The Compliance Landscape Is Shifting
Data erasure has always been important. In 2026, it's becoming non-negotiable. The EU Digital Product Passport mandate (2027-2030) is creating new compliance requirements that will affect every refurbisher handling devices for the European market.
Meanwhile, enterprise clients — carriers, insurance providers, and corporate ITAD programs — are increasingly asking for independently certified data sanitization as a baseline.
What ADISA Certification Means
ADISA (Asset Disposal & Information Security Alliance) sets the industry standard for data sanitization. Its Product Claims Test puts a specific software product and version through independent laboratory testing against a defined assurance level, and issues a certificate naming the product, the assurance level, the media tested and an expiry date.
That last detail matters more than it sounds. A certificate is tied to a product, not to a company and not to a whole platform. When a vendor tells you they are "certified", the question to ask is: certified at which assurance level, for which product, against which devices, and until when?
For refurbishers, a product certified at a high assurance level means:
- Independently verified data destruction, not a vendor's own say-so
- Audit-ready certification trails
- A named scope you can hand to a compliance reviewer
- Documented chain of custody
The EU Digital Product Passport
Starting between 2027 and 2030, the EU will require Digital Product Passports for electronics. This means every device will need a traceable history including its data sanitization status.
Refurbishers who can provide certified data erasure with full audit trails will have a significant competitive advantage. Those who can't will be locked out of the European market.
Building Compliance Into Your Workflow
Compliance shouldn't be a bolt-on afterthought. The most efficient approach is integrating certified data erasure directly into your diagnostic workflow.
Key Integration Points
- Erasure happens automatically during the diagnostic process
- Certificates are generated and stored in a centralized database
- Reports are available on-demand for audit purposes
- Consumer-facing certification provides downstream trust
How Asset Science Handles Data Erasure
Pro-Diagnostics and MacRestore are certified to ADISA assurance level 4, and our erasure is NIST 800-88 compliant. Data clearing is built directly into the diagnostic workflow — when a device completes diagnostics, sanitization happens in the same pass. No separate tools, no manual steps.
We also verify rather than trust. The drive controller reporting "done" is not treated as evidence: we read back sampled points across the media, and a drive that fails verification is recorded as a failed erase, never as a pass.
Every erasure generates a certificate stored in our cloud platform and accessible via our Public Web Certification portal. Think of it as the CarFax for phones.
Preparing for 2027
The refurbishers who start building compliance infrastructure now will be positioned to capture market share when EU regulations take effect. Those who wait risk scrambling to retrofit processes under deadline pressure.
Start with a platform that makes compliance automatic, not an additional burden. That's how you turn a regulatory requirement into a competitive advantage.