Getting a computer back does not mean the offboarding is closed.
The device may be back in the warehouse, identified and in good condition. But if it still holds company information, or nobody can prove it was removed, the risk is still open.
That is where a difference appears that sounds technical but is very concrete: deleting a file, formatting a computer and wiping a device are not the same thing.
At Bord we use BitRaser to run and document secure data erasure when a client requests it. In this article I explain what it is, how it works, which report we use and why it is part of a device's lifecycle.
What is BitRaser?
BitRaser Drive Eraser is a data sanitization solution developed by Stellar. It erases information from HDD, SSD, NVMe and other storage media found in computers, servers, Chromebooks and Mac devices.
Its value is not only in removing the data. It also lets you:
- apply a defined erasure method;
- verify the result;
- identify the device and its storage media;
- log what happened during the process;
- generate a report tied to the erasure.
Saying "the computer was formatted" is not enough. Our clients need to link the result to a device, a serial number, a date, a method and a final status.
Why is formatting a computer not enough?
A conventional format or factory reset does not necessarily "clean" every area of the storage drive. Depending on the device and the procedure used, part of the information may remain accessible with specialized tools.
The BitRaser documentation explains that its formatting and erasure work on the entire media and record both the method and the result.
This matters especially when the device is going to:
- be reassigned to another person;
- leave the company's control;
- be sold through Buyback;
- be donated, recycled or disposed of;
- stay in the warehouse until its next destination is decided.
What does NIST 800-88 Purge mean?
NIST SP 800-88 is the current guideline from the United States National Institute of Standards and Technology for media sanitization programs. It was published in September 2025 and replaced Rev. 1.
Its goal is to help organizations define processes that make later access to the data infeasible for a given level of effort, according to how sensitive the information is.
Among its erasure methods, BitRaser lists the NIST 800-88 Clear and NIST 800-88 Purge options. At Bord we use the method registered as NIST 800-88 Purge when we deliver this service with BitRaser.
Depending on the type of media, the tool can apply techniques such as Secure Erase, Block Erase, NVMe Erase or Cryptographic Erase and record the result. The supported capabilities and methods are detailed in the official BitRaser documentation.
Which report do we use at Bord?
The main operational record is the BitRaser Drive Erasure Report, tied to the device and to the NIST 800-88 Purge method used in the process.
Depending on the version and configuration, the evidence may include:
- identification of the device or the drive;
- brand, model and serial number;
- erasure method applied;
- erasure result;
- verification method and result;
- date of the process;
- details of the technician or validator.
Through this process, Bord can generate reports and certificates tied to the procedure that attest to what was recorded during the erasure; it does not prove that the device was physically destroyed.
DSN, NIST 800-88 erasure report and physical destruction are not the same thing
| Document | What it proves |
|---|---|
| DSN or device inspection | How the device arrived at the warehouse: serial number, accessories, power-on, damage, locks and available evidence. |
| BitRaser Drive Erasure Report | Which erasure method was run on the media, what the result was and which verification was recorded. |
| Certificate of destruction or final disposal | The physical destruction or environmental handling of the asset or its components, when that service was requested. |
A device can have a complete DSN and still not be wiped. It can also be securely erased without having to be physically destroyed.
How do we use BitRaser at Bord?
Erasure is built into the device's lifecycle. It is not treated as an isolated action.
1. The client requests the wiping
Erasure is defined within the corresponding service. That establishes which devices must be wiped before their next destination is decided.
2. We identify and inspect the device
When the device enters the operation, we validate its identity and condition. The DSN Report documents how it arrived: serial number, physical condition, accessories and detected locks.
3. We check locks and enrollments
Before erasing, it may be necessary to release the device from Apple ID, MDM, Apple Business Manager, Windows Autopilot or other management tools.
BitRaser erases data, but it does not replace the unenrollment that the client's administrator has to perform. If the device is still locked or enrolled, it may not be ready for a new assignment even though the storage media has been sanitized.
4. We run the erasure
The procedure depends on the type of device and its storage media. BitRaser supports different deployment methods and selects techniques compatible with the device and the chosen erasure method.
5. We verify the result
The process should not be closed just because the software finished. The result also has to be confirmed.
BitRaser lets you run verifications and record their status. If the erasure fails, the drive is not accessible or a lock prevents the process from completing, the device should not be marked as successfully erased.
6. We keep the evidence
The report stays linked to the device as proof of the wipe. That way, in a review or audit, the company can answer a simple question: what happened to the data on this computer?
What are the benefits for a company?
Reduces risk when closing an offboarding
Recovering the asset and protecting the information are two parts of the same process. BitRaser helps run and document the second one.
Provides traceability per device
The serial number, the method, the date and the result make it possible to reconstruct what happened without relying on an informal confirmation.
Generates evidence for audits
The report does not replace a security policy, nor does it guarantee compliance with every regulation on its own. It does provide a useful technical record to show what was done, on which media and with what result.
Allows devices to be reused without destroying value
If the device can be properly wiped, the computer can be reassigned, sold, donated or start a new cycle. There is no need to destroy an asset that still has useful life just to resolve the risk of its data.
Standardizes a distributed operation
When a company has devices in several countries, choosing a tool is not enough. It also needs a consistent process to identify the asset, release it, wipe it, verify it and keep the evidence.
What does BitRaser not solve on its own?
BitRaser is one part of the process. It does not replace:
- the device's inventory and traceability;
- physical recovery;
- release from Apple ID, MDM, ABM or Autopilot;
- the chain of custody;
- a data retention and sanitization policy;
- physical destruction when risk or regulation requires it;
- each company's own legal or compliance validation.
Frequently asked questions about BitRaser
Does BitRaser only erase the user's files?
No. BitRaser Drive Eraser is designed to erase the storage drive according to the selected method, not just to delete visible files.
Can the device be used again after the erasure?
After a successful logical erasure, yes. It may then be necessary to reinstall the operating system and confirm that the device is no longer enrolled in management tools.
Does the report prove that the device was destroyed?
No. The report documents the sanitization process that was recorded. Physical destruction and environmental disposal are different processes and different documents.
Can a device that still has MDM or an Apple ID be erased?
Yes, it can. It does not remove the enrollment in MDM, ABM or the Apple ID. In some cases, the client has to release it before the process can be completed and the device left ready for reuse.
Does the BitRaser report guarantee legal compliance?
Not on its own. It is technical evidence of the process and can be part of a company's security and audit controls, but it does not replace its policies or the applicable regulatory analysis.
Is BitRaser also used in Buyback?
Yes. Before a device changes owners or goes back to the market, the erasure and its evidence separate the asset from its previous owner's information.
Recovering the device is only half the job
A well-closed offboarding should be able to answer four questions:
- Where is the device?
- In what condition did it arrive?
- Was it released from the management systems?
- Is there evidence that its data was sanitized?
BitRaser helps solve and document the fourth one. At Bord we connect that process with recovery, device inspection, traceability and the device's next destination.
If you have devices spread across Latin America and you are not sure whether they are really ready to be reassigned, sold or retired, we can help you organize the entire process.
