Good questions. Short answers.

There is no standing network path to the storage. A route exists only for an authorised session, and it is removed when the session ends.

No. Immutable backup is a logical control on a connected system. OSS removes the network path at the hardware level. Many organisations use both.

No. Live data stays connected. Offline Secure Storage® holds the copies that do not need to be: recovery sources, retained records and the data you could not replace.

A drive in a drawer has no verified owner, no protected building, no audit trail and no succession. A Vault is dedicated hardware in a Firevault Bunker, opened only for an authorised, logged session.

Choose your Vault size online, verify your organisation and identity, and make the first payment at checkout. Storage and Enterprise are designed with our team.

We check the organisation, using your registered company name and Companies House number, and complete identity verification for the primary authorised user. Business Vaults are not provisioned anonymously.

No. File Manager runs in any modern browser, with nothing installed.

Because it is real hardware, not a cancellable software licence. Firevault buys physical drives and allocates them to you. At the end of the term you can renew month by month, retrieve the drive, or upgrade.

Yes. Every Vault has 24/7 on-demand access. You authenticate, the route is enabled for your session, and it is removed when you finish. Sessions last up to 120 minutes.

Through File Manager in your browser during a session: folders, search, uploads and downloads, with no software to install. Every session is logged.

Yes, with File Share: a time-boxed link to one record or folder, with an optional password sent separately. You can revoke it at any time, and every share is logged.

On one nominated day each week, for a 12-hour window. You choose the day during onboarding.

You do. We are the infrastructure provider and we do not know your credentials.

On dedicated physical drives in a Firevault Bunker, a professionally managed data centre in our international estate. We do not publish which site holds which Vault.

Each Vault uses dedicated physical drives with RAID 1 mirroring, so your files are held on both disks. Vault Spare adds pre-provisioned spare hardware for continuity.

No. A Vault is dedicated hardware assigned to one customer. LUV uses a shared instance with your data physically isolated.

Vault 2TB is £360, 4TB £480 and 8TB £600 a month including VAT (£300, £400 or £500 ex VAT), on a 36-month commitment, with the first payment at checkout.

£74.99 a month including VAT (£62.49 ex VAT), on a 36-month commitment, with the first payment at checkout.

Storage is quoted against a published model: who reaches it, and how much capacity you hold in 20TB blocks. Every instance is on a 36-month commitment.

Yes. Moving to a larger Vault can include migration of the data you have stored. If you outgrow 8TB, Storage starts at 20TB.

Prices are shown including VAT, with the ex VAT price beside them. Every page has an inc and ex VAT switch.

You can renew month by month, retrieve the physical drive, or upgrade to a larger Vault.

No. Live data stays connected. A Vault holds the copy you would rely on if those systems were compromised, and works alongside your IT provider, cloud services and security tools.

No. It is one Vault per user. If several people need an offline copy, each has a Vault of their own. Butterfly helps you plan who needs one and which size suits each person.

Yes. Storage is written to through SFTP, a REST API or your existing backup workflows, in authorised windows.

In your own facilities, a Firevault Bunker, or a sovereign hybrid of both. Capacity can be split across sites, so losing one site never removes the archive.

Yes. Every connection, disconnection and identity check is recorded and exportable to your SIEM.

Firevault is Cyber Essentials Plus certified. Offline Secure Storage® can help support GDPR, NIS2, ISO 27001 and NIST CSF obligations.

Every connection, disconnection and identity verification is recorded, so you can show a physical control and a record of each session to auditors and insurers. It can help support your obligations; it does not make you compliant on its own.

Firevault is Cyber Essentials Plus certified. Controls are mapped to NCSC CAF outcomes on request, as evidence for your own assessment, and can help support NIS2, ISO 27001 and GDPR obligations.

Their Vault Buddy, nominated in advance. A Vault Buddy has no access until a qualifying event is evidenced and their identity is verified.

Nominate a Vault Buddy. They have no access until a qualifying event is evidenced and their identity is verified.

Already inside your Vault spare hardware for continuity, alongside RAID 1 mirroring on every Vault.

Over dedicated management Ethernet, cellular SMS or an authenticated API. The command path never touches the production network, so the command does not travel on the wires it is meant to cut.

Yes. Zones are independent: isolate one circuit, one tenant or one SCADA segment without touching the rest.

Each of the ten Control Blueprints, CP-01 to CP-10, is assembled from the nine modules for one outcome, such as stopping kill-chain ransomware or controlling third-party access.

Firevault. Firebreak® is the physical control point within Control.