Every claim we make, verified in one place.
How Firevault protects your data through physical disconnection, hardware encryption and identity verification, with a sourced reference for every statistic and claim we publish. Framework mapping lives in the Compliance Hub.
- Offline by default
- Identity locked access
- Hardware encrypted

Offline
By default posture
OSS design principle
72h
UK GDPR breach window
ICO / Article 33
CAF-aligned
NCSC outcomes mapped
Alignment, not certification
0-trust
Identity + time-boxed access
Every session logged
Built on physical disconnection.
When data is offline, there is no network path for attackers to exploit. This is security by architecture, not by configuration.
Physical Disconnection
Your data resides on hardware that is physically disconnected from networks. No IP address, no attack surface, no remote exploitation.
Hardware Encryption
All data is protected by Quantum Key Encryption and hardware level AES-256. Encryption keys never leave the secure enclave.
Identity Verification
Every account is verified through Know Your Customer (KYC) and Anti-Money Laundering (AML) checks at onboarding, permanently linking the account to a confirmed identity. Access then requires Multi-Factor Authentication (MFA) at every session.
Zero Standing Privileges
No administrator has persistent access. Every session is explicitly authorised for a defined purpose and time window.
Certifications and assurance.
Security Audits
Regular third-party penetration testing and security assessments by accredited firms.
Secure Facilities
Data stored in carefully selected Tier 3+ Firevault Bunkers with 24/7 physical security and clear jurisdictional boundaries.
Vetted Personnel
All staff undergo background checks and security clearance as required.
Key Management
Cryptographic keys managed using hardware security modules with strict access controls.
Frameworks live in the Compliance Hub.
This page covers how we secure your data and how every claim is verified. For how Offline Secure Storage® and Control map to NIS2, DORA, UK GDPR, ISO 27001, PCI DSS, NCSC CAF and Cyber Essentials Plus, the Compliance Hub is the single source.
Open the Compliance HubThe Firevault Trust Index.
What we say. Where we say it. Why it is true. Whether you are a legal team, investor, analyst, journalist or procurement officer, this section exists to provide clarity and credibility for every stat, fact and claim.
What we said
The exact claim or statistic we have published
Where we said it
The pages on our site where you will find it
Where it comes from
The original source with verification link
1The Scale of Digital Theft
“Cybercrime costs £8.3 trillion annually (2025 projection).”
“50 billion+ online files stolen per year.”
“54% of online data is classified as sensitive.”
“Every 2 seconds, a cyberattack threatens exposure.”
2The Cost of Breach and Ransomware
“Average global data breach cost is £3.5 million.”
“Average UK data breach cost is £3.5 million.”
“Average Middle East data breach cost is £5.7 million.”
“It takes an average of 277 days to identify and contain a breach.”
“Ransomware attacks have risen by 105%.”
3Individual and Personal Fraud
“Average scam victim loss in the UK is £879.”
“Average fraud loss for millennials (29 to 44 year olds) is £1,457.”
“Average APP fraud loss is £2,423 per case.”
4Director and Executive Liability
“94% of breaches target executive-level information.”
“Average breach cost when board data is compromised: £4.7 million.”
“Maximum ICO director personal liability: £500,000.”
“D and O insurance claims have increased 40% year-on-year due to cyber incidents.”
5Sector-Specific Breach Costs
“Average breach cost in healthcare: £10.9 million, highest of any sector globally.”
“Average breach cost in financial services: £4.45 million.”
“Average breach cost in professional services: £4.2 million.”
“Average breach cost in energy sector: £4.7 million.”
“Average breach cost for UK small businesses: £165,000.”
6SME and Small Business Risk
“43% of all cyber attacks target small businesses.”
“60% of small businesses close within 6 months of a cyber attack.”
“82% of ransomware attacks target businesses under 1,000 employees.”
“89% of law firms were targeted by cyber attacks in 2024.”
7Compliance and Regulatory
“GDPR fines can reach up to €20 million or 4% of annual global turnover.”
“NIS2 maximum fine: £17 million+ for critical infrastructure failures.”
“UK businesses face mandatory 72 hours breach notification requirements.”
8Recent High-Profile Breaches
“M and S suffered a major cyber incident affecting customer data in 2025.”
“JLR (Jaguar Land Rover) experienced a ransomware attack exposing internal systems.”
“PayPal disclosed a credential stuffing attack affecting 35,000 accounts.”
9Firevault: Verified Product Claims
“Firevault is the world's first offline secure storage platform. Others may claim to offer an offline vault, a vault, or offline storage, but no one else delivers offline secure storage: physically disconnected, hardware encrypted, identity-locked, and managed as a complete platform.”
“Vault by Firevault is a digital safe deposit box for individuals, SMEs and professionals.”
“Storage by Firevault is scalable offline secure storage for businesses and service providers.”
“Quantum key encryption for key exchange combined with hardware-level AES-256 encryption for data at rest.”
“Physically disconnected and offline by default. No IP address, no standing access, no attack surface.”
“Identity-locked with KYC, MFA, and legal successor control (Vault Buddy).”
“No third-party access. No remote admin. Not even Firevault can access your data.”
“All vaults require a 36-month minimum commitment.”
“Stored in Firevault Bunkers, physically secured colocation facilities designed for sovereign-grade resilience.”
“Zero data breaches since inception.”
“2TB, 4TB and 8TB vaults are physically returned with 24/7 access. 300GB vaults (LUV) are accessed on one nominated day per week, using an issued port number, user name and password.”
“Each vault is assigned to one owner and one mobile phone account. Sharing is only permitted via Butterfly deployment mode.”
References
- [1]Cybersecurity Ventures 2025 Almanac, https://cybersecurityventures.com/cybersecurity-almanac-2025/
- [2]Thales Data Threat Report 2025, https://cpl.thalesgroup.com/data-threat-report
- [3]ENISA Threat Landscape 2024, https://www.enisa.europa.eu/publications/enisa-threat-landscape-2024
- [4]IBM Cost of a Data Breach Report 2025, https://www.ibm.com/reports/data-breach
- [5]Sophos State of Ransomware 2024, https://assets.sophos.com/X24WTUEQ/at/3bxxmz2zj7cbsxzmnhn7cft/sophos-state-of-ransomware-2024.pdf
- [6]GASA/Cifas State of Scams Report 2025, https://www.cifas.org.uk/newsroom/9.4billion_stolenfromconsumers
- [7]UK Finance Annual Fraud Report 2025, https://www.ukfinance.org.uk/policy-and-guidance/reports-and-publications/annual-fraud-report-2025
- [8]Campden Wealth Report, https://www.campdenwealth.com/
- [9]Verizon DBIR 2024, https://www.verizon.com/business/resources/reports/dbir/
- [10]ICO enforcement guidance, https://ico.org.uk/
- [11]Allianz Risk Barometer 2024, https://www.agcs.allianz.com/news-and-insights/reports/allianz-risk-barometer.html
- [12]UK Government Cyber Breaches Survey 2024, https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2024
- [13]National Cyber Security Alliance, https://staysafeonline.org/
- [14]Sophos State of Ransomware 2024, https://www.sophos.com/en-us/content/state-of-ransomware
- [15]SRA/National Cyber Security Centre, https://www.ncsc.gov.uk/
- [16]GDPR Article 83, https://gdpr.eu/fines/
- [17]NIS2 Directive, https://digital-strategy.ec.europa.eu/en/policies/nis2-directive
- [18]ICO guidance, https://ico.org.uk/for-organisations/report-a-breach/
- [19]BBC News, https://www.bbc.co.uk/news/articles/cwy0x8dk9y4o
- [20]BleepingComputer, https://www.bleepingcomputer.com/news/security/jaguar-land-rover-hit-by-hellcat-ransomware-data-stolen/
- [21]BleepingComputer, https://www.bleepingcomputer.com/news/security/paypal-accounts-breached-in-large-scale-credential-stuffing-attack/
- [22]BBC News, https://www.bbc.co.uk/news/articles/cz9r4p9lp0wo
Related
For due diligence
For procurement audits
For compliance and press
We update this guide regularly. If you need official verification or source documents, reach out:
Contact: trust@fire-vault.comStatistics Last Verified
January 2026
All claims verified against original sources. Next scheduled review: April 2026.



Verify our security for yourself
Review our Trust Index, request a penetration test report, or book a technical deep-dive with our team.
Takes about 2 minutes. No account needed.

