ISO 9001:2015 – Quality Management System

The ISO 9001:2015 certification, awarded by IQS Standards Audits Division, acknowledges our robust Quality Management System (QMS). This certification is a testament to our ability to consistently provide products that meet customer and regulatory requirements. The registered scope of this certification covers:

• Manufacture of data destruction systems
• Approved degaussers
• Crushers and shredders

Our QMS ensures that we adhere to rigorous quality standards, continuously improving our processes to deliver exceptional products and services.

Download this certificate

ISO 14001:2015 – Environmental Management System

Our commitment to environmental stewardship is reflected in our ISO 14001:2015 certification, also awarded by IQS Standards Audits Division. This certification demonstrates our effective Environmental Management System (EMS), which helps us manage our environmental responsibilities systematically. The registered scope includes:

• Manufacture of data destruction systems
• Approved degaussers
• Crushers and shredders

With this certification, we affirm our dedication to minimizing our environmental impact and enhancing our sustainability practices.

Download this certificate

ISO 27001:2022 – Information Security Management System

The ISO 27001:2022 certification, provided by IQS Standards Audits Division, highlights our robust Information Security Management System (ISMS). This certification verifies our commitment to safeguarding information assets, ensuring data confidentiality, integrity, and availability. The registered scope encompasses:

• Manufacture of data destruction systems
• Approved degaussers
• Crushers and shredders

Our ISMS enables us to protect sensitive information effectively, mitigating risks and ensuring compliance with international information security standards.

Download this certificate

Commitment to Excellence

These ISO certifications reflect our unwavering commitment to quality, environmental sustainability, and information security. By adhering to these internationally recognized standards, we ensure that our products not only meet but exceed industry expectations, providing our clients with unparalleled reliability and trust.

The post ISO Certifications appeared first on Verity Systems.

VS Protect and VS Protect+

Our two warranty options, VS Protect and VS Protect+, will extend the coverage of your product, including spare parts, by up to three years beyond the original guarantee period. You may be eligible for an extended warranty depending on the unit you ordered, and you can select VS Protect or VS Protect+ if it is available for your specific unit.

Benefits of our extended warranties 

Full Factory Warranty: A comprehensive factory warranty that extends your unit’s coverage by up to 3 years. (either VS Protect or VS Protect+)

Tech support: Get in touch with our tech support teams and speak with a professional whenever you need to troubleshoot a problem with your equipment.

How-to instructions: Depending on the technical issue, you’ll get detailed instructions on how to self-diagnose and repair your unit.

Repair center: In the event of major problems or unit failures, free replacement parts or unit replacements are provided.

Labor and parts included: Free engineering support and product repairs are included.

VS Protect (1-year extended warranty) 

For the following Verity Systems units, the VS Protect 1-year extended warranty is available:

DataGauss LG Max VS Protect 

(Standard warranty 2 years), VS Protect 1-year = 3 years coverage)

DataGauss XL-LG VS Protect 

(Standard warranty 2 years), VS Protect 1-year = 3 years coverage)

DataGone LG Plus VS Protect 

(Standard warranty 2 years), VS Protect 1-year = 3 years coverage)

SDD Master VS Protect 

(Standard warranty 2 years), VS Protect 1-year = 3 years coverage)

VS Protect+ (2 or 3-year extended warranty)

For the following Verity Systems products, the VS Protect+ 2-year extended warranty is available:

Crunch 250 VS Protect+ 

(Standard warranty 1 year), VS Protect 2-year = 3 years coverage)

V91M Max VS Protect+ 

(Standard warranty 3 years), VS Protect+ 2-year = 5 years coverage)

For the following Verity Systems units, the VS Protect+ 3-year extended warranty is available:

DataGauss LG Max VS Protect+ 

(Standard warranty 2 years), VS Protect+ 3-year = 5 years coverage)

DataGauss XL-LG VS Protect+

(Standard warranty 2 years), VS Protect+ 3-year = 5 years coverage)

To learn more about our extended warranties, contact us on info@veritysystems.com.

The post Extended warranties from Verity Systems appeared first on Verity Systems.

Once downloaded, extract the contents of the .zip file and open the installer. You can then follow the on-screen instructions to get started, or use the DDA Quick Start Guide.

Please note: the Data Destruction Auditor software can only be used with LG Hard drive degaussers and destroyer products manufactured by Verity Systems. It is not compatible with products from other manufacturers.

To communicate with the DDA software, your machine will require FTDI USB drivers to be installed. These should automatically install via Windows update when you first connect the machine to your PC. Please make sure you connect your product to the PC and allow for these drivers to finish installing, this is required to use the DDA software.

If you have any problems installing or using the software, please see the DDA Full User Guide, or contact us for support: support@vssecurityproducts.com

Click here to Download the Latest Version Data Destruction Auditor Software (V6.0)

Explore our latest hard drive degaussers and the NSA listed Crunch 250 Hard Drive Destroyer to learn more about data destruction combined with software auditing from Verity Systems.

The post Data Destruction Auditor software download appeared first on Verity Systems.

To download a product manual, right click on the hyperlink(s) and click ‘save as’ to download the file whether using a PC or Mac. Product manuals are in .PDF format.

If you have any questions about the technical information provided below on our products, contact us on info@vssecurityproducts.com and an advisor will be able to provide you with further information.

Hard drive degausser and destroyer operating manuals and quick start guides

• DataGauss Max (10,000 gauss field, erases 240 HDDs per hour)
• DataGauss LG Max (Includes the Data Destruction Auditor)
• DataGone LG Plus (13,000 gauss field, erases 300 HDDs per hour)
• DataGauss XL (9,000 gauss field, large chamber degaussing, erases 70 HDDs per hour)
• DataGauss XL-LG (Includes the Data Destruction Auditor)
• MediaGone 500 (SSD and Flash Media Shredder)
• Crunch 250 (NSA and CSS Listed SSD and HDD hard drive destroyer)
• SV91M (Nato approved, high security degaussing)
• SDD Master (NSA & CSS listed, highest security degaussing, 20,000 gauss field)
• V91 MAX (Manually operated degausser)
• V660 HDD EVO (Infra-red remote capability)
• V94 (Manual degausser, VHS, tape degaussing)
• V91 DLT/LTO (Low volume tape degausser)
• Verity Systems DD Imager (Works with DDA software to capture images before and after the erasure process)

The post Operating manuals and specifications appeared first on Verity Systems.

What is a degaussing coil circuit?

Degaussing consists of using an AC current to create a moving magnetic field that overwrites the unwanted magnetization. The resonant degaussing circuit operates by causing a capacitor connected in parallel with the degaussing coil to resonate with the coil to produce oscillations.

What’s the difference between a handheld degausser and a standard degaussing machine?

A handheld degausser is a low power device and is only suitable for erasing audio and video tapes. They are not powerful enough to erase hard drives.

What is a degaussing wand?

A degaussing wand is a hand held device for erasing hard disc platters. The platter (disk) must be removed from the hard drive and the wand is then passed over it for approximately a minute to achieve a good erasure.

What’s the most secure way of erasing a hard drive?

The most secure way to erase a hard drive is to use a degausser with a degaussing force that is at least twice the strength of the media.

What are some of the degaussing standards?

There are no specific degaussing standards however several government security agencies, for example America’s NSA and the UK’s NCSC evaluate degausser performance against their own internal limits.

What’s the difference between degaussing and data sanitization? 

There are three main data sanitization techniques for the hard drive storage device.  There is the physical destruction of hard drive where the drives are crushed or platters damaged to an inoperable state.  The degaussing of a hard drive removes all data through the use of a powerful magnetic field. The third technique is overwriting of data contained on the hard drive.

Are there data standards that degaussers must comply with?

As part of their guidelines for the data sanitization of magnetic media, degaussing is recommended by the following organizations:

• National Institute of Standards & Technology
• Department of Defence
• Government Security Organizations such as the NSA & CESG.

There are a number of US Government Mandates that require the destruction of sensitive information stored on hard drives and backup tapes before their disposal. These mandates are listed below:

• PCI DSS (Payment Card Industry) Data Security Standard
• PIPEDA (Personal Information Protection and Electronic Documents Act)
• NIST (National Institute of Standards and Technology) Guidelines for Media Sanitization NIST SP 800-88
• NIST (National Institute of Standards and Technology) Guidelines for Media Sanitization NIST SP 800-36
• Gramm-Leach-Bliley Act (GLBA)
• HIPAA (Health Information Portability and Accountability Act)
• California SB-1386
• IRS-1075
• CJIS
• Bank Secrecy Act (BSA)

(All VS Security Products degaussers are designed to help you comply with these mandates and are regularly used by financial institutions, IT departments, E-recyclers and corporate organizations.)

How does a degausser physically wipe a hard drive’s content?

Degaussing removes data by rearranging the magnetic field on electronic media to completely erase it.

What type of degaussers are good for business?

You need to establish how many hard drives/backup tapes you need to erase per day/month. Then choose a degausser that has a suitable throughput and the security level you require.

What type of degaussers are good for education?

You need to establish how many hard drives/backup tapes you need to erase per day/month. Then choose a degausser that has a suitable throughput and the security level you require.

What type of degaussers are good for governments? 

Governments generally require a high security degausser and for its highest security applications. These can be found on the US NSA/CSS Evaluated Products List.

See our NSA listed hard drive destroyer (Crunch 250) and degausser (SDD Master) for more details on high security data destruction.

Do hard drive destroyers erase data more efficiently than degaussers?

Degaussers will erase all the data whereas hard drive destroyers usually bend the platters so they cannot be read by the drive heads.

Should I destroy my hard drive first, then degauss it? What’s the best way to erase data securely?

Both destruction and degaussing using quality equipment will erase data securely. However some security experts recommend hard drives should be erased and then destroyed for maximum security.

What certification is required to meet the needs of data destruction compliance? What are the different types? 

List of recognized Certifications and Regulatory Compliance

• Department of Defense (DOD)
• National Security Agency (NSA)
• National Institute of Standards and Technology (NIST) Special Publication Series 800-88
• National Industrial Security Program (NISP) Operating Manual (DOD 5220.22-M)
• Health Insurance Portability and Accountability Act (HIPAA)
• Health Information Technology for Economic and Clinical Health (HITECH)
• Sarbanes-Oxley Act of 2002
• Fair and Accurate Credit Transactions Act (FACTA)
• Gramm-Leach-Bliley Act
• Bank Secrecy Act
• Patriot Act of 2002
• Identity Theft and Assumption Deterrence Act
• US Safe Harbor Provisions
• FDA Security Regulations (21 C.F.R. part 11)
• PCI Data Security Standard
• Various state laws
• Data Protection Act 1998. (DPA)
• EU Privacy Directive.
• Financial Conduct Authority.
• PCI-DSS Data Security Standard.
• The Environment Act.
• Waste, Electronic & Electrical Equipment Directive. (WEEE)
• Basel Convention.

Can a hard drive be completely, 100% erased?

A hard drive will be completely, 100% erased with a degausser that has a power of at least 2 times the power of the media.

Is it better to wipe off all the old files on a computer or laptop before degaussing or destroying the hard drive?

There is no necessity to wipe off files on a computer if the hard drive is going to be degaussed and or destroyed.

What’s the difference between hard drive shredding and hard drive destruction? Is one better than the other? 

Hard drive shredding is where the entire drive is chopped into pieces whereas hard drive destruction usually means the drive and platters are bent in half so it can no longer function. Both methods ensure the data cannot be read.

Can a hard drive be re-used after it is degaussed? 

In some cases the drive could be reused. However it is not recommended as to securely erase a drive it must be subjected to a very high magnetic field which may cause the drive to fail in the future.

What is Active KillDisk erasure?

Active KillDisk is software that overwrites the data on the hard drive to make it unreadable.

What’s the best way to destroy an SSD hard drive?

The best way to destroy an SSD (Solid State Drive) is to physically destroy it using a HDD/SSD Destroyer.

How does erasing a hard drive using DBAN work? Is that better than degaussing or hard drive destruction? 

DBAN is simply a Linux-based bootable image that can be run from floppy, CD/DVD, or USB drive (and others) which runs in system memory from the media. Once started, it gives you the option of overwriting disk content with multiple different methods, including pseudo-randomly generated numbers, the Gutmann method, and the DoD methods. For the most thorough wipe, the Gutmann method is preferred, but has the longest runtime (35 passes).

DBAN takes up to 3 hours to erase a hard drive against around 15 seconds for degaussing or around 10 seconds for destroying.

How can I erase my hard disk with software? Does this remove all the data from the disk? 

By using one of the softwares available commercially you can make the data on your hard drive unreadable by common data retrieval methods. However it does not remove the data. It merely overwrites it with all zeros to make it unreadable.

What are the ISO standards for degaussing? 

There are no ISO standards specifically for degaussing.

What are DIN standards?

There are no DIN standards specifically for degaussing.

What are the benefits of manual degaussing vs automatic degaussing? Is one safer than the other?

Automatic degaussers are more secure to use than manual degaussers because manual degaussing relies on the operator passing the media in the correct sequence over the magnetic field.

Both types of degaussers are safe to use.

I have a small business, with not many hard drives to erase. What’s the best degausser for my needs?

For a small number of hard drives a manual degausser would be the least expensive option but for very little extra cost an automatic model would ensure a more secure erasure even with an inexperienced operator.

We need to erase a large volume of hard drives on a frequent basis. What do you recommend as the right kind of degausser for the needs of our business? 

For a large volume of degaussing you need a fast automatic degaussing unit that runs continuously like the DataGone LG Plus.

To learn more about degaussing and hard drive destruction, explore our resources section, and see the latest newsannouncements about upcoming data laws and regulations.

If you have any questions about degaussing or would like more detailed technical information, contact one of our experts on info@vssecurityproducts.com

The post Frequently asked questions on degaussing and data destruction appeared first on Verity Systems.

To download a data sheet, right click on the hyperlink(s) below and click ‘save as’, and select where you want the file to download depending on whether you are using a PC or Mac. Technical manuals are in .PDF format.

If you have any questions about the technical information provided below on our products, contact us on info@vssecurityproducts.com and an advisor will be able to provide you with further information.

Data sheets

• DataGauss Max (10,000 gauss field, erases 240 HDDs per hour)
• DataGauss LG Max (Includes the Data Destruction Auditor)
• DataGone LG Plus (13,000 gauss field, erases 300 HDDs per hour)
• DataGone (10,000 gauss field, erases 200 HDDs per hour)
• DataGauss XL (9,000 gauss field, large chamber degaussing, erases 70 HDDs per hour)
• DataGauss XL-LG (Includes the Data Destruction Auditor)
• MediaGone 500 4mm (Includes the Data Destruction Auditor)
• MediaGone 500 6mm (Includes the Data Destruction Auditor)
• Crunch 250 (NSA and CSS Listed SSD and HDD hard drive destroyer)
• M.2 SSD Adapter (Optional adapter to be used with Crunch 250 to destroy M.2 SSD’s)
• SSD Adapter (used with the Crunch 250)
• SV91M (Nato approved, high security degaussing)
• SDD Master (NSA & CSS listed, highest security degaussing, 20,000 gauss field)
• V91 MAX (Manually operated degausser)
• V660 HDD EVO (Infra-red remote capability)
• V94 (Manual degausser, VHS, tape degaussing)
• V92 (High energy degausser for tapes, magnetic media)
• V91 DLT/LTO (Low volume tape degausser)
• V100 (High volume degausser with conveyor belt)
• V880 (Automatic, high volume degaussing with conveyor belt for tapes and cartridges)
• Verity Systems DD Imager (Works with DDA software to capture before and after images the erasure process)

Explore our manual and automatic degausser products as well as our industry leading NSA approved hard drive destroyer for further information. You can also explore our resources section to discover more about data security and Verity Systems.

The post Data sheets for Data Destroyers and Degaussers appeared first on Verity Systems.

• Consumers right to receive information on privacy practices and access information.
• Consumers right to deletion.
• Information required to be provided as part of an access request.
• Consumers right to receive information about onward disclosures.
• Consumer right to prohibit the sale of their information.
• Price discrimination based upon the exercise of the opt-out right.

Business compliance and impact

Businesses affected by CCPA include those which hold or collect personal data from consumers, and are doing business in the state of California. There are three thresholds which organizations will fall under when considering if CCPA applies. These are:

• If the annual gross revenue of a business exceeds $25 million.
• If buying or selling personal information of more than 50,000 individuals.
• If earning more of half its annual revenue from the selling of people’s personal information.

In alignment with CCPA, businesses are expected to implement data security practices that can support the protection of consumer data across its organization – where consumer data is being handled.

See our Data Destruction Auditor to learn more about data auditing.

Business processes required under CCPA

Businesses adhering to the CCPA must implement the following processes to be compliant. If they fall within one or more of the compliance thresholds then CCPA will apply:

These are:

• • Implementing parental or guardian consent for children (minors) who are under the age of 13, and ‘affirmative consent’ for minors who are aged between 13 and 16 – in relation to data sharing processes.
  • A clearly defined link on the home page of the website of the business providing a “Do Not Sell My Personal Information” link where users visiting that website are able to opt out of the selling of their personal data.
  • New privacy policies which include a description of California residents’ rights.
  • A point of contact for website visitors that allow them to access their data.

Fines and sanctions that can be imposed under CCPA provisions

• If a business suffers data theft or a data breach, it can be ordered to pay statutory damages in civil class action lawsuits and asked to pay up to $750 per incident and resident (residing in California).
• Financial penalties of up to $7,500 can be issued for intentional data violations and $2,500 for unintentional data violations.

Signed by Governor Brown in June, 2018, and enacted on January 1st, 2020, the California Consumer Privacy Act enhances consumer protection and holds businesses to account that do not protect data, or suffer from data breaches where consumer information is accessed without consent.

See our resources page for more information on the latest data laws and data security related topics. You can also explore data degaussing to discover more about safe data erasure and disposal.

The post The California Consumer Privacy Act appeared first on Verity Systems.

Overview

Following on from the Data Protection Act (DPA) which was passed in EU countries in 1998, EU Governments have now adopted the General Data Protection Regulation (GDPR) which will apply throughout the EU from 25^th May 2018.

The massive increase in people’s personal data being held on computers by a very wide range of users has seen the need for governments to urgently address the problems and hurt caused by data breaches. This has led them to introduce stringent new penalties for failure to protect data.

The main focus of General Data Protection Regulation (GDPR) will be to legally protect the personal data of all individuals residing within the EU – irrespective of where the company or agency holding the data is based – and includes rules around holding, processing, profiling, maintaining and deleting that data.

Solutions

Verity Systems manufactures a range of degaussers and crunchers to enable users to be absolutely certain that, at the time when sensitive data has reached the point when it can no longer be legitimately held, the user can not need just to attempt to erase or delete the data, but they can degauss and physically crush it, thus ensuring true permanent destruction.

Sensitive personal data, which relates to information concerning a data subject’s racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, or details of criminal offences, is typically stored on media such as Hard Drives, Storage Tapes, Laptop Hard Drives and Solid State Drives. The data is very difficult to securely erase using software programmes due to the possibility of faults in the media such as bad sectors which software cannot access to delete. Some erasure programmes only erase the top level path to the data rather than the data itself thus leaving the possibility of a skilled hacker accessing the data by other means.

Degaussing is the globally recognized method of securely destroying data stored on magnetic media such as HDD and Tapes.  Other devices such as Solid State Drives (SSD) and Memory Sticks need to be crushed. Verity Systems has a range of Degaussers to suit all levels of need whether it is a few HDD occasionally or a constant supply of various media for destruction such as would be acquired by a recycling company or a large Information Technology department. The company also manufactures a desk-top crusher which is a fast and powerful SSD destroyer.

Penalties for failure to comply

The new General Data Protection Regulation (GDPR) applies to all organisations from micro-companies to the very largest employers and public bodies.  The Regulation requires all organisations to instigate an audit of current processes and to take appropriate technical and organisational measures to thoroughly protect people’s data.  Failure to protect data or not complying with any of the terms of the Regulation can result in a penalty ranging from a written warning to a fine of €100 Million – €200 Million or 4% worldwide turnover (whichever is higher). These penalties far exceed those applicable under the 1998 Data Protection Act (DPA) where the maximum fine was around €570K.

Actions

Companies and organisations need to realize that there is a window of opportunity now, before the legislation becomes effective, for them to devise a plan of action leading them to absolute compliance by the necessary time.  It has been suggested that as a minimum they should:

a)    Find out what data they hold which is covered by General Data Protection Regulation (GDPR)

b)    Set in place a Data Protection Internal Audit Procedure

c)     Appoint individuals within the organisation to take responsibility for compliance

d)    Explain their lawful basis for having the information

e)    Obtain and record the information owners consent to hold it

f)     If the information belongs to children they must have simple understandable terms of explanation

g)    Have an inspection mechanism in place to allow a person to see the data being held about them

h)    Have a set of procedures for how to deal with a data breach

i)     Understand the need to, and have a mechanism for, reporting breaches to the Information Commissioner

j)      Know who the relevant authority they have to report to in a foreign country if information is held in more than one EU state

k)    Have a clear “end of life” destruction procedure for permanently obliterating the obsolete data

Proof of responsible behavior

Our degaussers and crushers feature a unique piece of report writing software specifically designed to help with point k) above, i.e. Proof that an organisation has acted responsibly in relation to its duty to destroy sensitive data, and to comply with the requirements of the General Data Protection Regulation (GDPR).

At the time when a hard drive or backup tape is being erased on a Verity Systems unit its individual details such as its serial number, owners name, date of erasure etc. are recorded by the special Data Destruction Auditor/Report Writer software. This information can then be produced as a written report either for individual hard drives or for a batch of media. The reports can be produced in hard or soft copy and provide the person responsible for data destruction with proof of degaussing.  This information will be a strong element of defence when defending against any suggestion of failure to protect data sufficiently.

David Tucker, Director of Verity Systems notes, “Our customers are very excited by our Report Writing software. The General Data Protection Regulation has given many IT Directors a wake-up call with regards to how data is dealt with when it is no longer appropriate to be held, and we find them relieved to have this tool to help them prove they have met their responsibilities.  At Verity Systems we make desk-top units which are appropriate for the office environment.  They are quite simple to use and present a visible, available, onsite solution for controlling data destruction.  With our units in place an organisation can destroy a Hard Drive immediately it has been removed from the computer or laptop without having to store it or send it offsite to a third party.”

Conclusion

Verity Systems continues to develop solutions for permanent destruction of data to meet the advances in of ways of storing it.  We have been addressing the needs of customers such as the NSA, GCHQ, major banks and financial institutions, hospitals and broadcast companies to name but a few, for some 35 years. The products are tried and tested and sold with 3 to 5 years manufacturer’s warranty and lifetime technical support.

The General Data Protection Regulation (GDPR) is being implemented to give people increased protection because of the potential insecurity of the enormous volume of personal data now held on computers and other storage media globally. Verity Systems is able to offer those responsible for the safe disposal of data, when it is no longer needed or appropriate to be held, a real solution and comfort to help them with their compliance responsibilities.

The post Solutions for General Data Protection Regulation (GDPR) compliance appeared first on Verity Systems.