.
What is the difference between Clear and Purge?
Clear applies logical techniques, such as overwriting, that protect against simple, non-invasive recovery. Purge applies techniques, such as a drive's own sanitize commands, that make recovery infeasible even with laboratory techniques. Orion chooses the method per media type and lets you select Clear, Purge or one of the other listed methods for your policy.
How does Orion handle SSDs and NVMe drives?
Overwrite alone is not reliable on flash media because wear-levelling hides physical blocks from the host. For Purge, Orion uses the drive's own sanitize commands, ATA Secure Erase for SATA and NVMe Sanitize or Format for NVMe, where the media supports them. The result is verified by read-back and recorded in the signed report.
How are iPhones, Android devices, Macs and smart TVs erased?
Phones and tablets get a factory reset (erase all content and settings) or a full firmware restore, with a verified outcome; on Android, Orion runs an on-device wipe and then a factory reset. Macs are restored through firmware restore (DFU) end to end. Smart TVs of any brand get a factory reset through a relay unit, with a pass, fail or unconfirmed outcome.
What does the report record for an 800-88 audit?
Each signed report records the device, the method applied (for example NIST SP 800-88 Clear or Purge, ATA Secure Erase or NVMe Sanitize), the verification result, the operator and the time. A scannable label links the unit to its record, and the full history stays in Stenfox Portal.
Next step
See it run on your own devices.
- Live demo on your own devices
- Pilot in your workshop before you commit
- Direct line to our engineers
- Onboarding and training for your team
Tell us what you process and at what volume. We reply within one business day.