NSA/CSS Policy Manual 9-12

What the manual covers

NSA/CSS Policy Manual 9-12 applies to NSA/CSS elements, US government bodies and contractors that handle classified information. Where it applies through a contract or programme, it is binding. The current version dates from February 2026.

The manual specifies per type of media how it must be sanitised or destroyed, and requires the equipment to appear on a current NSA/CSS Evaluated Products List (EPL). There are separate lists for degaussers, hard drive destruction devices, solid-state devices, optical media and paper. The NSA updates the lists regularly; a device that is removed moves to the expired products list.

Hard drives: degauss, then deform

For a regular magnetic hard drive, the EPLs (October 2026) describe these routes:

• degauss with an EPL-listed degausser, then deform the platters, for example with an EPL-listed deformer; or
• disintegrate to particles of 2 mm or less with an EPL-listed disintegrator; or
• incinerate at 670 °C.

A deformer on its own does not sanitise a hard drive. HAMR drives may only be incinerated. SSDs must be disintegrated to 2 mm or less with a device from the solid-state list.

Garner machines on the EPL

On the lists of October 2026:

List	Garner model
Magnetic Degaussers	TS-1XT Series, supplied by us as the TS-1XTE
Hard Drive Deformers	PD-5, supplied by us as the PD-5E

Together they cover the degauss-then-deform route for hard drives, for example as a package on the Enclosed Destruction Cart. No Garner product is on the solid-state list. The other Garner degaussers and the FLASHPRO-E are not on an EPL.

The EPL is guidance, not an endorsement by the NSA, and inclusion does not guarantee continued performance: the NSA advises re-testing equipment according to the manufacturer. We check the listing against the current list before delivery.