One boot erases every drive to NIST 800-88 Clear and Purge and produces a verifiable chain-of-custody report — while also capturing the machine's full hardware profile (display, battery, CPU, memory, storage, MDM and BIOS lock status) and grading it for resale or recycling. You get a printable diagnostics report in the same pass.
Erase its drives, capture the evidence, grade the machine, and detect its locks — all in a single boot.
See compliance mapping →Crypto, block, and overwrite sanitise, plus format fallback — with live SSTAT progress monitoring.
Enhanced and standard security erase for SATA/ATA drives, with frozen-drive handling.
PSID revert for locked self-encrypting drives, plus detection of BIOS Block SID lockdown (0x4286).
COCID, drive serials, and per-drive final status — a verifiable CSV report, plus a Certificate of Destruction that records how the data was destroyed: the method, NIST 800-88 level, technique, and media disposition.
Pre- and post-wipe SMART health — status, temperature, power-on hours, and wear — recorded for every drive.
HPA/DCO hidden areas are removed before the erase, and the result is verified by reading back sample sectors — so the report proves the wipe, not just the command.
Boot once and tScrub records the machine — display panel, battery health and capacity, CPU spec, DIMM part numbers, board serial, and per-drive SMART — so you can grade it for resale, redeployment, or recycling.
One boot runs a Windows Autopilot MDM check and reports BIOS password locks; a remote BIOS unlock can be dispatched from the dashboard across supported Dell, Lenovo and HP business machines — and when a clear doesn't work the dashboard says why — so a locked laptop is flagged, and freed where the firmware allows, before it reaches a buyer.
Every device snapshot renders as a two-page ITAD triage report — machine summary plus storage inventory — downloadable from the Devices tab for your own records or your client's.
Every machine that boots tScrub shows up in your Devices tab with its full hardware profile, online status, and LAN IP. Run remote commands — shut down, restart, erase, or clear a BIOS password — on any machine that is online, each stamped with the Chain of Custody of the session that ran it and listed in a per-device log.
The appliance image is open and inspectable — and every certificate also ships as a signed, machine-readable JSON-LD document your auditors can verify offline.
Boot from USB or PXE on hardware you already own. No locked-down vendor box required.
From regulated enterprises to IT asset disposal, tScrub gives you a defensible record of every drive.
Evidence for decommissioned systems subject to FCA, PRA, and contractual data-handling rules.
A verifiable trail for media holding patient data, supporting UK GDPR and NHS requirements.
Grade hardware, detect MDM and BIOS locks, clear a BIOS password remotely where the firmware allows, and hand clients a branded wipe and diagnostics record.
PXE-boot tScrub across fleets and keep a per-machine record on decommission.
No installation. No vendor hardware. Boot, wipe, and keep the proof.
Boot the tScrub appliance image from USB or PXE, place your licence alongside it, and run it. Zero installation.
tScrub captures the machine's full hardware profile — display, battery, CPU, RAM, storage, MDM and BIOS lock status — while every drive is detected and mapped to its strongest Purge or Clear capability.
All drives wiped in parallel with live progress. Frozen, locked, or blocked drives are flagged — never marked clean.
A printable ITAD diagnostics report plus a chain-of-custody report tied to one COCID — upload them to generate a Certificate of Destruction.
| Field | Example |
|---|---|
| Chain of Custody ID | 48213 |
| Drive model / serial | SAMSUNG MZQL23T8HCLS-00A07 |
| Method | NVMe Crypto Purge |
| Certification | DESTRUCTION |
| Final status | COMPLETED |
| SMART (pre / post) | health, temp, hours, wear |
| System / board serial | machine identity |
| BIOS & firmware | vendor, version, TPM, Secure Boot |
| Display / battery / RAM | panel, capacity, DIMMs |
| Drive type | Method | Outcome |
|---|---|---|
| NVMe | Crypto / block / overwrite sanitise | Purge |
| SATA / ATA | Enhanced or standard secure erase | Purge / Clear |
| SCSI / SAS | nwipe quick | Clear |
| Frozen | — | Destruction required |
| Block SID locked | Clear SID, re-run | Recoverable |
Every wipe method maps to a defensible Clear or Purge outcome — and drives that can't be wiped are flagged for destruction — so the report survives an audit.
Explore compliance →# method → NIST 800-88
NVMe Crypto Purge → Purge
ATA Enhanced Erase → Purge
ATA Secure Erase → Clear
Frozen → Destroy
Block SID locked → Recoverable
Same compliance outcome, without the lock-in. Open source, run on your own hardware, transparent pricing.
See the comparisonFind answers on certification, running tScrub on your own hardware, and edge cases.
Read the FAQ →Download the bootable appliance image, or see pricing for signed reports and support.