Firevault, offline secure storage, physically disconnected from the internet
Pricing

For organisations that hold data they can’t replace

Online data is a fair target.
Keep the copy you can’t replace offline.

Customer records, pupil data, supplier contracts and public service records don’t need to sit on a connected network every hour of every day. Keep one retained copy in a Vault or Storage, physically disconnected until named people open it.

Vault from £360 a month inc VAT · Storage from 20TB, quoted for you

Your business systems

Always connected

Your retained copy

Physically offline

Why it matters

It has happened
to organisations like yours.

Published cases from the last few years. In each one, what was connected shaped what happened next.

Co-op

April 2025

The path

Attackers got into the Co-op’s IT systems, and the group shut parts of its network down.

What followed

Data of all 6.5 million members was taken, some shelves went empty, and the group expected a £120 million hit to full-year earnings.

Customer data and operations were reachable together.

Peter Green Chilled

May 2025

The path

Ransomware hit a chilled food distributor supplying major UK supermarkets.

What followed

Orders could not be processed, deliveries stopped and stock went to waste.

When the supplier stops, the shelf empties.

Kido nursery chain

September 2025

The path

Attackers got into the systems of a London nursery chain.

What followed

Names, photos and addresses of around 8,000 children were taken. The attackers published profiles and contacted parents to pressure the business.

Some data is too sensitive to sit online all day.

These incidents show how connected data shapes what happens next. They are not claims about what any single control would have prevented.

What it is

Your business has to stay connected. Your retained copy doesn’t.

If only there were one copy of the data you can’t replace, with no network path to it.

Welcome to Offline Secure Storage®.

A new approach to data storage. Your data sits on your own drives, physically disconnected, until a named person opens it from their registered phone.

  • Controlled ConnectivityPhysically disconnected at Layer 1. No IP path exists until a session is authorised

  • Secured Offline AccessRequested from a registered phone, out of band, then sign-in and MFA

  • Secured Offline DataYour own dedicated drives, single-tenant, in a Firevault Bunker

What it gives you

Peace of mind,
without changing how you work.

Your systems, suppliers and backups stay as they are. OSS adds one retained copy of the data you can’t replace, physically offline.

Choose a situation to see the difference.

Choose a situation

SituationRansomware spreads through the business and reaches the backups.

TodaySame network
RansomwareSpreading
BackupsSame network
The businessStopped

Everything reachable is encrypted together, backups included.

With OSSPhysically offline
Your working systemsStay connected
Physical disconnect
Retained copyData offline
Registered phoneSeparate, non-IP connection control

One retained copy has no path to it, so the rebuild starts from data you trust.

Offline

The retained data is physically disconnected. Your live systems stay connected and still need their own protection.

Illustrated Vault access cycle, not a live session. Only data retained in OSS is protected while physically disconnected.

A copy you own.

Your own drives, single-tenant, not a share of someone else’s cloud.

Nothing changes for your team.

Your systems, suppliers and backups stay exactly as they are.

Named responsibility.

Each holder is identity verified, and every session is logged.

Who it’s for

Picture the moment
the data becomes the story.

Three organisations. Three bad days. And the difference one offline copy makes.

Switch between without and with OSS, or let each one turn by itself.

Illustrative workplace photograph for Rachel, Head of data, regional retailer; not a real customer

Meet Rachel.

Head of data, regional retailer

Monday · 07:20

“Our customer database has been copied, and the systems are down.”

The live database and its backups sat on the network that was hit. Rebuilding customer accounts depends on what is left.

Customers get answers, not apologies.

Storage · From 20TB

Named people, own access
Illustrative workplace photograph for Amir, Business manager, multi-academy trust; not a real customer

Meet Amir.

Business manager, multi-academy trust

Wednesday · 08:45

“The school information system is encrypted, and exam evidence is due next week.”

Pupil records and assessment evidence live in one system, backed up on the same network.

Exams go ahead with the evidence intact.

Vault · From £360 a month

Digital safe deposit box™
Illustrative workplace photograph for Jo, Operations director, chilled food distributor; not a real customer

Meet Jo.

Operations director, chilled food distributor

Friday · 04:30

“Orders have stopped. We can’t see what’s due where.”

Order, routing and customer contract data sit on the systems that were encrypted.

Lorries leave on Monday, not next month.

Storage · From 20TB

Recovery copies at scale

Rachel, Amir and Jo are illustrative. Our customer story is real.

Use cases

Where organisations use Offline Secure Storage®.

Six situations we are asked about most. Each keeps one retained copy offline, with named holders and logged sessions.

Customer data

Keep a verified export of customer, consent and account records offline, so you can rebuild after deletion or encryption and show what you held.

What to keep offline

Customer database exportsConsent and preference recordsOrder and account historySubject access request records

Usually held by: Head of data or data protection lead

Public services

Councils and public bodies keep case and statutory records for years. Keep the retained copy offline, so services can continue when a shared system is down.

What to keep offline

Case recordsStatutory registersDecision recordsContinuity plans

Usually held by: Information governance lead or SIRO

Schools, colleges and trusts

Pupil records, assessment evidence and admissions files need to survive an incident in term time. Keep exports offline, held by a named person.

What to keep offline

Pupil recordsExam and assessment evidenceAdmissions and SEND recordsStaff records

Usually held by: Business manager or data protection lead

Retail

Loyalty, pricing and supplier data keep the business trading. Keep the masters and contracts offline, ready for a rebuild.

What to keep offline

Loyalty and customer exportsProduct and pricing mastersSupplier contractsStore and finance records

Usually held by: Head of data or IT director

Supply chain and logistics

When orders and routing data are encrypted, lorries stop. Keep the data and settings you would restart from offline.

What to keep offline

Order and routing dataCustomer and supplier contractsWarehouse and stock recordsIntegration settings

Usually held by: Operations director

IT and managed service providers

If your tools are compromised, every client is hit at once. Keep each client’s recovery copy outside the platforms attackers target.

What to keep offline

Client backup copiesClient configurationsContracts and SLAsRunbooks

Usually held by: Service owner, with named engineers

Choose your OSS

Choose your OSS.
Order it today.

Start with a Vault for one data owner, or ask for a Storage proposal for larger retained copies.

Most popular

Vault

For the verified holder of selected business records

£480a month inc VAT£400 ex VAT
  • Open it any time, 24/7
  • Your own dedicated drives
  • Share one file at a time
  • Name a Vault Buddy
Create your 4TB Vault

Storage

For larger retained copies and backups

From 20TBquoted for you
  • Grows in 20TB steps
  • Works with your backup software
  • Named people, each with their own access
Explore Storage

LUV

For a small organisation’s files, opened now and then

£74.99a month inc VAT
  • 300GB
  • Opens one day a week that you choose
  • Share one file at a time
Explore LUV

Every option is on a 36-month commitment. Over 300TB? See Enterprise · Compare all four

Protect the asset. Control the path.Offline Secure Storage® protects the data itself. Control by Firevault decides which network paths into your critical systems exist, and when, including supplier access.

Explore Control

From a real customer

“I had full autonomy over the way the Vault was managed. They facilitated the requests I had and adapted to what our business needed.”

Chief Executive, award-winning multi-site UK care provider

Records and backupsheld in a Vault
Their IT providerkept on
Multi-siteUK care provider
Read the customer story

Firevault, as featured in

techradar proyahoo!financeChannel InsiderSecurity BuyerSecurityBriefCyber Essentials Plus certified

How it works

Simple to start.
Simple to use.

No software to install and nothing to migrate. Your Vault sits alongside everything you already have.

  1. 01Order
  2. 02Request
  3. 03Open
  4. 04Offline
  1. Identity checked
    You
    Your Vault

    Choose your Vault.

    Pick a size and order online. We check your identity and set your Vault up in a Firevault Bunker.

  2. Requested from your phone
    Registered phone
    Request out of band
    Your Vault

    Open it from your phone.

    Ask for access from your registered phone, then sign in with MFA. The request does not travel over your network.

  3. Physical access granted
    Your browser
    Your Vault

    Add or find files.

    Work in your browser for up to 120 minutes. Share one file at a time. Every session is logged.

  4. Offline again
    Your network
    Your Vault

    It goes offline again.

    When you finish, the connection is removed. Until next time, there is no path to it.

Worth knowing. A Vault keeps a copy offline, but it cannot check what you put in it. Keep your phone and sign-in safe, and check your files now and then.

See it for yourself

One Vault.
Three states.

Step through a closed Vault, an open session and the moment it disconnects again.

Choose a state, or let it play.

Vault states

Z0Outside

Anyone on the internet

Z1Your business

Customer, finance and operations

Z2Firevault Bunker

Single-tenant drives

Attacker
Your team
Your Vault
Attacker routeDisconnected
Session routeDisconnected
Attacker routeDisconnected
Session routeDisconnected
Registered phoneSeparate request path, out of band

The normal state

Closed

Closed is the normal state. There is nothing on the network to find, search or sign in to.

Requested

No session requested.

Reported by the Vault

Vault physically disconnected at Layer 1.

On record

Last session closed Mon 18:10 by the data owner.

Concept illustration. The request path, the Vault’s reported state and the session record are shown separately because they are not the same thing.

Questions worth asking

Questions
worth asking.

Want your data owners to see how a retained copy is opened? Book a demo.

No. Keep everything you have. OSS adds one retained copy of the data you can’t replace, physically offline, so it doesn’t depend on any of it holding.

See all questions

Your next step

Which data could your organisation least afford to lose, or see published?

Keep one retained copy of it physically offline. Everyone carries on working as they do today.

Create your VaultPrefer to talk first? Book a demo

Vault from £360 a month inc VAT, 36 months. For larger retained copies, ask for a Storage proposal.

Mark Fermor, Co-Founder & Chief Technology, Security & Marketing Officer
David Bailey, Co-Founder & CEO
Kenny Phipps, Solutions Lead