--- title: "Protect Director and Board Data Offline | Offli… | Firevault" description: "Protect board papers, compliance evidence and director records with Offline Secure Storage. Reduce personal liability exposure with physically disconnected…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/oss-for-directors-and-boards#webpage", "url": "https://fire-vault.com/oss-for-directors-and-boards", "name": "Protect Director and Board Data Offline", "description": "Protect board papers, compliance evidence and director records with Offline Secure Storage. Reduce personal liability exposure with physically disconnected…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-home.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/oss-for-directors-and-boards#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/oss-for-directors-and-boards#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Protect Director and Board Data Offline", "item": "https://fire-vault.com/oss-for-directors-and-boards" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Co-operative Group 6.5M records ](/learn/breaches)[2026 Harrods Attempted intrusion ](/learn/breaches)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches)[2026 PowerSchool 62.4M records ](/learn/breaches)[2026 DISA Global Solutions 3.3M records ](/learn/breaches)[2026 Globe Life 850K records ](/learn/breaches)[2026 Co-operative Group 6.5M records ](/learn/breaches)[2026 Harrods Attempted intrusion ](/learn/breaches)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](/learn/breaches)[2026 Adidas UK Customer contact details ](/learn/breaches)[2026 Peter Green Chilled Order and logistics data ](/learn/breaches)[2026 Jaguar Land Rover Production and IT systems disru... ](/learn/breaches)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](/learn/breaches) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview Where liability beginsThe principleEvidenceBoard checklistWhat goes offlineAccess and controlWhen it mattersChoose protectionQuestions Offline Secure Storage® (#OSS) for directors and boards # Offline Secure Storage for director and board data. _Evidence you can stand behind._ Board papers, minutes, compliance evidence, legal advice and personal director records. When something goes wrong, the question is what the board knew, what it decided and what it did to protect the information behind those decisions. [Protect your board data](#checklist) [See what belongs offline](#choose) Offline Secure Storage Board-level evidence Controlled sharing Personal liability ![Offline Secure Storage for director and board data.](/assets/directors-hero-Cde16DVl.jpg) Offline by default What boards protect ### The papers behind every decision. Governance**Board papers** Legal**Privileged advice** Compliance**Regulatory evidence** Risk**Risk registers** People**Remuneration records** Personal**Director records** Storage**Dedicated hardware** Access**Controlled by you** When closed**No standing network path** A simple board question ## If a regulator asked what the board did to protect its most sensitive information, what is the answer? Directors are increasingly assessed on the adequacy of controls rather than the sophistication of the attacker. **01** ### Board papers leak. Strategy, redundancies or transaction material reaches people it was never meant to. **Confidentiality** **02** ### Privilege is compromised. Legal advice held in ordinary email or shared drives becomes discoverable or exposed. **Legal risk** **03** ### Evidence cannot be produced. The organisation cannot show what was decided, when, or what protected it. **Accountability** **04** ### Personal liability follows. Directors face scrutiny for controls that were assumed rather than demonstrated. **Fines and liability** The Firevault principle ## The problem is not only a breach. It is what a director can be shown to have controlled. Board papers, investigation notes and compliance evidence usually live in the same connected systems as everything else. Personal accountability sits with the individuals who signed off that arrangement. If board and director records are physically disconnected, exposure is a decision somebody made rather than a default nobody reviewed. **Select → Secure → Disconnect → Access when required** ### A path that does not exist cannot be used There is no mailbox, no shared drive and no credential leading to the papers while the vault is offline. ### Policy is not a defence on its own Boards are asked what they did, not what they instructed. A change in state is a demonstrable act. ### Separation protects the individual Director records held apart from the corporate estate survive a compromise of that estate. ### Evidence is produced automatically Recorded retrieval gives a chair, an auditor or an insurer something concrete to review. The board data checklist ## Know what the board is actually responsible for. Start with the material that would be most damaging to leak and most important to produce under scrutiny. Your governance inventory ### Six areas most boards already hold. Use this as a first-pass inventory before deciding which Firevault product fits. **Governance → Legal → Compliance → Risk → People → Personal** What was decided ### Governance - ✓ Board packs - ✓ Minutes and resolutions - ✓ Strategy papers - ✓ Transaction material - ✓ Delegated authorities What was advised ### Legal - ✓ Counsel opinions - ✓ Privileged correspondence - ✓ Dispute material - ✓ Contracts of consequence - ✓ Settlement records What was filed ### Compliance - ✓ Regulatory filings - ✓ Attestations - ✓ Control evidence - ✓ Policy approvals - ✓ Audit responses What was known ### Risk - ✓ Risk registers - ✓ Incident records - ✓ Assessments - ✓ Mitigation decisions - ✓ Assurance reports Who was involved ### People - ✓ Remuneration records - ✓ Sensitive HR matters - ✓ Succession planning - ✓ Whistleblowing material - ✓ Investigation files Personal exposure ### Director records - ✓ Identity documents - ✓ Appointment records - ✓ Insurance evidence - ✓ Declarations of interest - ✓ Personal financial records The Firevault difference ## Not every board record should be permanently reachable. Keep the working papers of active meetings where the board portal serves you. Firevault is for the material where exposure creates lasting legal, financial or personal consequence. Everyday and connected ### Keep convenience where it helps. Portals and collaboration tools suit live agendas and current papers. - • Current meeting agendas - • Draft papers in circulation - • Routine correspondence - • Calendar and logistics - • Everyday collaboration Important and offline ### Give consequence a different state. Selected governance material can be available when required without remaining permanently reachable. - ✓ Signed minutes and resolutions - ✓ Privileged legal advice - ✓ Regulatory evidence - ✓ Risk and incident records - ✓ Director personal records **A board portal keeps sensitive material online. Firevault gives the material that does not need to stay online somewhere else to live.**Online when you need it. Offline when you do not. Ownership, sharing and succession ## The right director can reach the right record. Board information has to survive appointments, resignations and investigations. Ownership, sharing and succession are different problems. VERIFIED OWNER FELLOW DIRECTOR LEGAL OR AUDITOR SUCCESSION ROUTE The owner controls everyday access. Selected files can be shared with counsel or auditors without exposing the whole vault. No shared board password ### Ownership, sharing and succession are different things. Firevault separates them so governance does not depend on a circulated credential. **One vault per user**Access is linked to a verified director rather than a company secretary mailbox. **Share a paper, not the vault**Release specific documents to counsel, auditors or regulators when required. **Planned continuity**A defined succession route means records remain available when the board changes. This is not only about the worst day ## Useful across the governance calendar. The value is knowing the material behind board decisions is protected, current and retrievable before it becomes urgent. Regulatory review ### Produce evidence with confidence. Records of decisions and controls are held in a defined place. **Compliance** Litigation ### Protect privileged material. Legal advice does not sit in the same reachable estate as everything else. **Legal risk** Transactions ### Keep deal material confidential. Sensitive commercial documents are not permanently exposed during a process. **Confidentiality** Incident response ### Show what the board did. Timelines, decisions and mitigations retained beyond the affected systems. **Accountability** Insurance ### Support directors' cover. Demonstrable controls strengthen the position when questions are asked. **Assurance** Board change ### Hand over without gaps. Records remain available as directors join and leave. **Continuity** Evidence and guidance ## Personal accountability for security is set out in law and regulator guidance. Company law duties and financial regulation both place responsibility for adequate systems and controls with named individuals. [Companies Act 2006 s.174 Directors owe a duty to exercise reasonable care, skill and diligence, which extends to oversight of information risk. Read the source](https://www.legislation.gov.uk/ukpga/2006/46/section/174) [NCSC Board Toolkit The NCSC Board Toolkit sets the expectation that boards understand and evidence their organisation's cyber resilience decisions. Read the source](https://www.ncsc.gov.uk/collection/board-toolkit) [ICO The ICO judges technical and organisational measures against the risk of the processing, including access to sensitive internal records. Read the source ](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/a-guide-to-data-security/) Who this applies to ## Where board and director exposure appears most often. Concise routes into the industry and audience pages where this need appears most often. [Business and teams](/oss-for-business) [Professional services](/oss-for-professional-services) [Protect customer data](/oss-for-customer-data) [Ransomware-proof recovery copies](/oss-for-ransomware-recovery) [Investment and M&A data](/oss-for-investment-and-ma) [Contain a live incident](/control-for-live-incidents) The Firevault response ## Offline Secure Storage®, then the product that fits the volume. This page is about the exposure. Capacities, access models, specifications and pricing sit on the product pages so you can choose once the requirement is clear. Offline Secure Storage® Offline Secure Storage holds board and director records on dedicated hardware that is physically disconnected until you ask for it. [Why Offline Secure Storage](/why-oss) ### Vault On-demand access to a digital safe deposit box for board packs, investigation files and compliance archives. [Explore Vault](/vault) ### LUV A low use vault for minutes, resolutions and personal liability evidence, reached on a nominated access day. [Explore LUV](/luv) ### Storage Scalable offline capacity from 20TB upwards, designed with the solutions team around your requirement. [Explore Storage](/storage) Why Firevault ## Governance on top. Physical protection underneath. Directors should not have to rely on assurances about somebody else's platform. **01** ### Physical storage Offline Secure Storage instances are held on dedicated physical hard drives, not in S3 cloud buckets, shared storage pools or multi-tenant infrastructure. Your selected data is assigned to real hardware, with dedicated RAID 1 drives providing resilience. **02** ### Physical ownership Each Offline Secure Storage instance is allocated to a specific customer, with dedicated physical capacity and clearly defined ownership. Your data is not pooled, commingled or held within a shared storage estate. **03** ### Physical control Access begins outside the normal network path. An authorised out-of-band command, such as SMS, controls the physical Layer 1 connection to your #OSS instance. When access is not required, that network path is physically disconnected. **04** ### Physical security Your #OSS hardware is housed in carefully selected, professionally managed data centres with layered physical security, resilient power and environmental controls. Access is tightly controlled using three-factor authentication, including biometric identification, supported by 24/7 monitoring, restricted access zones and a complete audit trail. Firevault Bunkers provide jurisdictional physical resilience across our international infrastructure. Questions directors ask ## Before you move board material offline. The goal is defensible governance, not simply buying storage. Does this replace our board portal? No. Keep live agendas and papers in the portal. Firevault is for the signed, privileged and evidential material where exposure has lasting consequence. Can counsel be given a single document? How does this reduce personal liability exposure? What happens when a director resigns? Is Vault or LUV right for a board? Protect the evidence behind board decisions ## Start with the records that would be most damaging to leak and most important to produce. Offline Secure Storage from Firevault. Online when you need it. Offline when you do not. [Protect your board data](#choose) [Talk to Firevault](/contact) [![Firevault - physical control for critical data](/assets/logo-white-official-BKfZ19hm.png)](/) International cyber resilience ## Protect what matters. Control what moves. Firevault is an international cyber resilience company specialising in Offline Secure Storage® and OT cyber security, helping organisations protect critical data and govern how systems connect and how data moves. [hello@fire-vault.com](mailto:hello@fire-vault.com)Europe, US and Middle East Cyber security certified [ ![Cyber Essentials Certified](https://fire-vault.com/__l5e/assets-v1/6f8f42a2-89e1-4c20-938f-3f34d30bc90c/cyber-essentials-2026.png) ![Cyber Essentials Plus Certified](https://fire-vault.com/__l5e/assets-v1/8a77bf2c-6711-4762-b093-c4d650153bc9/cyber-essentials-plus-2026.png) ](https://registry.blockmarktech.com/certificates/) Start here ### Not sure what you need? Use the OSS Concierge to find the right protection or control approach for your organisation. [Find your starting point ](/find-my-oss) 01 · Data protection & storage [](/offline-secure-storage) [ ### Offline Secure Storage® ](/offline-secure-storage) Physically disconnected by default, identity verified and built on dedicated hardware, from 300GB personal storage to enterprise-scale infrastructure. [OSS overview](/offline-secure-storage)[LUV](/luv)[Vault](/vault)[Storage](/storage)[Enterprise](/enterprise)[Bunkers](/bunkers) 02 · Network evolution and rapid protection [](/control) [ ### Control ](/control) Nine governance modules across FIRE and VAULT, composed into Control Blueprints around the outcome, environment and risk you need to manage. [Control overview](/control)[Nine modules](/control/nine-modules)[Blueprints](/control-blueprints)[Firebreak](/control/modules/firebreak)[Control by industry](/control-for-industry) ### Knowledge - [Knowledge Vault ](/learn/knowledge) - [Buyer guides ](/learn/guides/by-role) - [Technical guides ](/learn/guides/technical) - [Firevault Playbooks ](/playbooks) - [White papers ](/learn/whitepapers) - [Learn and explainers ](/learn) - [Breach tracker ](/learn/breaches) - [FAQs ](/learn/faq) ### Firevault - [About Firevault ](/about) - [Security ](/security) - [Partners ](/partners) - [Press and media ](/press-media) - [Help Centre ](/help) - [Careers ](/careers) - [Invest in Firevault ](/investors) - [Contact ](/contact) © 2026 Firevault Limited · Company No. 16320803 · VAT No. 490 8551 64 · Registered in England and Wales [Site Map](/sitemap)[Privacy Charter](/privacy-charter)[Terms](/terms)[Planet Pledge](/planet-pledge)[Vault Commitment](/vault-commitment)[LUV Commitment](/luv-commitment)[Cookie Policy](/cookies) [](https://www.linkedin.com/company/firevault-limited)[](https://twitter.com/firevaultuk) Get started ![Firevault](/favicon.svg) Tell us what you need to protect. Privacy ## You decide what we measure Essential cookies keep this site working. Everything else is optional and off until you say otherwise. Read the [Privacy Charter](/privacy-charter) or the [Cookie Policy](/cookies). Accept allEssential only Manage options