Firevault, offline secure storage, physically disconnected from the internet
Pricing

OSS® for legalData protection and storage

Privileged files, physically disconnected.

Legal professional privilege demands the highest standard of data protection. Offline Secure Storage (OSS) provides physical disconnection for your most sensitive client files.

Offline Secure Storage®OSS® for legal
Protects
The records you could not recreate
Hardware
Dedicated, except LUV
When closed
No standing network path
Access
Authorised, out of band, time-bound
Hosted in
Firevault Bunkers: Europe live, US and Middle East next

Why law firms are targets

This is already happening in legal services.

Privileged communications and case files are high-value targets for cyber criminals, and in litigation compromised data can be exploited by opposing parties. Every incident here is a matter of public record.

  • Files off firm systems

    Client files are removed from firm networks and placed on hardware with no network connection while it is closed.

  • Dedicated, not shared

    Each Vault is dedicated hardware for one verified user, not a platform shared across many firms, and files are retrieved in any modern browser.

  • Credentials alone do not open it

    Access is checked against identity, and a session starts with an out-of-band command from the registered phone.

  • Capita: £14m ICO fine.

    Incident 1

  • CTS: law firms disrupted.

    Incident 2

  • LastPass: £1.2m ICO fine.

    Incident 3

See the difference

The same stolen login. Two places to keep your records.

Choose a state to see what an intruder can reach.

Contracts, accounts and recovery copies share one connected estate. One stolen login, one supplier or one mistake reaches all of it.

The records you could not recreate sit on dedicated hardware with no standing network path. Access begins outside the normal network, on an authorised out-of-band request, for a time-bound session.

How OSS helps

Remove privileged files from every system attackers can reach.

Client files, case documents and privileged communications are taken off firm networks and written to dedicated RAID 1 drives inside a Firevault Bunker. When authorised counsel need access, a physical connection is created after identity verification. When the session ends, the drives disconnect.

  • 01

  • 02

  • 03

What the regulator says

Confidentiality is a professional duty.

Solicitors hold client privilege that does not survive a public breach notice. Firevault keeps the most sensitive case files, completion documents and client identity records offline, so a single compromised mailbox does not expose an entire matter.

  • Keep client affairs confidential

    SRA Code of Conduct for Solicitors, paragraph 6.3

  • Security appropriate to the risk

    UK GDPR Article 32

The products

Which Offline Secure Storage® fits legal?

Every tier is the same physical principle at a different scale. Pick the access pattern that matches how your team works.

  • Physically offline between sessions.

    Vault

  • Ask from your registered phone and confirm it is you.

    Open a session

  • Work with your files for up to 120 minutes.

    File Manager

  • Opens on a day you choose each week, for 12 hours.

    LUV

  • From 20TB, growing in 20TB steps.

    Storage

How to get started

From discovery call to go-live.

Understand what you need to protect and how you operate.

  • 1

    Understand what you need to protect and how you operate.

  • 2

    Select your tier, capacity and access model.

  • 3

    Complete KYC/AML and set up multi-factor authentication.

  • 4

    Data ingestion, access policy activation and ongoing support.

Why Firevault

Physics, not promises.

Every Offline Secure Storage® instance is built on the same four physical principles.

  • Physical storage

    Offline Secure Storage instances are held on dedicated physical hard drives, not in S3 cloud buckets, shared storage pools or multi-tenant infrastructure. Your selected data is assigned to real hardware, with dedicated RAID 1 drives providing resilience.

  • Physical ownership

    Each Offline Secure Storage instance is allocated to a specific customer, with dedicated physical capacity and clearly defined ownership. Your data is not pooled, commingled or held within a shared storage estate.

  • Physical control

    Access begins outside the normal network path. An authorised out-of-band command, such as SMS, controls the physical Layer 1 connection to your #OSS instance. When access is not required, that network path is physically disconnected.

  • Physical security

    Your #OSS hardware is housed in carefully selected, professionally managed data centres with layered physical security, resilient power and environmental controls. Access is tightly controlled using three-factor authentication, including biometric identification, supported by 24/7 monitoring, restricted access zones and a complete audit trail.

Explore more

Related routes for law firms.

Questions

  • Case file archiving

  • Digital asset preservation

  • Board records

  • Mergers and acquisitions

  • GDPR compliance

  • All industries

Your next step

Protect the records that matter most.

Start with the records you could not recreate. Keep everything else where it works best.