Why the NSA Listing Matters for a Degausser in India

Ask a government IT manager or a bank compliance officer in India how they know a degausser actually works, and a large share will answer with the same phrase: the NSA listing. Here is what that means and why it carries so much weight here.

What the Evaluated Products List is

The NSA/CSS Evaluated Products List is published by the US National Security Agency. It lists data-destruction equipment — degaussers, crushers and shredders — that the NSA has evaluated against its own criteria for sanitising or destroying magnetic and optical media. The T-4 and T-5 degaussers are listed for hard disk drive degaussing; the PDS-75 and PDS-100 crushers are listed for destruction.

The point is independence. A manufacturer's claim about its own machine's field strength is a claim. An entry on a third party's evaluated list is a verification of that claim by an organisation with no commercial interest in the outcome.

It is not Indian law — and that distinction matters

No Indian statute cites the NSA. The DPDP Act 2023 does not, the IT Act does not, and RBI's directions do not. So an NSA listing is not legally mandatory in the way, say, a GST invoice is.

What it is, in practice, is the standard shorthand. It appears in tender specifications because it is unambiguous, widely understood, and removes the need for a technical evaluation committee to adjudicate whether a particular pulse is strong enough. Once a clause exists, it functions like a requirement whether or not a statute compels it.

What it changes commercially

Procurement. A tender that says "NSA-listed degausser" is satisfied without argument. The technical evaluation stops being a risk to your bid.

Audit. When an internal auditor or a customer asks how you dispose of media, "our machine is on the NSA/CSS Evaluated Products List and here is the reference, and here is its current field verification certificate" is a short conversation. Describing a spec sheet is a long one.

Tender competitiveness. If a specification has an NSA clause, machines outside the list are not bidders. This is the practical point: it is often not a preference, it is an exclusion.

T-4 or T-5 once you have narrowed to the list

Both are on the list, so the specification is satisfied either way. Choose on environment and throughput:

— T-4. Bi-directional ±20,000 Gauss using patented Reverse-Polarity — a strong positive pulse and a strong negative pulse, fully automatic, which drives the magnetic domains in both directions for better decorrelation in the same cycle time. Under a minute per cycle. Internal Gaussmeter with LCD per-cycle verification. And a 12 V battery operation option, which is the reason it remains the machine most often specified for secure rooms where a mains connection is undesirable.

— T-5. 2 Tesla (20,000 Gauss) per cycle in under 20 seconds — roughly three times the throughput. Digital cycle counter and LCD status, which becomes a running destruction log. The natural choice for bulk decommissioning where volume dominates.

Crushers, too

The listing is not limited to degaussers. The PDS-75 is an NSA-listed manual crusher and the PDS-100 is NSA/CSS evaluated and listed for destruction. If a specification calls for an "NSA/CSS evaluated HDD destroyer", these are the two models in the range that satisfy it.

How to use the listing in a tender response

1. Quote the model precisely — T-4 or T-5, and the crusher model. "Proton degausser" is not a bid-compliant line item.
2. Give the EPL reference for the model, obtained from us, and attach it.
3. Attach the manufacturer datasheet showing the field specification and cycle time.
4. Attach the channel authorisation letter addressed to the procuring organisation.
5. State the field value you are claiming explicitly against the clause, rather than letting the reader infer it.
6. Map the compliance matrix line by line to the tender sheet, and flag anything you cannot meet rather than hoping it goes unread.
7. Price the verification certificate and the AMC into the commercial schedule, so acceptance and ongoing support are not renegotiated after the award.

The honest caveat

An NSA listing is evidence of a machine's capability, not a substitute for operating it properly. The listing does not sanitise anything. A T-5 in a storeroom with no register, no trained operator and no verification certificate provides no compliance value at all, however good the machine is.

Which is the general point about all of this. The machine is the easy part. The process around it is what an audit examines, and the register is what proves it.