How DestructLog Works
Record asset sanitization information per NIST 800-88 fields in four steps.
Step 1: Prepare Your Asset Data
Export a CSV from your asset management system or inventory spreadsheet. DestructLog accepts the following columns:
- serial_number — the unique identifier for each asset
- make_model — the manufacturer and model of the device
- media_type — the storage media type (HDD, SSD, tape, optical_disc, flash_drive, floppy_disk, paper, mixed_media)
- method — the NIST 800-88 sanitization method used (clear, purge, or destroy)
- date — when the sanitization was performed or verified
- verifier — who performed or verified the sanitization
The header matching is flexible — DestructLog recognises common synonyms for each column (e.g. "asset tag" for serial_number, "disposition" for method). The only required columns are serial_number, media_type, and method.
Step 2: Submit Your Data
Send your CSV text to DestructLog via the API. The tool automatically detects the delimiter — comma, tab, or pipe — and maps your column headers. No file upload is required; the CSV is sent directly as part of the API request. The document is generated server-side and returned as a complete sanitization record.
Step 3: Review Validation Results
The tool checks each row against the NIST SP 800-88 Rev. 1 media sanitization decision matrix. For example:
- Clear (overwrite) is valid for HDDs but NOT for SSDs, optical discs, flash drives, or paper
- Purge is valid for HDDs, SSDs, tape, flash drives, and floppy disks but NOT for optical discs or paper
- Destroy is valid for all media types
Rows with invalid combinations are flagged with an explanation citing the relevant NIST section. The document includes both valid and flagged rows so you can see the complete picture.
Step 4: Generate the Document
DestructLog produces a numbered record (format: DEST-YYYYMMDD-NNN) with:
- The organization name and issue date
- A per-asset table listing serial number, make/model, media type, method, status, verifier, and date
- NIST SP 800-88 citations for each method-media type combination
- A summary section with counts by method and media type
- Validation notes for any flagged rows
- A disclaimer stating the document records what was entered and does not itself verify sanitization
What DestructLog Does Not Do
DestructLog does not connect to any asset management system, verify that a sanitization actually happened, store your asset list after the tab closes, or certify anything on its own authority. It is a documentation tool, not a verification tool.