Which NIST 800-88 sanitization methods apply to each media type

Not every sanitization method works for every type of storage media. An SSD cannot be sanitized by simple overwrite the way an HDD can. An optical disc cannot be purged — it can only be destroyed. Choosing the wrong method for the media leaves data recoverable, and an auditor who spots the mismatch will flag the entire certificate.

This guide explains the NIST 800-88 Rev. 1 applicability matrix for the six common media types: HDD, SSD, hybrid (SSHD), tape, optical, and flash / USB.

The standard defines three sanitization categories. The table below shows which categories are effective for each media type:

A checkmark means the method is defined as effective for that media type by NIST SP 800-88 Rev. 1. A cross means the standard explicitly states it is not effective and should not be used.

Clear applies a logical technique — typically a single overwrite pass of all user-addressable sectors — to sanitize the media. It is the least destructive category and leaves the media reusable.

Effective on: HDD, Tape

Not effective on: SSD, Hybrid (SSHD), Optical, Flash / USB

The reason an SSD cannot be Cleared is that the drive's controller remaps worn or failing sectors to spare area, hiding them from the operating system's overwrite command. A logical overwrite of "all" addressable space may miss sectors that the controller has remapped, leaving data intact beneath the surface. The same limitation applies to flash-based USB drives and the flash portion of hybrid SSHDs. Optical discs use a fundamentally different recording mechanism (pits and lands or dye layers) that a logical overwrite cannot reach.

Purge is a stronger category that renders data recovery infeasible. The technique depends on the media:

• HDD and Tape (magnetic): Degaussing with a field strength sufficient to reduce the magnetic remanence below the standard's limits, or a specialised multi-pass overwrite pattern such as the one defined in NIST SP 800-88.
• SSD, Hybrid, Flash / USB: A cryptographic erase (where the drive's encryption key is discarded, making the ciphertext unrecoverable) or a block-erase at the controller level using the drive's native sanitize command (e.g. the ATA SECURITY ERASE UNIT or the NVMe Format NVM command).

Effective on: HDD, SSD, Hybrid, Tape, Flash / USB

Not effective on: Optical

Purge is often the preferred category for drives that will be reused within the same organisation, because it eliminates data without physical destruction.

Destroy renders the media completely unusable and data recovery impossible. Techniques include shredding, crushing, disintegration, melting, or chemical dissolution. The media is not intended for reuse after destruction.

Effective on: Every media type — HDD, SSD, Hybrid, Tape, Optical, Flash / USB

For optical discs, Destroy is the only applicable category. CDs, DVDs, and Blu-ray discs cannot be meaningfully overwritten (Clear or Purge), so physical destruction is the sole path to sanitization under NIST 800-88.

A certificate of destruction that claims "Clear" for a solid-state drive, or "Purge" for an optical disc, is making a statement the NIST standard does not support. An auditor who cross-references the claimed method against the media type will flag the discrepancy — and every asset on that certificate becomes subject to re-review.

Destructcert validates each entry against this matrix before generation. A method-media mismatch is flagged at the point of entry, not after the certificate is issued. The result is a document where every row is backed by a valid combination, and the auditor's cross-reference check is already satisfied.

See the NIST 800-88 certificate guide for a broader overview of what a compliant certificate should contain.