How to Recover Data from a Formatted SSD: Understanding TRIM and Recovery Methods

Summary: Formatting an SSD or deleting files doesn’t always erase data immediately. Data recovery from formatted SSD is less likely than with a traditional hard drive, but it can still be possible. TRIM, a command that marks unused data blocks, lets the SSD clear them during background maintenance—often within minutes. That said, data may remain recoverable if TRIM is disabled, unsupported (such as on older systems, USB enclosures, or RAID arrays), or if the erasure process is interrupted. If you have lost data, power off the SSD immediately and contact a professional data recovery service.

Can deleted files be recovered from an SSD? This is one of the most common questions in data recovery, and the honest answer depends. On a standard hard drive (except for SMR drives), deleting a file only marks the space as available. The data remains in place until something new overwrites it.

Solid-state drives (SSDs) behave very differently. When a file is deleted, or the drive is formatted, the operating system may send a TRIM command to the SSD controller. The controller then clears the relevant NAND blocks for reuse, often within minutes. This makes recovery more difficult, but it does not always rule it out.

Some hardware configurations or software settings can stop TRIM from ever reaching the drive. In other cases, the controller receives the command but does not act on it immediately. In both situations, data recovery from formatted SSD, or from a drive with deleted files, may still be possible. 

How Does Data Deletion on an SSD Differ from a Hard Drive?

When a file is deleted from a hard drive, the data stays where it is until new data takes its place. An SSD does the opposite. It quietly erases deleted data in the background, often before you even realise something is missing. That difference is why SSD data recovery is a specialised field, distinct from hard drive recovery.

Factor	Hard Drive (HDD)	Solid State Drive (SSD)
After file deletion	Data remains on the platter	TRIM marks the data for erasure
After quick format	Data remains intact	TRIM invalidates the complete volume
How old data is removed	Overwritten in place	Erased block by block through garbage collection
Recovery window	Until the sectors are overwritten	Often seconds to minutes
Recovery software results	Often successful	Usually returns zeroes

How Data Is Deleted on a Hard Drive

Deleting a file from an HDD does not wipe it. The operating system removes the file’s entry from the file system index and marks its sectors as free for new data. The original magnetic patterns remain on the platter until something new overwrites them. A quick format works the same way. It builds a blank set of file system metadata, but the data on the platters stays untouched until it is overwritten.

How Data Is Deleted on a Solid State Drive

NAND flash memory cannot overwrite data in place. A flash cell must be erased at the block level before it can store new data. This constraint forces the SSD controller to manage deleted data actively instead of leaving it on the drive.

The deletion process on a TRIM-enabled SSD follows these steps.

• TRIM is issued. The operating system sends a TRIM command (or NVMe Deallocate) that identifies the logical block addresses (LBAs) no longer in use.
• Pages are invalidated. The controller marks those pages as invalid in the Flash Translation Layer (FTL).
• Reads return zeroes. Most modern SSDs apply DRAT (Deterministic Read After TRIM) or RZAT (Read Zero After TRIM). The controller then returns zeroes for those addresses, even while the NAND cells still retain the original charge.
• Garbage collection erases the data. The controller moves valid pages from partially invalidated blocks into clean blocks. It then applies a high-voltage erase pulse that permanently destroys the data in the original cells.

Why Does the TRIM Command Make Deleted SSD Data Difficult to Recover?

The TRIM command starts the erasure process the moment the operating system tells the drive that specific data is no longer needed. Therefore, the success of SSD TRIM command recovery depends on how far that process has progressed.

SSD Data Recovery After Deleting Files 

Timing varies widely between controllers.

• Some controllers, including certain Samsung models, can erase invalidated blocks within seconds of idle time.
• Certain Silicon Motion (SMI) controllers delay garbage collection until free blocks fall below an internal threshold. Deleted data on these drives can stay physically intact for minutes or even hours.

SSD Data Recovery After a Quick Format

Without these mapping entries, experts find it difficult to rebuild the relationship between logical and physical addresses. This relationship is essential for data recovery from a formatted SSD.

SSD Data Recovery After a Full Format

On Windows 8 and later, a full format issues the same volume-wide TRIM command as a quick format. Only after this does Windows run its surface scan for bad sectors. By the time the scan begins, the controller has invalidated the complete volume. Data recovery from formatted SSD is therefore no more likely after a full format than after a quick format. 

SSD Data Recovery After Secure Erase or NVMe Sanitise

• Block Erase mode. The controller applies the erase voltage to every NAND block, including over-provisioned and remapped areas.
• Crypto Erase mode. On Self-Encrypting Drives (SEDs), the controller destroys the internal Media Encryption Key. The NAND contents become unreadable ciphertext within milliseconds, without any cell being erased.

When Is Data Recovery from a Deleted or Formatted SSD Still Possible?

Data can only be recovered when something stops TRIM from reaching the NAND memory or stops garbage collection from completing the physical erase. In most deletion and formatting cases, neither process is interrupted, and the chance of recovery closes quickly.

When TRIM Was Disabled or Never Delivered

Recovery prospects are strongest when TRIM never reaches the SSD controller. This can happen in the following cases.

In each case, deletion removes only the file system pointer. The NAND cells retain the original data, and an expert can scan the unallocated space using standard file-signature methods.

When an External USB Enclosure Blocks TRIM

Data recovery from a formatted SSD in an external USB enclosure is often possible because many enclosures don’t pass TRIM commands to the drive, even when the OS issues them.

• Older enclosures that use the Bulk Only Transport protocol don’t send SCSI UNMAP commands.
• Newer enclosures that support the USB Attached SCSI Protocol (UASP) send TRIM commands inconsistently.

When a RAID Controller Blocks TRIM

Many hardware RAID controllers block TRIM on RAID 1, 5, and 6 volumes to prevent parity inconsistencies. Member SSDs in these arrays never receive the deallocation instruction. As a result, the deleted data remains in the NAND memory.

When Controller Failure Interrupts Garbage Collection

A failed SSD controller halts all background processes. If the controller failed after TRIM marked blocks as invalid, but before garbage collection erased them, the data may survive. Specialists can then access the flash memory directly and rebuild the FTL metadata using forensic hardware.

When the SSD Was Powered Off Immediately

• Garbage collection runs during idle time, not the moment the controller receives TRIM.
• Powering off the SSD right after accidental deletion or formatting may temporarily preserve the NAND contents.
• The outcome depends on the controller, firmware, TRIM handling, and garbage collection behaviour of each drive.
• An immediate power-down can preserve a pre-erasure state, but it does not guarantee the data will survive.

What Should You Do Immediately After Deleting Files or Formatting an SSD?

Switch off the SSD immediately. While the drive remains powered, its controller continues background maintenance, including erasing deleted data. Files that can be recovered now may be permanently lost within a short time. 

Recommended Actions	Actions to Avoid
Shut down the computer or disconnect the external SSD	Installing or running recovery software on the affected drive
Keep the drive powered off until a specialist examines it	Reformatting the drive, reinstalling the operating system, or saving new files to it
Contact a professional SSD data recovery service before attempting any repair	Leaving the drive connected and idle, as garbage collection typically runs during idle periods

How Do Experts Recover Data from a Deleted or Formatted SSD?

When experts recover data from an SSD, they operate below the file system level. Instead of examining files and folders, they interact directly with the drive’s controller, firmware, and NAND flash memory. Their primary objective is to preserve the drive’s current state, reconstruct the SSD’s data management structures, and extract as much readable data as possible before automatic processes permanently erase it.

Step 1: Preventing Further Data Loss

The first priority is to stop the SSD from running background housekeeping tasks. A healthy controller is likely to start garbage collection and wipe blocks that still contain deleted data.

• Experts avoid booting the drive through a standard operating system wherever possible.
• They connect it to specialised platforms such as PC-3000, which communicate directly with the controller.
• Before imaging begins, they check for electronic faults, such as failed power-management components, and repair them.
• The SSD is then switched into a diagnostic, or technological, mode, where the controller loads temporary microcode into its volatile memory.
• This microcode works around damaged firmware and pauses background processes while experts create a sector-level image of the drive.

Step 2. Rebuilding the Flash Translation Layer (FTL)

• Reading the NAND is the easy bit. Working out how its pages fit together is the real challenge.
• After a format or firmware corruption, the FTL can lose track of which logical address belongs to which physical NAND location.
• Specialists go to the spare (Out-of-Band) area stored next to each NAND page, which holds metadata such as logical block references and page sequence numbers.
• Proprietary software reads that metadata and builds a virtual translation table, recreating the original logical layout.
• Once the table is in place, the NAND pages can be assembled into a usable file system.

Step 3. Reading NAND Directly Through Chip-Off Recovery

When the controller cannot be repaired, specialists turn to chip-off recovery. Using professional equipment, they carefully remove the NAND packages from the circuit board and read the memory cells directly with specialised flash readers. 

The extracted data is not immediately usable. It passes through several controller-specific layers that engineers need to reverse before the file system can be rebuilt.

• Data scrambling
• Error correction codes (ECC)
• Interleaving patterns
• Wear-levelling information

Encryption can be a major obstacle. Most modern NVMe SSDs, and many SATA models, use hardware-based AES encryption with the keys stored in the original controller. If that controller is dead, the NAND chips only contain encrypted data. In such cases, engineers focus on repairing the original controller at the board level so it can decrypt the recovered information.

Why Choose Stellar for SSD Data Recovery: A Wrap Up

The recovery window on an SSD is very short. Once files are deleted or the drive is formatted, the data can be erased from the NAND memory within minutes. Conventional hard drive recovery methods rarely work in these cases, and they require a specialised approach.

At Stellar Data Recovery, our data recovery experts use advanced diagnostic workflows, forensic-grade equipment, and proprietary software to recover data from SSDs, including cases where TRIM has reduced recovery chances.

• Drive-specific assessment. Our experts examine each SSD’s controller, firmware, interface, encryption support, and failure condition before selecting a recovery method.
• Firmware-level recovery. In complex cases, our engineers access the drive firmware to rebuild lost FTL tables.
• NAND memory analysis. When complete recovery isn’t possible, our team analyses the NAND memory to retrieve the most critical data.

If you need data recovery from a formatted SSD or to recover deleted files after an accidental deletion, stop using the drive immediately and contact a Stellar expert.

Call 1800 102 3232 to request a free SSD assessment. 

Frequently Asked Questions

1. Can You Recover Deleted Files from an SSD After TRIM Has Run?

It depends on how far along the deletion process is. If garbage collection has not yet physically erased the NAND blocks, a Stellar expert may be able to recover part of the data. Once those blocks are erased, however, recovery is no longer possible.

2. Does a Quick Format Erase Data on an SSD?

On a TRIM-enabled SSD, a quick format invalidates the entire volume through TRIM. The data is not wiped instantly, but garbage collection usually removes it within a few minutes of idle time.

3. How Quickly Does TRIM Erase Data on an SSD?

TRIM marks data for erasure as soon as it’s deleted, but physical erasure happens later during garbage collection. Depending on the controller, this can take anywhere from a few seconds to several hours.

4. Does Formatting Always Make SSD Data Recovery Impossible?

No, not by default. Data recovery from formatted SSD depends on the physical state of the data in the NAND memory and on how the drive handles TRIM.

5. Why Does Data Recovery Software Return Zeroes After Scanning a Formatted SSD?

Most data recovery software operates at the file system level. Once TRIM runs, the controller returns zeroes for invalidated addresses via DRAT or RZAT. This happens even when the original charge remains in the NAND cells.

6. Can Data Be Recovered From an Encrypted NVMe SSD if the Controller Fails?

Recovery is sometimes possible. In most such cases, an expert must revive the failed controller to access its embedded encryption keys, which are needed to decrypt the recovered data.