Usually the security sanitization requirement ONLY applies to user data which means every piece of data that was stored by the user it does NOT apply to factory data !
What this means in real life is that all memory that is accessible by the user to store memory has to be either cleared or sanitized , this therefore applies to battery backed RAM , flash as well as HDD.
The calibration data for each module however is stored in EEPROM on each module making it possible to change a assembly without having to completely recalibrate the unit , since this is not considered user data no clearing or sanitizing
is required