DFU firmware-level erasure for Mac and iOS. NIST SP 800-88 Rev.2 and IEEE 2883 compliant. Tamper-evident PDF certificates with SHA-256 verification.
BlankState performs DFU (Device Firmware Update) firmware restore on Apple Silicon Macs, T2 Macs, iPhone and iPad. Unlike cryptographic erasure, DFU restore wipes the storage, reinstalls firmware from Apple's signed image, and resets the Secure Enclave, eliminating data, keys, and recoverable firmware in one operation.
Aligned with IEEE 2883-2022 Standard for Sanitizing Storage.
One-click DFU mode entry via USB-C VDM messaging on Apple Silicon, with no manual key combos.
Up to 16 devices processed concurrently on a single host Mac.
Pre- and post-erase state capture (firmware version, build, ECID, boot mode) stamped onto certificates.
Tamper-evident PDF certificates with SHA-256 hash, verifiable at blankstate.io/verify.
Credits only consumed on successful erasure; failed operations cost nothing.
Frequently asked questions
How does DFU erasure differ from cryptographic erasure?
Cryptographic erasure only destroys the encryption key; the encrypted data and the Secure Enclave remain on the device. BlankState performs a DFU firmware restore that wipes storage, reinstalls firmware from Apple's signed image, and resets the Secure Enclave, exceeding the NIST SP 800-88 Rev. 2 Purge definition.
Does BlankState erase the Secure Enclave?
Yes. The DFU firmware restore rebuilds the entire system from Apple's signed image, removing the biometric data and device encryption keys held in the Secure Enclave.
Is a factory reset enough for business use?
No. A factory reset produces no certificate, no post-wipe verification, and no health context, and it does not de-enrol the device from Apple Business Manager or MDM. For regulated organisations, the gap between wiping a device and proving it was wiped is a compliance risk.
Which devices can BlankState erase?
Apple Silicon Macs (M1 to M4) and Intel Macs with the T2 security chip, plus iPhone and iPad. Mac and iOS devices run in the same workflow.
What happens if an erasure fails?
Credits are only consumed on successful operations. Failed wipes cost nothing.
How many devices can be erased at once?
Up to 16 devices connected via USB-C can be processed concurrently from a single host Mac.
Public certificate verification at blankstate.io/verify, SHA-256 tamper-evident, no login required.
About the publisher
BlankState is built and maintained by Stabilise Ltd,
an Apple Premium Technical Partner based in the United Kingdom. We work directly with
ITAD operators, enterprise IT teams, legal and financial firms, and education institutions
on Apple device end-of-life workflows. Our technical guidance is based on first-hand
field experience, independent results from the ADISA Product Claims Test
methodology, Apple's own Platform Security
documentation, and NIST Special Publication 800-88 Rev. 2,
the standard US guideline for media sanitisation. Founder and principal author: Dustin Rhodes.
BlankState at a glance
What it is: A native macOS app for Apple device end-of-life, covering ADISA-certified data erasure, health assessment, and tamper-evident PDF certification for Mac and iOS.
Built by:Stabilise Ltd, a UK-registered Apple Premium Technical Partner. Founder: Dustin Rhodes.
Certified by: ADISA Product Claims Test Assurance Level 4 (certificate AAC281, project ADPC330, valid until April 2029).
Standards: NIST SP 800-88 Rev. 2 (Purge) and IEEE 2883-2022 aligned; supports UK GDPR, ISO/IEC 27001, HIPAA, and Cyber Essentials.
Pricing: Credit-based from £4.00 down to £1.25 per device. See pricing.
Verify a certificate:blankstate.io/verify, a public SHA-256 lookup, no login required.