--- title: "Firevault Bunkers: physical security for offlin… | Firevault" url: https://fire-vault.com/offline-secure-storage/physical-security description: "Firevault Bunkers protect dedicated offline storage with layered access controls, monitored zones, resilient power, cooling and audited handling." lang: en-GB --- Physical SecurityOne of four physical principles # Your hardware, behind layered security. Your dedicated hardware is housed inside carefully selected, professionally managed Firevault Bunkers with layered perimeter, access, power and environmental controls around the equipment. Buy your Vault: https://fire-vault.com/get-started See physical control: https://fire-vault.com/offline-secure-storage/physical-control Vaults from £360 a month inc VAT. 36-month commitment, first payment at checkout. - Layered site access - Biometric identification - 24/7 monitoring - Resilient infrastructure As featured in - Image: TechRadar Pro logo - Image: Yahoo Finance logo (https://fire-vault.com/assets/yahoo-finance-logo-navy-D1I5Rlpp.png) - Image: Channel Insider logo (https://fire-vault.com/assets/channel-insider-logo-JiDdxa5-.webp) - Image: Security Buyer logo (https://fire-vault.com/assets/security-buyer-logo-navy-B-xcJluL.png) - Image: SecurityBrief logo (https://fire-vault.com/assets/security-brief-logo-BWLsFFdx.png) Image: Exterior of a Firevault Bunker facility with perimeter fencing, monitored approaches and a controlled entrance (https://fire-vault.com/__l5e/assets-v1/dcd79ec0-f9bf-4e1c-bbc4-ae66056467dc/firevault-bunker-exterior.jpeg) Why it matters ## Offline data still needs a secure physical home Disconnecting a network route removes remote exposure. The Bunker protects the hardware itself against unauthorised entry, power interruption, environmental events, fire and unrecorded handling. ### Layered perimeter Controlled approaches, monitored entrances and restricted internal zones place several barriers between the public and the racks. ### Verified human access Three-factor authentication, including biometric identification, ties physical entry to a verified person. ### Continuous oversight 24/7 monitoring and a complete audit trail record access and protect the operating environment. Layered site protectionPhysical Security - **3FA**Authentication required for controlled site access - **24/7**Security and environmental monitoring - **100%**Controlled access events audited - **3**International regions in the Bunker roadmap How it works ## How the Bunker protects your hardware Physical security works in layers, from the site boundary to the specific rack and every authorised intervention. 1. **01**Site and jurisdiction are selected 2. **02**The perimeter controls approach 3. **03**Identity is checked in layers 4. **04**Infrastructure keeps the environment stable 5. **05**Every authorised action is recorded Step 1 of 5 ### Site and jurisdiction are selected Firevault allocates a Bunker by default, or confirms a requested jurisdiction in writing where required. Offline by default: the hardware is physically disconnected outside authorised sessions. Inside the security model ## Protection around the drives, not just on them ### Professionally managed facilities Bunkers are selected for concurrently maintainable infrastructure, controlled operations and layered security rather than ordinary office storage. ### 24/7 monitoring The site, approaches and controlled areas remain under continuous security oversight. ### Biometric identification Physical entry includes a factor tied to the authorised person, not only something they know or carry. ### Restricted access zones Passing the outer entrance does not grant unrestricted movement through the facility. ### Resilient utilities Redundant power paths, UPS and generator backup help maintain service through utility interruption. ### Controlled environment Purpose-designed cooling, temperature monitoring and fire detection protect equipment operating conditions. ### Jurisdiction by agreement What it does not replace Physical security answers where and how the hardware is protected. It does not replace dedicated media, customer assignment or control of the network route. How Offline Secure Storage® works: https://fire-vault.com/offline-secure-storage ## The other three physical principles **Physical storage**The protected objects are real drives and racks with an identifiable location.: https://fire-vault.com/offline-secure-storage/physical-storage **Physical ownership**The hardware inside the Bunker is assigned to a defined customer instance.: https://fire-vault.com/offline-secure-storage/physical-ownership **Physical control**The network route is also physically controlled, independently of the Bunker perimeter.: https://fire-vault.com/offline-secure-storage/physical-control Across every instance ## Part of every instance. Hosted hardware sits inside a Firevault Bunker. Storage and Enterprise can also be designed for your premises. - **LUV**Inside a Firevault Bunker _–_: https://fire-vault.com/luv - **Vault**Inside a Firevault Bunker _–_: https://fire-vault.com/vault - **Storage**Bunker or your premises _–_: https://fire-vault.com/storage - **Enterprise**Bunker or your premises _–_: https://fire-vault.com/enterprise Choose your Vault ## Choose your Vault. Pick the capacity. File Manager, File Share, Vault Buddy and Vault Spare come with every size. Dedicated physical capacity Image: Firevault 2TB Offline Secure Storage drive (https://fire-vault.com/__l5e/assets-v1/f7f46c4d-276a-4f19-8ec1-118a43449bda/oss-drive-2tb-cutout-v2.png) **2TB** Contracts, company records, financial evidence and the client documents a small business cannot replace. £ **360**per month inc VAT £300 a month ex VAT, 36-month commitment Configure 2TB (https://fire-vault.com/checkout?capacity=2TB&audience=business)Ask a question (https://fire-vault.com/contact) - 24/7 on-demand access - File Manager - File Share - Vault Buddy - Vault Spare - Dedicated physical drives, RAID 1 mirrored - **2TB** Offline Secure Storage® - Identity locked access with MFA - Setup and ongoing support Most chosen Dedicated physical capacity Image: Firevault 4TB Offline Secure Storage drive (https://fire-vault.com/__l5e/assets-v1/a655c560-26c4-40e1-a4b8-1e748a539afc/oss-drive-4tb-cutout-v2.png) **4TB** For growing businesses and professionals, with meaningful room to expand. £ **480**per month inc VAT £400 a month ex VAT, 36-month commitment Configure 4TB (https://fire-vault.com/checkout?capacity=4TB&audience=business)Ask a question (https://fire-vault.com/contact) - 24/7 on-demand access - File Manager - File Share - Vault Buddy - Vault Spare - Dedicated physical drives, RAID 1 mirrored - **4TB** Offline Secure Storage® - Identity locked access with MFA - Setup and ongoing support Dedicated physical capacity Image: Firevault 8TB Offline Secure Storage drive (https://fire-vault.com/__l5e/assets-v1/3147613c-52f1-41d1-a1da-59b26ac04a92/oss-drive-8tb-cutout-v2.png) **8TB** Substantial archives, creative work and records built up over many years. Adds a dedicated account manager. £ **600**per month inc VAT £500 a month ex VAT, 36-month commitment Configure 8TB (https://fire-vault.com/checkout?capacity=8TB&audience=business)Ask a question (https://fire-vault.com/contact) - 24/7 on-demand access - File Manager - File Share - Vault Buddy - Vault Spare - Dedicated physical drives, RAID 1 mirrored - **8TB** Offline Secure Storage® - Identity locked access with MFA - Setup and ongoing support - **Dedicated account manager** Every Vault belongs to one user. 36-month commitment, first payment at checkout. In every OSS instance ## Four tools, one instance. File Manager, File Share, Vault Buddy and Vault Spare come with every OSS instance. Here are the other three. **File Manager**Upload, overwrite, create folders and share from any modern browser during an authorised window. Nothing to install.Explore File Manager: https://fire-vault.com/offline-secure-storage/file-manager **File Share**A time-boxed, password-protected link to a record in your Vault, withdrawn the moment the exchange is done.Explore File Share: https://fire-vault.com/offline-secure-storage/file-share **Vault Buddy**Nominate who should be able to reach your Vault. Released only on documentary evidence and verified identity.Explore Vault Buddy: https://fire-vault.com/offline-secure-storage/vault-buddy Questions ## Questions about physical security. Europe is live, including the UK. The US and Middle East are next. Authorised entry requires three independent checks, including biometric identification, before a person can reach restricted areas. Yes. Security and critical environmental conditions are monitored 24 hours a day, every day. The selected facilities use resilient power architecture, including uninterruptible power and backup generation, alongside monitored cooling and environmental systems. No. Physical facility access does not provide customer credentials or create a network route to the data. Those controls remain separate. No. It works with dedicated physical storage, defined ownership and physical control of connectivity. The four principles are designed to operate together. All questions: https://fire-vault.com/learn/faq Disconnect to Protect® ## Protect the hardware as deliberately as the data Choose your Vault capacity and let Firevault place it inside the physical and operational controls of a Firevault Bunker. Buy your Vault: https://fire-vault.com/get-started See physical control: https://fire-vault.com/storage#size Get started: https://fire-vault.com/get-started Book a demo: https://fire-vault.com/demo Firevault home (https://fire-vault.com/) Offline Secure Storage® and Control. A UK cyber resilience company. Data protection and storage through Offline Secure Storage®. Network evolution and rapid protection through Control. Firevault on LinkedIn: https://www.linkedin.com/company/firevault-limited Firevault on Facebook: https://www.facebook.com/Firevaultltd/ Firevault on YouTube: https://www.youtube.com/@Firevault-ltd Verify Firevault Cyber Essentials and Cyber Essentials Plus certification on the NCSC register: https://registry.blockmarktech.com/certificates/ © 2026 Firevault Limited Company No. 16320803 VAT No. 490 8551 64 Registered in England and Wales ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/offline-secure-storage/physical-security#webpage", "url": "https://fire-vault.com/offline-secure-storage/physical-security", "name": "Firevault Bunkers: physical security for offlin…", "description": "Firevault Bunkers protect dedicated offline storage with layered access controls, monitored zones, resilient power, cooling and audited handling.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-platform.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/offline-secure-storage/physical-security#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/offline-secure-storage/physical-security#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Offline Secure Storage", "item": "https://fire-vault.com/offline-secure-storage" }, { "@type": "ListItem", "position": 3, "name": "Firevault Bunkers: physical security for offlin…", "item": "https://fire-vault.com/offline-secure-storage/physical-security" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Where are Firevault Bunkers?", "acceptedAnswer": { "@type": "Answer", "text": "Europe is live, including the UK. The US and Middle East are next." } }, { "@type": "Question", "name": "Can I choose the jurisdiction?", "acceptedAnswer": { "@type": "Answer", "text": "Firevault allocates a Bunker by default, or confirms a requested jurisdiction in writing where required." } }, { "@type": "Question", "name": "What does three-factor physical access mean?", "acceptedAnswer": { "@type": "Answer", "text": "Authorised entry requires three independent checks, including biometric identification, before a person can reach restricted areas." } }, { "@type": "Question", "name": "Are the facilities monitored continuously?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Security and critical environmental conditions are monitored 24 hours a day, every day." } }, { "@type": "Question", "name": "How is service maintained during a power problem?", "acceptedAnswer": { "@type": "Answer", "text": "The selected facilities use resilient power architecture, including uninterruptible power and backup generation, alongside monitored cooling and environmental systems." } }, { "@type": "Question", "name": "Does Firevault staff have routine access to my data?", "acceptedAnswer": { "@type": "Answer", "text": "No. Physical facility access does not provide customer credentials or create a network route to the data. Those controls remain separate." } }, { "@type": "Question", "name": "Is physical security enough on its own?", "acceptedAnswer": { "@type": "Answer", "text": "No. It works with dedicated physical storage, defined ownership and physical control of connectivity. The four principles are designed to operate together." } } ] } ] ```