What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

Construction

Site Network and BIM Data Path Governance

Construction projects involve dozens of contractors sharing temporary networks on active sites. BIM models, structural calculations, and building management systems contain sensitive data that defines the physical security of the built environment.

Back to Control

Construction

A stolen BIM model does not just represent intellectual property loss. It provides a complete blueprint of a building's physical security systems, structural weaknesses, and access points.

100%

BIM data path isolation from site networks

Zero

Persistent contractor access between visits

Site network zones with independent governance

Full

BIM security and ISO 19650 compliance

The Challenge

Construction sites present unique network risks.

BIM Data Exposure

Building Information Models contain detailed structural, mechanical, and security system data that, if stolen, reveals the physical vulnerabilities of critical buildings.

Multi-Contractor Access

Dozens of subcontractors share temporary site networks with varying security standards, each creating potential entry points for attackers.

Temporary Infrastructure

Construction site networks are inherently temporary and often lack the security controls applied to permanent corporate infrastructure.

The Scenario

Scenario: BIM Data Theft from Critical Infrastructure Project

A subcontractor's laptop, connected to the construction site Wi-Fi, is compromised through an unpatched vulnerability. The attacker uses the site network to access the BIM collaboration server, downloading complete structural and security system models for a new government building. The models reveal every security camera location, access control point, and structural reinforcement detail. With Firevault Control, the BIM collaboration environment is physically separated from the general site network. Subcontractor access to BIM data requires multi-party authorisation and operates within controlled time windows. The compromised laptop cannot reach BIM systems because the path does not exist.

"We found the BIM model for a Ministry of Defence facility on a contractor's personal laptop. It contained the complete security system layout, structural details, and utility routing. The contractor had left the project six months earlier."

Solution Blueprint

Physical governance for construction data.

Construction firms gain physical control over BIM data, building management systems, and multi-contractor site networks. Contractor access is governed by time-limited, authorised windows. Sensitive project data is physically separated from general site networks. Long-term archives persist beyond temporary site infrastructure.

Physical BIM data isolation from site networks
Time-limited contractor access with multi-party authorisation
Independent governance for each contractor organisation
Cellular management independent of site infrastructure
ISO 19650 compliance evidence throughout the project lifecycle
Long-term data archives beyond construction phase

Fracture — Site Network Severance

Module 1 of 4

Physically disconnects compromised site network segments to contain threats. When a contractor device is compromised, Fracture severs the path to prevent lateral movement into project data systems.

View all nine modules

Featured In

Key Capabilities

Sovereign Project Data

All BIM models and project data remain within the agreed jurisdiction in secured Firevault Bunkers, meeting government construction security requirements.

Multi-Contractor Governance

Each contractor organisation receives isolated access paths with independent authorisation and logging, preventing cross-contractor compromise.

ISO 19650 Compliance

Automated compliance logging supports ISO 19650 information management requirements and government construction security standards.

Site Cellular Management

Out-of-band management via cellular connectivity ensures governance capability independent of temporary site network infrastructure.

Project Audit Trail

Every access to BIM data and building systems is recorded in tamper-proof logs that persist beyond the construction phase.

Project Data Archive

Air-gapped copies of project data ensure long-term preservation beyond the life of temporary construction site infrastructure.

Demo to Live

Adoption Guide

Step 1

Project Security Assessment

Assess BIM data sensitivity, contractor access requirements, and building management system connectivity for the project or estate.

Step 2

Site Zone Architecture

Design physically separated zones for general site access, BIM collaboration, building management, and corporate project systems.

Step 3

Single Site Pilot

Deploy on a representative construction site with full contractor access governance, BIM data isolation, and compliance logging.

Step 4

Estate-Wide Adoption

Standardised deployment across all construction sites with centralised data archives, continuous compliance evidence, and cellular management.

Step 1

Project Security Assessment

Assess BIM data sensitivity, contractor access requirements, and building management system connectivity for the project or estate.

Step 2

Site Zone Architecture

Design physically separated zones for general site access, BIM collaboration, building management, and corporate project systems.

Step 3

Single Site Pilot

Deploy on a representative construction site with full contractor access governance, BIM data isolation, and compliance logging.

Step 4

Estate-Wide Adoption

Standardised deployment across all construction sites with centralised data archives, continuous compliance evidence, and cellular management.

Organise a Demo

Explore More

Supply Chain Threat

Disconnect third-party paths when not in active use.

Learn more

Control for Public Sector

Government network isolation and classified data paths.

Learn more

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

Site Network and BIM Data Path Governance

Construction sites present unique network risks.

BIM Data Exposure

Multi-Contractor Access

Temporary Infrastructure

Scenario: BIM Data Theft from Critical Infrastructure Project

Physical governance for construction data.

Fracture — Site Network Severance

Key Capabilities

Sovereign Project Data

Multi-Contractor Governance

ISO 19650 Compliance

Site Cellular Management

Project Audit Trail

Project Data Archive

Adoption Guide

Project Security Assessment

Site Zone Architecture

Single Site Pilot

Estate-Wide Adoption

Project Security Assessment

Site Zone Architecture

Single Site Pilot

Estate-Wide Adoption

Explore More

Supply Chain Threat

Control for Public Sector

Frequently Asked

Ready to take the next step?

Your privacy matters