What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

Education

Campus Network Segmentation and Safeguarding Controls

Educational institutions manage open campus networks alongside sensitive research data, student safeguarding records, and financial systems. The culture of openness that enables learning also creates significant cybersecurity challenges.

Back to Control

Education

When a student's personal device and the school's safeguarding database share the same network, every compromised student laptop is a potential path to the most sensitive data an institution holds.

100%

Safeguarding data isolation from campus networks

Zero

Direct paths between research and admin systems

Campus zones with independent governance

Full

DfE and Ofsted safeguarding evidence

The Challenge

Educational networks balance openness with protection.

Safeguarding Data Risks

Student safeguarding records, SEN data, and child protection information must be rigorously protected while remaining accessible to authorised pastoral staff.

Open Campus Networks

Universities and schools operate open networks for learning that also connect to sensitive administrative, financial, and research systems.

Research Data Theft

University research data, particularly in defence, pharmaceutical, and technology sectors, is targeted by nation-state actors for intellectual property theft.

The Scenario

Scenario: University Ransomware and Research Data Theft

Ransomware enters through a compromised student laptop on the campus Wi-Fi network. It propagates across the flat campus network, reaching administrative systems, research servers, and the student records database. The university loses access to exam results during clearing week, research data for three funded projects is encrypted, and safeguarding records for vulnerable students are exposed. With Firevault Control, the campus network is physically separated into student, research, administrative, and safeguarding zones. The ransomware cannot propagate beyond the student zone because the network paths to other zones do not exist.

"The ransomware came in through a first-year student's laptop. Twelve hours later, it had encrypted our research servers, our student records, and our finance system. We lost three years of PhD research data because the backups were on the same network."

Solution Blueprint

Physical governance for campus networks.

Educational institutions gain physical separation between open student networks and sensitive institutional systems. Safeguarding data is physically isolated with governed access. Research data is protected from network-based theft. Recovery from ransomware attacks is guaranteed through air-gapped archives.

Physical isolation of safeguarding data from campus networks
Governed access to sensitive student and research data
Multi-party authorisation for safeguarding record access
Independent management communications for incident response
DfE, Ofsted, and GDPR compliance evidence
Air-gapped recovery for research and institutional data

Fracture — Emergency Campus Isolation

Module 1 of 4

Physically disconnects compromised campus zones to contain ransomware and prevent propagation into research, administrative, or safeguarding systems.

View all nine modules

Featured In

Key Capabilities

Data Sovereignty

All safeguarding and student data remains within the agreed jurisdiction in secured Firevault Bunkers, meeting DfE data handling requirements.

Safeguarding Access Controls

Access to safeguarding records requires authorisation from designated safeguarding leads with full audit logging.

DfE and Ofsted Evidence

Automated compliance logging supports DfE cyber security standards, Ofsted safeguarding requirements, and GDPR obligations.

Campus Cellular Management

Out-of-band management via cellular connectivity ensures governance capability independent of the campus network.

Safeguarding Audit Trail

Every access to safeguarding data is recorded in tamper-proof logs for regulatory inspection and child protection reviews.

Research Data Recovery

Air-gapped copies of research data ensure recovery of funded project work regardless of campus network compromise.

Demo to Live

Adoption Guide

Step 1

Campus Network Assessment

Map all network paths between student access, research systems, administrative infrastructure, and safeguarding data to identify segmentation gaps.

Step 2

Campus Zone Design

Design physically separated zones for student access, research, administration, and safeguarding with Control modules at each boundary.

Step 3

Department Pilot

Deploy in a representative faculty or department with full zone separation, safeguarding data governance, and compliance logging.

Step 4

Institution-Wide Deployment

Full deployment across the campus with air-gapped recovery, continuous compliance evidence, and cellular management capability.

Step 1

Campus Network Assessment

Map all network paths between student access, research systems, administrative infrastructure, and safeguarding data to identify segmentation gaps.

Step 2

Campus Zone Design

Design physically separated zones for student access, research, administration, and safeguarding with Control modules at each boundary.

Step 3

Department Pilot

Deploy in a representative faculty or department with full zone separation, safeguarding data governance, and compliance logging.

Step 4

Institution-Wide Deployment

Full deployment across the campus with air-gapped recovery, continuous compliance evidence, and cellular management capability.

Organise a Demo

Explore More

Ransomware Containment

Sever the path before ransomware spreads.

Learn more

Control for Public Sector

Government network isolation and classified data paths.

Learn more

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

Campus Network Segmentation and Safeguarding Controls

Educational networks balance openness with protection.

Safeguarding Data Risks

Open Campus Networks

Research Data Theft

Scenario: University Ransomware and Research Data Theft

Physical governance for campus networks.

Fracture — Emergency Campus Isolation

Key Capabilities

Data Sovereignty

Safeguarding Access Controls

DfE and Ofsted Evidence

Campus Cellular Management

Safeguarding Audit Trail

Research Data Recovery

Adoption Guide

Campus Network Assessment

Campus Zone Design

Department Pilot

Institution-Wide Deployment

Campus Network Assessment

Campus Zone Design

Department Pilot

Institution-Wide Deployment

Explore More

Ransomware Containment

Control for Public Sector

Frequently Asked

Ready to take the next step?

Your privacy matters