--- title: "Dedicated Hardware: Single Tenant Offline Storage Drives" url: https://fire-vault.com/offline-secure-storage/dedicated-hardware description: "Every Firevault instance runs on dedicated hardware. Named drives are allocated to one verified owner, never shared, never virtualised and never pooled with…" lang: en-GB --- Image: Offline Secure Storage logo (https://fire-vault.com/__l5e/assets-v1/a78723d3-5b1a-48bf-9040-c767b759823d/oss-icon-correct.png) Offline Secure Storage® (#OSS) # Dedicated hardware Cloud storage is a share of a pool. Offline Secure Storage® is not. Named, serial-numbered drives are allocated to one verified owner, mirrored for resilience, and no other customer's data is written to them. - Single tenant - Named drives - RAID 1 mirrored - No virtualised partitions Buy your Vault: https://fire-vault.com/get-started See pricing: https://fire-vault.com/pricing Image: A Firevault Offline Secure Storage drive allocated to a single verified owner (https://fire-vault.com/__l5e/assets-v1/a4d3902c-28a5-42f4-bbfb-c12ddaacce1b/hero-square-drive.png) What dedicated means in practice 01 Customer per set of drives 1 Customer per set of drives 02 Shared or pooled capacity 0 Shared or pooled capacity 03 Mirrored drives in every instance RAID 1 Mirrored drives in every instance 04 Encryption applied at the hardware layer AES-256 Encryption applied at the hardware layer 01 Why it matters ## Shared infrastructure spreads other people's risk onto your data In a multi-tenant platform your files sit on the same media as strangers, reached by the same control plane and exposed to the same misconfiguration. Dedicated hardware removes the neighbours from the problem. ### No noisy neighbours Nothing else is written to your drives, so another tenant's breach, deletion or legal seizure cannot touch your data. ### One verified owner Drives are allocated against a verified identity or company, so there is a single accountable holder rather than an account inside a pool. ### Something auditors can point at You can name the equipment, the capacity and the location, which is the level of specificity regulators and insurers keep asking for. 02 How it works ## How your hardware is allocated Allocation happens once, at the start, and the record stays with your instance for the life of the contract. 01 ### Identity is verified first Business or personal verification is completed before any equipment is assigned, so the drives have a named holder from the outset. 02 ### Drives are selected and recorded Specific drives are chosen for your capacity and their serial numbers are recorded against your instance. 03 ### Mirrored and commissioned The pair is configured as RAID 1 and commissioned in a Firevault bunker, with hardware level AES-256 applied across the set. 04 ### Locked to your instance Your capacity is only ever your drives. Capacity changes mean new equipment and a migration, not a larger slice of a shared array. 03 The specification ## What sits behind an Offline Secure Storage® instance The same hardware principles apply from a 2TB Vault up to an Enterprise programme. Only the scale changes. ### Enterprise-class drives Storage rated for continuous duty rather than consumer drives repurposed into a rack. ### RAID 1 mirroring Every instance is a mirrored pair, so a single drive failure does not become a data loss event. ### Vault Spare A spare drive inside the same Vault takes over automatically if the primary hardware fails, and the failed drive is replaced. ### Hardware level encryption AES-256 is applied by the hardware, so protection does not depend on an application staying uncompromised. ### Serial-level record The equipment holding your data is identifiable, which makes retirement and return verifiable rather than assumed. ### Scales without sharing Storage and Enterprise instances add arrays, not tenants. Above 8TB the design is scoped with the team. 04 How it differs ## Related, but not the same thing Dedicated hardware is about tenancy: whose drives these are. The four physical principles answer different questions, and it is worth keeping them apart. ### Physical storage That your data lives on real media in a known place, rather than as an abstraction in a platform. How storage works https://fire-vault.com/offline-secure-storage/physical-storage ### Physical ownership Who the instance is assigned to, how capacity remains exclusive and how its lifecycle is defined. Ownership model https://fire-vault.com/offline-secure-storage/physical-ownership ### Physical control Who can enable the route to the drives, and for how long. That is the session model, not the hardware. How access works https://fire-vault.com/offline-secure-storage/physical-control ### Physical security The bunker itself: perimeter, power, environment and on-site staffing around the racks. Physical security https://fire-vault.com/offline-secure-storage/physical-security 05 FAQ ## Questions ### Is my Vault a folder inside a shared platform? No. A Vault is an allocation of physical drives. It is not a quota, a bucket or a partition inside capacity shared with other customers. ### Do I own the drives? With Vault and Storage in a Firevault bunker the hardware is allocated exclusively to you and Firevault holds and maintains it. Enterprise programmes can purchase equipment in your organisation's name. ### What happens if a drive fails? Every instance is RAID 1 mirrored, and Vault Spare keeps a spare drive in the same Vault that takes over automatically, so a failure is a hardware replacement rather than a recovery event. ### Can Firevault staff read my data? No. Access requires your credentials and multi-factor authentication, the drives are physically disconnected by default, and there is no administrative backdoor into the data. ### Does dedicated hardware mean the drives are always online? No, and this is the point. Dedicated hardware describes tenancy. The drives are physically disconnected when a session is closed. ### What happens to the hardware at the end of the contract? You renew, or the physical hardware is returned or securely destroyed to certificate. Nothing is left stranded inside a platform. ### Can I upgrade capacity later? Yes. A larger Vault means new allocated drives and a managed migration of your data onto them. ### Is this the same for Storage and Enterprise? The principle is the same, at larger scale. Storage covers 20TB to 300TB and Enterprise starts at 300TB, both scoped with the team. Next step ## Choose the capacity you need on hardware that is only yours Vault is available at 2TB, 4TB and 8TB. Above 8TB the design is scoped with the team. 24/7 on-demand access: https://fire-vault.com/offline-secure-storage/on-demand-access ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/offline-secure-storage/dedicated-hardware#webpage", "url": "https://fire-vault.com/offline-secure-storage/dedicated-hardware", "name": "Dedicated Hardware: Single Tenant Offline Storage Drives", "description": "Every Firevault instance runs on dedicated hardware. Named drives are allocated to one verified owner, never shared, never virtualised and never pooled with…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-platform.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/offline-secure-storage/dedicated-hardware#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/offline-secure-storage/dedicated-hardware#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Offline Secure Storage", "item": "https://fire-vault.com/offline-secure-storage" }, { "@type": "ListItem", "position": 3, "name": "Dedicated Hardware: Single Tenant Offline Storage Drives", "item": "https://fire-vault.com/offline-secure-storage/dedicated-hardware" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Is my Vault a folder inside a shared platform?", "acceptedAnswer": { "@type": "Answer", "text": "No. A Vault is an allocation of physical drives. It is not a quota, a bucket or a partition inside capacity shared with other customers." } }, { "@type": "Question", "name": "Do I own the drives?", "acceptedAnswer": { "@type": "Answer", "text": "With Vault and Storage in a Firevault bunker the hardware is allocated exclusively to you and Firevault holds and maintains it. Enterprise programmes can purchase equipment in your organisation's name." } }, { "@type": "Question", "name": "What happens if a drive fails?", "acceptedAnswer": { "@type": "Answer", "text": "Every instance is RAID 1 mirrored, and Vault Spare keeps a spare drive in the same Vault that takes over automatically, so a failure is a hardware replacement rather than a recovery event." } }, { "@type": "Question", "name": "Can Firevault staff read my data?", "acceptedAnswer": { "@type": "Answer", "text": "No. Access requires your credentials and multi-factor authentication, the drives are physically disconnected by default, and there is no administrative backdoor into the data." } }, { "@type": "Question", "name": "Does dedicated hardware mean the drives are always online?", "acceptedAnswer": { "@type": "Answer", "text": "No, and this is the point. Dedicated hardware describes tenancy. The drives are physically disconnected when a session is closed." } }, { "@type": "Question", "name": "What happens to the hardware at the end of the contract?", "acceptedAnswer": { "@type": "Answer", "text": "You renew, or the physical hardware is returned or securely destroyed to certificate. Nothing is left stranded inside a platform." } }, { "@type": "Question", "name": "Can I upgrade capacity later?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. A larger Vault means new allocated drives and a managed migration of your data onto them." } }, { "@type": "Question", "name": "Is this the same for Storage and Enterprise?", "acceptedAnswer": { "@type": "Answer", "text": "The principle is the same, at larger scale. Storage covers 20TB to 300TB and Enterprise starts at 300TB, both scoped with the team." } } ] } ] ```