Stenfox

/ Data erasure software

Certified data erasure that auditors actually accept.

Stenfox Orion runs NIST SP 800-88 Rev. 1 Purge and Clear flows on every device class — phones, tablets, laptops, Macs, SSDs, NVMe and rotational drives. Every wipe finishes with a cryptographically signed certificate tying serial, IMEI, method, operator and timestamp into one tamper-evident record. R2v3 and ADISA aligned. GDPR, HIPAA, SOX and PCI-DSS ready.

What you get

01

NIST 800-88 Purge & Clear

Method selected automatically by media type — ATA Secure Erase, NVMe Format, crypto-erase, multi-pass overwrite — with verification on every block.

02

AI-verified completion

Computer vision and firmware telemetry confirm the device is actually wiped — not just that the software thinks it is. No silent failures.

03

Signed certificate per device

PDF + JSON certificate signed with the operator key, including hash chain so a regulator can verify integrity months later.

04

Mixed-pallet throughput

A single Orion lane wipes phones, laptops and loose drives in parallel. No tool-switching, no operator hand-holding.

05

Chain of custody

Intake → diagnostic → erasure → certificate → disposition is one continuous, queryable record. Audit pulls in seconds, not days.

06

Air-gapped + cloud sync

Run on a closed network for regulated environments; sync certificates to the customer's portal the second they reconnect.

/ Honest comparison

Why operators move off legacy erasure tools

Most existing tools were built when ATA was the only interface and SSDs were exotic. They solve only the wipe step, charge per license, and force operators to bolt together diagnostics, grading and certification from other vendors.

Common legacy stacks operators are replacing: Blancco, BitRaser, Certus Software, WhiteCanyon WipeDrive, KillDisk and Tabernus, often paired with separate diagnostic tools.

Criterion
Legacy erasure tools
Stenfox Orion
Scope
Erasure only. Diagnostics, grading and certs sold separately.
One platform — diagnostics, AI grading, erasure, certificate and marketplace listing.
Verification
Trust the software's own success flag. Silent SSD failures are common.
AI-verified post-wipe scan plus firmware telemetry. Real proof, not just a green checkmark.
Licensing
Per-wipe credit pricing creates throughput anxiety.
Operator-seat pricing — wipe as many devices as you can move.
Device coverage
Different SKUs for mobile vs drives vs servers. Each device class is a new contract.
Phones, tablets, laptops, Macs, SSDs, NVMe, HDDs and wearables in one lane.
Certificate format
Static PDF, manually emailed to customer.
Signed PDF + verifiable JSON, pushed to the customer portal in real time.
Audit trail
Spreadsheets, log exports, manual stitching.
Continuous chain-of-custody record from intake to disposition.

/ FAQ

Frequently asked questions

Is Stenfox Orion's data erasure NIST 800-88 compliant?

Yes. Orion implements NIST SP 800-88 Rev. 1 Clear and Purge methods. Method selection is automatic by media — ATA Secure Erase for SATA SSDs, NVMe Format / sanitize crypto-erase for NVMe, single- and multi-pass overwrite for HDDs, and platform-native crypto-erase for iOS, Android, macOS and Windows BitLocker devices. Verification runs on every wipe and the result is recorded in the signed certificate.

How is this different from Blancco, BitRaser, Certus or WhiteCanyon WipeDrive?

Those tools focus on the erasure step alone. Stenfox Orion delivers the same regulator-grade wipe but combines it with AI cosmetic grading, automated functional diagnostics, signed certificates, chain of custody and marketplace listing APIs — in one platform. Operators that replace a Blancco/BitRaser + Phonecheck/Piceasoft + spreadsheet stack with Orion typically cut tool count by 3–5× and touch-time per unit by ~60%.

Does Orion erase SSDs and NVMe correctly?

Yes. SSDs and NVMe drives require crypto-erase or vendor sanitize commands — overwrite alone is insufficient. Orion issues the correct command per controller, then re-reads sectors with verification. If the device doesn't honour sanitize, Orion flags it for physical destruction rather than silently passing.

What about iPhones, Macs and Android phones?

Orion uses the platform-native cryptographic erase mechanisms (iOS Effaceable Storage, Android Factory Reset Protection with key destruction, macOS Secure Token / FileVault key destruction) supplemented by an AI-verified post-wipe state check. Each device receives the same signed certificate format as drive-based erasure.

Can Orion run air-gapped for regulated environments?

Yes. Orion can run fully offline on a closed network. Certificates are produced locally and synced to the customer portal once the operator reconnects. Common deployment patterns: government ITAD, healthcare and defence contractors who cannot run wipe operations on internet-connected stations.

How does Orion's certificate hold up in a GDPR or HIPAA audit?

Each certificate is a signed PDF plus a machine-readable JSON record. It includes serial / IMEI, wipe method, verification result, operator identity, signing key fingerprint and timestamp, plus a hash chain so any post-hoc tampering is detectable. Regulators reviewing GDPR Article 17 'right to erasure', HIPAA disposal rules or SOX retention controls can verify both the act and its integrity.

/ Ready when you are

See Orion run a real lane.

A 30-minute working demo on your own device mix — phones, laptops, drives, anything. Bring your hardest unit.