Firevault, offline secure storage, physically disconnected from the internet
Pricing

Enterprise: sovereign offline secure storage.

Offline storage at 300TB and above, on hardware you own, in your own facilities or a Firevault Bunker, with no standing network route to the archive. Authorised sessions last up to 120 minutes.

  • 300TB and beyond
  • Offline by default
  • Dedicated hardware you own
  • Cleared personnel available

Bespoke quote against your estate, using a published pricing model.

Delivered as a programmeSite survey, commissioning, integration and support, specified with our team. No online checkout.

As featured in

  • TechRadar Pro logo
  • Yahoo Finance logo
  • Channel Insider logo
  • Security Buyer logo
  • SecurityBrief logo
Management planeWho gets in, and when. Out of band.Waiting for a request
Kept physically apart
Firevault BunkerData plane: dedicated, mirrored drivesDisconnected
Firevault BunkerData plane: dedicated, mirrored drivesDisconnected

In a Firevault Bunker

Illustration

Capacity
300TB and beyond
Hardware
Owned by you
Management
Out of band
Sites
Yours, ours or both

Your business has to stay connected. The copy you rely on after an incident does not.

When connected systems are encrypted, deleted or leaked, the copy you recover from needs to be one the attack could not reach.

The hardware

National scale hardware, in a place you control.

Data plane

The archive itself, offline unless an authorised session is open. Dedicated hardware your organisation owns, never shared or virtualised, with no standing network path to the drives.

Management plane, out of band

Held out of band, physically separated from the drives it governs. Commissioning, maintenance and physical handling by vetted engineers, with SC and DV cleared personnel where required.

Data plane and management plane

Illustration

Delivery

Engineering, clearance and reporting, delivered with the hardware.

Deployment engineering

Site survey through to handover, with multi-site architecture that splits capacity across your sites and Bunkers, and capacity without limit in 20TB blocks.

Evidence and reporting

Exportable logs for SIEM and audit, a named account team, and custom integration through API, SFTP and bespoke pathways.

Included with every instance

Governed access

Governed access that fits the estate you already run.

Integration

Enterprise sits behind your primary and backup tiers as the offline gold copy, written to on schedule or on demand.

Delegated access

Defined rights over defined data sets, for named people, each with their own identity-locked route in.

Access pathways

Illustration

Custody

Your facility, a Firevault Bunker, or a sovereign hybrid.

Custody is your choice

Protection is the same in every location. What changes is custody, and where the off-site gold copy lives.

Three custody models

Pricing model

Bespoke does not mean unexplained.

Quotes are bespoke, but the pricing model is fixed and published: who reaches it, and how much there is.

Vault product iconVault

One person, identity locked: 2TB, 4TB or 8TB.

From£360/month

inc VAT, 36-month commitment

See Vault
  • Up to 8TB of dedicated storage
  • 24/7 on-demand access
  • Ready to buy online

Storage product iconStorage

The organisation: 20TB to 300TB.

Quoted

Designed with our solutions team

See Storage
  • 20TB to 300TB, in 20TB blocks
  • SFTP, REST API and backup workflows
  • Bunker, on premises or hybrid
This page

Enterprise product iconEnterprise

National scale: 300TB and beyond.

Quoted

A written proposal: commissioning, handover, SLAs and named support

Speak to a member of the team
  • OSAP, Offline Secure Access Profile: one named person, with their own identity-locked route
  • OSSC, Offline Secure Storage Capacity: dedicated, RAID 1 mirrored
  • Installed in your facilities, a Bunker or both
  • Out-of-band management, cleared personnel where required
  • Integration engineering and SLAs in the proposal

No online checkout for Enterprise. See the full pricing model

Physics, not promises

Physics, not promises.

Enterprise is built on four physical principles, at the scale of an estate.

Dedicated, mirrored drives from 300TB, growing in 20TB blocks. Never shared or virtualised.

Learn more

Equipment can be bought in your organisation’s name, with a defined lifecycle from commissioning to return or destruction to certificate.

Learn more

The management plane is held out of band, physically separated from the data. A path exists only for an authorised session, under your policy.

Learn more

Your facilities, a Firevault Bunker or both, worked on by vetted engineers, with SC and DV cleared personnel where a programme requires it.

Learn more

Physical storage: real drives

Offline Secure Storage physical drives and dedicated hardware rack in a Firevault Bunker

Compare

Offline Secure Storage® against the usual alternatives

How physical disconnection differs from cloud and on-premises copies.

Offline Secure Storage® against the usual alternatives
Question Cloud backup or archive On-premises copy Offline Secure Storage®
Reachable from the production network? Yes, over the internet Yes, over the LAN No. Physically disconnected at the hardware level when closed
Survives a domain-wide compromise? Only if credentials hold Rarely No standing network path to reach while it is disconnected
Who holds the hardware? The provider You, with your own upkeep Dedicated hardware assigned to you, in a Firevault Bunker
Evidence for auditors and insurers? Configuration screenshots Configuration screenshots A physical control, plus a logged record of every session

Read the full comparison

Who it is for

Built for the largest and most regulated estates.

Enterprise is the top tier of Offline Secure Storage®, for holdings above 300TB.

  • Critical national infrastructure
  • Defence and government
  • Large enterprises
  • Regulated industries
  1. LUV product iconLUV300GB, one person
  2. Vault product iconVault2TB to 8TB, one professional
  3. Storage product iconStorage20TB to 300TB, the organisation
  4. Enterprise product iconEnterprise300TB and beyond, at national scale

Mapped to recognised framework outcomes.

Firevault maps Offline Secure Storage® controls to framework outcomes as evidence for your own assessment, rather than claiming certification on your behalf.

  • Cyber Essentials PlusHeld by Firevault
  • NCSC CAFControl mapping to CAF outcomes on request
  • NIS2Can help support resilience and recovery obligations
  • ISO 27001Can help support information security controls
  • GDPRData sovereignty and retention evidence
  • CNIBuilt for critical national infrastructure duties

How it is specified

Specified with our solutions team, not bought off a shelf.

A short conversation establishes volume, clearance and site arrangement.

  1. 01

    Discovery

    Data, growth, obligations and clearance.

  2. 02

    Site and survey

    Racks, power, cooling and security.

  3. 03

    Integration design

    API, SFTP and workflow pathways.

  4. 04

    Proposal and delivery

    Commissioning, handover, SLAs and named support.

Speak to a member of the team

Specifications

Enterprise, specified.

Capacity
300TB and above, growing in 20TB blocks
Hardware
Dedicated, mirrored drives, never shared or virtualised
Ownership
Equipment can be bought in your organisation’s name
Management
Out-of-band management plane, physically separated from the data
Where it lives
Your facilities, a Firevault Bunker or both
Personnel
Vetted engineers; SC and DV cleared personnel where a programme requires it
Access
On demand, 24/7, under your access policy
Evidence
Every connection and disconnection recorded; exportable for SIEM
Delivery
Specified with our team and delivered as a programme
Pricing
Quoted against the published model, in a written proposal

Questions

Questions about Enterprise

Same principles, different scale and custody. Storage covers 20TB to 300TB. Enterprise starts at 300TB, with installation in your own facilities, an out-of-band management plane and cleared personnel.

In your own secure facilities, a Firevault Bunker, or a sovereign hybrid: a working set on your sites and a gold copy in a Bunker. Protection is the same in every location.

Commissioning, maintenance and physical handling by vetted engineers, with SC and DV cleared personnel available where a programme requires it. A named account manager and technical lead stay with you for the life of the programme.

SFTP, REST API and existing backup workflows provide governed access for named people. Access is available on demand, 24/7, or in scheduled authorised windows. Each session lasts up to 120 minutes, then the physical connection closes.

Yes. Every connection, disconnection and identity check is recorded and exportable for SIEM and audit.

Controls are mapped to framework outcomes, not certified on your behalf. Firevault holds Cyber Essentials Plus; NCSC CAF mapping is available on request; Enterprise can help support NIS2, ISO 27001 and GDPR obligations.

Quotes are bespoke, but the model is fixed and published: Offline Secure Access Profiles (who reaches it) and Offline Secure Storage Capacity (how much there is), in a written proposal.

Renew, retrieve eligible hardware, or choose destruction to certificate.

All questions about OSS

Talk to our solutions team

Bring the numbers: how much data, how it arrives, who needs to reach it and where it should live. We will design the programme around them.