Secure Apple Data Erasure

Why a factory reset is not enough

When you run “Erase All Content and Settings” on an iPhone, or erase the drive and reinstall macOS on a Mac, the result depends on the device. On models without hardware encryption, the system removes the references to the files but does not always overwrite the storage space verifiably, and some of that information can be recovered with laboratory tools.

On modern Apple devices with encryption turned on, the real risk is much lower, because encryption makes the data unreadable without the key. But “lower” is not the same as “non-existent”, and in environments regulated by the GDPR, “encryption was on” is not valid documentation for a compliance audit. You need a certificate that proves the method applied, the device treated and the date of the process.

That is what we issue.

Who needs this service

Businesses renewing their devices. If you have 5, 10 or 50 Apple devices that you are going to replace, sell or hand to a waste contractor, the GDPR requires you to ensure that the data on them has been destroyed verifiably. A reset is not enough. You need traceability.

Freelancers and professionals selling their device. You are selling your MacBook online or to a colleague. That Mac holds client contracts, login credentials, project history. Erasing it properly before handing it over is not paranoia — it is basic digital hygiene.

Individuals changing iPhone. Photos, messages, banking details saved in autofill: an iPhone sold without verified erasure can expose personal information built up over years. Knowing it is truly clean is worth what the service costs.

IT departments retiring equipment. If you manage device offboarding in a company and need documentation for the security committee or an external audit, our certificate covers that requirement.

Which standards we apply

We apply recognised erasure standards according to the type of storage:

NIST 800-88 is the current reference for devices with flash storage (SSD, NAND). It sets out three levels — “clear”, “purge” and “destroy” — and is the recommended standard for modern Apple devices.

DoD 5220.22-M is the classic standard of the US Department of Defense, based on multiple overwrites of the storage sectors and designed for magnetic drives. It is better known in traditional business settings.

For devices that will not start, or where logical erasure cannot run, we carry out physical destruction of the storage module: the NAND chip soldered to the board is physically rendered unusable. It is the most secure method when the software cannot run, and the only one possible in certain cases of hardware damage.

What we do not do

We do not pretend that a factory reset carried out by the user is the same as certified erasure. If you need a valid certificate, the process has to go through our laboratory.

We do not issue retroactive certificates for processes we have not carried out ourselves.

We do not handle the resale of devices. Our service ends with the certificate issued and, where applicable, the return of the device ready for its next destination.

Erasure for businesses: fleet management

For businesses with 5 or more devices, we offer a consolidated service: coordinated collection, a single report detailing each device (serial number, method applied, result) and an erasure or destruction certificate per batch. The cost per unit goes down with volume. Send us your device inventory and we will send you a quote within 24 hours.

When to contact us

Before the device changes hands. Once it is in someone else’s possession, the moment to act has passed. If you have a device you are going to sell, recycle, donate or decommission, write to us first. The process is quick, and the documentation we issue protects you legally and gives you real peace of mind.