Secure deletion
Last updated: Nov 3, 2026
Fluid Attacks uses AWS cloud infrastructure for data storage. Thus, the secure deletion process of Fluid Attacks for cloud-based information follows the validated secure deletion procedures of AWS, in compliance with ISO/IEC 27017:2015 and ISO/IEC 27018:2019:
- Standard deletion: When data is deleted through AWS services (for example, S3), AWS executes its documented deletion processes. These processes prevent data recovery.
- AWS secure deletion standards: AWS follows NIST 800-88 guidelines for media sanitization. When storage media gets to its end of life, AWS uses the techniques of DoD 5220.22-M or NIST 800-88 to make the data unrecoverable.
- Cryptographic deletion: Fluid Attacks requires encryption for its data. For encrypted data, the deletion of the encryption keys makes the data permanently inaccessible. The data stays inaccessible when remnant data stays on the storage media.
- AWS shared responsibility model:
- AWS (CSP responsibility): Secure disposal of physical storage media, validated sanitization procedures, and compliance with ISO 27001/27017/27018
- Fluid Attacks (CSC responsibility): Logical deletion of data objects, encryption key management, application of retention policies, and deletion verification
- Verification: Fluid Attacks keeps deletion logs from AWS CloudWatch and CloudTrail. These logs show the deletion timestamps and the actions.
- AWS compliance certifications: AWS has ISO 27001, ISO 27017, ISO 27018, SOC 2, and FedRAMP certifications. These certifications include validated secure disposal procedures that third parties audit.
Laptops
When a talent leaves the company, the MDM (Mobile Device Management) solution of Fluid Attacks locks their computer on their last day of work. When Fluid Attacks has the device physically, it does the secure deletion process as follows:
- Fluid Attacks selects the device in the MDM console.
- It selects the Erase device command.
- It runs the command.
The command does these actions on the device:
- Signs the end user out of all Apple services, for example, iCloud
- Removes fingerprints from Touch ID
- Removes the pairing of Bluetooth accessories
- Disables Find My Mac and Activation Lock
- Erases apps, data, and user settings
- Erases all other volumes, including system volumes, with BOOTCAMP
If a device passes the data erasure process through the MDM successfully, it is not necessary to physically destroy its hard drive.
Mobile phones and tablets
Fluid Attacks also applies the process above to mobile phones and tablets. Before disposal, Fluid Attacks removes all SIM cards and erases the data on all the memory cards in the unit.