Firevault, offline secure storage, physically disconnected from the internet
Why OSS

Vault product iconOSS® for financial services

Financial records, physically disconnected.

Financial services face extraordinary regulatory scrutiny and cyber risk. Offline Secure Storage (OSS) provides physical disconnection for your most sensitive financial data.

  • Payment-card data theft
  • SWIFT and payment fraud
  • DORA operational-resilience risk
  • Insider trading data leaks

As featured in

  • TechRadar Pro logo
  • Yahoo Finance logo
  • Channel Insider logo
  • Security Buyer logo
  • SecurityBrief logo

The reality

This is already happening in financial services.

Every incident here is a matter of public record. Each one involved data that was reachable from a live network at the moment of compromise.

  1. Financial records are removed from always-connected infrastructure and placed on hardware with no network connection while it is closed.

  2. Stolen credentials alone do not open hardware that is physically disconnected.

  3. Every session is identity-verified and logged, which can help support FCA, PRA and DORA reporting.

Incident 1

Capita: £14m ICO fine.

The ICO fined outsourcer Capita £14 million over a 2023 cyber attack that affected the personal data of more than 6 million people. ICO, October 2025.

Answered byRecords off connected infrastructure

Incident 2

LastPass: £1.2m ICO fine.

The ICO fined LastPass £1.2 million after a 2022 breach in which attackers took encrypted password vaults belonging to up to 1.6 million UK users. ICO, December 2025.

Answered byCredentials alone do not open it

Incident 3

Co-op: 6.5 million members’ data stolen.

Attackers took personal data belonging to all 6.5 million Co-op members, including names and contact details. Co-op, July 2025.

Answered byA full audit trail

How OSS helps

Remove financial data
from every system attackers can reach.

Customer records, transaction archives and regulatory files are taken off always-connected infrastructure and written to dedicated RAID 1 drives inside a Firevault Bunker. When authorised staff need access, a physical connection is created after identity verification. When the session ends, the drives disconnect.

Step 1 of 3

Remove

Customer records, transaction archives and regulatory files are taken off always-connected infrastructure and written to dedicated RAID 1 drives inside a Firevault Bunker.

No cloud. No shared portal.

Where the records are
Dedicated RAID 1 drives
Live network
No longer holds the archive
Access
Identity-checked

Illustration.

What the guidance says

Resilience is something firms must be able to show.

UK and EU regimes both ask financial firms to evidence how critical services and their data survive disruption.

FCA operational resilience

Stay within impact tolerances

Firms are expected to identify their important business services and show they can stay within impact tolerances through severe but plausible disruption.

FCA operational resilience

DORA Article 12

Segregated backups

The Digital Operational Resilience Act sets backup and recovery requirements for financial entities, including backups that are physically and logically segregated from the source systems.

DORA on EUR-Lex

The products

Which Offline Secure Storage® fits financial services?

Every tier is the same physical principle at a different scale. Pick the access pattern that matches how your team works.

Vault

On-demand access, 24/7, to a digital safe deposit box. 2TB, 4TB or 8TB, from £360 a month inc VAT.

LUV

Deep cold storage for archived transaction records and compliance files accessed periodically. 300GB, with one nominated access day each week within a 12-hour window. £74.99 a month inc VAT, 36-month commitment.

Storage

Scalable offline capacity from 20TB upwards, designed with the solutions team around your requirement.

Vault

Physically offline between sessions.

Opening a Vault: files on a desktop, approval on a phone, and the Vault held in a separate, secure Firevault Bunker

Open a session

Ask from your registered phone and confirm it is you.

A session requested from a phone while files open on a desktop

File Share

Work with your files for up to 120 minutes.

File Share in the browser during an authorised OSS session

LUV

Opens on a day you choose each week, for 12 hours.

Storage

From 20TB, growing in 20TB steps.

Use cases for financial services

What financial services firms take offline first.

The records that matter most, and the ones an attacker would most like to reach.

Transactions

Archived transaction and settlement records

Compliance

Historical compliance and audit files

Onboarding

Legacy KYC and AML documentation

Accounts

Closed account records

Regulators

Regulatory correspondence archives

How to get started

From discovery call to go-live.

  1. 1

    Discovery call

    Understand what you need to protect and how you operate.

  2. 2

    Vault configuration

    Select your tier, capacity and access model.

  3. 3

    Identity verification

    Complete KYC/AML and set up multi-factor authentication.

  4. 4

    Go live

    Data ingestion, access policy activation and ongoing support.

Secured Firevault Bunker entrance with biometric entry and monitored access

Why Firevault

Physics, not promises.

Every Offline Secure Storage® instance is built on the same four physical principles.

  • Physical storage

    Offline Secure Storage instances are held on dedicated physical hard drives, not in S3 cloud buckets, shared storage pools or multi-tenant infrastructure. Your selected data is assigned to real hardware, with dedicated RAID 1 drives providing resilience.

    Explore physical storage

  • Physical ownership

    Each Offline Secure Storage instance is allocated to a specific customer, with dedicated physical capacity and clearly defined ownership. Your data is not pooled, commingled or held within a shared storage estate.

    Explore physical ownership
  • Physically disconnected Offline Secure Storage: server, three drives and a padlock

    Physical control

    Access begins outside the normal network path. An authorised out-of-band command, such as SMS, controls the physical Layer 1 connection to your #OSS instance. When access is not required, that network path is physically disconnected.

    Explore physical control

  • Physical security

    Your #OSS hardware is housed in carefully selected, professionally managed data centres with layered physical security, resilient power and environmental controls. Access is tightly controlled using three-factor authentication, including biometric identification, supported by 24/7 monitoring, restricted access zones and a complete audit trail.

    Explore physical security

Questions

What financial services firms ask first

Cloud storage keeps data permanently reachable over a network. Offline Secure Storage® holds selected data on dedicated hardware that is physically disconnected at the hardware level until you open a session.

With a Vault, request a session at any time, 24/7, from your registered phone, sign in with your credentials and MFA, and work in File Share during a session of up to 120 minutes. LUV opens on your nominated access day each week, for 12 hours.

On dedicated hardware in a secure Firevault Bunker. For security, we do not publish Bunker locations.

Yes. Data is encrypted, and Firevault does not browse customer records. Your Vault is your own hardware, not a shared platform.

All questions about OSS

Take financial archives off connected systems.

LUV from £74.99 and Vault from £360 a month, including VAT. 36-month commitment, first payment at checkout.

    Get started