---
title: "AI Control | Govern selected AI communications | Firevault"
url: https://fire-vault.com/ai-control
description: "Govern selected AI data, tool and communication paths under independent authority. Assess intervention limits, safe behaviour and restoration."
lang: en-GB
---

Control by Firevault (https://fire-vault.com/control) / AI Control

# AI Control. Keep authority over external connections.

AI systems can connect to data, tools, services and other systems. Control by Firevault governs selected network paths under independent human authority, without claiming to stop a model or its local computation.

Discuss your Control requirements: https://fire-vault.com/contact?subject=control
See where Control applies

Who can withdraw an AI system’s external connections independently of its task?

Incident

Path exposed

Outcome

Control taken

Approximately 120–150 ms

Management enable/disable operation

Around 2–3 seconds

SMS round-trip operation, good signal

March 2025 test observations, not guaranteed timings.

Why connection control matters

## A connection change is a service decision.

Withdrawal of a connection can stop a dependent service or remove feedback an autonomous system needs. Continued local computation and physical behaviour require their own safety measures.

An AI workload may have access beyond the intended task, or communicate through more than one route. Application policy and identity controls remain necessary; physical intervention applies only to the paths placed under Control.

Reported incidents in related sectors

### DeepSeek

2025

Sector

AI

What was reported

A publicly accessible database belonging to the AI company leaked more than a million log lines, including chat history and secret keys.

Exposed database: https://fire-vault.com/control-blueprint/ai
Wiz Research: https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak

### CloudNordic

2023

Sector

Data Centres

What was reported

Ransomware reached the hosting company’s management and backup systems through an internal network. Most customers lost all their data.

Management network: https://fire-vault.com/control-blueprint/colocations
TechCrunch: https://techcrunch.com/2023/08/23/cloudnordic-azero-cloud-host-ransomware/

### Collins Aerospace

Sector

Aviation & Aerospace

What was reported

A cyber attack on check-in and boarding software disrupted several European airports, which fell back to manual processing.

Supplier platform: https://fire-vault.com/control-blueprint/aviation
BBC News: https://www.bbc.co.uk/news/articles/c789e7l1z7po

These incidents show how a connection path can shape what happens next. They are not claims about what any single control would have prevented.

What Control changes

## Three things you can control physically.

Control complements your network security, detection, identity management and incident response. It does not replace them. **It gives their decisions a physical place to act, on the connections you select.**

Control access

### Govern when selected connections may exist.

Supplier, engineering and partner routes are connected for approved work, to named systems, for a set window, and disconnected afterwards. Not open by default.

Control Plans

Control third-party connections: https://fire-vault.com/control-module/relay
Control connections in two approved stages: https://fire-vault.com/control-module/unlink

Control exposure

### Reduce unnecessary standing paths into critical systems.

Each critical system keeps the connections it genuinely needs, inside a defined physical boundary. Paths it does not need are disconnected.

Control Plans

Enforce physical network boundaries: https://fire-vault.com/control-module/execute
Protect critical system connections: https://fire-vault.com/control-module/validate

Control intervention

### Physically disconnect selected connections under an agreed authority.

When your response plan calls for it, the selected path is physically disconnected on a decision by the people or rules you agreed in advance, and stays disconnected until an authorised release.

Control Plans

Contain ransomware spread: https://fire-vault.com/control-module/fracture
Contain a live incident: https://fire-vault.com/control-module/isolate
Authorise emergency disconnection: https://fire-vault.com/control-module/fracture#also

Where Control applies & Control modules

## AI Control. The Modules that make a difference.

An inference environment accesses an external tool through a defined gateway. An authorised operator may withdraw that gateway connection if activity exceeds the agreed operating boundary.

Where do you need Control?

**Selected AI connection withdrawn**

### Withdraw selected AI connectivity under human authority.

Execute carries out the approved intervention, Fracture interrupts the selected external connection, and Transfer governs a purpose-bound data-movement path used by separate tools. Local computation and cached instructions may continue.

Commanded

Authorise intervention on the registered external AI connection.

Reported by the control point

Illustrative selected external paths disconnected.

Independently verified

Check actual links and local system behaviour separately; no model shutdown is implied.

Explore AI Control (https://fire-vault.com/ai-control)

Modules in this example

**Execute**Authorised physical intervention: https://fire-vault.com/control-module/execute
**Fracture**Ransomware and incident containment: https://fire-vault.com/control-module/fracture
**Transfer**Controlled connection for data movement: https://fire-vault.com/control-module/transfer

Explore all nine Modules (https://fire-vault.com/control-modules)Explore adoption approaches (https://fire-vault.com/control-plans)

Concept illustration. Commanded, reported and independently verified states are shown separately because they are not the same thing, and what can be verified depends on your deployment. Disconnecting a selected path changes what can use that path. On its own, it does not contain an incident across a whole environment, and routes outside the plan, such as wireless or cellular links, need their own controls.

Control Blueprints

## Your industry’s connections, mapped and controlled.

How AI Control applies in the industries where these connections matter most. Each Blueprint maps real systems, suppliers and operating constraints.

Image: Control Blueprints folded-blueprint icon (https://fire-vault.com/__l5e/assets-v1/3348168e-2b44-49b4-a1a2-c2894bbb1e37/control-blueprints-icon.png)

### AI

AI systems, agents and their routes into data and operations.

Read the AI Blueprint (https://fire-vault.com/control-blueprint/ai)

Image: Data Centres Blueprint icon (https://fire-vault.com/__l5e/assets-v1/16cbf091-56b4-44ac-8dbd-dad963cfdc9a/BP-10_data-centres.png)

### Data Centres

Tenant isolation and cross-connect governance.

Read the Data Centres Blueprint (https://fire-vault.com/control-blueprint/colocations)

Image: Aviation & Aerospace Blueprint icon (https://fire-vault.com/__l5e/assets-v1/15cda901-44ba-4a36-98af-3825c858b22c/BP-05_aviation-aerospace.png)

### Aviation & Aerospace

Airport, airline and aerospace networks.

Read the Aviation & Aerospace Blueprint (https://fire-vault.com/control-blueprint/aviation)

Image: BP-09 Defence Control Blueprint icon (https://fire-vault.com/__l5e/assets-v1/750b6b6c-13d7-45a5-8f15-8b47629d6c64/BP-09_defence.png)

### Defence

Classified enclaves and test ranges.

Read the Defence Blueprint (https://fire-vault.com/control-blueprint/defence)

See all industry Blueprints (https://fire-vault.com/control-blueprints)

Fourteen Blueprints are published. Each deployment is designed around your own estate.

Firevault, as featured in

- Read about Firevault on TechRadar Pro: https://www.techradar.com/pro/uk-startup-put-physical-disconnect-switch-in-its-cloud-storage-offering-to-mitigate-ransomware-attacks-but-will-that-be-enough
- Read about Firevault on Yahoo Finance: https://uk.finance.yahoo.com/news/firevault-launches-help-businesses-directors-074500961.html
- Read about Firevault on Channel Insider: https://www.channelinsider.com/security/tools-and-platforms/firevault-security-offline-platform-offering/
- Read about Firevault on Security Buyer: https://securitybuyer.com/uk-cybersecurity-startup-launches-firevault/
- Read about Firevault on SecurityBrief: https://securitybrief.com.au/story/firevault-unveils-offline-digital-vault-to-combat-rising-cyber-risks

How Control works

## Decisions made by people. Enforced physically.

Your tools detect, your people and policies decide, and Control changes the connection state of the selected path. Here is what that rests on.

### Physical enforcement

Control changes the connection state of a selected path at Layer 1: connected, or physically disconnected. It does not inspect or alter the traffic on it.

### An independent command path

Commands reach each control point over a configured command path, kept separate from the network being controlled. How each point behaves if that path is lost is agreed and tested.

### Authorised changes

Who can connect, disconnect or release each path is agreed in advance: named people, more than one approval where it matters, or rules and high-confidence alerts you set.

### Evidence, as configured

Commands, approvals and reported states can be recorded for your deployment, so you can show what changed, when, and on whose authority.

Before you deploy

## Physical control is an operational decision.

Confirm the selected paths, supporting systems and failure behaviour in the actual environment. No generic drawing can substitute for this assessment.

1. **AI compute and inference environments**Inventory every data, tool and communications path, including routes outside the proposed boundary.
2. **External data and tool-access gateways**Define independent authorisation without assuming a built-in multi-party workflow.
3. **Partner and supplier connections**Assess safe behaviour when feedback, communications or a remote service disappears.
4. **Communications used by autonomous systems**Use the AI Kill Switch briefing for the specialist physical-intervention application.

Control governs the selected paths in your plan. It does not inspect traffic, and wireless, cellular and other routes outside the plan need their own controls.

### Straight answers

No. They detect, filter and investigate. Control adds a physical way to act on the selected paths when your people, or rules you have agreed, decide to.

No. It changes whether a selected path is connected. It does not read or change what travels on it.

It can, which is why the dependencies, safe states and restoration steps for each path are agreed and tested with your operations and safety owners before anything goes live.

It controls selected connectivity. Disconnecting a path removes the connections an AI system was using and gives people an independent way to intervene. It does not necessarily stop a model or process running locally.

No. Control governs connections. Keeping data physically offline is Offline Secure Storage®, a separate Firevault product that can sit alongside Control.

Yes. Start with one connection: a supplier route, an IT–OT crossing, or the path to one critical system.

Your next step

## Start with one critical connection.

Begin with one external tool connection. Agree its purpose, intervention authority, dependencies and the checks that make restoration acceptable.

Discuss your Control requirements (https://fire-vault.com/contact?subject=control)

Or explore the nine Control Modules first: https://fire-vault.com/control-modules

Discuss requirements: https://fire-vault.com/contact?subject=control
Speak to the team: https://fire-vault.com/contact?subject=control

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "https://fire-vault.com/#organization",
    "name": "Firevault",
    "legalName": "Firevault Limited",
    "url": "https://fire-vault.com",
    "logo": {
      "@type": "ImageObject",
      "url": "https://fire-vault.com/logo.png",
      "width": 200,
      "height": 60
    },
    "foundingDate": "2025-03",
    "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.",
    "address": {
      "@type": "PostalAddress",
      "addressCountry": "GB",
      "addressLocality": "United Kingdom"
    },
    "contactPoint": [
      {
        "@type": "ContactPoint",
        "contactType": "customer service",
        "email": "hello@fire-vault.com",
        "availableLanguage": "English",
        "areaServed": [
          "GB",
          "EU",
          "US",
          "AE"
        ]
      },
      {
        "@type": "ContactPoint",
        "contactType": "sales",
        "email": "sales@fire-vault.com",
        "availableLanguage": "English",
        "areaServed": [
          "GB",
          "EU",
          "US",
          "AE"
        ]
      }
    ],
    "founder": [
      {
        "@type": "Person",
        "name": "Mark Fermor",
        "jobTitle": "Founder, CTO and CMO"
      },
      {
        "@type": "Person",
        "name": "David Bailey",
        "jobTitle": "Founder and CEO"
      }
    ],
    "areaServed": [
      "United Kingdom",
      "Europe",
      "United States",
      "Middle East"
    ],
    "sameAs": [
      "https://www.linkedin.com/company/firevault",
      "https://x.com/firevaultuk"
    ],
    "slogan": "Disconnect to Protect",
    "brand": [
      {
        "@type": "Brand",
        "name": "Offline Secure Storage"
      },
      {
        "@type": "Brand",
        "name": "Control by Firevault"
      },
      {
        "@type": "Brand",
        "name": "Firebreak"
      }
    ],
    "knowsAbout": [
      "Offline Secure Storage",
      "Physically disconnected data storage",
      "Physical Air Gap Data Protection",
      "Ransomware Protection",
      "Ransomware recovery",
      "3-2-1-1-0 backup rule",
      "AI kill switch",
      "Operational technology security",
      "Critical national infrastructure resilience",
      "Data Sovereignty",
      "GDPR Compliance",
      "NIS2 Compliance",
      "DORA Compliance",
      "NCSC Cyber Assessment Framework"
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "WebSite",
    "@id": "https://fire-vault.com/#website",
    "name": "Firevault",
    "alternateName": [
      "Firevault",
      "Firevault UK",
      "Firevault Limited"
    ],
    "url": "https://fire-vault.com",
    "publisher": {
      "@id": "https://fire-vault.com/#organization"
    },
    "inLanguage": "en-GB",
    "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}"
      },
      "query-input": "required name=search_term_string"
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "WebPage",
    "@id": "https://fire-vault.com/ai-control#webpage",
    "url": "https://fire-vault.com/ai-control",
    "name": "AI Control",
    "description": "Govern selected AI data, tool and communication paths under independent authority. Assess intervention limits, safe behaviour and restoration.",
    "isPartOf": {
      "@id": "https://fire-vault.com/#website"
    },
    "about": {
      "@id": "https://fire-vault.com/#organization"
    },
    "primaryImageOfPage": {
      "@type": "ImageObject",
      "url": "https://fire-vault.com/images/og/og-base-home.jpg"
    },
    "inLanguage": "en-GB",
    "breadcrumb": {
      "@id": "https://fire-vault.com/ai-control#breadcrumb"
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "@id": "https://fire-vault.com/ai-control#breadcrumb",
    "itemListElement": [
      {
        "@type": "ListItem",
        "position": 1,
        "name": "Home",
        "item": "https://fire-vault.com"
      },
      {
        "@type": "ListItem",
        "position": 2,
        "name": "AI Control",
        "item": "https://fire-vault.com/ai-control"
      }
    ]
  }
]
```