Firevault, offline secure storage, physically disconnected from the internet
Pricing
SecurityHow your copy is protected

Security you can see and evidence.

Physical disconnection, verified identity, time-limited sessions and a protected Bunker, with a record of every session.

As featured in

  • TechRadar Pro logo
  • Yahoo Finance logo
  • Channel Insider logo
  • Security Buyer logo
  • SecurityBrief logo
The secure entrance to a Firevault Bunker, with biometric entry gates, bollards and CCTV

Three independent entry checksIncluding biometrics

24/7 monitoringA Tier 3 data centre

Certified
Cyber Essentials Plus
Identity
Verified at onboarding
Every session
MFA, time-limited, logged
Default state
Physically disconnected

How it is protected

Five layers, from the hardware up.

Physically disconnected Offline Secure Storage: server, three drives and a padlock

Physical disconnection

No standing network path. A route exists only for an authorised session, and it is removed when the session ends.

Verified identity

Organisation and identity checks at onboarding, in line with KYC and AML practice, then multi-factor authentication on every session.

No standing privileges

Sessions are time-limited, up to 120 minutes, and every one is logged.

A protected Bunker

A professionally managed data centre in our international estate, with three independent entry checks and 24/7 monitoring.

No path while it is closed

A desktop and phone with no route to the Vault while it is closed

Hardware lifecycle

Recorded from assignment to the end of the term.

  1. 01

    Verified

    The organisation and the authorised user are verified before anything is provisioned.

  2. 02

    Assigned

    Dedicated hardware is assigned to one customer and recorded.

  3. 03

    Maintained

    RAID 1 mirroring, with Vault Spare for hardware continuity.

  4. 04

    Renewed, returned or destroyed

    At the end of the term: renew, retrieve the drive, or destroy it to certificate.

Assurance

Evidence for your auditors and insurers.

Designed to support the controls businesses are already asked to evidence.

We map our controls to the outcomes your auditors test. We do not claim certification on your behalf.

  • Cyber Essentials Plus certified
  • UK GDPR
  • NIS2
  • DORA
  • ISO 27001-aligned controls
  • NCSC CAF

Your organisation remains responsible for how applicable frameworks are implemented.

Continuity

Planned for the day something goes wrong.

RAID 1 mirroring

Each Vault uses dedicated physical drives, so your files are held on both disks.

Physical storage

Vault Spare

Already inside your Vault spare hardware for continuity.

Vault Spare

Vault Buddy

A nominated person who has no access until a qualifying event is evidenced and their identity is verified.

Vault Buddy

Questions

What security teams ask

On dedicated hardware in a Firevault Bunker, a professionally managed data centre in our international estate. For security, we do not publish Bunker locations.

We are the infrastructure provider and we do not know your credentials. Sessions are opened by you, verified with MFA, and logged.

Every connection, disconnection and identity verification, so you can show a physical control and a record of each session to auditors and insurers.

Each Vault uses dedicated physical drives with RAID 1 mirroring, so your files are held on both disks. Vault Spare adds pre-provisioned spare hardware for continuity.

Confirm current Cyber Essentials Plus status, certificate scope and validity with Firevault before relying on it. Offline Secure Storage® can help support GDPR, NIS2, ISO 27001 and NIST CSF obligations.

You can renew month by month, retrieve the physical drive, or have it destroyed to certificate.

All questions about OSS

Talk to a member of the team

Need our security answers for a supplier questionnaire? Tell us what you need and we will send it.