What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

What is offline secure storage?

Offline secure storage keeps your data on physically disconnected hardware. Unlike cloud storage or network-attached systems, offline storage cannot be reached by remote attackers because there is no network connection to exploit. Firevault systems remain physically disconnected until you specifically request access.

How is this different from backup?

Backup creates copies of data that remains online and reachable. Firevault removes the original reachability. Your data is not just copied, it is protected by physical disconnection. When attackers breach your network, backups connected to that network are vulnerable. Offline storage is not.

What does 'physically disconnected' mean?

Physically disconnected means there is a physical separation between your data and any network. The gap is the literal absence of any network connection. This is the same principle used to protect classified government systems and critical infrastructure.

How is Firevault different from cloud storage?

Cloud storage keeps your data on internet connected servers, accessible around the clock, which also means attackers can attempt access around the clock. Firevault stores your data offline by default, connecting only when you verify your identity and request access. When you are done, the connection is severed.

Why not just use an external hard drive?

An external hard drive gives you physical control, but no encryption, no identity verification, no redundancy, no succession planning, and no protection from fire, theft, or damage. Firevault combines physical disconnection with Quantum Key Encryption, AES-256 hardware encryption, RAID 1 redundancy, and CNI-grade facilities. It is the security of offline with none of the fragility.

What does 'unreachable' mean?

Unreachable means your data has no IP address, no network path, and no standing connection. It cannot be pinged, scanned, or targeted remotely. This is fundamentally different from firewalled or encrypted data which is still technically reachable. You cannot breach what is not connected.

How do I get started with Firevault?

Start by exploring our Solutions page to find the right protection for your needs, or use the Vault Builder to answer a few quick questions about your digital life. We will recommend the right vault size for you. From there, you complete identity verification (Know Your Customer), set up Multi-Factor Authentication, and your vault is provisioned on dedicated hardware within a Firevault Bunker.

How long does setup take?

Once you have completed identity verification and chosen your vault, provisioning typically takes a few working days. Your dedicated hardware is configured, encrypted, and tested before you receive access credentials.

Do I need any special software?

No. Firevault is accessed through a secure web interface. There is no software to install, no plugins, and no dependencies. You just need a modern browser and your verified credentials.

Can I migrate data from my existing cloud provider?

Yes. Once your vault is active, you can upload files directly through the Firevault file manager. For large migrations, our team can assist with secure bulk transfer options to move data from existing cloud providers, NAS devices, or local storage.

Is there a minimum commitment?

Yes. All Vault plans require a 36-month commitment. This reflects the dedicated hardware, physical infrastructure, and long-term protection that Firevault provides. It is not a software subscription that can be spun up and down. Your vault is real, physical, and yours.

Can I access my data when I need it?

Yes. Access frequency depends on your vault plan — some plans include scheduled access windows, while others offer more flexible availability. When you connect, access requires your verified identity, and once you are done, the connection is severed again. Your data is available when you need it, protected when you do not.

What happens if I lose access?

Firevault includes succession and continuity planning. You can designate successors, set up delegate access, and ensure your data remains accessible through life transitions. Our secure recovery processes are designed to help you regain access without compromising security.

Can I share access with others?

Firevault supports controlled access delegation. You can authorise specific individuals to access your vault under defined conditions. All access is logged and auditable, giving you complete visibility over who accessed what and when.

How do I verify my identity?

Firevault uses multi-factor authentication combined with KYC (Know Your Customer) identity verification. This includes something you know (password) and something you have (device), ensuring secure and verified access to your data.

What is the difference between on-demand and scheduled access?

Our Low Use Vault includes two scheduled access windows per week, where your vault connects at pre-arranged times. All higher tiers include 24/7 on-demand access, meaning you can connect whenever you need to. Both models maintain full physical disconnection between sessions.

Can someone at Firevault access my data?

No. Firevault operates on a zero-knowledge architecture. Your encryption keys are yours alone. Our team can manage the physical infrastructure and connectivity, but they cannot read, view, or decrypt your files. Even under legal compulsion, we cannot provide access to data we cannot decrypt.

How secure is the encryption?

Firevault uses Quantum Key Encryption combined with hardware level AES-256 encryption. Quantum-safe key exchange protects against both current and future threats, while AES-256 secures data at rest at the hardware level. But encryption is just one layer. Physical disconnection means there is no network path for attackers to even attempt to break. Encryption protects the data; physical disconnection prevents access entirely.

What happens if Firevault is breached?

Even if our management systems were compromised, your data remains protected. The storage systems themselves are physically isolated and require verified physical access. An attacker would need to physically locate and access the hardware, and then still break the encryption.

Is my data encrypted in transit?

Yes. When you do access your vault, all data transfer uses end-to-end encryption with TLS 1.3. However, the key protection is that this transfer window is extremely brief compared to always-online systems.

Who has access to my encryption keys?

Only you. Firevault operates on a zero-knowledge architecture for your encryption keys. We cannot access, read, or decrypt your data. Even under legal compulsion, we cannot provide access to data we cannot decrypt.

What is Quantum Key Encryption and why does it matter?

Quantum Key Encryption uses quantum-safe algorithms for key exchange, protecting your data against both current computing threats and future quantum computing attacks. Traditional encryption methods may become vulnerable as quantum computers advance. Firevault is already protected against this, so your data remains secure for decades to come.

What is the Layer 1 out-of-band control plane?

Firevault's control plane — the system that physically connects and disconnects your vault — operates entirely outside of any network. It has no IP address, no network connection, and no admin interface. This is a world first. It means the mechanism that controls access to your data cannot itself be attacked remotely. Physics, not promises.

Has Firevault ever been breached?

No. Firevault has zero successful breaches since launch. This is not luck. It is architecture. You cannot remotely breach a system that is not remotely connected. Our track record reflects the fundamental advantage of physical disconnection over software-only security.

Where are Firevault Bunkers located?

Firevault Bunkers are CNI-grade (Critical National Infrastructure) secure colocation facilities located in the United Kingdom. Each facility meets the physical security standards required for sensitive government and defence operations, including 24/7 monitoring, biometric access controls, and environmental protections.

Is my data on shared infrastructure?

No. Every Firevault customer has dedicated physical hardware. Your vault is not a partition on a shared server or a virtual volume in a data centre. It is actual, physical hard drives assigned exclusively to you. No other customer's data touches your hardware.

What happens if the hardware fails?

All Firevault vaults use RAID 1 mirroring, meaning your data is written to two independent drives simultaneously. If one drive fails, your data remains fully intact on the second. Failed drives are replaced and rebuilt without any data loss or interruption to your service.

What about fire, flood, or physical damage?

Firevault Bunkers are built to withstand environmental threats including fire, flood, and power failure. Facilities include fire suppression systems, flood defences, redundant power supplies, and backup generators. Your data is more physically protected in a Firevault Bunker than in any office, home, or commercial data centre.

Can I visit the facility where my data is stored?

Facility visits can be arranged for enterprise customers under controlled conditions. All visits require advance booking, identity verification, and are escorted by Firevault personnel. This is part of our commitment to transparency while maintaining the security of all customers.

What is the difference between Vault and Storage?

Firevault offers two product families: Offline Secure Storage (OSS) and Control. Within OSS, Vault is designed for individuals, directors, and families protecting personal documents, liability files, and sensitive records. Storage is for businesses requiring offline protection for workloads and archives. Control provides visibility and governance tools for managing who accesses what.

Butterfly is our enterprise deployment methodology for organisations deploying Vaults at scale. It uses the VPPP framework (Vault, Policy, Permissions, Purpose) to assign dedicated Vaults across four zones: Executive, External, Client, and Archive.

fv-PaaS (Platform-as-a-Service) sits within our Control product family. It allows organisations to integrate Firevault offline security architecture into their existing infrastructure through modular components like FV-Archive, FV-Transfer, and FV-Relay.

How does pricing work?

Vault plans start at £74.99 per month for 300GB and go up to £600 per month for 8TB. All plans require a 36-month commitment and prices are inclusive of VAT. Storage and Platform pricing is tailored to your requirements. Use the Vault Builder for a personalised recommendation or speak to the team for enterprise pricing.

What vault sizes are available?

Firevault offers four tiers: Entry (300GB), Personal (2TB), Professional (4TB), and Legacy (8TB). Each tier includes hardware encryption, identity verification, and Firevault Bunker storage. Higher tiers add 24/7 on-demand access, backup vaults, succession planning, and dedicated support.

Can I upgrade my vault later?

Yes. You can upgrade to a higher capacity tier during your commitment period. Your data is migrated to larger dedicated hardware and your pricing adjusts accordingly. Downgrades are not available during the commitment period as hardware is provisioned specifically for your tier.

Are prices inclusive of VAT?

Yes. All published Vault prices are inclusive of VAT. There are no hidden fees, setup charges, or per-access costs. What you see is what you pay.

Is Firevault suitable for my business?

Firevault serves businesses of all sizes, from SMEs to enterprises. Whether you need to protect customer data, intellectual property, financial records, or strategic documents, offline storage provides a level of protection that network-connected systems cannot match.

Can Firevault integrate with our existing systems?

Yes. Our fv-PaaS platform offers integration options through secure APIs and modular components. Our team works with your IT department to design an implementation that fits your existing infrastructure and workflows.

What about team access and permissions?

Butterfly and fv-PaaS include role-based access controls. You can define who can access what, set approval workflows, and maintain complete audit trails of all access. Permissions can be granular down to individual file or folder level.

Do you offer on-premises deployment?

Yes. For organisations with specific security or compliance requirements, we offer on-premises deployment options where the Firevault infrastructure is installed within your own secure facilities.

How does Firevault support the 3-2-1-0 backup rule?

The 3-2-1-0 rule requires three copies of data, on two different media types, with one offsite, and zero network exposure. Most backup solutions fail at the last requirement. Firevault Storage is purpose built for the zero: completely offline, physically disconnected storage that satisfies the most demanding backup strategies.

Can Firevault protect against ransomware?

Yes. Ransomware cannot encrypt what it cannot reach. Because Firevault storage is physically disconnected from your network, ransomware has no path to your protected data. Even if your entire network is compromised, your Firevault data remains untouched and available for recovery.

Is this compliant with data protection regulations?

Firevault is designed with compliance in mind. The architecture supports GDPR, sector-specific regulations (healthcare, legal, financial services), and provides audit trails for governance and reporting. Our offline approach often exceeds regulatory requirements for data protection.

Where is my data stored?

Data is stored on dedicated physical devices within Firevault Bunkers, secure colocation facilities in the United Kingdom. You own and control the storage. There is no shared infrastructure with other customers.

Can Firevault help with GDPR compliance?

Yes. Firevault supports GDPR principles including data minimisation, purpose limitation, and security. The offline nature of storage means personal data is protected from the most common breach vectors. We provide documentation to support your compliance reporting.

Learn

Frequently Asked Questions

Everything you need to know about Offline Secure Storage (OSS), how Firevault works, and what makes it different from traditional data protection.

Understanding Offline Storage Getting Started Access and Control Security and Encryption Physical Infrastructure Products and Pricing Business and Enterprise Compliance and Regulations Succession and Continuity Technical and Support

Frequently Asked Questions

Understanding Offline Storage

What is offline secure storage?

How is this different from backup?

What does 'physically disconnected' mean?

How is Firevault different from cloud storage?

Why not just use an external hard drive?

What does 'unreachable' mean?

Getting Started

How do I get started with Firevault?

How long does setup take?

Do I need any special software?

Can I migrate data from my existing cloud provider?

Is there a minimum commitment?

Access and Control

Can I access my data when I need it?

What happens if I lose access?

Can I share access with others?

How do I verify my identity?

What is the difference between on-demand and scheduled access?

Can someone at Firevault access my data?

Security and Encryption

How secure is the encryption?

What happens if Firevault is breached?

Is my data encrypted in transit?

Who has access to my encryption keys?

What is Quantum Key Encryption and why does it matter?

What is the Layer 1 out-of-band control plane?

Has Firevault ever been breached?

Physical Infrastructure

Where are Firevault Bunkers located?

Is my data on shared infrastructure?

What happens if the hardware fails?

What about fire, flood, or physical damage?

Can I visit the facility where my data is stored?

Products and Pricing

What is the difference between Vault and Storage?

What is Butterfly?

What is fv-PaaS?

How does pricing work?

What vault sizes are available?

Can I upgrade my vault later?

Are prices inclusive of VAT?

Business and Enterprise

Is Firevault suitable for my business?

Can Firevault integrate with our existing systems?

What about team access and permissions?

Do you offer on-premises deployment?

How does Firevault support the 3-2-1-0 backup rule?

Can Firevault protect against ransomware?

Compliance and Regulations

Is this compliant with data protection regulations?

Where is my data stored?

Can Firevault help with GDPR compliance?

What audit capabilities are available?

Which compliance frameworks does Firevault align with?

Is Firevault suitable for regulated industries?

Succession and Continuity

What happens to my vault if something happens to me?

How does succession transfer work?

Can I change my succession settings?

What about business continuity?

What is Vault Buddy?

Technical and Support

What file types can I store?

Is there a file size limit?

How do I get support?

What if I need to retrieve data urgently?

How do I manage my files inside the vault?

What happens at the end of my 36-month commitment?

Can I cancel early?

Your privacy matters