--- title: "AI Control Blueprint | Firevault" url: https://fire-vault.com/control-blueprint/ai description: "AI services connect to data platforms, operational systems and external model providers, often through routes that stay open between jobs. Control adds…" lang: en-GB --- Image: Illustrative AI operating environment (https://fire-vault.com/__l5e/assets-v1/a4a7259c-938a-4466-b786-f5ee1d4098e7/bp-hero-bp-21.jpg) # AI systems act at machine speed. _Control what they can reach._ AI services connect to data platforms, operational systems and external model providers, often through routes that stay open between jobs. Control adds physical boundaries to selected paths, subject to governance, platform dependencies and the operational assessment of what an AI system may reach. Book a discovery session: https://fire-vault.com/contact?subject=control See the Blueprint Incident Path exposed Outcome Control taken Approximately 120–150 ms Management enable/disable operation Around 2–3 seconds SMS round-trip operation, good signal March 2025 test observations, not guaranteed timings. Data routes Agent reach Platform dependencies Governance 01 · Recent incidents ## What has already happened in AI. Three published incidents that show how connections carried disruption into the service. These are attributed reports, not claims that Control would have prevented them. Exposed database ### DeepSeek 2025 A publicly accessible database belonging to the AI company leaked more than a million log lines, including chat history and secret keys. Wiz Research (https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak) External AI tools ### Samsung 2023 Engineers pasted confidential source code and meeting notes into a public AI chat service. The company then banned generative AI tools on company devices. The Korea Herald (https://m.koreaherald.com/article/3118116) Cloud storage ### Microsoft AI researchers 2023 An over-permissive storage link used to publish AI training data exposed 38 terabytes of internal data, including backups and internal messages. Microsoft MSRC (https://www.microsoft.com/en-us/msrc/blog/2023/09/microsoft-mitigated-exposure-of-internal-information-in-a-storage-account-due-to-overly-permissive-sas-token) 02 · About our Blueprint ## Control for AI, in brief. Model services, agents and automation pipelines hold connections into data and operations that persist whether or not they are needed. A standing route can move prompts, records or instructions without a person watching the path. An AI platform needs a scheduled data or support connection while approved business services continue. Control acts on selected physical connections, not every connection in the environment. **What it never touches:** Reference design for adaptation with the service owner, not a validated deployment. Confirm complete boundary coverage, operational dependencies and the consequences of opening or closing each selected path. ### Data routes Training and inference paths move records into and out of AI platforms. Understand what each route carries before any change. ### Agent reach Automated agents may hold tool and system access. Review which operations they can trigger and who approves them. ### Platform dependencies Compute, vector stores and model APIs share infrastructure. Assess what a boundary change does to each dependency. ### Governance Service owners need agreed authority, records and evidence for connection decisions affecting AI systems. 03 · The Blueprint ## Choose what to control. An AI platform needs a scheduled data or support connection while approved business services continue. Review the named support and cross-zone boundaries; operationally required links are not assumed disconnectable. What do you want to take control of? Without Control: path exposed Cyber control · An incident is spreading An incident starts on the internet-facing side and heads for operations. Fracture physically breaks the selected path so the activity cannot travel along it. How Cyber Control works (https://fire-vault.com/cyber-control) **Fracture**When an incident threatens to spread between connected systems, Fracture provides physical disconnection of a selected network path under an agreed response process. (https://fire-vault.com/control-module/fracture) Illustrative map, not a site design or wiring diagram. The module shown is the suggested starting point for each environment; your Blueprint is drawn from your own sites in discovery, with process and safety dependencies assessed first. 04 · Suggested next steps ## Start with one route. Prove it. Then expand. Every Blueprint starts with a discovery session with Firevault and the people who own the service. 1. 1 ### Book a discovery session Operations, engineering and security join Firevault to talk through your sites and the routes into them. 2. 2 ### Map your crossings Together we list every connection into operations, who owns it and what must keep running. 3. 3 ### Choose the first route Pick one route to control, the module that suits it and the checks that prove it works. ### Your discovery session You will leave with a map of the routes into your AI operations, the first one to control and a test plan agreed with your team. Book a discovery session (https://fire-vault.com/contact?subject=control) ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/control-blueprint/ai#webpage", "url": "https://fire-vault.com/control-blueprint/ai", "name": "AI Control Blueprint", "description": "AI services connect to data platforms, operational systems and external model providers, often through routes that stay open between jobs. Control adds…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-platform.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/control-blueprint/ai#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/control-blueprint/ai#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Control Blueprint", "item": "https://fire-vault.com/control-blueprint" }, { "@type": "ListItem", "position": 3, "name": "AI Control Blueprint", "item": "https://fire-vault.com/control-blueprint/ai" } ] } ] ```