For family offices, private client advisers and the families they serve
Trust deeds, property titles, passports and succession papers do not need to be online every day. Keep them in a Vault, physically disconnected until its named holder opens it. Your advisers and your family carry on as they do now.
Vault from £360 a month inc VAT · 2TB, 4TB or 8TB
Email, banking and shared folders
Always connected
Your Vault
Physically offline
Why it matters
Published research and cases from the last few years. In each one, where the records were kept shaped what happened next.
43%
of 354 single-family offices surveyed by Deloitte said they had experienced a cyberattack in the previous 12 to 24 months. A quarter had experienced three or more.
Being private is not the same as being out of reach.
The path
Confidential records held by 14 offshore service providers that set up trusts and companies for wealthy clients.
What followed
More than 11.9 million records, 2.94 terabytes, reached the ICIJ, exposing the offshore holdings of more than 130 billionaires and 330 politicians.
A family’s private records are only as private as every adviser who holds a copy.
The path
An engineer’s compromised home computer, then the master password to a business vault and the keys to cloud backups.
What followed
Backups holding personal data of up to 1.6 million UK users, with encrypted password vaults, were taken. The ICO fined LastPass UK £1.2 million in 2025.
Where the keys to everything are kept matters as much as how they are locked.
These figures and incidents show how connected records shape what happens next. They are not claims about what any single control would have prevented.
What it is
Email, banking apps and shared folders keep a family office running. The papers that prove what the family owns do not need to sit in them.
If only there were one copy of what the family owns, with no path to it.
Welcome to Offline Secure Storage®.
A new approach to data storage. Your data sits on your own drives, physically disconnected, until a named person opens it from their registered phone.
Controlled ConnectivityPhysically disconnected at Layer 1. No IP path exists until a session is authorised
Secured Offline AccessRequested from a registered phone, out of band, then sign-in and MFA
Secured Offline DataYour own dedicated drives, single-tenant, in a Firevault Bunker
What it gives you
Your bank, your lawyers and your family office systems stay exactly as they are. A Vault adds one copy of what matters most that sits physically offline.
Choose a situation to see the difference.
Choose a situation
SituationAn attacker has been reading the family office email for weeks.
The deeds sit in the workspace the attacker is already reading.
The signed originals are kept apart, with no network path while the Vault is closed.
The retained data is physically disconnected. Your live systems stay connected and still need their own protection.
Illustrated Vault access cycle, not a live session. Only data retained in OSS is protected while physically disconnected.
The papers that prove what the family owns sit offline, away from email and shared folders.
Your bank, lawyers and family office keep working as they do now.
Each Vault belongs to one named person, and opens only from their registered phone.
Who it’s for
A family office, an adviser and a family. Three bad days, and the difference one offline copy makes.
Switch between without and with OSS, or let each one turn by itself.
Meet Emily.
Chief operating officer, single-family office
Tuesday · 02:14Emily keeps the signed originals in a Vault. While closed it has no network path, so she checks what was changed against a copy the attacker never reached.
The originals stayed out of reach.
Vault · From £360 a month
Digital safe deposit box™
Meet Priya.
Private client partner, law firm
Thursday · 16:40The client named Priya as Vault Buddy. Once the documentary evidence is verified, access is released to her, and every release action is logged.
The family has what it needs, on record.
Vault Buddy · in every Vault
Planned access for the people you name
Meet Tom.
Principal, family business owner
Saturday · 09:30Tom keeps the papers that prove who he is and what he owns in his own Vault. They were never in the shared folder, and the Vault opens only for him.
Tom’s papers stayed his.
Vault · Open it any time, 24/7
One Vault, one named holder
Emily, Priya and Tom are illustrative. Our customer story is real.
Use cases
Four situations we are asked about most. Each keeps one retained copy offline, with a named holder and a logged session.
A family office holds the entity records, mandates and signed agreements behind everything the family owns. Keep the authoritative set offline, with named people and every session logged.
What to keep offline
Usually held by: Chief operating officer or family office director
Advisers hold copies of the papers their clients cannot replace. Keep the signed originals in a Vault held by a named partner, and release one document at a time by link.
What to keep offline
Usually held by: Private client partner or relationship lead
The papers that prove who you are and what you own do not belong in email or a shared family folder. Each family member who needs one has their own Vault.
What to keep offline
Usually held by: The principal, or each family member
Wealth that cannot be found is wealth that is lost. Nominate who may be given access, released only on documentary evidence and identity checks, with every release logged.
What to keep offline
Usually held by: The principal, with a Vault Buddy
Choose your OSS
Most families start with one Vault for the principal. Family offices with larger archives ask for a Storage proposal.
Vault
For the principal or the family office lead who holds the papers that matter
Storage
For family office archives and multi-generational records
LUV
For a family member’s identity documents, opened now and then
Every option is on a 36-month commitment. Over 300TB? See Enterprise · Compare all four
Protect the asset. Control the path.Offline Secure Storage® protects the papers themselves. Control by Firevault decides which network paths into your critical systems exist, and when.
Explore ControlFrom a real customer
“I had full autonomy over the way the Vault was managed. They facilitated the requests I had and adapted to what our business needed.”
Chief Executive, award-winning multi-site UK care provider
Firevault, as featured in
techradar proyahoo!financeChannel InsiderSecurity BuyerSecurityBriefCyber Essentials Plus certifiedHow it works
No software to install and nothing to migrate. Your Vault sits alongside everything you already have.
Pick a size and order online. We check your identity and set your Vault up in a Firevault Bunker.
Ask for access from your registered phone, then sign in with MFA. The request does not travel over your network.
Work in your browser for up to 120 minutes. Share one file at a time. Every session is logged.
When you finish, the connection is removed. Until next time, there is no path to it.
Worth knowing. A Vault keeps a copy offline, but it cannot check what you put in it. Keep your phone and sign-in safe, and check your files now and then.
See it for yourself
Step through a closed Vault, an open session and the moment it disconnects again.
Choose a state, or let it play.
Vault states
Z0Outside
Anyone on the internet
Z1Your family office
Email, banking, shared folders
Z2Firevault Bunker
Single-tenant drives
An authorised session
the family office COO approves from the registered phone, then signs in with MFA. The physical route exists for this session only, for up to 120 minutes.
Requested
Session requested from the registered phone. MFA passed.
Reported by the Vault
Physical route enabled for this session only.
On record
Session opened 08:47 and logged to the named holder.
Concept illustration. The request path, the Vault’s reported state and the session record are shown separately because they are not the same thing.
Questions worth asking
Want your family office or advisers to see it first? Book a demo and we will walk them through it.
No. Anyone with papers they could not easily replace can have a Vault, from £360 a month inc VAT. Family offices with larger archives usually add Storage.
No. Keep everything you use now. A Vault adds one copy of the papers that matter that sits physically offline, so it does not depend on any of those systems holding.
No. Each Vault belongs to one named, identity-verified person. Family members who need a copy have their own Vault, and Storage gives named people in a family office their own access.
Vault Buddy lets the holder nominate who may be given access. Access is released only on documentary evidence, such as a death certificate, grant of probate or registered lasting power of attorney, followed by identity checks, and every release action is logged.
Open the Vault, pick the file and send a link that expires, with a password sent separately. The adviser opens it while the Vault is open, and you can withdraw it at any time.
In a Firevault Bunker, with three independent entry checks, including biometrics, and 24/7 monitoring. Europe, including the UK, is live, with the US and the Middle East next, and you choose the jurisdiction.
Your next step
Put them in a Vault today. Your advisers and your family carry on as they do now.
Create your VaultPrefer to talk first? Book a demoVault from £360 a month inc VAT, 36 months. For a family office archive, ask for a Storage proposal.
Mark Fermor, Co-Founder & Chief Technology, Security & Marketing Officer
David Bailey, Co-Founder & CEO
Kenny Phipps, Solutions Lead
Your Vault
Storage for family office archives 
LUV