--- title: "Offline Secure Storage for Sensitive Business Data | Firevault" url: https://fire-vault.com/oss-for-business-data description: "Customer records, pupil data, supply chain and public service records, kept physically offline in your own Vault or Storage, opened by named people." lang: en-GB --- For organisations that hold data they can’t replace # Online data is a fair target. Keep the copy you can’t replace offline. Customer records, pupil data, supplier contracts and public service records don’t need to sit on a connected network every hour of every day. Keep one retained copy in a Vault or Storage, physically disconnected until named people open it. Create your Vault: https://fire-vault.com/get-started See how it works Vault from £360 a month inc VAT · Storage from 20TB, quoted for you Your business systems **Always connected** Your retained copy **Physically offline** Why it matters ## It has happened to organisations like yours. Published cases from the last few years. In each one, what was connected shaped what happened next. ### Co-op April 2025 The path Attackers got into the Co-op’s IT systems, and the group shut parts of its network down. What followed Data of all 6.5 million members was taken, some shelves went empty, and the group expected a £120 million hit to full-year earnings. Customer data and operations were reachable together. Retained copy The Register (https://theregister.com/2025/07/16/coop_data_stolen/)Hargreaves Lansdown (https://www.hl.co.uk/shares/stock-market-news/company--news/data-on-all-6.5m-co-op-members-stolen-in-attack-ceo) ### Peter Green Chilled May 2025 The path Ransomware hit a chilled food distributor supplying major UK supermarkets. What followed Orders could not be processed, deliveries stopped and stock went to waste. When the supplier stops, the shelf empties. Recovery copy Computing (https://www.computing.co.uk/news/2025/security/supplier-to-tesco-aldi-and-lidl-hit-with-ransomware) ### Kido nursery chain September 2025 The path Attackers got into the systems of a London nursery chain. What followed Names, photos and addresses of around 8,000 children were taken. The attackers published profiles and contacted parents to pressure the business. Some data is too sensitive to sit online all day. Offline copy Malwarebytes (https://www.malwarebytes.com/blog/news/2025/09/hackers-threaten-parents-get-nursery-to-pay-ransom-or-we-leak-your-childs-data)Bitdefender (https://www.bitdefender.com/en-gb/blog/hotforsecurity/kido-nursery-cyber-attack-arrests) These incidents show how connected data shapes what happens next. They are not claims about what any single control would have prevented. What it is Your business has to stay connected. Your retained copy doesn’t. If only there were one copy of the data you can’t replace, with no network path to it. Welcome to Offline Secure Storage®. A new approach to data storage. Your data sits on your own drives, physically disconnected, until a named person opens it from their registered phone. - **Controlled Connectivity**Physically disconnected at Layer 1. No IP path exists until a session is authorised - **Secured Offline Access**Requested from a registered phone, out of band, then sign-in and MFA - **Secured Offline Data**Your own dedicated drives, single-tenant, in a Firevault Bunker What it gives you ## Peace of mind, without changing how you work. Your systems, suppliers and backups stay as they are. **OSS adds one retained copy of the data you can’t replace, physically offline.** Choose a situation to see the difference. Choose a situation Situation Ransomware spreads through the business and reaches the backups. **Today**Same network **Ransomware**Spreading **Backups**Same network **The business**Stopped **Everything reachable is encrypted together,** backups included. **With OSS**Physically offline **Your working systems**Stay connected **Physical disconnect** **Retained copy**Data offline **Registered phone**Separate, non-IP connection control **One retained copy has no path to it,** so the rebuild starts from data you trust. **Offline** The retained data is physically disconnected. Your live systems stay connected and still need their own protection. Illustrated Vault access cycle, not a live session. Only data retained in OSS is protected while physically disconnected. **A copy you own.** Your own drives, single-tenant, not a share of someone else’s cloud. **Nothing changes for your team.** Your systems, suppliers and backups stay exactly as they are. **Named responsibility.** Each holder is identity verified, and every session is logged. Who it’s for ## Picture the moment the data becomes the story. Three organisations. Three bad days. And the difference one offline copy makes. Switch between without and with OSS, or let each one turn by itself. Image: Illustrative workplace photograph for Rachel, Head of data, regional retailer; not a real customer (https://fire-vault.com/__l5e/assets-v1/80c6335c-7f27-4367-856f-270e27cbdcee/story-gov-w.webp) Meet Rachel. Head of data, regional retailer Monday · 07:20 ### “Our customer database has been copied, and the systems are down.” The live database and its backups sat on the network that was hit. Rebuilding customer accounts depends on what is left. Customers get answers, not apologies. Storage · From 20TB Named people, own access https://fire-vault.com/storage Image: Illustrative workplace photograph for Amir, Business manager, multi-academy trust; not a real customer (https://fire-vault.com/__l5e/assets-v1/26e506e7-c9f6-43b6-8046-79756ffcdced/story-ban-w.webp) Meet Amir. Business manager, multi-academy trust Wednesday · 08:45 ### “The school information system is encrypted, and exam evidence is due next week.” Pupil records and assessment evidence live in one system, backed up on the same network. Exams go ahead with the evidence intact. Vault · From £360 a month Digital safe deposit box™ https://fire-vault.com/vault Image: Illustrative workplace photograph for Jo, Operations director, chilled food distributor; not a real customer (https://fire-vault.com/__l5e/assets-v1/53fd440c-80c9-4c60-ab76-e90777802041/story-ene-w.webp) Meet Jo. Operations director, chilled food distributor Friday · 04:30 ### “Orders have stopped. We can’t see what’s due where.” Order, routing and customer contract data sit on the systems that were encrypted. Lorries leave on Monday, not next month. Storage · From 20TB Recovery copies at scale https://fire-vault.com/storage Rachel, Amir and Jo are illustrative. Our customer story is real. Use cases ### Where organisations use Offline Secure Storage®. Six situations we are asked about most. Each keeps one retained copy offline, with named holders and logged sessions. ### Customer data Keep a verified export of customer, consent and account records offline, so you can rebuild after deletion or encryption and show what you held. What to keep offline Customer database exports Consent and preference records Order and account history Subject access request records **Usually held by:** Head of data or data protection lead Storage: https://fire-vault.com/storage ### Public services Councils and public bodies keep case and statutory records for years. Keep the retained copy offline, so services can continue when a shared system is down. What to keep offline Case records Statutory registers Decision records Continuity plans **Usually held by:** Information governance lead or SIRO Storage: https://fire-vault.com/storage ### Schools, colleges and trusts Pupil records, assessment evidence and admissions files need to survive an incident in term time. Keep exports offline, held by a named person. What to keep offline Pupil records Exam and assessment evidence Admissions and SEND records Staff records **Usually held by:** Business manager or data protection lead Vault: https://fire-vault.com/vault Safeguarding records ### Retail Loyalty, pricing and supplier data keep the business trading. Keep the masters and contracts offline, ready for a rebuild. What to keep offline Loyalty and customer exports Product and pricing masters Supplier contracts Store and finance records **Usually held by:** Head of data or IT director Storage: https://fire-vault.com/storage ### Supply chain and logistics When orders and routing data are encrypted, lorries stop. Keep the data and settings you would restart from offline. What to keep offline Order and routing data Customer and supplier contracts Warehouse and stock records Integration settings **Usually held by:** Operations director Storage: https://fire-vault.com/storage ### IT and managed service providers If your tools are compromised, every client is hit at once. Keep each client’s recovery copy outside the platforms attackers target. What to keep offline Client backup copies Client configurations Contracts and SLAs Runbooks **Usually held by:** Service owner, with named engineers Storage: https://fire-vault.com/storage Become a partner: https://fire-vault.com/partners Choose your OSS ## Choose your OSS. Order it today. Start with a Vault for one data owner, or ask for a Storage proposal for larger retained copies. Most popular Vault For the verified holder of selected business records **£480**a month inc VAT_£400 ex VAT_ - Open it any time, 24/7 - Your own dedicated drives - Share one file at a time - Name a Vault Buddy Create your 4TB Vault (https://fire-vault.com/get-started) Storage For larger retained copies and backups **From 20TB**quoted for you - Grows in 20TB steps - Works with your backup software - Named people, each with their own access Explore Storage (https://fire-vault.com/storage) LUV For a small organisation’s files, opened now and then **£74.99**a month inc VAT - 300GB - Opens one day a week that you choose - Share one file at a time Explore LUV (https://fire-vault.com/luv) Every option is on a 36-month commitment. Over 300TB? See Enterprise (https://fire-vault.com/enterprise) · Compare all four (https://fire-vault.com/pricing) **Protect the asset. Control the path.**Offline Secure Storage® protects the data itself. Control by Firevault decides which network paths into your critical systems exist, and when, including supplier access. Explore Control (https://fire-vault.com/control) From a real customer > “I had full autonomy over the way the Vault was managed. They facilitated the requests I had and adapted to what our business needed.” **Chief Executive**, award-winning multi-site UK care provider **Records and backups**held in a Vault **Their IT provider**kept on **Multi-site**UK care provider Read the customer story (https://fire-vault.com/customer-stories/protecting-a-multi-site-care-business) Firevault, as featured in techradar pro (https://www.techradar.com/pro/uk-startup-put-physical-disconnect-switch-in-its-cloud-storage-offering-to-mitigate-ransomware-attacks-but-will-that-be-enough)yahoo!finance (https://uk.finance.yahoo.com/news/firevault-launches-help-businesses-directors-074500961.html)Channel Insider (https://www.channelinsider.com/security/tools-and-platforms/firevault-security-offline-platform-offering/)Security Buyer (https://securitybuyer.com/uk-cybersecurity-startup-launches-firevault/)SecurityBrief (https://securitybrief.com.au/story/firevault-unveils-offline-digital-vault-to-combat-rising-cyber-risks)Cyber Essentials Plus certified How it works ## Simple to start. Simple to use. No software to install and nothing to migrate. Your Vault sits alongside everything you already have. 1. **01**Order 2. **02**Request 3. **03**Open 4. **04**Offline 1. Identity checked You Your Vault ### Choose your Vault. Pick a size and order online. We check your identity and set your Vault up in a Firevault Bunker. 2. Requested from your phone Registered phone Request out of band Your Vault ### Open it from your phone. Ask for access from your registered phone, then sign in with MFA. The request does not travel over your network. 3. Physical access granted Your browser Your Vault ### Add or find files. Work in your browser for up to 120 minutes. Share one file at a time. Every session is logged. 4. Offline again Your network Your Vault ### It goes offline again. When you finish, the connection is removed. Until next time, there is no path to it. **Worth knowing.** A Vault keeps a copy offline, but it cannot check what you put in it. Keep your phone and sign-in safe, and check your files now and then. See it for yourself ## One Vault. Three states. Step through a closed Vault, an open session and the moment it disconnects again. Choose a state, or let it play. Vault states **Z0**Outside Anyone on the internet **Z1**Your business Customer, finance and operations **Z2**Firevault Bunker Single-tenant drives Attacker Your team Your Vault Attacker route Disconnected Session route Disconnected Attacker routeDisconnected Session routeDisconnected Registered phone Separate request path, out of band The normal state ### Closed Closed is the normal state. There is nothing on the network to find, search or sign in to. Requested No session requested. Reported by the Vault Vault physically disconnected at Layer 1. On record Last session closed Mon 18:10 by the data owner. Concept illustration. The request path, the Vault’s reported state and the session record are shown separately because they are not the same thing. Questions worth asking ## Questions worth asking. Want your data owners to see how a retained copy is opened? Book a demo. No. Keep everything you have. OSS adds one retained copy of the data you can’t replace, physically offline, so it doesn’t depend on any of it holding. See all questions (https://fire-vault.com/learn/faq) Your next step ## Which data could your organisation least afford to lose, or see published? Keep one retained copy of it physically offline. Everyone carries on working as they do today. Create your Vault (https://fire-vault.com/get-started)Prefer to talk first? Book a demo (https://fire-vault.com/demo) Vault from £360 a month inc VAT, 36 months. For larger retained copies, ask for a Storage proposal (https://fire-vault.com/contact). **Mark Fermor**, Co-Founder & Chief Technology, Security & Marketing Officer **David Bailey**, Co-Founder & CEO **Kenny Phipps**, Solutions Lead ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault is a UK cyber resilience company. Data protection and storage through Offline Secure Storage. Network evolution and rapid protection through Control.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/oss-for-business-data#webpage", "url": "https://fire-vault.com/oss-for-business-data", "name": "Offline Secure Storage for Sensitive Business Data", "description": "Customer records, pupil data, supply chain and public service records, kept physically offline in your own Vault or Storage, opened by named people.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-home.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/oss-for-business-data#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/oss-for-business-data#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Offline Secure Storage for Sensitive Business Data", "item": "https://fire-vault.com/oss-for-business-data" } ] } ] ```