Accreditations

What we hold, and what each one actually certifies.

Every certificate below is reproduced in full and can be checked against the body that issued it rather than against us. We have also said plainly where a certification is about our organisation rather than about your data, because the difference matters and most supplier lists blur it.

The only company we can find anywhere in the world that warrants the outcome and guarantees permanent, irretrievable data destruction.

A new standard nobody has yet been able to match, backed by £10 million of professional indemnity insurance.

Certificates

Click any certificate to read it in full

Product assurance

ADISA Product Assurance, Level 5

ADPA016 · Valid to 14 February 2027

Independent testing of the product itself, not of our office or our paperwork. Scope includes NVMe. This is the certification that speaks to whether the engine does what we say it does.

View full certificate · Verify with ADISA

Product assurance

ADISA Product Assurance Certificate

ADPA039 · NVMe Purge · Valid to 14 February 2027

The standards the engine is tested against are the ones NCSC guidance points to for flash media. We are listed publicly by ADISA rather than self-declaring, so you can check this without asking us.

View full certificate · Verify with ADISA

Organisational

Cyber Essentials

Certified · Verifiable through IASME

Covers our own IT estate and our own security hygiene as a supplier. Worth having, and we hold it, but be clear what it is: it says nothing about what happens to your drive.

View certificate

Output

Specimen certificate of destruction

What is actually issued, per device

Not an accreditation, but the thing all of them exist to support. It records the device, the method the engine selected for it, the result proven at the medium and the time the erase took. Hold it next to a certificate you already have.

View specimen

What the certificate covers

Most product assurance stops before the decision that goes wrong

ADISA Product Assurance is a real test and worth having. In ADISA’s own description of the scheme, it verifies the specific sanitisation commands a product sends to each media type and interface, then attempts recovery from the sanitised drive in the laboratory. It examines the process and the outcome, and it is assessed against a threat matrix. We hold it at Assurance Level 5, on a scale that runs to 6.

The question worth asking of any product assurance certificate, ours included, is what sat inside the scope and what sat outside it.

What is testedThe commands the product issues to a given device, and whether the data can be recovered afterwards. Rigorous, and independently done.

What usually is notSomebody still chooses the method. Where a product asks a person to select it, that choice is made on the floor rather than in the laboratory, and a product test cannot certify a human being’s field judgement. The decision sits outside the certificate.

Why that mattersThe part that goes wrong in practice is the method picked for the drive in front of you. A certificate that covers the tool but not the choice does not reach it.

Our engine gives the operator no method to select and no way to intervene. So the part that was assessed is the whole automated sequence, identify, select, apply, verify, which is the same sequence that runs on a loading bay. There is no operator decision that can differ between the laboratory and the field, because there is no operator decision.

This is a point about how the product is built, not a claim about how anybody else was assessed. Two things follow from it and both are checkable: ADISA lists the certified product publicly, and the scheme methodology is published by ADISA rather than described by us.

Being straight about it

What we do not hold, and why

ISO/IEC 27001 and ISO 9001

We do not hold them. They certify management systems, and a management system certificate tells you how an organisation runs, not whether the data on a specific drive is gone. We would rather say so here than let an accreditation list imply something it does not.

The accreditation that speaks to the product is ADISA Product Assurance, and we hold it at Level 5.

An accreditation is not a warranty

None of the certificates above pays out if data is later recovered from a device we certified. That is what the outcome warranty and the indemnity behind it are for, and they sit in the licence rather than in a certificate.

What we carry behind the warranty → Read clause 5.1 →

Verify us

Check every reference yourself

The assurance register lists each claim, its reference number and the independent source you can check it against, including the published patent applications and the standards the engine is tested to.

Read the assurance register →