Records for the Standards You Work To
IQValidate records what each wipe did and what was checked, and produces certificates of erasure and destruction. Certification and compliance stay with your organization and its auditors; IQValidate does not certify anyone.
NIST 800-88
NIST Special Publication 800-88
The US guideline for media sanitization from the National Institute of Standards and Technology. Clear means overwriting the drive; Purge means stronger methods such as the drive's own erase command.
Requirements
- Clear, Purge, and Destroy methods
- Media-specific sanitization techniques
- Verification requirements
- Documentation standards
How We Help
- Wipe methods that name the NIST SP 800-88 level they correspond to (Clear)
- A read-back check after the wipe, with the result written on the certificate
- A detailed log of each wipe for your own documentation
- Certificates that state the method used and the check that was done, nothing more
R2 Certification
Responsible Recycling Standard
A certification for electronics recyclers and refurbishers, covering responsible recycling practices.
Requirements
- Data destruction requirements
- Chain of custody documentation
- Environmental health and safety
- Downstream vendor management
How We Help
- Chain of custody records for each asset
- Wipe records and certificates of destruction to show an auditor
- Asset history from receipt to disposal
- Work order on each record
NAID AAA
National Association for Information Destruction
A certification program for information destruction service providers.
Requirements
- Strict security protocols
- Employee background checks
- Documented destruction processes
- Regular unannounced audits
How We Help
- Certificates with a verification code you can look up
- Certificates of destruction for physical destruction
- Chain of custody records
- A record of which operator ran each wipe
GDPR
General Data Protection Regulation
The European Union's data protection regulation. It includes a right to have personal data erased.
Requirements
- Right to erasure (Right to be forgotten)
- Data processing documentation
- Breach notification requirements
- Privacy by design
How We Help
- A record you can show as proof a drive was wiped
- Certificates of erasure to give to the data owner
- Date, method and operator on each record
- Public check page that masks the serial number
Additional Compliance Support
Many rules ask you to keep proof that data was destroyed. IQValidate's wipe records and certificates can be part of that proof. Your organization decides what it needs.
HIPAA
Healthcare data
SOX
Financial records management
PCI DSS
Payment card data security
FACTA
Consumer information disposal
GLBA
Financial institution data
Questions About Your Audit?
Tell us what your auditor asks for and we will show you which IQValidate records fit. We cannot certify you or promise an audit result.