--- title: "Close the File. Protect the Record. | Firevault" description: "A 28-page playbook on file closure, retained legal records and offline custody for UK law firms, governance, retention and retrieval for private client,…" lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/playbook/legal#webpage", "url": "https://fire-vault.com/playbook/legal", "name": "Close the File. Protect the Record.", "description": "A 28-page playbook on file closure, retained legal records and offline custody for UK law firms, governance, retention and retrieval for private client,…", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "/__l5e/assets-v1/a563c7e7-cdd3-47c3-8557-57a4d04b97b7/legal-cover.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/playbook/legal#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/playbook/legal#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 3, "name": "Playbooks", "item": "https://fire-vault.com/playbooks" }, { "@type": "ListItem", "position": 4, "name": "Close the File. Protect the Record.", "item": "https://fire-vault.com/playbook/legal" } ] }, { "@context": "https://schema.org", "@type": "Article", "headline": "Close the File. Protect the Record.", "description": "A 28-page playbook on file closure, retained legal records and offline custody for UK law firms, governance, retention and retrieval for private client, corporate, real estate and disputes work.", "inLanguage": "en-GB", "author": [ { "@type": "Person", "name": "Mark Fermor" } ], "publisher": { "@type": "Organization", "name": "Firevault", "url": "https://fire-vault.com" }, "image": "/__l5e/assets-v1/a563c7e7-cdd3-47c3-8557-57a4d04b97b7/legal-cover.jpg", "keywords": "law firm file closure, retained legal record custody, SRA record retention, offline secure storage legal, privilege protection, matter archive governance", "mainEntityOfPage": "https://fire-vault.com/playbook/legal" }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Who is the Legal Playbook for?", "acceptedAnswer": { "@type": "Answer", "text": "Managing and senior partners, COLPs, COFAs, risk partners, general counsel, heads of legal and the IT, information governance and records leads who work alongside them. It is written to be read across a partnership, not just by the technology team." } }, { "@type": "Question", "name": "How is this different from an SRA compliance briefing?", "acceptedAnswer": { "@type": "Answer", "text": "It concentrates on the retained legal record, closure, custody, retention, retrieval and destruction, as a governance discipline. Regulatory duties frame the argument, but the playbook is about the operating model behind the paperwork." } }, { "@type": "Question", "name": "Does Offline Secure Storage replace our case management system?", "acceptedAnswer": { "@type": "Answer", "text": "No. Case management, email, portals and live collaboration remain the working environment. Offline Secure Storage provides custody for selected records when continuous reachability is no longer required, it complements the live legal stack, it does not replace it." } }, { "@type": "Question", "name": "How does the Butterfly model work in practice?", "acceptedAnswer": { "@type": "Answer", "text": "One wing is live work, case management, email, e-signing, data rooms, local files. The other wing is offline custody, matter archive, private client, real estate, corporate and disputes evidence. Closure and retrieval are the events that move records between them, each with vault, policy, permissions and purpose." } }, { "@type": "Question", "name": "How long is the playbook and how is it delivered?", "acceptedAnswer": { "@type": "Answer", "text": "28 pages, about 20 minutes to read. Request it with your work email and a secure access link arrives within a minute; access is tied to that address." } }, { "@type": "Question", "name": "Can we brief the partnership on the content?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Reply to the delivery email and we will arrange a working session with Mark for your management board, risk committee or records team." } } ] }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Playbooks", "item": "https://fire-vault.com/playbooks" }, { "@type": "ListItem", "position": 3, "name": "Close the File. Protect the Record.", "item": "https://fire-vault.com/playbook/legal" } ] } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Lidl GB Customer contact data ](https://www.theguardian.com/business/2026/jun/11/lidl-gb-third-party-data-breach)[2026 Asahi Group Production systems disrupted ](https://www.reuters.com/technology/cybersecurity/asahi-says-cyberattack-disrupted-operations-japan-2025-09-29/)[2026 Kido International 8K records ](https://www.bbc.co.uk/news/articles/c623d7v0e5xo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) 1. [Home](/) 2. [Playbooks](/playbooks) 3. Firevault Legal Playbook Firevault Legal Playbook # Close the File. Protect the Record. A playbook on file closure, retained legal records and offline custody for UK law firms. A 28-page playbook on file closure, retained legal records and offline custody for UK law firms, governance, retention and retrieval for private client, corporate, real estate and disputes work. 28 pages 20 min read Managing and senior partners ![Close the File. Protect the Record. cover](/__l5e/assets-v1/a563c7e7-cdd3-47c3-8557-57a4d04b97b7/legal-cover.jpg) ## Get the playbook Emailed to you within a minute First name \* Last name \* Work email \* Personal email addresses such as Gmail or Yahoo are not accepted. Company \* Sector \*Select one, ... Job title \* I agree to receive the playbook and occasional Firevault briefings. See our [privacy policy](/privacy-charter). Email me and open the playbook Email-gated GDPR compliant 01 Foreword ## Written by the people who build the controls. Legal firms are used to managing live work with discipline. The harder question is what happens when the matter finishes. The file still contains confidential information, client property, original documents, undertakings, future dates, personal data, privilege, billing evidence and decisions that may need to be proved years later. This playbook sets out how Offline Secure Storage can support a stronger file-closure model: named ownership, controlled access, deliberate retention, clear retrieval and evidence that the record has not simply been left in connected sprawl. Protecting the retained legal record is a governance decision, not a storage afterthought. Every Firevault playbook is grounded in the same doctrine behind our Offline Secure Storage® platform: control the path, govern the agent, protect the asset. **Mark Fermor** · Co-Founder, Firevault 02 What's inside ## 7 parts. Written for the people who own the decision. Each chapter opens with the decision it exists to help you make, and closes with the evidence you should expect back. 01 ### The case for offline legal custody The boardroom decision in a single page: closed matters should move from working file to controlled custody, not drift into shared storage. Close, seal, prove. - Working file becomes governed retained record on closure - Custody is a control point with named owner and evidence trail 02 ### Matter end and file closure Closure is where operational discipline, client duties and data protection meet. Client duties, record integrity and risk position all reconciled before archive. - Closure is a governance decision, not an admin afterthought - The firm should prove closure was completed, not assumed 03 ### Risk patterns and closure control The four patterns firms inherit when completed matters stay in the connected estate, boundary drift, permission sprawl, weak archive logic, retrieval confusion, and the control map that fixes them. - The greatest risk is the retained record nobody owns - The retained record needs a custody model, not another shared folder 04 ### The closure evidence pack A signed checklist turns process into evidence: matter complete, client informed, finance clear, retention set, custody arranged, destruction rules recorded. - Six control areas apply consistently across practice areas - A policy without ownership becomes shelfware 05 ### Retrieval and offline default Retrieval as a controlled window, not a standing door. Request, approve, open, record, close, and the storage layer returns to an offline state. - Access is an event: identity-bound and time-boxed - The retrieval record matters as much as the retrieved file 06 ### The 360 Vault map and Butterfly model A governed custody layer with named entry and retrieval routes across private client, corporate, real estate, disputes, external rooms and leadership, bridged to live work by the Butterfly model. - Every sensitive record sits in its own governed space - Closure is not the end, it is the handover between wings 07 ### Practice-area custody Match custody to the matter. Private client for records that may outlive the client, corporate for deal-critical evidence, real estate for title continuity, disputes for evidence and continuity. - Different practice areas carry different evidence and retrieval risks - Custody design should reflect the matter, not the folder tree 03 Who it's for ## Read it if you're accountable for the decision. - Managing and senior partners - COLPs, COFAs and risk partners - General counsel and heads of legal - IT, information governance and records leads Sectors we hear from Legal & professional services Barristers' chambers In-house legal Notarial and trust practices 05 Frequently asked ## Questions leaders ask before requesting. Something else on your mind? Reply to any Firevault email or write to [mark@fire-vault.com](mailto:mark@fire-vault.com). ### Who is the Legal Playbook for? ### How is this different from an SRA compliance briefing? ### Does Offline Secure Storage replace our case management system? ### How does the Butterfly model work in practice? ### How long is the playbook and how is it delivered? ### Can we brief the partnership on the content? 06 More Firevault playbooks ## Board-level control blueprints. Each playbook is written for the people who own the decision, practical, UK-grounded and free to request. [ ![The Leaders' Playbook cover](/__l5e/assets-v1/e8c2b388-0083-4aa9-a143-f8c4b11d2db3/leaders-cover.jpg)](/playbook/leaders) Related playbook ### The Leaders' Playbook A board-level briefing on sovereign data, succession resilience and physical protection. 28 pages 18 min read Email-gated [Get the playbook](/playbook/leaders) [ ![Firebreak for Water: Adoption & Deployment Playbook cover](/__l5e/assets-v1/87198e25-711c-49ab-95d1-5f7cc99553cb/firebreak-water-cover.jpg)](/playbook/firebreak-water) Related playbook ### Firebreak for Water: Adoption & Deployment Playbook Layer 1 physical path control mapped against the Purdue model for water operators. 28 pages 22 min read Email-gated [Get the playbook](/playbook/firebreak-water) [ ![A Control Blueprint for AI: 2026 Playbook cover](/__l5e/assets-v1/d10e0e16-e107-4d93-b690-87f7b33bea9b/ai-control-cover.jpg)](/playbook/ai-control-blueprints) Related playbook ### A Control Blueprint for AI: 2026 Playbook 40-page blueprint on AI infrastructure, open weights, agents and kill-switch design. 40 pages 28 min read Email-gated [Get the playbook](/playbook/ai-control-blueprints) [ ![A Control Blueprint for Aerospace & Aviation cover](/__l5e/assets-v1/bb5110b1-edcd-4a3a-93fc-af134ae6e4b7/aerospace-cover.jpg)](/playbook/aerospace) Related playbook ### A Control Blueprint for Aerospace & Aviation Communication registers, operational states and rapid isolation for aerospace and aviation. 28 pages 22 min read Email-gated [Get the playbook](/playbook/aerospace) ## Ready to read it? Request Close the File. Protect the Record.. It lands in your inbox within a minute, tied to your email address. No download, no fuss. [Get the playbook](#get-the-playbook)[Talk to Mark](mailto:mark@fire-vault.com)