FileEraser for Business
Data sanitisation evidence

Erasing is free.
You pay only to prove it.

Erase files and folders to NIST SP 800-88 Clear on as many machines as you like — offline, unlimited, no licence. When an auditor needs evidence, spend one credit and get a certificate counter-signed by FileX, archived in your console, and verifiable by anyone, for free, without an account.

Free forever to erase · 3 evaluation credits on sign-up · No card

$0.70per certificate at volume
$0platform fee, ever
ML-DSA-65FIPS 204 signatures
FILEX · CERTIFICATE OF DATA ERASURE SPECIMEN

Data Erasure Report

Status
Successful
Method
NIST 800-88 Clear — single pass, verified
Standard
NIST SP 800-88 Clear
Assurance
Logical — best-effort
Items erased
1,284 of 1,284
Total data
42.7 GB
Counter-signed
FileX · ML-DSA-65
a3f1c07e9b24d5188ac6e0fb37d29e41c5b8a07f6e2d94b103fa8c7d15e6920b
Verify at eraser.cybxsan.com/verify Specimen — not a real erasure

What this is, and what it is not

FileX Eraser is a file and folder eraser implementing NIST SP 800-88 Clear: it overwrites and deletes the data you point it at. It does not perform drive-level Purge, firmware sanitize, or cryptographic erase, and it does not boot from external media.

On SSD and flash media, wear-levelling and copy-on-write can leave prior data in cells that are unreachable from software; journalling filesystems, snapshots, backups and cloud sync may retain copies. For whole-device assurance you want ATA Secure Erase or NVMe Sanitize — the tool prints the exact vetted command for your host, but it will not run it for you and it will not certify it.

Three steps, and only the third one costs anything

Erasure never phones home. The network is involved only when you ask FileX to counter-sign and archive the evidence.

1 · Erase, free

Point the tool at a file, a folder, or a list. Pick an overwrite algorithm, confirm, and it wipes then deletes. Runs on Windows, macOS and Linux, as a desktop app or a CLI for scripting and servers. No licence key, no account, works fully offline.

2 · Get a local record

Every run writes a certificate as JSON and a printable HTML report, containing the method, the item inventory and a SHA-256 integrity hash that any change breaks. That is a self-attestation, and it costs nothing.

3 · Certify, one credit

Add --certify and FileX counter-signs the record with ML-DSA-65, archives it in your console, and returns a permanent URL your client or auditor can check without an account. That is what an auditor will accept, and it is the only thing you pay for.

What one credit actually buys

A self-signed record proves nothing to a third party. A counter-signature does.

Counter-signature

Signed with FileX's own ML-DSA-65 key (FIPS 204, post-quantum), in addition to any signature of your own. Only FileX holds that key, so the attestation is independent of you.

Permanent URL

A stable verification link on this domain. Anyone can open it — no login, no software, no relationship with us — and see whether the record is intact.

Console archive

Every certified job lands in your organisation's console with its date, machine, method and totals, and comes back out as a CSV or PDF for an audit period.

Your branding

Your organisation's name and logo on the certificate, so what you hand a client looks like your evidence rather than ours.

Do not take our word for it

The verifier is public and free, forever. That is the point: evidence nobody can check is not evidence.

Check any certificate, right now

Drop in a .json certificate from any FileX erasure — ours or someone else's — and the verifier recomputes its integrity hash, checks the signature, and tells you plainly whether it has been altered. It runs in your browser; the file is not uploaded.

Open the verifier

Verify offline too

The same check runs from the command line on a machine with no browser and no network:

filex-eraser verify filex-cert-a3f1c07e.json

Published SHA-256 checksums for every binary mean you can confirm you are running what we released.

Standards and algorithms

Named precisely, and only where they actually apply.

NIST SP 800-88 Rev. 1 — Clear DoD 5220.22-M — 3-pass DoD 5220.22-M ECE — 7-pass Gutmann — 35-pass Random — single pass FIPS 204 — ML-DSA-65 signatures SHA-256 — record integrity

We do not claim NIST 800-88 Purge, and we do not list standards the tool cannot honestly implement. If a tender requires whole-device Purge with drive serial capture, this is not the right product and we will say so.

How the economics compare

Public list prices as of August 2026. Blancco and Certus are quote-based; the figures shown are published reseller SKUs.

Product Model Price Erasure scope Public verifier
FileX Eraser Free erasure · credits per certificate $0.70 – $1.56
per certificate
Files & folders — Clear Free, public
BitRaser File Eraser Corporate Per machine, annual subscription $39.99
per machine / year
Files, folders & volumes No
Blancco Drive Eraser Platform fee + consumption pool $28.99 – $74.99
per licence, + platform fee
Whole drive — Purge No
KillDisk Professional Perpetual, unlimited drives $64.95
one-time
Whole drive No
shred / sdelete Free, built in $0 Files — Clear No certificate at all

Read the middle two rows carefully: Blancco and KillDisk erase whole drives, which FileX does not. If that is what you need, buy one of those. FileX is the cheaper answer only for the case it actually covers — evidenced erasure of files and folders.

Credits, not seats

Buy a pool, draw it down across the whole organisation, on any number of machines. Credits never expire and there is no platform fee.

Download

One binary is both the desktop app and the CLI. Open it with no arguments for the graphical app; pass flags to script it.

Get the tool

Free, no account, no licence key. Erasure works offline forever.

Verify what you downloaded

Every release publishes SHA-256 checksums. Check yours before you run it — we would rather you did.

checksums.txt

Built by an auditor

Designed and written by an ISO 27001 Lead Auditor with 12+ years in information security — someone who has sat on the other side of the evidence request.

Open formats

The certificate is plain JSON with a documented canonical form. Two independent implementations — browser and Go — produce byte-identical hashes, and both are tested against the same fixture.

No lock-in

Credits never expire, there is no subscription to lapse, and a certificate stays verifiable offline with the tool you already have even if you never buy another credit.

Questions worth asking

What exactly leaves my machine when I certify?

Certificate metadata only — never file contents, and never file bytes. By default that is counts, sizes, method, algorithm, timestamps, a machine fingerprint, and a SHA-256 hash of each item's path. Filenames are not sent by default. An admin can turn on filename retention for the organisation if an auditor requires a named inventory; when it is on, every certificate says so. Erasing without --certify sends nothing at all.

Why should an auditor trust a certificate more than a log file?

They should not, if you signed it yourself — that is an assertion, not evidence. What a credit buys is a counter-signature from a key you do not hold, over a hash of a record you cannot change afterwards, resolvable at a URL the auditor can open themselves. That is the difference between "we say we erased it" and something a third party can check.

Does this wipe a whole hard drive?

No. It erases files and folders — NIST 800-88 Clear. For whole-device Purge you need ATA Secure Erase or NVMe Sanitize; the tool will print the correct command for your host, but it will not run it and will not certify it. We would rather lose the sale than certify something we did not do.

What happens if a job crashes halfway through?

A credit is reserved before the erasure and only committed when the certificate is counter-signed. An abandoned reservation expires and the credit returns to your pool, so a crashed or cancelled job never costs you anything.

Can I use it air-gapped?

Erasure and local certificates, yes — indefinitely, with no network of any kind. Certifying requires a connection, because the counter-signature comes from a key held on our side. The tool refuses to certify while offline rather than silently producing a record that is not archived.

What happens to my certificates if I stop buying credits?

Nothing. Existing certificates stay archived and their verification URLs keep working, and every certificate you have already downloaded verifies offline with the tool. Credits never expire, and there is no subscription to lapse.