Guides · 14 chapters · 3 min read
Storage Buyer's Guide
A decision-maker's guide to enterprise-scale offline storage infrastructure. Learn how Storage by Firevault delivers the '0' in your 3-2-1-1-0 backup strategy.
Chapter 1Executive Summary
Who this guide is for: IT Directors, Infrastructure Managers, CISOs, and enterprise architects responsible for data protection at scale.
What you will learn: How Storage by Firevault provides enterprise-grade offline storage infrastructure, what differentiates it from traditional backup, and how to evaluate whether it fits your architecture.
Key takeaway: Storage is the '0' in the 3-2-1-1-0 model. It is the offline, unreachable layer that ensures recovery even when everything else is compromised.
Chapter 2What is Storage?
Storage by Firevault is a scalable, offline storage system designed to keep enterprise workloads out of reach from breaches, ransomware, and credential theft.
Core characteristics:
- Enterprise capacity: 20TB up to 300TB, expandable in defined steps
- Offline by default: Physical disconnection, not software controls
- Full read/write access: Two-way data movement during authorised windows
- Your hardware: Dedicated infrastructure you legally own
Chapter 3What Storage is NOT
Storage is explicitly not:
- Not cloud backup or SaaS: No standing connectivity, no shared tenancy
- Not a data diode or write-only vault: Full two-way access when authorised
- Not always-online infrastructure: Offline is the default state
- Not software-only protection: Physical disconnection at the wire level
Chapter 4Who is Storage For?
Storage is designed for organisations that:
- Hold crown jewel data (IP, customer records, operational systems)
- Require proven offline backup for compliance or insurance
- Need recovery assurance independent of production systems
- Operate in sectors where ransomware is an existential threat
Chapter 5The Problem Storage Solves
Traditional backup fails when attackers have persistent access. Cloud backups can be encrypted alongside production data. Air-gapped tapes require physical logistics. Neither provides rapid, verified recovery.
Storage provides the missing layer: an offline copy that is physically unreachable until you need it, with controlled connectivity for recovery.
Chapter 6The 3-2-1-1-0 Model
Industry best practice recommends:
- 3 copies of data
- 2 different storage types
- 1 offsite copy
- 0 online exposure for recovery copy
Storage becomes that '0'. The offline layer that ensures recovery even when everything else is compromised.
Chapter 7How Storage Works
- Data ingestion: Connect via API or SFTP during authorised windows
- Verification: Data integrity checks confirm successful transfer
- Disconnection: Physical isolation until next authorised session
- Recovery: Controlled reconnection for data retrieval when needed
Chapter 8Deployment Options
- Firevault Bunkers: Hosted in our secure colocation facilities
- On-premise: Deployed in your own data centre
- Hybrid: Split deployment for geographic resilience
Chapter 9Connectivity Options
Storage supports multiple connectivity methods:
- REST API for programmatic access
- SFTP for file-based workflows
- Scheduled connection windows
- On-demand session requests
Chapter 10Security and Compliance
Storage supports compliance with:
- NIST CSF and NIST 800-53
- ISO/IEC 27001
- GDPR Article 32
- NIS2 resilience requirements
- Sector-specific regulations (FCA, HIPAA, PCI-DSS)
Chapter 11Ownership Model
With Storage, you own the hardware:
- Legal ownership of systems and data
- Legal Recovery Assignment documentation
- No third-party access (not even Firevault when offline)
Chapter 12Pricing
Storage pricing is based on capacity, deployment model, and service level. Enterprise pricing requires a discovery call to assess your specific requirements.
Chapter 13Getting Started
- Architecture review: Assess your data protection requirements
- Capacity planning: Determine storage requirements
- Deployment design: Select location and connectivity
- Provisioning: Hardware allocation and configuration
- Integration: Connect to your backup workflows
Chapter 14Next Steps
If your organisation needs proven offline storage for crown jewel data, book a technical consultation to discuss your architecture.
Where Firevault fits
A recovery copy an attacker cannot reach
Offline Secure Storage® keeps a clean copy of your data on hardware that is physically disconnected, so backup and recovery do not depend on systems an intruder can touch.
- 1Hardware Your copy sits on dedicated encrypted hardware
- 2Disconnect Offline by default, connected only when you say so
- 3Recovery A known-clean copy to rebuild from, on your timetable
- 4Location Held in a secure Firevault Bunker



Put this guide into practice
Ready to apply what you have learned? Explore how Firevault delivers the offline protection covered in this guide.
From £360 a month including VAT. 36-month commitment. First payment at checkout.
Business
Size your Vault.
2TB, 4TB or 8TB of dedicated hardware, from £360 a month inc VAT.
Larger estates
Request a Storage design.
From 20TB, designed with our solutions team.
Personal
LUV, 300GB.
Identity documents, wills and family archives, opened one day a week.



