DoD 5220.22-M Wiping Service
Data Destruction Inc. runs the DoD 5220.22-M overwrite sequence on magnetic hard drives when your policy or contract requires it, then verifies and documents the result with a serialized certificate. For most drives, NIST SP 800-88 r2 is now the governing reference, and we will tell you which fits.
Many contracts and internal policies still name DoD 5220.22-M by number, so we perform it exactly. It is a multi-pass overwrite that leaves a working drive you can reuse, which makes it useful when reuse is the goal and the data is not highly sensitive.
TOP 10 WAYS TO PROTECT YOUR PRIVACY NOW!
DOWNLOAD YOUR FREE GUIDE
Related Destruction Services
Hard Drive Data Wiping
Hard drive data wiping overwrites magnetic drives for reuse, the broader service DoD 5220.22-M sits within.
NIST 800-88 Purge Service
The NIST 800-88 Purge service applies laboratory-grade methods when overwrite Clear is not enough for the data's sensitivity.
Software-Based Wiping
Software-based wiping is the overwrite family DoD 5220.22-M belongs to, matched to reusable magnetic media.
Hard Drive Shredding
Hard drive shredding is the Destroy alternative when reuse is not required and maximum assurance is.
What is DoD 5220.22-M wiping?
DoD 5220.22-M wiping is a software overwrite method that writes patterns across every addressable sector of a magnetic hard drive, then verifies the result. It maps to the Clear category in NIST SP 800-88 r2, which protects against non-invasive recovery.
The classic sequence is three passes: a fixed character, its complement, then a random pattern, followed by a verification pass. An extended seven-pass variant repeats the cycle for organizations whose policy demands it. The drive remains intact and reusable after wiping.
| Attribute | Value |
|---|---|
| Method type | Software overwrite (NIST Clear) |
| Passes | Three-pass standard, seven-pass extended |
| Verification | Read-back pass confirms overwrite |
| Best-fit media | Magnetic hard disk drives |
| Not suitable for | SSDs and flash media |
| Outcome | Drive is sanitized and reusable |
How does DoD 5220.22-M wiping work?
DoD 5220.22-M wiping works by overwriting every sector with defined patterns and then confirming the overwrite by read-back. Data Destruction Inc. follows a documented sequence.
- Inventory the drive and confirm it is magnetic and healthy enough to overwrite.
- Pass one writes a fixed character across all addressable sectors.
- Pass two writes the complement of that character.
- Pass three writes a random pattern, then a verification pass reads it back.
- Record serials, method, and result, then issue the certificate.
Because overwrite depends on the drive accepting writes to every sector, the method suits working magnetic drives. For drives that will be destroyed rather than reused, see Hard Drive Shredding.
Why NIST 800-88 r2 is now the reference
NIST SP 800-88 r2 is now the reference because the current U.S. guidance no longer specifies fixed overwrite passes and instead defines outcomes by media type. This matters when you are choosing a method for compliance.
- Modern drives. NIST notes that a single verified overwrite pass is generally adequate for current ATA drives, so extra passes add policy assurance rather than security.
- Higher sensitivity. For data that must defeat laboratory recovery, a Purge or Destroy outcome is the appropriate choice, not Clear.
- Contract language. When a contract still names DoD 5220.22-M, we perform that exact sequence and document it.
We run DoD 5220.22-M when you require it and recommend the NIST 800-88 Purge Service when the goal is laboratory-grade assurance. The right choice depends on sensitivity and reuse.
Which media suit overwrite wiping?
Overwrite suits magnetic drives and fails on flash, so media type decides the method. This is a predicate distinction, not a preference.
- Magnetic hard drives accept overwrites to every sector, so DoD 5220.22-M applies cleanly. See Hard Drive Data Wiping.
- Solid-state and flash media use wear leveling and over-provisioning that hide cells from an overwrite, so they are handled by Cryptographic Erase / Crypto-Erase or firmware secure erase instead.
- Encrypted volumes are purged fastest by destroying keys, again a crypto-erase outcome rather than overwrite.
How does DoD 5220.22-M wiping meet compliance obligations?
DoD 5220.22-M wiping meets compliance obligations when the overwrite is verified and documented against the drive serial. The map below ties common rules to our process.
| Standard or rule | Requirement | Data Destruction Inc. process |
|---|---|---|
| NIST SP 800-88 r2 | Apply Clear appropriately and verify | Verified overwrite, documented per serial |
| HIPAA 45 CFR 164.310(d)(2)(i) | Render ePHI unrecoverable at disposition | Overwrite for reuse, or Purge/Destroy if sensitive |
| GLBA Safeguards Rule, 16 CFR Part 314 | Dispose of customer information securely | Verified wipe with serialized certificate |
| CMMC and NIST 800-171 | Sanitize CUI to defined levels | Method matched to data class, documented |
Read the method on our blank” rel=”noopener”>NIST SP 800-88 r2 guidelines and the NIST definition of Clear.
What you receive
Every engagement produces an audit-ready package.
- Serialized Certificate of Sanitization, provided within 24 hours after the destruction event is complete.
- Method record noting the DoD 5220.22-M pass sequence and verification.
- Asset inventory listing drive serials and outcomes.
- Chain-of-custody log from intake through wiping.
- Exception report flagging any drive that failed verification.
Drives that fail verification are escalated to physical destruction so no drive is returned unsanitized.
Frequently asked questions
Is DoD 5220.22-M still required?
The current U.S. guidance is NIST SP 800-88 r2, but many contracts and policies still name DoD 5220.22-M. We perform the exact sequence when you require it.
How many passes do you run?
The three-pass standard by default, or the seven-pass extended variant when your policy specifies it, always with a verification pass.
Can you wipe an SSD this way?
No. Flash media use wear leveling that hides cells from overwrite. SSDs are handled by cryptographic erase or firmware secure erase.
Is the drive reusable afterward?
Yes. Overwrite wiping leaves a working drive, which is why it suits reuse and redeployment.
What if a drive fails the wipe?
It is escalated to physical destruction and flagged in an exception report, so no drive leaves unsanitized.
What proof do we receive?
A serialized Certificate of Sanitization, a method record, an asset inventory, and a chain-of-custody log. Call (866) 850-7977.
Get Started
Meet your DoD 5220.22-M requirement with verified, documented results. Start at contact us or call (866) 850-7977.
LET US CONTACT YOU
DATA DESTRUCTION LOCATIONS
SHREDDING SERVICES DALLAS
1717 Mckinney Ave. Suite 700
Dallas, TX 75202-1236
(469) 949-2840
SHREDDING SERVICES NEW YORK CITY
100 Church Street. 8Th Floor
New York City, NY 10007-2630
(516)-990-4096
SHREDDING SERVICES SAN JOSE
2033 Gateway Place. 5Th Floor
San Jose, CA 95110
(408) 459-4418
SHREDDING SERVICES SAN DIEGO
350 10Th Avenue. Suite 1000
San Diego, CA 92101-7496
(619) 916-4696
SHREDDING SERVICES LOS ANGELES
633 West Fifth Street. 26Th And 28Th Floors
Los Angeles, CA 90071
(213) 205-3688
SHREDDING SERVICES IRVINE
7545 Irvine Center Drive. Irvine Business Center, Suite 200
Irvine, CA 92618
(949) 793-7178
SHREDDING SERVICES WASHINGTON
601 Pennsylvania Ave. Nw, South Building, Suite 900
Washington, DC 20004
(240) 266-3056