---
title: "NIS2 Compliance with OSS® | Firevault"
description: "Meet NIS and NIS2 duties for essential and important entities using Offline Secure Storage®: physical isolation, recovery copies and audit evidence."
lang: en-GB
json-ld: |
  [
    {
      "@context": "https://schema.org",
      "@type": "Organization",
      "@id": "https://fire-vault.com/#organization",
      "name": "Firevault",
      "legalName": "Firevault Limited",
      "url": "https://fire-vault.com",
      "logo": {
        "@type": "ImageObject",
        "url": "https://fire-vault.com/logo.png",
        "width": 200,
        "height": 60
      },
      "foundingDate": "2025-03",
      "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.",
      "address": {
        "@type": "PostalAddress",
        "addressCountry": "GB",
        "addressLocality": "United Kingdom"
      },
      "contactPoint": [
        {
          "@type": "ContactPoint",
          "contactType": "customer service",
          "email": "hello@fire-vault.com",
          "availableLanguage": "English",
          "areaServed": "GB"
        }
      ],
      "sameAs": [
        "https://www.linkedin.com/company/firevault",
        "https://x.com/firevaultuk"
      ],
      "slogan": "Disconnect to Protect",
      "knowsAbout": [
        "Offline Secure Storage",
        "Physical Air Gap Data Protection",
        "Ransomware Protection",
        "Data Sovereignty",
        "GDPR Compliance",
        "NIS2 Compliance"
      ]
    },
    {
      "@context": "https://schema.org",
      "@type": "WebSite",
      "@id": "https://fire-vault.com/#website",
      "name": "Firevault",
      "alternateName": [
        "Firevault",
        "Firevault UK",
        "Firevault Limited"
      ],
      "url": "https://fire-vault.com",
      "publisher": {
        "@id": "https://fire-vault.com/#organization"
      },
      "inLanguage": "en-GB",
      "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.",
      "potentialAction": {
        "@type": "SearchAction",
        "target": {
          "@type": "EntryPoint",
          "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}"
        },
        "query-input": "required name=search_term_string"
      }
    },
    {
      "@context": "https://schema.org",
      "@type": "WebPage",
      "@id": "https://fire-vault.com/compliance/nis#webpage",
      "url": "https://fire-vault.com/compliance/nis",
      "name": "NIS2 Compliance with OSS®",
      "description": "Meet NIS and NIS2 duties for essential and important entities using Offline Secure Storage®: physical isolation, recovery copies and audit evidence.",
      "isPartOf": {
        "@id": "https://fire-vault.com/#website"
      },
      "about": {
        "@id": "https://fire-vault.com/#organization"
      },
      "primaryImageOfPage": {
        "@type": "ImageObject",
        "url": "https://fire-vault.com/images/og/og-base-platform.jpg"
      },
      "inLanguage": "en-GB",
      "breadcrumb": {
        "@id": "https://fire-vault.com/compliance/nis#breadcrumb"
      }
    },
    {
      "@context": "https://schema.org",
      "@type": "BreadcrumbList",
      "@id": "https://fire-vault.com/compliance/nis#breadcrumb",
      "itemListElement": [
        {
          "@type": "ListItem",
          "position": 1,
          "name": "Home",
          "item": "https://fire-vault.com"
        },
        {
          "@type": "ListItem",
          "position": 2,
          "name": "Compliance",
          "item": "https://fire-vault.com/compliance"
        },
        {
          "@type": "ListItem",
          "position": 3,
          "name": "NIS2 Compliance with OSS®",
          "item": "https://fire-vault.com/compliance/nis"
        }
      ]
    }
  ]
---

Recent Breaches 

Breaches 

[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)

[View All →](/learn/breaches)

[![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/)

Products

Solutions

[Why OSS](/why-oss)

More

[Help](/help)[Get started](/get-started)

Overview

The requirementThe gapsConsequencesThe architectureWhat sits offline

Compliance, NIS Directive 

# NIS Directive Compliance with Offline Secure Storage 

Meet NIS and NIS2 requirements for operators of essential services by implementing physical isolation as a core security measure.

-   Offline by default
-   Identity locked access
-   Hardware encrypted

Book a mapping call[Framework matrix](/compliance/frameworks)

![Security analyst reviewing an isolated workstation with disconnected cables](/assets/hero-square-analyst-CiP17E_k.jpg)

€10M

Maximum fine for essential entities

18

Sectors now in scope under NIS2

24hrs

Initial incident notification window

01 The requirement 

## NIS2 Raises the Bar

The NIS2 Directive significantly expands the scope and severity of cybersecurity obligations across essential and important entities in the EU and UK.

This is a mapping , not a certification claim. Firevault holds Cyber Essentials Plus. Everything else on this page is stated as alignment: Offline Secure Storage® produces evidence you can point at in your own submission, assessment or audit.

02 What is tested 

## Key NIS2 Requirements

Each line below is something an assessor, regulator or underwriter can ask you to evidence.

Risk analysis and information system security policies

Incident handling and business continuity

Supply chain security

Encryption and access control measures

03 Consequences 

## Non-Compliance Consequences

What happens when the control is missing, and the record cannot be produced.

### Director Liability

Personal accountability for senior management

### Operational Restrictions

Potential suspension of services

### Supply Chain Impact

Partners may refuse to work with non-compliant entities

### Mandatory Reporting

Public disclosure of security incidents

04 The architecture 

## How OSS Supports NIS Compliance

Offline Secure Storage directly addresses NIS2 requirements by providing physically isolated storage that removes critical data from the attack surface.

### Physical Isolation

Critical data stored offline is immune to network-based attacks

### Business Continuity

Offline backups ensure recovery even during major incidents

### Supply Chain Independence

No third-party cloud dependencies that could be compromised

### Incident Response

Isolated evidence preservation for forensic investigation

05 What sits offline 

## Critical Data Protected

The records most often moved into Offline Secure Storage® for this framework.

Operational technology configurations

Business continuity plans

Incident response procedures

Critical infrastructure schematics

Supply chain documentation

Security policies and audit evidence

### Authoritative Sources

-   [ICO GDPR Guidance (ICO) ](https://ico.org.uk/for-organisations/guide-to-data-protection/)
-   [NCSC Cyber Essentials (NCSC) ](https://www.ncsc.gov.uk/cyberessentials/overview)

![Mark Fermor](/assets/mark-fermor-C-vy1NeN.jpg)

![David Bailey](/assets/david-bailey-CnLw95Ao.jpg)

![Kenny Phipps](/assets/kenny-phipps-DxIqwaIL.jpg)

Online Now 

Concierge 

## Tell us which framework you are being tested against.

We will map Offline Secure Storage® to the outcomes your assessor is checking, and give you the wording and evidence to submit.

Takes about 2 minutes. No account needed.

Find Out

Free 2 mins No sign-up