NVMe Controller & Encryption Lab

Fast drives fail fast. The recovery is still slow, careful work.

Modern NVMe storage hides behind PCIe, a dense controller, and usually an encryption layer. When any of those break, the drive goes dark. We work the controller, preserve the key state, and get the data out.

Free evaluation. No recovery, no recovery charge. Huntsville, AL.

Drives we work on

PCIe Gen

3 / 4 / 5

Form factor

M.2 / U.2 / AIC

Controllers

Samsung, Phison, SMI, WD

Protocols

NVMe 1.3 to 2.0

Encryption-aware

BitLocker, FileVault, OPAL 2.0 SED, Windows 11 device encryption, and T2 / Apple silicon binding are handled with the key state preserved from imaging through delivery.

Does this match your case?

If any of these look familiar, the data is usually still on the NAND.

Drive not detected in BIOS or Disk Management
Drive detected at 0 MB or wrong capacity
System freezes at boot after Windows / macOS logo
Drive appears, then disappears after a few seconds
Sudden death after a power loss, BSOD, or kernel panic
Laptop ran hot and drive no longer mounts
BitLocker asks for a recovery key after a firmware update
Drive recognized but files are unreadable or corrupt

Seeing something not on the list? Call us. If the symptom is repeatable, we have probably worked a case like it.

Why NVMe is different

Not a faster SSD. A different stack entirely.

No fallback interface

A SATA SSD has a predictable command set. An NVMe controller speaks PCIe directly and exposes almost nothing when it is unhappy.

Controller is the drive

The NAND flash is useless without the controller that knows where blocks live. On NVMe, the controller is smaller, denser, and usually BGA-packaged next to the flash.

Often encrypted by default

OEM laptops ship with device encryption turned on. A controller swap that would work on a plain SSD will lock an encrypted NVMe until the key is reapplied.

Ran at the edge of thermal limits

NVMe is a performance part. Most failures show up only after months of sustained thermal stress. That changes what we look for when we image.

Failure scenarios

Six ways a modern NVMe stops working.

Sudden death

Drive stops responding with no warning. Controller hangs in reset, or the PCIe link never comes up. Recovery requires service-mode access or direct NAND reads.

Firmware lock

A failed update, bad power cycle, or corrupted service module locks the drive into recovery mode. The data is intact behind a controller that will not boot.

Thermal damage

NVMe runs hot under sustained load. Overheated controllers throttle, then fail outright. Burned PMICs or cracked solder joints are common in thin laptops.

Board-level damage

Surge, short, or a failed PMIC kills the controller while the NAND packages stay intact. Donor board work or direct chip-off is the path to the data.

Encryption lockout

SED drives, BitLocker, and Windows 11 device encryption will refuse to unlock if the key state is disturbed. We preserve keys during imaging so they can be applied after.

Secure Enclave binding

Apple silicon and T2 Macs bind the drive to the processor. Without the original machine, the NAND is unreadable. We plan the recovery around that constraint.

Encryption handling

Keys first. Everything else after.

Most modern NVMe drives ship encrypted, whether the owner knew it or not. Before a single byte is imaged we document the encryption state so it can be reapplied to the clone.

If a tool touches an encrypted drive the wrong way, the keys are gone and so is the data. That is why encryption gets its own checklist on every NVMe case.

What we handle and what we need from you

BitLocker
Recovery key or signed-in Microsoft account
FileVault
Password, recovery key, or iCloud account
OPAL 2.0 SED
ATA password or management tool PSID
Windows 11 device encryption
Microsoft account or recovery key
T2 / Apple silicon
Original Mac with a working T2 or Secure Enclave

Our lab, our bench

Every NVMe case starts and ends in Huntsville.

We do not ship drives to a partner lab. Imaging rigs, chip-off tools, donor inventory, and encryption workflows all live on our bench. The drive you drop off is the drive we work on.

  • PC-3000 NVMe for service-mode controller access
  • PCIe imaging with write-protect hardware in-line
  • BGA chip-off rig for controller and NAND extraction
  • Key preservation workflow for encrypted recovery

Form factors supported

  • M.2 2230 (Framework, Steam Deck, Surface Pro)
  • M.2 2242 / 2260 / 2280 / 22110
  • U.2 (enterprise and workstation)
  • PCIe add-in cards (x4, x8)
  • BGA on-board NVMe (integrated designs)
  • Apple silicon / T2 bound drives (original Mac required)

Laptops with the NVMe soldered to the mainboard are worked at the board level. Bring the whole machine or the motherboard.

Case flow

From intake to files in your hands.

01

Step 01

Evaluate

We fingerprint the controller family, read the PCIe link state, and test service-mode access. Encryption state is recorded before anything else.

02

Step 02

Image

The drive is cloned at the block level, or the NAND is pulled and read directly. Write protection stays on from the first minute.

03

Step 03

Reassemble

Translation layer is rebuilt per controller. If encryption is in play, the key is reapplied after a clean image is verified.

04

Step 04

Return

Files are checksummed and spot-verified. You get the data on an encrypted drive or secure upload, and your original back with the case report.

Transparent pricing

Three tiers. Firm quote before any work.

No recovery. No recovery charge.

Evaluation

Free

No deposit to begin

  • Controller status over PCIe service mode
  • Firmware and translation layer readability
  • Encryption state and key requirements
  • Firm written quote before any work

Logical & firmware

From $295

Drive is detected, firmware is accessible

  • Firmware reflash and service-area repair
  • Translation layer reconstruction
  • Deleted, formatted, or corrupted volumes
  • Typical turnaround 3 to 7 business days

Controller & chip-off

From $495

Drive not detected, board or NAND work

  • PCIe service-mode access and donor boards
  • BGA chip-off for severe board damage
  • Raw NAND image with ECC and XOR reassembly
  • No recovery, no recovery charge

Cases requiring chip-off, board repair, or multi-die NAND reassembly are quoted after evaluation.

Frequently Asked Questions

Drive gone dark?

Send it in or bring it by. We’ll tell you what is recoverable.

Free evaluation. No recovery work happens until you approve the quote. If you have encryption keys, bring them with you.

Huntsville, AL. Walk-in drop off Mon through Fri. Mail-in nationwide.