--- title: "What OSS Stores | Offline Secure Storage Data | Firevault" description: "What Offline Secure Storage holds and how to decide: four tests, the data classes that belong offline, the split by sector, and capacity by product." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/what-oss-stores#webpage", "url": "https://fire-vault.com/what-oss-stores", "name": "What OSS Stores", "description": "What Offline Secure Storage holds and how to decide: four tests, the data classes that belong offline, the split by sector, and capacity by product.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-home.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/what-oss-stores#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/what-oss-stores#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "What OSS Stores", "item": "https://fire-vault.com/what-oss-stores" } ] }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What kind of data should go into Offline Secure Storage?", "acceptedAnswer": { "@type": "Answer", "text": "Data you cannot re-create, cannot afford to lose and do not need every hour. Personal and statutory records, client and case files, gold copy backups, keys and recovery material, long-term media and regulatory archives." } }, { "@type": "Question", "name": "Are there file types OSS cannot hold?", "acceptedAnswer": { "@type": "Answer", "text": "No. OSS is block-level storage on dedicated hardware, so any file format is supported. The decision is about value and access frequency, not file type." } }, { "@type": "Question", "name": "How is this different from a backup?", "acceptedAnswer": { "@type": "Answer", "text": "A backup usually lives on network-connected infrastructure and can be discovered and encrypted with the rest of the estate. OSS is physically disconnected between access windows, so there is no network path to it at all." } }, { "@type": "Question", "name": "How do I get data in and out?", "acceptedAnswer": { "@type": "Answer", "text": "Data is written during an identity-verified access window. LUV uses one nominated day each week within a 12-hour window. Vault is available 24/7 on demand. Storage and Enterprise are designed with our solutions team around your transfer schedule." } }, { "@type": "Question", "name": "Where does the hardware sit?", "acceptedAnswer": { "@type": "Answer", "text": "In carefully selected Firevault Bunkers. Europe, including the United Kingdom, is live today, with the United States and Middle East next. Firevault provisions your vault where it chooses unless you request a specific jurisdiction." } }, { "@type": "Question", "name": "Should everything be moved offline?", "acceptedAnswer": { "@type": "Answer", "text": "No. Offline Secure Storage® is not a replacement for cloud or day-to-day storage. It gives high-consequence data a different availability model, so connectivity becomes an authorised event rather than a permanent condition." } }, { "@type": "Question", "name": "How do I decide what qualifies?", "acceptedAnswer": { "@type": "Answer", "text": "Apply four tests: how often is it accessed, how serious is compromise or loss, is it the copy you would rebuild from, and are you obliged to retain it. Data that fails the frequency test and passes any of the other three is an offline candidate." } }, { "@type": "Question", "name": "Is offline storage the same as an immutable backup?", "acceptedAnswer": { "@type": "Answer", "text": "No. Immutability prevents change while the storage remains network reachable. Offline Secure Storage® removes the network path itself, so there is no standing route to the protected data between authorised sessions." } } ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Create Your Vault](/get-started) Overview The RuleFour TestsData ClassesBy SectorHow Much FitsNot StoredFAQ Offline Secure Storage® (#OSS) # What OSS stores Offline Secure Storage holds the data you cannot re-create. Records, gold copies, keys and archives sit on dedicated hardware inside a Firevault Bunker, physically disconnected between access windows. - Any file format - Dedicated hardware - Physically disconnected - Identity-verified access [Choose the right storage](/get-started) [Organise a demo](/demo) ![Rows of locked server cabinets inside a secure Firevault data hall](/__l5e/assets-v1/a4d3902c-28a5-42f4-bbfb-c12ddaacce1b/hero-square-drive.png) Capacity across the range 01 LUV, deep cold personal vault 300GB LUV, deep cold personal vault £74.99 per month, 36-month commitment 02 Vault, 24/7 business vault 2–8TB Vault, 24/7 business vault 03 Storage, scales in 20TB steps 20TB+ Storage, scales in 20TB steps 04 Enterprise, jurisdiction-aligned 300TB+ Enterprise, jurisdiction-aligned 01 The rule ## If losing it would change the business, it belongs offline OSS is not general-purpose storage. It is the place for the small share of your data that carries disproportionate consequence: the copy of record, the evidence, the keys, the archive. Everything else can stay where it is. ### Cannot be re-created Originals, signed records and historic archives with no upstream source to pull from again. ### Cannot be exposed Client, personal and commercially sensitive data where a breach is a regulatory and reputational event. ### Not needed hourly Data whose value is integrity and custody over time, not constant read and write access. 02 Four tests ## Four questions that decide what should be secured offline Run each candidate data set through these questions. If it is rarely accessed and meets any one of the other three, it belongs on dedicated, physically disconnected storage. 01 ### Is it accessed every day? Data used continuously by people and applications should stay connected. Offline suits information that is important but infrequently opened. Rarely opened → offline candidate 02 ### Would losing it, or losing control of it, be serious? Judge by consequence rather than volume. A single folder of board papers can matter more than terabytes of routine files. High consequence → offline candidate 03 ### Is it the copy you would rebuild from? Anything you depend on during an incident should not share the same connected environment as the systems it may need to restore. Recovery source → offline candidate 04 ### Must you retain it, whether or not you use it? Records kept for legal, regulatory or contractual reasons carry obligation without needing permanent availability. Retained obligation → offline candidate 03 Data classes ## The eight classes we see most Each class maps to a Firevault product and a defined access pattern. Follow a class through to see how it is handled end to end. [ ### Personal records Passports, birth and marriage certificates, wills, deeds, insurance policies and family archives. The documents that are slow, expensive or impossible to replace. See how it is stored ](/oss-for-personal-records)[ ### Business records Board minutes, shareholder agreements, statutory registers, contracts and finance records held as a clean, offline copy of record. See how it is stored ](/oss-for-business)[ ### Client and case files Matter files, engagement records, evidence bundles and client identity documents held by regulated firms with a duty of confidentiality. See how it is stored ](/oss-for-legal)[ ### Gold copy backups The final, verified copy of your critical systems and datasets, held physically apart from production and from your online backup estate. See how it is stored ](/oss-for-ransomware-recovery)[ ### Keys and recovery material Recovery codes, root and signing keys, certificate material and break-glass credentials kept off every network until they are needed. See how it is stored ](/oss-for-business)[ ### Media, IP and research Masters, design files, source code archives, research datasets and trade secrets that carry long-term commercial value. See how it is stored ](/oss-for-intellectual-property)[ ### System configurations Golden images, controller configurations and network documentation for OT and ICS environments, held offline so a rebuild is always possible. See how it is stored ](/oss-for-operational-technology)[ ### Regulatory archives Long retention sets held for GDPR, NIS2, DORA and sector rules, where the requirement is integrity and provable custody rather than daily access. See how it is stored ](/compliance) 04 By sector ## The same split, in four different operating models What stays connected and what moves offline changes with the work. The judgement behind it does not. [Legal](/legal) Stays connected Active matter files in the practice management system Belongs offline Closed matters, wills, deeds, privileged evidence and client identity records [Financial and professional services](/oss-for-banking) Stays connected Live client reporting and workflow platforms Belongs offline Audit evidence, statutory records, key material and retained client documentation [Industrial and OT](/oss-for-ot-recovery) Stays connected Operational control systems and current process data Belongs offline Known-good configurations, PLC backups and recovery images [Boards and directors](/oss-for-board-records) Stays connected Current board portal and meeting collaboration Belongs offline Board minutes, transaction papers, succession plans and shareholder records [See #OSS by industry](/oss-for) 05 How much fits ## Capacity, access and what each product holds Pick the product by the volume you need to hold and how often you need to reach it. LUV and Vault can be bought online. Storage and Enterprise are designed with our solutions team. [LUV](/luv)300GB Access One nominated day each week, 12-hour window Holds About 60,000 high-resolution photos, or 150,000 PDF documents Suits Personal records, keys and a single household archive [Vault](/vault)2TB to 8TB Access 24/7 on-demand access Holds About 400,000 to 1.6 million high-resolution photos Suits Business records, client files and working archives [Storage](/storage)20TB and above, in 20TB steps Access Scheduled transfer, designed with our solutions team Holds About 2 million high-resolution photos, or 5 million PDF documents Suits Gold copies, media libraries and server replacement [Enterprise](/enterprise)300TB and above Access Dedicated, jurisdiction-aligned deployment Holds About 60 million high-resolution photos, or 150 million PDF documents Suits Critical national infrastructure and regulated estates Product Capacity Access Roughly holds Best suited to [LUV](/luv) 300GB One nominated day each week, 12-hour window About 60,000 high-resolution photos, or 150,000 PDF documents Personal records, keys and a single household archive [Vault](/vault) 2TB to 8TB 24/7 on-demand access About 400,000 to 1.6 million high-resolution photos Business records, client files and working archives [Storage](/storage) 20TB and above, in 20TB steps Scheduled transfer, designed with our solutions team About 2 million high-resolution photos, or 5 million PDF documents Gold copies, media libraries and server replacement [Enterprise](/enterprise) 300TB and above Dedicated, jurisdiction-aligned deployment About 60 million high-resolution photos, or 150 million PDF documents Critical national infrastructure and regulated estates Volume figures are indicative estimates based on typical file sizes, not guarantees. 06 Not stored ## What OSS deliberately does not do Being clear about the boundary is part of the product. OSS is the offline copy of record, not a replacement for the systems that run your day. ### Live production systems OSS is not a hosting platform. Applications, databases and virtual machines keep running where they run today. OSS holds the copy of record you would rebuild from. ### Always-on file sync There is no continuous sync client. Data moves during a defined access window, which is precisely why ransomware cannot follow it. ### Your only backup OSS sits alongside your day-to-day backup, as the final offline copy. It replaces the online third copy, not your operational restore point. ### Systems and access control Governing who can reach which systems is a Control problem, not a storage one. That work sits with Control and Control Blueprints. [Why OSS is different](/why-oss) [Control, for systems and access](/control) 07 FAQ ## Questions about what goes in ### What kind of data should go into Offline Secure Storage? Data you cannot re-create, cannot afford to lose and do not need every hour. Personal and statutory records, client and case files, gold copy backups, keys and recovery material, long-term media and regulatory archives. ### Are there file types OSS cannot hold? No. OSS is block-level storage on dedicated hardware, so any file format is supported. The decision is about value and access frequency, not file type. ### How is this different from a backup? A backup usually lives on network-connected infrastructure and can be discovered and encrypted with the rest of the estate. OSS is physically disconnected between access windows, so there is no network path to it at all. ### How do I get data in and out? Data is written during an identity-verified access window. LUV uses one nominated day each week within a 12-hour window. Vault is available 24/7 on demand. Storage and Enterprise are designed with our solutions team around your transfer schedule. ### Where does the hardware sit? In carefully selected Firevault Bunkers. Europe, including the United Kingdom, is live today, with the United States and Middle East next. Firevault provisions your vault where it chooses unless you request a specific jurisdiction. ### Should everything be moved offline? No. Offline Secure Storage® is not a replacement for cloud or day-to-day storage. It gives high-consequence data a different availability model, so connectivity becomes an authorised event rather than a permanent condition. ### How do I decide what qualifies? Apply four tests: how often is it accessed, how serious is compromise or loss, is it the copy you would rebuild from, and are you obliged to retain it. Data that fails the frequency test and passes any of the other three is an offline candidate. ### Is offline storage the same as an immutable backup? No. Immutability prevents change while the storage remains network reachable. Offline Secure Storage® removes the network path itself, so there is no standing route to the protected data between authorised sessions. Next step ## Decide what belongs offline, then size the vault Tell us what you need to hold and how often you need to reach it. We will match it to LUV, Vault, Storage or Enterprise. [Choose the right storage](/get-started) [Organise a demo](/demo) Secured by Design Offline by Default [![Firevault - offline secure storage](/assets/logo-white-official-BKfZ19hm.png)](/) The world's first offline secure storage platform for data. Dedicated hardware. Physically disconnected. Online when you need it, offline when you do not. Not Cloud Not HSM Not SaaS Offline by Design Secure by design [ hello@fire-vault.com](mailto:hello@fire-vault.com) United Kingdom Independently certified by [ ![Cyber Essentials Certified](https://fire-vault.com/__l5e/assets-v1/6f8f42a2-89e1-4c20-938f-3f34d30bc90c/cyber-essentials-2026.png) ![Cyber Essentials Plus Certified](https://fire-vault.com/__l5e/assets-v1/8a77bf2c-6711-4762-b093-c4d650153bc9/cyber-essentials-plus-2026.png) ](https://registry.blockmarktech.com/certificates/) ### Stay Updated Security insights, product updates, and threat intelligence delivered to your inbox. Subscribe I agree to receive emails from Firevault. Unsubscribe anytime. ### Products Data Protection & Storage [ ![Offline Secure Storage product icon](/assets/vault-icon-BhL4-R9F.svg) Offline Secure Storage® (#OSS) A Digital Safe Deposit Box ](/offline-secure-storage) Network Evolution & Rapid Protection (#NEARP) [ ![Control product icon](/assets/control-icon-B9EWHzCT.png) Control Data Path Governance ](/control)[ ![Firebreak product icon](/assets/firebreak-icon-7zSCkB1t.png) Firebreak Physical Network Segmentation ](/firebreak) ### Firevault - [Offline Secure Storage® (#OSS)](/offline-secure-storage) - [LUV](/luv) - [Vault](/vault) - [Why OSS](/why-oss) - [Meet Firevault](/about) ### Solutions - [Keep Personal Data Secure](/oss-for-personal-records) - [Keep Customer Data Secure](/oss-for-customer-data) - [Keep Critical Data Beyond Ransomware](/oss-for-ransomware-recovery) - [Protect Director Data from Fines & Liability](/oss-for-directors-and-boards) - [Secure the Data Your Business Depends On](/oss-for-business) - [Keep Intellectual Property Secure](/oss-for-intellectual-property) - [OSS Use Cases](/oss-for-use-cases) - [Compliance & Risk](/compliance) - [Network Evolution & Rapid Protection (#NEARP)](/solutions/control) ### Resources - [Firevault Playbooks](/playbooks) - [The Leaders' Playbook](/playbook/leaders) - [Firebreak for Water Playbook](/playbook/firebreak-water) - [A Control Blueprint for AI](/playbook/ai-control-blueprints) - [Knowledge Vault](/learn/knowledge) - [White papers](/learn/whitepapers) - [How OSS Works](/how-oss-works) - [How OSS Physical Disconnection Works](/offline-secure-storage/what-is-oss) ### Company - [Press and Media](/press-media) - [Knowledge Vault](/learn/knowledge) - [FAQs](/learn/faq) - [Help Centre](/help) - [Careers](/careers) - [Invest in Firevault](/investors) [](https://www.linkedin.com/company/firevault-limited)[](https://www.facebook.com/profile.php?id=61581962517246)[](https://twitter.com/firevaultuk)[](/rss.xml) Firevault - Disconnect to Protect® [Site Map](/sitemap)● [Privacy Charter](/privacy-charter)● [Terms of Service](/terms)● [Planet Pledge](/planet-pledge)● [Vault User Commitment](/vault-commitment)● [LUV User Commitment](/luv-commitment)● [Cookie Policy](/cookies) © 2026 Firevault Limited Company No. 16320803 · VAT No. 490 8551 64 · Registered in England and Wales Get started ![Firevault](/favicon.svg) Protect what matters. Control what moves. Privacy ## You decide what we measure Essential cookies keep this site working. Everything else is optional and off until you say otherwise. Read the [Privacy Charter](/privacy-charter) or the [Cookie Policy](/cookies). Accept allEssential only Manage options