--- title: "Butterfly Deployment Buyers Guide: Firevault | Firevault" description: "Complete guide to the Butterfly Deployment Model and VPPP framework for enterprise-grade offline data protection architecture." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/learn/guides/butterfly-buyers-guide#webpage", "url": "https://fire-vault.com/learn/guides/butterfly-buyers-guide", "name": "Butterfly Deployment Buyers Guide: Firevault", "description": "Complete guide to the Butterfly Deployment Model and VPPP framework for enterprise-grade offline data protection architecture.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/guides%2Fbutterfly-buyers-guide.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/learn/guides/butterfly-buyers-guide#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/learn/guides/butterfly-buyers-guide#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Learn", "item": "https://fire-vault.com/learn" }, { "@type": "ListItem", "position": 3, "name": "Guides", "item": "https://fire-vault.com/learn/knowledge?filter=guides" }, { "@type": "ListItem", "position": 4, "name": "Butterfly Deployment Model: Buyer's Guide", "item": "https://fire-vault.com/learn/guides/butterfly-buyers-guide" } ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Butterfly Deployment Model: Buyer's Guide", "description": "Complete guide to the Butterfly Deployment Model and VPPP framework for enterprise-grade offline data protection architecture.", "url": "https://fire-vault.com/learn/guides/butterfly-buyers-guide", "image": "https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/guides%2Fbutterfly-buyers-guide.jpg", "author": { "@type": "Person", "name": "Mark Fermor", "worksFor": { "@id": "https://fire-vault.com/#organization" }, "url": "https://fire-vault.com/why-oss/about" }, "publisher": { "@id": "https://fire-vault.com/#organization" }, "datePublished": "2026-01-20T00:00:00+00:00", "dateModified": "2026-08-28T07:05:10.849702+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://fire-vault.com/learn/guides/butterfly-buyers-guide" }, "inLanguage": "en-GB", "articleSection": "Guides", "wordCount": 694, "isAccessibleForFree": true, "copyrightHolder": { "@id": "https://fire-vault.com/#organization" }, "copyrightYear": 2026 } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Lidl GB Customer contact data ](/learn/breaches)[2026 Asahi Group Production systems disrupted ](/learn/breaches)[2026 Kido International 8K records ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview Executive SummaryWhat Is the Butterfly Deployment…What Butterfly Is NOTThe Problem Butterfly SolvesThe VPPP Framework ExplainedHow Butterfly Deployment WorksButterfly for Different Stakehol…Key DifferentiatorsGetting Started with ButterflySummaryMore [Guides](/learn/knowledge?filter=guides) Guides · 20 January 2026 # Butterfly Deployment Model: Buyer's Guide Complete guide to the Butterfly Deployment Model and VPPP framework for enterprise-grade offline data protection architecture. ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) Mark Fermor Director & Co-Founder, Firevault 4 min read Share [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Ffire-vault.com%2Flearn%2Fguides%2Fbutterfly-buyers-guide)[](https://twitter.com/intent/tweet?url=https%3A%2F%2Ffire-vault.com%2Flearn%2Fguides%2Fbutterfly-buyers-guide&text=Butterfly%20Deployment%20Model%3A%20Buyer's%20Guide%0A%0AComplete%20guide%20to%20the%20Butterfly%20Deployment%20Model%20and%20VPPP%20framework%20for%20enterprise-grade%20offline%20data%20protection%20architecture.)[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Ffire-vault.com%2Flearn%2Fguides%2Fbutterfly-buyers-guide)[](mailto:?subject=Butterfly%20Deployment%20Model%3A%20Buyer's%20Guide&body=Complete%20guide%20to%20the%20Butterfly%20Deployment%20Model%20and%20VPPP%20framework%20for%20enterprise-grade%20offline%20data%20protection%20architecture.%0A%0Ahttps%3A%2F%2Ffire-vault.com%2Flearn%2Fguides%2Fbutterfly-buyers-guide) ![Butterfly Deployment Model: Buyer's Guide](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/guides%2Fbutterfly-buyers-guide.jpg) Guides Why it matters ## What this means for organisations holding critical data Complete guide to the Butterfly Deployment Model and VPPP framework for enterprise-grade offline data protection architecture. **On this page**[Executive Summary](#section-0)[What Is the Butterfly Deployment…](#section-1)[What Butterfly Is NOT](#section-2)[The Problem Butterfly Solves](#section-3)[The VPPP Framework Explained](#section-4)[How Butterfly Deployment Works](#section-5)[Butterfly for Different Stakehol…](#section-6)[Key Differentiators](#section-7)[Getting Started with Butterfly](#section-8)[Summary](#section-9) On this page 1. [Executive Summary](#section-0) 2. [What Is the Butterfly Deployment Model?](#section-1) 3. [What Butterfly Is NOT](#section-2) 4. [The Problem Butterfly Solves](#section-3) 5. [The VPPP Framework Explained](#section-4) 6. [How Butterfly Deployment Works](#section-5) 7. [Butterfly for Different Stakeholders](#section-6) 8. [Key Differentiators](#section-7) 9. [Getting Started with Butterfly](#section-8) 10. [Summary](#section-9) ## Executive Summary The Butterfly Deployment Model is Firevault's enterprise methodology for architecting [Offline Secure Storage](/offline-secure-storage)® across organisations. Built on the VPPP framework (Vault, Policy, Permissions, Purpose), Butterfly enables systematic deployment of data protection infrastructure that scales from individual executives to global operations. * * * ## What Is the Butterfly Deployment Model? Butterfly is a structured deployment framework that maps your organisation's data protection requirements across four interconnected dimensions: **The Four Wings:** - **Assets (Cyan)**: What data requires protection - **Roles (Coral)**: Who needs access and when - **Policy (Slate)**: Governance rules and compliance requirements - **Scale (Magenta)**: Deployment scope from personal to enterprise This framework ensures every deployment decision considers the full context of data sensitivity, access requirements, regulatory obligations, and organisational structure. * * * ## What Butterfly Is NOT **Not a software product**: Butterfly is a methodology, not a standalone application. **Not a one-size-fits-all template**: Each deployment is architected to your specific requirements. **Not automated configuration**: Butterfly guides human decisions; it does not replace expert judgement. **Not limited to Firevault products**: The framework principles apply to broader data governance strategy. * * * ## The Problem Butterfly Solves Enterprise data protection typically fails through: 1. **Fragmented deployment**: Security tools deployed reactively without coherent architecture 2. **Access confusion**: Unclear policies on who can access what, when, and why 3. **Compliance gaps**: Governance requirements addressed in isolation 4. **Scaling failures**: Solutions that work for 10 users but collapse at 1,000 Butterfly provides the architectural discipline to deploy protection systematically. * * * ## The VPPP Framework Explained ### Vault (Assets Wing) Identify and classify data requiring protection: - Critical business records - Regulatory-sensitive information - [Intellectual property](/oss-for-intellectual-property) - Personal liability documents - Succession and estate materials ### Policy (Governance Wing) Define the rules governing data handling: - Retention requirements - Compliance frameworks (GDPR, SOX, HIPAA) - Industry regulations - Internal governance standards - Audit trail requirements ### Permissions (Roles Wing) Map access requirements to organisational roles: - Executive access patterns - Departmental boundaries - External advisor requirements - Emergency access protocols - [Succession planning](/oss-for-estate-and-succession) ### Purpose (Scale Wing) Determine deployment scope and architecture: - Individual executive protection - Departmental data rooms - Enterprise-wide infrastructure - Multi-site coordination - Cross-border considerations * * * ## How Butterfly Deployment Works ### Phase 1: Discovery - Asset inventory and classification - Stakeholder mapping - Compliance requirement analysis - Current state assessment ### Phase 2: Architecture - VPPP framework application - Access pattern design - Policy rule definition - Scale planning ### Phase 3: Implementation - Phased rollout strategy - User onboarding - Policy enforcement activation - Monitoring configuration ### Phase 4: Optimisation - Usage pattern analysis - Policy refinement - Scale adjustment - Continuous improvement * * * ## Butterfly for Different Stakeholders ### For CISOs and Security Leaders - Systematic approach to offline storage architecture - Clear governance framework for board reporting - Audit-ready deployment documentation ### For Risk and Compliance Officers - Policy-first deployment methodology - Regulatory alignment verification - Evidence of structured governance ### For IT and Network Architects - Technical deployment blueprints - Integration architecture patterns - Scalability planning framework ### For Board Directors and Executives - Personal liability protection architecture - Succession planning integration - Advisor access management * * * ## Key Differentiators **Methodology, not just technology**: Butterfly ensures you deploy the right solution, not just any solution. **Four-dimensional analysis**: Every decision considers assets, roles, policy, and scale together. **Scalable by design**: Architecture that grows with organisational requirements. **Compliance-integrated**: Governance requirements built into the deployment model, not bolted on afterwards. * * * ## Getting Started with Butterfly The Butterfly Deployment Model is available through Firevault's enterprise engagement process: 1. **Initial consultation**: Discuss your organisation's data protection requirements 2. **VPPP assessment**: Map your specific needs across all four wings 3. **Architecture proposal**: Receive a tailored deployment blueprint 4. **Phased implementation**: Structured rollout with ongoing optimisation * * * ## Summary The Butterfly Deployment Model transforms ad-hoc data protection into systematic enterprise architecture. By applying the VPPP framework, organisations ensure every deployment decision is informed by asset sensitivity, role requirements, policy obligations, and scaling needs. For organisations serious about offline secure storage at scale, Butterfly provides the architectural discipline that separates strategic data protection from reactive security spending. About the author ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ### Mark Fermor [](https://www.linkedin.com/in/mfermor) Director & Co-Founder Co-founder of Firevault, focused on offline secure storage and protecting individuals and businesses from fraud, fines, loss and damage. Speaker, owner and advisor. The Firevault view**Offline Secure Storage® keeps a clean copy beyond the reach of an attacker.**[Why #OSS →](/why-oss) Control systems and access**Cut the physical paths attackers and third parties depend on.**[Explore Control →](/solutions/control) Get started**Get started, or talk to a member of the team.**[Get started →](/get-started) How Firevault would handle this ## Controls an auditor can physically verify Firevault gives you physical separation, named custody and evidenced access, so compliance claims about isolation and control are things you can show, not just assert. [Get started](/get-started)[Talk to the team](/demo) **Custody**Named, access-controlled hardware in a Firevault Bunker **Evidence**Access windows and retrieval events are recorded **Separation**Physical isolation that satisfies offline copy requirements **Jurisdiction**Stored where your regulatory position requires ## Continue learning - [ ### Cyber Risk & Compliance Guide: Controls, Evidence and Resilience for GRC Leaders How risk and compliance leaders can move from control existence to control effectiveness: risk treatment, evidence, third-party assurance, exceptions and remediation that survive audit. Read guide ](/learn/guides/cyber-risk-and-compliance-guide) - [ ### The CIO & CTO Guide to Cyber Resilience, Architecture and Recovery A technology leader's view of resilience: dependency mapping, recovery architecture, identity and cloud concentration, IT and OT convergence, and where physical controls earn their place. Read guide ](/learn/guides/cio-cto-guide-cyber-resilience) - [ ### Cyber Security for Boards: The Director's Guide to Cyber Resilience, Risk and Control What a board actually owns on cyber risk, the decisions directors cannot delegate, the questions to ask management, and the evidence to expect before a serious incident tests the answers. Read guide ](/learn/guides/cyber-security-for-boards) - [ ### Storage Buyer's Guide A decision-maker's guide to enterprise-scale offline storage infrastructure. Learn how Storage by Firevault delivers the '0' in your 3-2-1-0 backup strategy. Read guide ](/learn/guides/storage-buyers-guide) Related Reading ## You may also find these useful [ ![Protecting Students, Peers and Partners: A Practical Education Data Briefing](/__l5e/assets-v1/6ecf6bfc-3d28-40a7-8a6a-2d42fe36a21a/safeguarding-education-data-2026-v2-2x.jpg) Guides ### Protecting Students, Peers and Partners: A Practical Education Data Briefing A practical, forward-looking briefing to help schools, colleges and universities protect students, staff and partner data after the Department for Education breach. 29 Jul 2026 13 min ](/news/guide-safeguarding-education-data)[ ![Urgent Briefing and Advice: Protecting Personal Data for High-Profile Figures in the Public Eye](/__l5e/assets-v1/084c38b8-253b-4cc2-9056-c78a2fbd36c3/urgent-warning-triangle-20260714-2x.jpg) Guides ### Urgent Briefing and Advice: Protecting Personal Data for High-Profile Figures in the Public Eye Practical steps for serving and former politicians, councillors, campaigners, journalists, executives, broadcasters and anyone in the public eye, covering email security, device hygiene, threat handling and offline secure storage. 14 Jul 2026 22 min ](/news/urgent-guide-protecting-personal-data-high-profile-public-eye)[ ![500,000 Volunteers Breached Through Authorised Access: A Controlled Access Buyer's Guide](https://zomvctmqpgirvjnvawlz.supabase.co/storage/v1/object/public/article-images/news%2Fcontrolled-access-buyers-guide.jpg) Guides ### 500,000 Volunteers Breached Through Authorised Access: A Controlled Access Buyer's Guide In April 2026, approved researchers exfiltrated the health records, genetic data, and medical histories of 500,000 UK Biobank volunteers through authorised access channels, then listed the data for sale on Alibaba. The breach was not caused by a hack. It was caused by a model that assumes licence agreements can prevent data theft. This guide covers why that model fails and what physical controls replace it. 23 Apr 2026 18 min ](/news/controlled-access-buyers-guide-offline-secure-storage) ![Mark Fermor](/assets/mark-fermor-aWtKNSv7.jpg) ![David Bailey](/assets/david-bailey-Dgqj8eaE.jpg) ![Kenny Phipps](/assets/kenny-phipps-CVyooRsR.jpg) Online Now Concierge ## Put this guide into practice Ready to apply what you have learned? Explore how Firevault delivers the offline protection covered in this guide. Takes about 2 minutes. No account needed. Find Out Free 2 mins No sign-up