Backups are the first target, not the last
Attackers who reach a domain admin account reach the backup platform in the same move. Connected backups inherit the compromise of the network they sit on.
A reachable copy is not a recovery copy.
Contracts, financial records, customer data and clean recovery copies sit physically disconnected from your network. Nothing routable, nothing reachable, nothing to encrypt.
Physically disconnected by default, in one of our bunkers.

2TB to 8TB
per vault
24/7
on-demand access
Gold copy
clean recovery set held offline
£0
due today
Start with the records that would stop the business if they were encrypted or lost, then size for retention rather than for everything you hold.
Statutory records, signed agreements and a first gold copy taken out of the network.
Vault 2TB If you hold 02Longer retention periods with customer data held outside live systems.
Vault 4TB If you hold 03Multi-year retention, larger recovery sets and a dedicated account manager.
Vault 8TBRansomware no longer just encrypts live systems. It looks for the backups first, because a business with a clean copy does not pay.
Attackers who reach a domain admin account reach the backup platform in the same move. Connected backups inherit the compromise of the network they sit on.
A reachable copy is not a recovery copy.
Halted operations, idle staff, missed contractual obligations and manual workarounds run for weeks after an incident, long after systems are technically restored.
Recovery time is the real cost line.
Notifying customers that their records were taken damages contracts, tenders and renewals. Losing the relationship outlasts losing the data.
Trust is the slowest thing to restore.
One copy of what matters, kept where an intruder on your network cannot follow.
Backups on the same network as production
Gold copy physically disconnected in a bunker
Recovery depends on the attacker's reach
Recovery depends on a drive they never touched
Technical measures described in a policy
A physical measure you can demonstrate
Retention held in live systems
Retained records held offline, out of the blast radius
Beyond 8TB the estate moves to Storage, which scales from 20TB to 300TB and beyond with API and SFTP retrieval.
Vault
Starting point
£360
per month inc VAT · 36-month commitment · £0 due today
Contracts, statutory records and a first clean recovery copy.
24/7 on-demand access
Vault
£480
per month inc VAT · 36-month commitment · £0 due today
Retained customer records alongside financial and operational archives.
24/7 on-demand access
Vault
Full archive
£600
per month inc VAT · 36-month commitment · £0 due today
Long retention periods and larger gold-copy sets.
24/7 on-demand access
How physical disconnection differs from immutable cloud and on-premises copies.
| Question | Cloud backup or archive | On-premises copy | Offline Secure Storage® |
|---|---|---|---|
| Reachable from the production network? | Yes, over the internet | Yes, over the LAN | No, physically disconnected |
| Survives a domain-wide compromise? | Only if credentials hold | Rarely | Yes, there is no path to it |
| Who holds the keys and the hardware? | The provider | You, with your own upkeep | Dedicated hardware, hardware encrypted |
| Evidence for auditors and insurers? | Configuration screenshots | Configuration screenshots | A physical control plus per-session retrieval records |
Written to be fair to the alternatives. Keep the backups you use daily, and read the full comparison pages if you want the technical detail.
Material that must be kept but does not need to be online. It stays physically disconnected until you ask for it.
Signed contracts, leases, supplier terms and licences.
Ledgers, statutory accounts, payroll and tax filings.
Retained personal data held outside live systems.
Clean recovery copies held physically disconnected.
Four steps from first conversation to a vault that is offline by default.
Identify the records that must be retained but do not need to be reachable.
Dedicated hardware is assigned to a verified owner inside one of our bunkers.
Move records in through File Manager, with folders, search and controlled sharing.
Close the session and the hardware is physically disconnected again.
| Capacity options | 2TB, 4TB, 8TB per vault |
|---|---|
| Access | 24/7 on-demand |
| Hardware | Dedicated RAID 1 drives |
| Resilience | Vault Spare, geographically separate |
| Default state | Physically disconnected |
| Encryption | Hardware level AES-256 |
| Location | Held in one of our bunkers |
| Minimum commitment | 36 months |
| Due today | £0 |
The objections and questions that come up before anyone commits.



Tell us what you need to hold offline and we will recommend the configuration.
Takes about 2 minutes. No account needed.
Vault 4TB · £480
per month inc VAT · 36-month commitment · £0 due today
We use cookies to keep the site running smoothly and to understand how you use it. You are in control. Privacy Charter · Cookie Policy