What a certificate is for
A certificate of data destruction is a record stating that data on specific equipment was sanitized or destroyed. A client’s IT, security, or compliance team may rely on it long after the equipment has gone.
It is not a legal shield on its own. Its value comes from being accurate, specific, and backed by records that show the work really happened.
What to include
A strong certificate identifies the client and the job or order, and lists each device or drive by serial number, along with asset tags where the client uses them. It says what was done, using which method, and when it was done.
It should also show who performed or authorized the work, and whether the result was verified. If your client has a required standard, such as NIST SP 800-88, state how your method relates to it. The current revision of SP 800-88 is Rev. 2, published in September 2025.
Why serial-level detail matters
A certificate that says “200 laptops destroyed” does not answer the question a client is most likely to ask, which is what happened to one particular laptop. Listing serial numbers lets the client compare the certificate with their own asset records.
Discrepancies matter too. If a client expected 200 devices and you received 198, that should be visible and resolved, not hidden behind a total.
Connect the certificate to the record
A certificate typed up separately can drift away from what actually happened. Keeping erasure evidence on the asset record means the certificate reflects work recorded at the bench, along with the device’s receipt, custody, and final disposition.
Teams using an erasure tool such as Blancco can review how its results connect to the asset during an evaluation.
Make certificates easy to retrieve
Clients often need a certificate months or years later, when an auditor asks and the original email is long gone. A client portal lets authorized users download available certificates themselves, without waiting for your team to find them.
Agree with each client how long records are kept, who can see them, and when they can expect certificates after a job.