For engineering, design, research and creative firms
The value of intellectual property depends on exclusivity, so the master copy should not sit permanently reachable on a connected network.
Vault from £360 a month inc VAT · 2TB, 4TB or 8TB
Working copies
Online, shared
Your master copy
Physically offline
Why it matters
Published cases from the last few years. In each one, what was connected shaped what happened next.
The path
A senior engineer with legitimate access downloaded about 14,000 confidential files before leaving.
What followed
He pleaded guilty to theft of trade secrets in 2020 and was sentenced to 18 months in prison.
The people with legitimate access are part of the risk.
The path
A criminal group got into the company’s network.
What followed
Employee credentials and proprietary information, including source code, were taken and leaked online.
Source code is a target in its own right.
These cases show how connected work can be taken. They are not claims about what any single control would have prevented.
What it is
Your team needs working copies online. Your master copies do not have to stay there.
If only your master copies had no network path to them while nobody was using them.
Welcome to Offline Secure Storage®.
A new approach to data storage. Your data sits on your own drives, physically disconnected, until a named person opens it from their registered phone.
Controlled ConnectivityPhysically disconnected at Layer 1. No IP path exists until a session is authorised
Secured Offline AccessRequested from a registered phone, out of band, then sign-in and MFA
Secured Offline DataYour own dedicated drives, single-tenant, in a Firevault Bunker
What it gives you
Active repositories, project tools and everyday collaboration stay as they are. OSS keeps the definitive master physically offline, with named responsibility.
Choose a situation to see the difference.
Choose a situation
SituationA departing employee copies source and builds from the shared repository.
Nobody can say which version is authoritative, or prove when it existed.
The dated master sits on a different access path. It won’t stop copying from the live repository, but you keep an authoritative record.
The retained data is physically disconnected. Your live systems stay connected and still need their own protection.
Illustrated Vault access cycle, not a live session. Only data retained in OSS is protected while physically disconnected.
Selected source, designs and research remain physically offline between authorised sessions.
Active repositories, project tools and everyday collaboration remain in place.
Agree custody, retention and access, and keep the evidence behind your ownership claim.
Who it’s for
Three illustrative situations. Working files stay online; selected master copies are held separately.
Switch between without and with OSS, or let each one turn by itself.
Meet Emily.
Engineering lead
Tuesday · 02:14The team needs to establish which source and build records are authoritative, from a repository the leaver could reach.
The working repository and the retained master have different access paths.
Vault · From £360 a month
Digital safe deposit box™
Meet Priya.
Design director
Thursday · 06:40Shared working drawings were accessible, and the team must review which final designs were exposed.
Release a selected file, not the whole master archive.
File Share · in every Vault
One link, withdrawn at any time
Meet Tom.
Research lead
Monday · 08:05The team needs its retained data and creation evidence to assess what happened, from systems that were connected.
Keep the data and evidence behind the work.
Storage · From 20TB
Larger research archives
Emily, Priya and Tom are illustrative. Our customer story is real.
Use cases
Four situations we are asked about most. Each keeps a dated master offline, with a named holder and a logged session.
Keep dated source exports and signed release builds offline, separate from the repository everyone works in.
What to keep offline
Usually held by: Engineering lead or CTO
Keep the approved final designs offline, and share one file with a partner rather than the archive.
What to keep offline
Usually held by: Design director
Keep selected datasets and lab records offline, with the dates and evidence behind the work.
What to keep offline
Usually held by: Research lead
Keep the dated evidence of what you made and when, alongside your registrations and agreements.
What to keep offline
Usually held by: IP lead or general counsel
Choose your OSS
Start with a Vault for the person responsible for retained masters, or Storage for larger archives.
Vault
For the verified holder of source, design and research masters
Storage
For firm-wide archives and backups
LUV
For a sole creator’s files, opened now and then
Every option is on a 36-month commitment. Over 300TB? See Enterprise · Compare all four
Protect the asset. Control the path.Offline Secure Storage® protects the work itself. Control by Firevault decides which network paths into your critical systems exist, and when.
Explore ControlFrom a real customer
“I had full autonomy over the way the Vault was managed. They facilitated the requests I had and adapted to what our business needed.”
Chief Executive, award-winning multi-site UK care provider
Firevault, as featured in
techradar proyahoo!financeChannel InsiderSecurity BuyerSecurityBriefCyber Essentials Plus certifiedHow it works
No software to install and nothing to migrate. Your Vault sits alongside everything you already have.
Pick a size and order online. We check your identity and set your Vault up in a Firevault Bunker.
Ask for access from your registered phone, then sign in with MFA. The request does not travel over your network.
Work in your browser for up to 120 minutes. Share one file at a time. Every session is logged.
When you finish, the connection is removed. Until next time, there is no path to it.
Worth knowing. A Vault keeps a copy offline, but it cannot check what you put in it. Keep your phone and sign-in safe, and check your files now and then.
See it for yourself
Step through a closed Vault, an open session and the moment it disconnects again.
Choose a state, or let it play.
Vault states
Z0Outside
Anyone on the internet
Z1Your team
Repositories, project tools, email
Z2Firevault Bunker
Single-tenant drives
The normal state
Closed is the normal state. There is nothing on the network to find, search or sign in to.
Requested
No session requested.
Reported by the Vault
Vault physically disconnected at Layer 1.
On record
Last session closed Tue 16:42 by the engineering lead.
Concept illustration. The request path, the Vault’s reported state and the session record are shown separately because they are not the same thing.
Questions worth asking
Want your project lead or legal adviser to see how retained masters are accessed? Book a demo.
No. Keep everything you have. A Vault adds one retained master that sits offline, so it doesn’t depend on any of it holding.
No. Repositories and project tools stay as they are. Only the holder learns one short routine: approve from their phone, sign in, add or find files.
No. A dated master and a log of every session support your evidence. Legal ownership depends on your agreements, registrations and professional advice.
No. Each Vault belongs to one named person. For larger archives, Storage gives several named people their own access.
Open the Vault, pick the file and send a link that expires, with a password sent separately. You can withdraw it at any time.
In a Firevault Bunker, with three independent entry checks, including biometrics, and 24/7 monitoring.
Your next step
Keep selected master copies offline. Your team carries on working with its everyday copies.
Create your VaultPrefer to talk first? Book a demoVault from £360 a month inc VAT, 36 months. For larger archives, ask for a Storage proposal.
Mark Fermor, Co-Founder & Chief Technology, Security & Marketing Officer
David Bailey, Co-Founder & CEO
Kenny Phipps, Solutions Lead
Retained master
Vault Buddy 
LUV