Firevault Awarded Cyber Essentials and Cyber Essentials Plus Certification
Firevault has been awarded Cyber Essentials and Cyber Essentials Plus certification, the UK Government-backed scheme run by the NCSC, following an independent technical audit of its systems and controls.
Article record
Why it matters
What this means for organisations holding critical data
Firevault has been awarded Cyber Essentials and Cyber Essentials Plus certification, the UK Government-backed scheme run by the NCSC, following an independent technical audit of its systems and controls.
Firevault is pleased to announce that it has been awarded both Cyber Essentials and Cyber Essentials Plus certification, the UK Government-backed scheme developed by the National Cyber Security Centre (NCSC) to help organisations guard against the most common cyber threats.
About the Certification
Cyber Essentials verifies that an organisation has the five core technical controls in place: boundary firewalls, secure configuration, user access control, malware protection, and security update management. Cyber Essentials Plus goes further, requiring a hands-on technical audit by an independent, qualified assessor, including vulnerability testing of internet-facing systems, workstations, and email clients.
Why It Matters
Achieving Cyber Essentials Plus is an independently verified statement that our controls have been tested in practice, not just declared on paper. For the legal, accountancy, and regulated-sector clients we serve, it provides supply-chain assurance that Firevault handles their data with the rigour their own regulators and insurers expect.
What This Means for Our Clients
Clients using Offline Secure Storage, Control, and LUV services now have documented, third-party evidence that Firevault''s operational systems meet the UK Government''s baseline for cyber hygiene. This evidence can be referenced in SRA, ICAEW, GDPR, and cyber-insurance due-diligence conversations, and forms part of the assurance pack we provide to prospective customers.
A Word From Firevault
Mark Fermor, Founder of Firevault, said: "Cyber Essentials Plus is a meaningful milestone for us. Our clients trust Firevault with the data that matters most to their business, so independent verification of our controls is the least they should expect. It sits alongside the physical protections we build into every vault, and reinforces our commitment to secure data and trusted futures."
Ongoing Commitment
Firevault will maintain annual recertification and continue to expand its programme of independent assessments as the business grows.
Key Takeaways
- Both certifications achieved: Cyber Essentials and the more rigorous Cyber Essentials Plus.
- Independently tested: Hands-on technical audit by a qualified external assessor.
- Supply-chain ready: Supports SRA, ICAEW, GDPR, and cyber-insurance due diligence.
- Annually renewed: Certification is maintained through yearly reassessment.
How Firevault would handle this
Physical disconnection removes the path an attacker needs
Offline Secure Storage® holds a clean copy of your data on hardware that is physically disconnected, so an intrusion cannot reach it, encrypt it or delete it.






