Zero Trace secure erase
Built, lightly usedA bootable secure-erase tool that produces a cryptographically signed certificate, verifiable by the client or their auditor at a public URL, and attached to the ticket and the client record.
What it does
- A bootable image that erases a drive and records what it did, including the device it ran on.
- A certificate signed with Ed25519 over a canonical record, so verification re-hashes the actual data rather than trusting a PDF.
- Public verification at a URL, with no login, so the client’s auditor can check it themselves.
- Certificates attached to the ticket and the client, and voidable with a reason if something is wrong.
What it does not do
- LOW VOLUME. The signing and verification path is correct and tested, but it has not run across a fleet, so treat it as unproven at scale.
- It erases drives it can address. Certain self-encrypting and hardware-RAID configurations need handling outside the tool.
What it replaces
- A manual certificate of destruction
Included in the single per-user price. No per-module or per-endpoint add-ons.
Read the guide
How this is actually set up and run, in the documentation.
More in security
Microsoft 365 managementIn production
Every client tenant, benchmarked nightly, with the unused licences priced.
Security and complianceIn production
A monthly score per client, and the evidence behind it.
Email signaturesBuilt, not proven
Centrally managed Outlook signatures, three ways to deliver them.