OSS® For legal and professional services
Keep the client files your firm cannot afford to lose in its own offline Vault. Your team works exactly as it does today, and you sleep at night.
Vault from £360 a month inc VAT · 2TB, 4TB or 8TB
Ransomware
Encrypts what it can reach
Your Vault
Physically offline
Why it matters
Published cases from the last few years. In each one, what was connected shaped what happened next.
The path
Remote access without multi-factor authentication, and a known vulnerability left unpatched for months.
What followed
Ransomware encrypted 972,191 files, and the backups with them. Sixty court bundles were published on the dark web. The ICO fined the firm £98,000.
The backups shared the network, so they shared the outcome.
The path
Attackers got into the online digital services that legal aid providers use.
What followed
Personal data of legal aid applicants going back more than a decade was taken, including criminal records and financial details. The service was taken offline.
When a shared system goes down, every firm that relies on it waits.
The path
The remote-management software managed service providers use to look after their customers’ systems.
What followed
Attackers used it to push ransomware through around 50 to 60 providers to between 800 and 1,500 businesses.
One trusted route into many small firms at once.
These incidents show how connected records shape what happens next. They are not claims about what any single control would have prevented.
What it is
Your files are online so your team can work. So are your backups.
If only there were one copy of what matters most, with no path to it.
Welcome to Offline Secure Storage®.
A new approach to data storage. Your data sits on your own drives, physically disconnected, until a named person opens it from their registered phone.
Controlled ConnectivityPhysically disconnected at Layer 1. No IP path exists until a session is authorised
Secured Offline AccessRequested from a registered phone, out of band, then sign-in and MFA
Secured Offline DataYour own dedicated drives, single-tenant, in a Firevault Bunker
What it gives you
Your systems, your IT provider and your backups stay exactly as they are. A Vault adds one copy of what matters most that sits physically offline.
Choose a situation to see the difference.
Choose a situation
SituationRansomware encrypts the file server overnight and goes looking for the backups.
The backups are online, so they are encrypted with everything else.
One copy has no path to it. You restore from what the attacker never reached.
The retained data is physically disconnected. Your live systems stay connected and still need their own protection.
Illustrated Vault access cycle, not a live session. Only data retained in OSS is protected while physically disconnected.
One copy of what matters most sits offline, whatever happens on your network.
Your systems, your IT provider and your backups stay exactly as they are.
Each Vault belongs to one named person, and opens only from their phone.
Who it’s for
Three firms. Three bad mornings. And the difference one offline copy makes.
Switch between without and with OSS, or let each one turn by itself.
Meet Emily.
IT lead, 100-person law firm
Tuesday · 02:14The backups were online, on the same network and the same admin accounts. What the firm gets back depends on what the attacker left.
Emily sleeps soundly.
Storage · From 20TB
Firm-wide backups, offline
Meet Priya.
Practice manager, accountancy practice
Thursday · 16:40The archive has moved twice, and nobody is sure it is complete. The file leaves as an email attachment.
Priya sends it before lunch.
File Share · in every Vault
One link, withdrawn at any time
Meet Tom.
Managing partner, architecture practice
Monday · 08:05The signed contracts and final drawings sit on that same server, so they are exposed with everything else.
Tom’s originals are safe.
Vault · From £360 a month
Digital safe deposit box™
Emily, Priya and Tom are illustrative. Our customer story is real.
Use cases
Four situations firms bring to us most. Each one keeps one retained copy offline, with a named holder and a logged session.
Privileged material and closed matters don’t need to be one stolen password away. Keep the retained copy in a Vault held by your COLP, records lead or a named partner.
What to keep offline
Usually held by: COLP, records lead or named partner
Signed originals, working papers and final drawings are the evidence behind your advice. Keep the definitive set offline, and share one file at a time when a client needs it.
What to keep offline
Usually held by: Practice manager or partner
Closed files have to be kept, found and eventually destroyed on schedule. Move the final file at closure, record what is held and until when, retrieve on request, and dispose when authorised.
What to keep offline
Usually held by: Records manager
Digital originals and evidence must stay unchanged and accounted for. Keep them physically offline, with every session logged against a named, verified person.
What to keep offline
Usually held by: Partner or private client lead, with a Vault Buddy
Choose your OSS
Most firms start with one Vault for the person who looks after their closed files.
Vault
For the partner or lead who looks after your closed files
Storage
For firm-wide archives and backups
LUV
For a sole practitioner’s files, opened now and then
Every option is on a 36-month commitment. Over 300TB? See Enterprise · Compare all four
Protect the asset. Control the path.Offline Secure Storage® protects the data itself. Control by Firevault decides which network paths into your critical systems exist, and when.
Explore ControlFrom a real customer
“I had full autonomy over the way the Vault was managed. They facilitated the requests I had and adapted to what our business needed.”
Chief Executive, award-winning multi-site UK care provider
Firevault, as featured in
techradar proyahoo!financeChannel InsiderSecurity BuyerSecurityBriefCyber Essentials Plus certifiedHow it works
No software to install and nothing to migrate. Your Vault sits alongside everything you already have.
Pick a size and order online. We check your identity and set your Vault up in a Firevault Bunker.
Ask for access from your registered phone, then sign in with MFA. The request does not travel over your network.
Work in your browser for up to 120 minutes. Share one file at a time. Every session is logged.
When you finish, the connection is removed. Until next time, there is no path to it.
Worth knowing. A Vault keeps a copy offline, but it cannot check what you put in it. Keep your phone and sign-in safe, and check your files now and then.
See it for yourself
Step through a closed Vault, an open session and the moment it disconnects again.
Choose a state, or let it play.
Vault states
Z0Outside
Anyone on the internet
Z1Your firm
Email, case management, documents
Z2Firevault Bunker
Single-tenant drives
The normal state
Closed is the normal state. There is nothing on the network to find, search or sign in to.
Requested
No session requested.
Reported by the Vault
Vault physically disconnected at Layer 1.
On record
Last session closed Tue 16:42 by the practice manager.
Concept illustration. The request path, the Vault’s reported state and the session record are shown separately because they are not the same thing.
Questions worth asking
Want your partners or IT provider to see it first? Book a demo and we will walk them through it.
No. Keep everything you have. A Vault adds one copy of the files you must keep that sits offline, so it doesn’t depend on any of it holding.
No. Everyone keeps working as they do now. Only the person who looks after the Vault learns one short routine: approve from their phone, sign in, add or find files.
No. Each Vault belongs to one named person. Your closed files are usually looked after by a records lead or partner. For firm-wide archives and backups, Storage gives named people their own access.
Open the Vault, pick the file and send a link that expires, with a password sent separately. The client opens it while the Vault is open, and you can withdraw it at any time.
Yes. Your IT provider carries on as before. The Vault sits alongside, and only its named holder opens it.
In a Firevault Bunker, with three independent entry checks, including biometrics, and 24/7 monitoring.
Your next step
Put them in a Vault today. Everyone else carries on as they do now.
Create your VaultPrefer to talk first? Book a demoVault from £360 a month inc VAT, 36 months. For the whole firm, ask for a Storage proposal.
Your Vault
Vault Buddy 
LUV