ZeroTrace: A Cryptographically Verifiable Data Erasure Framework with Pluggable Engine Architecture and Signed Audit Certificates

ZeroTrace is a cryptographically verifiable data erasure framework designed to provide audit-ready proof of secure data sanitization. The system implements multi-pass overwrite strategies with deterministic zeroing, per-pass and final SHA-256 verification and tamper-evident signed erasure certificates. The architecture introduces a pluggable erasure engine model allowing extensible wipe strategies while maintaining verifiable integrity guarantees. ZeroTrace aims to support digital forensics, enterprise IT asset disposition (ITAD), regulatory compliance and privacy-focused secure deletion workflows. Key features:• Multi-pass overwrite with deterministic patterns• Per-pass and final SHA-256 verification• Cryptographically signed audit certificates• Pluggable engine architecture for customizable wipe strategies• Tamper-evident verification logs• Designed for forensic and compliance-grade assurance This work contributes towards verifiable deletion systems by combining reproducible overwrite semantics with cryptographic attestations, ensuring both practical usability and strong assurance guarantees. Source code and documentation:https://github.com/atharvbyadav/ZeroTrace This record represents the preprint version of the manuscript prior to peer review.