Everything most people believe about deleted files was learned on spinning disks, where a deletion removed a line from an index and left the contents sitting there until something else needed the room. Solid state storage does not work like that, and the difference is not a matter of degree. It is worth saying plainly before anybody pays for postage to hear it in person.
Press delete on a modern machine and three things happen in quick succession. The file system removes the entry that named the file, which is the familiar half and the only half most people know about. Then the operating system issues a TRIM command listing the blocks that are now spare. Then the drive marks those blocks for erasure and its own background housekeeping empties them, generally within minutes of the machine going quiet.
After that, reading those addresses returns zeroes. Note carefully what has and has not happened: nothing was written over the top in the way a hard disk overwrites. The cells were emptied by the drive itself, on its own initiative, because it was told they no longer mattered. There is a difference between hidden and gone, and this is the second one.
That whole sequence usually completes while you are still deciding whether it mattered. The clock that governs your odds started the moment the key went down, and it is measured in minutes rather than days.
On a hard disk, new data lands straight on top of the old. Flash has no such option. A cell must be emptied before it will take anything, and the emptying is done a large block at a time while reading and writing happen in far smaller pages. That mismatch is the whole reason an SSD carries a controller doing a great deal of unseen housekeeping, and the reason it keeps a private map between the addresses your computer names and the cells currently holding the data.
One consequence of that arrangement is that the drive has to be told which of its cells still matter. Left in ignorance it carefully preserves rubbish, exhausts its supply of pre-erased blocks and slows to a crawl as every write turns into a read, an erase and a write. TRIM is how the operating system does the telling, and it exists to keep the drive fast rather than to destroy your data. The destruction is a side effect that happens to be total.
It is also why the honest answer changed rather than the industry becoming less capable. Nothing about the bench got worse. The storage got a housekeeper.
Take a solid state drive in good health, with TRIM doing its job, and a deleted file is normally past reach in minutes and beyond argument in hours. It is not a hard job. It is not a costly job. It is not a matter of ringing round for a better laboratory, or of paying somebody more than the firm before them. The contents were cleared out of the cells by the drive's own housekeeping, and nothing on earth reads back what is no longer present.
That covers SATA SSDs, NVMe blades and the soldered storage in most current laptops. It covers an emptied recycle bin, a shift-delete and a quick format on a volume the operating system knows about. It covers Windows, macOS and Linux alike, because TRIM has been standard on all three for years.
There is no comfortable way to sell that, which is precisely why it is worth publishing. A firm that takes the drive in anyway, holds it a fortnight and reports that unfortunately nothing was recoverable has lost you two weeks and possibly the postage. Ten minutes on the telephone establishes whether your case is the hopeless one or one of the four below.
Anybody who has run a recovery tool over a trimmed SSD has seen a long, convincing list of names, sizes and dates, and it is genuinely confusing until you know where each of those things lives. Names and contents are kept in different places. File system metadata frequently survives long after the data blocks themselves have been emptied, so a scan finds the catalogue intact and reports it enthusiastically.
Open what comes back and the files are empty, or filled with zeroes, or corrupt beyond use. The list was real evidence that those files once existed on that drive. It was never evidence that the contents are still there, and no amount of scanning for longer changes that.
This is where the commercial incentive bites. There is a whole category of software marketed on the promise of undeleting from any drive, and a scan that produces four thousand filenames looks exactly like success right up to the moment somebody double-clicks one. Anyone promising to undelete from a healthy modern SSD is either unaware of this or counting on you being.
Several circumstances mean the command was never issued or never arrived, and in each of them the odds change completely.
The drive failed instead of the file being deleted. This is the one that matters most, and it sits the wrong way round to instinct. A drive that has gone silent, reports a capacity of a few megabytes, has locked itself read-only or no longer appears in the BIOS is often a much better prospect than one that still works. No deletion took place, so no TRIM command was ever issued, and the contents are generally intact in the memory behind a controller that has stopped playing along. The job becomes reaching that memory without the controller's help, rather than hunting for something already cleared.
The command never reached the drive. External SSDs in USB enclosures have historically not passed TRIM through the bridge chip, and a good number still do not. The same is true of some array configurations, of older hardware controllers, and of any machine where it was switched off or never enabled. In those cases the drive behaves much more like a hard disk, and deleted data can sit there for months.
Something was saved over the top rather than deleted. A document written over is a different event from a document removed, and earlier drafts often survive somewhere else entirely: in an application's temporary files, in a shadow copy, or in the room the file left behind when it grew. None of those get reported free in the same way.
The machine went off within a minute or two. Housekeeping runs when the drive is idle, so a computer shut down immediately after the deletion and left off since may still be holding those blocks. That is a genuine window, it is the only one you control, and it closes fast.
Turn the machine off. Not asleep, not hibernating, not merely shut — off, at the power. Idle minutes are precisely when the drive gets on with emptying the blocks you want back, so each one costs you something, and this is the single move on the list that buys odds instead of spending them.
Then leave it alone. Installing recovery software onto that drive writes to it, which is the opposite of the plan. Running a scan keeps the drive awake and working, and working is when the tidying you are trying to interrupt actually happens. Defragmenting achieves nothing on flash beyond wear, and though current systems know better, an older setup occasionally still tries. Nothing whatever should be allowed to repair the volume.
If the drive has died rather than mislaid a file, the instruction is unchanged but the reason behind it is not. An SSD that still shows up and is clearly ailing wants imaging in a single pass, not browsing. Dragging folders off it one by one leaves it powered, warm and labouring for hours, and a controller in decline usually declines further the longer it is kept at it.
Pulling data off a dead SSD shares very little with the same exercise on a hard disk, and it is worth knowing what the money is buying. So long as the controller still answers, the drive gets imaged much as any other would, at a crawl, with timeouts chosen for a device that argues back. When it goes silent for good, the memory has to be approached on its own terms and the controller left out of the arrangement altogether.
The second route is where the hours disappear, because a raw flash die gives up nothing resembling a document. Before that data left the computer it was scrambled to a pattern, split across dies and planes to make it quick, wrapped in correction codes and indexed by a map the controller kept to itself. All four have to be rebuilt from the outside before one openable file exists, and each is particular to a controller family and now and then to a firmware revision.
Two limits come attached, and both are better heard early. Going at the chips directly counts as chip level work, one of the four published exclusions from no fix, no fee, which puts half the figure up front. And flash soldered flat to a mainboard does not come off — that is every Apple Silicon Mac and a lengthening list of slim Windows laptops — so once the board is dead there is nothing to put on a bench and the answer has to be no.
One hard drive or one SSD is £300 + VAT, NVMe blades included, and the same figure applies whether the fault is a lost file or a dead drive. Drop to £250 + VAT for cards, sticks and pen drives. Go up to £400 + VAT for an encrypted volume where a key exists, and for a disk pulled out of a CCTV or DVR recorder. Arrays and servers begin at £500 + VAT. Nothing is charged for the diagnostic, which finishes 2 working days from booking in and ends in one written figure. No fix, no fee applies to logical work; the four exclusions — electronic and mechanical failures, chip level work, DVR jobs, forensic jobs — take half in advance.
The storage travels and the computer stays behind. One screw releases an M.2 blade and four release a 2.5-inch SSD, and no machine gets taken apart at the Oxford end. There are two ways round that rule: an external drive stays sealed inside its own case, and a NAS goes as a whole unit with the disks left in their bays. Pad it until nothing shifts, then post it tracked and insured to Oxford Data Recovery, John Eccles House, Oxford Science Park, Robert Robinson Avenue, Littlemore, Oxford OX4 4GP.
That is about fifty-five miles from Coventry down the M40, roughly an hour if you would rather deliver it; reception takes drop-offs Mon–Fri 9:00am–5:30pm and nobody collects. No mobile phones and no tablets are accepted. Neighbouring pages: SSD data recovery for the hardware, NVMe recovery for the blades, deleted file recovery for the way all of this behaves on a spinning disk, and data recovery cost for the bands. Where the drive is soldered into a Mac, the companion piece is which Macs can be recovered. The freephone is 0800 689 0668.
The hopeless case is the healthy drive. A deletion on a working SSD gets cleared out of the cells by the drive's own housekeeping while the machine sits idle. A drive that has stopped answering deleted nothing and trimmed nothing, and usually still holds the lot behind a controller that has given up — which is ordinary work at £300 + VAT.
Oxford charges nothing to examine it, and that closes 2 working days from the moment it is booked in. Whatever figure comes out of it is written down and stays there: £250 + VAT a card or stick, £300 + VAT one drive or SSD.