Offline Secure Storage for Education
Schools, MATs, and universities hold some of the most sensitive personal data in existence, safeguarding records, SEND files, and child protection logs. Offline Secure Storage (OSS) provides physical disconnection for your most vulnerable data.
- Research IP theft
- Safeguarding data exposure
- Exam and grade tampering
- Student PII breach
Offline Secure Storage® keeps a clean copy on hardware that is physically disconnected.
Schools & Education Reality
Schools, colleges and universities now hold safeguarding records, SEND files and family contact details that a single phishing email can put on the dark web. The Department for Education's Cyber Security Standards expect institutions to protect these records, but most settings still rely entirely on cloud backup. Firevault keeps the most sensitive student and staff records offline, so a ransomware incident on the school network cannot become a child-safeguarding breach.
- Cyber incidents reported by UK schools in 2024
- 327Cyber incidents reported by UK schools in 2024NCSC Annual Review, 2025
- ICO fine to Capita, which processes education data
- £14MICO fine to Capita, which processes education dataICO, October 2025
- Personal records stolen in single Co-op attack
- 6.5MPersonal records stolen in single Co-op attackBBC News, 2025
- ICO breach notification deadline for pupil data
- 72hrsICO breach notification deadline for pupil dataICO Guidance
Education data is uniquely sensitive.
Safeguarding Records
Child protection logs and safeguarding records require the highest standard of confidentiality and protection.
Ransomware Targeting
Education is now the most targeted sector for ransomware, the NCSC has issued multiple alerts.
Regulatory Pressure
Ofsted, ICO, GDPR, and KCSIE mandate robust technical measures for pupil data protection.
This is already happening in education.
Every incident below is a matter of public record. Each one involved data that was reachable from a live network at the moment of compromise.
NCSC: 327 Cyber Incidents Reported by UK Schools in 2024
The National Cyber Security Centre reported a record number of cyber incidents affecting UK schools, with ransomware and data exfiltration the most common attack types targeting pupil records.
NCSC Annual Review, 2025
Capita: £14M Fine Affects Education Data Processing
Capita processes data for hundreds of schools and local authorities. The ICO fined the outsourcer £14 million after hackers accessed personal data of over 6 million people, including education records.
ICO, October 2025
Co-op: Pharmacy and Membership Data of 6.5 Million Stolen
The Co-op attack demonstrated how organisations holding data across multiple sectors, including education partnerships, are vulnerable to mass data exfiltration.
BBC News, 2025
We Think This Is Hard to Ignore
The NCSC reported 327 cyber incidents targeting UK education in 2024, with ransomware encrypting safeguarding and student records on connected school networks. At Firevault, pupil data lives on hardware that is physically disconnected, because children's records deserve the strongest protection available.
Remove pupil data from every system attackers can reach.
Safeguarding records, SEND files, and child protection logs are taken off school networks and written to dedicated RAID 1 drives inside a Firevault Bunker. Those drives have no internet connection. No IP address. No API. When authorised staff need access, a physical connection is created after identity verification. When the session ends, the drives disconnect.
- Safeguarding data removed from school networks and placed on hardware with no network connection. Ransomware cannot encrypt what is not online
- SEND records isolated with identity-verified access. Stolen staff credentials cannot unlock physically disconnected hardware
- Full audit trail for Ofsted, ICO, KCSIE, and GDPR compliance. Every access session is logged and attributable
- Scalable from single schools to multi-academy trusts with centralised offline protection
Take Pupil Data Off School Networks
Step 1 of 3Safeguarding records, SEND files, and child protection logs are taken off school networks and written to physically disconnected RAID 1 drives inside a Firevault Bunker. No cloud. No shared drive. No attack surface.
What the regulator says
“Schools and colleges should hold backup copies of essential data on devices that are not permanently connected to the live network so that ransomware cannot encrypt them.”
Featured In
Choose your protection
Which Offline Secure Storage® fits education?
Every tier is the same physical principle at a different scale. Pick the access pattern that matches how your team works, then see the capacity, price and use cases for it.
300GB
Low Use Vault, Deep Cold Storage
£74.99/mo
inc. VAT · £0 due today
Built for sensitive records that should not sit exposed on always-connected systems. Deep cold storage. One nominated access day each week within a 12-hour window.
What 300GB holds
Use Cases for Education
- Safeguarding and child protection files
- SEND and pupil support records
- HR and disciplinary records
- Governance, legal and incident files
- Archived complaints and case materials
Specifications
Capacity
300GB
Access
1 day/week, 12-hour window
Authentication
Identity-locked
Commitment
36 months
Security & Compliance
How to Get Started
Step 1
Discovery Call
Understand what you need to protect and how you operate.
Step 2
Vault Configuration
Select your tier, capacity, and access model.
Step 3
Identity Verification
Complete KYC/AML and set up multi-factor authentication.
Step 4
Go Live
Data ingestion, access policy activation, and ongoing support.
Explore More
Questions