What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

Defence

National Security-Grade Network Severance and Isolation

Defence networks carry the most sensitive information a nation possesses. The threat landscape includes the most capable adversaries on earth, operating with state-level resources and persistence.

Back to Control

Defence

Defence information requires defence-grade protection. Logical separation managed by software is not sufficient when the adversary has the resources and patience to find and exploit every configuration error.

100%

Classification boundary enforcement

Zero

Cross-domain network reachability

SC/DV

Cleared personnel at every facility

Full

JSP 440 and NATO security compliance

The Challenge

Defence networks face state-level adversaries.

Nation-State Persistence

State-sponsored actors maintain persistent access campaigns against defence networks, investing years of effort to compromise a single classified system.

Cross-Domain Risks

Information sharing between classification levels creates network paths that, if compromised, could allow classified data to traverse to lower classification domains.

Legacy Military Systems

Decades-old military systems were designed for physical isolation but are increasingly connected to modern networks for interoperability.

The Scenario

Scenario: Cross-Domain Boundary Compromise

A state-sponsored group identifies a misconfiguration in a cross-domain solution connecting SECRET and OFFICIAL networks. The misconfiguration allows carefully crafted data packets to bypass content inspection, creating a covert channel for exfiltrating classified material. The channel operates for months at low bandwidth, evading detection systems tuned for bulk data movement. With Firevault Control, cross-domain boundaries are physically enforced. Data movement between classification levels requires multi-party authorisation with full content verification. The covert channel cannot exist because the physical path between domains does not exist outside authorised transfer windows.

"Our cross-domain solution had been certified and accredited. It passed every penetration test. But the misconfiguration that enabled the covert channel was in a feature that had been added after certification. The accreditation process had not caught up."

Solution Blueprint

Physical protection against state-level threats.

Defence organisations gain physical enforcement of classification boundaries that no software exploit can bypass. Cross-domain data movement requires cleared, multi-party authorisation. Classified data remains within sovereign, cleared facilities. Recovery from even the most sophisticated state-sponsored attacks is guaranteed.

Physical classification boundary enforcement between domains
UK-sovereign facilities with SC/DV-cleared personnel
Multi-party authorisation with appropriate clearance verification
Forensic-grade logging for security investigation and audit
JSP 440 and NATO security compliance evidence
Cleared air-gapped recovery for classified system restoration

Fracture — Classification Boundary Severance

Module 1 of 4

Physically severs network connections between classification domains. No software bridge exists between SECRET, OFFICIAL, and NATO networks outside explicitly authorised and monitored transfer sessions.

View all nine modules

Featured In

Key Capabilities

UK Sovereign Facilities

All classified data remains within NATO-approved underground facilities in the United Kingdom, managed by SC/DV-cleared personnel under MOD oversight.

Cleared Multi-Party Access

All access requires authorisation from multiple cleared individuals across different roles, preventing any single point of compromise.

JSP 440 Compliance

Automated compliance logging maps directly to JSP 440, JSP 604, and NATO security requirements with continuous evidence generation.

Independent Communications

Out-of-band management via dedicated, secured communications ensures control plane access independent of primary defence networks.

Forensic-Grade Logging

Every access, transfer, and authorisation decision is recorded in tamper-proof, classification-appropriate logs on physically separate infrastructure.

Cleared Recovery Capability

Air-gapped backup copies maintained within appropriately cleared facilities ensure classified system restoration during total compromise scenarios.

Demo to Live

Adoption Guide

Step 1

Classification Boundary Assessment

Map all cross-domain connections and data flows between classification levels, identifying persistent paths and reachability gaps against JSP 440 requirements.

Step 2

Sovereign Architecture Design

Design physically separated classification zones with Control modules enforcing each boundary, aligned to MOD and NATO security requirements.

Step 3

Accredited Pilot

Deploy within a controlled environment with full classification boundary enforcement, multi-party authorisation, and forensic logging for accreditation evaluation.

Step 4

Operational Capability

Full deployment across defence infrastructure with cleared air-gapped recovery, continuous compliance evidence, and independent communications.

Step 1

Classification Boundary Assessment

Map all cross-domain connections and data flows between classification levels, identifying persistent paths and reachability gaps against JSP 440 requirements.

Step 2

Sovereign Architecture Design

Design physically separated classification zones with Control modules enforcing each boundary, aligned to MOD and NATO security requirements.

Step 3

Accredited Pilot

Deploy within a controlled environment with full classification boundary enforcement, multi-party authorisation, and forensic logging for accreditation evaluation.

Step 4

Operational Capability

Full deployment across defence infrastructure with cleared air-gapped recovery, continuous compliance evidence, and independent communications.

Organise a Demo

Explore More

Control for Critical Infrastructure

National-grade security for essential services.

Learn more

Control for Public Sector

Government network isolation and classified data paths.

Learn more

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

National Security-Grade Network Severance and Isolation

Defence networks face state-level adversaries.

Nation-State Persistence

Cross-Domain Risks

Legacy Military Systems

Scenario: Cross-Domain Boundary Compromise

Physical protection against state-level threats.

Fracture — Classification Boundary Severance

Key Capabilities

UK Sovereign Facilities

Cleared Multi-Party Access

JSP 440 Compliance

Independent Communications

Forensic-Grade Logging

Cleared Recovery Capability

Adoption Guide

Classification Boundary Assessment

Sovereign Architecture Design

Accredited Pilot

Operational Capability

Classification Boundary Assessment

Sovereign Architecture Design

Accredited Pilot

Operational Capability

Explore More

Control for Critical Infrastructure

Control for Public Sector

Frequently Asked

Ready to take the next step?

Your privacy matters