What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

Cyber Essentials

Exceed UK Baseline Certification with Physical Isolation Evidence

Cyber Essentials establishes baseline security requirements for UK organisations. Firevault Control provides physical measures that demonstrably exceed baseline requirements, providing stronger evidence for Cyber Essentials Plus certification and supply chain assurance.

Back to Control

Cyber Essentials

Cyber Essentials certification demonstrates baseline security hygiene. Physical enforcement demonstrates that those baselines are continuously maintained and cannot be accidentally undermined.

5/5

Technical controls with physical enforcement

100%

Boundary firewall requirements exceeded

CE+

Cyber Essentials Plus evidence strengthened

Full

Continuous certification evidence

The Certification Gap

Baseline certification is necessary but not sufficient.

Baseline vs Reality

Cyber Essentials certifies baseline controls at a point in time. Between assessments, control effectiveness can degrade through configuration drift and human error.

Boundary Device Limitations

Cyber Essentials requires boundary firewalls, but firewalls can be misconfigured, bypassed, or compromised, undermining the boundary they are meant to protect.

Supply Chain Requirements

Government and enterprise contracts increasingly require Cyber Essentials Plus. Stronger evidence differentiates organisations competing for these contracts.

The Scenario

Scenario: Supply Chain Tender with Physical Evidence

A government department evaluates three suppliers for a sensitive contract. All three hold Cyber Essentials Plus certification. However, the department's security assessment reveals that two suppliers rely entirely on software-based boundary controls that have experienced configuration incidents in the past year. The third supplier presents physical boundary enforcement evidence from Firevault Control, showing continuous, unbroken boundary protection with tamper-proof logs. The department selects the supplier with physical enforcement, noting that physical boundaries provide a higher assurance level for the sensitivity of the contract.

"All our competitors had Cyber Essentials Plus. What differentiated us was the ability to show physical boundary enforcement with continuous evidence. For the government buyer, physical controls meant genuine assurance, not just a certificate."

Framework Mapping

Physical measures that exceed baseline certification.

Organisations exceed Cyber Essentials requirements through physical enforcement of all five technical controls. Boundary protection is physical. Access control is multi-party governed. Recovery from malware is guaranteed through air-gapped archives. Continuous evidence strengthens certification renewals and differentiates in supply chain competitions.

Physical boundary protection exceeding firewall requirements
Governed access control with multi-party authorisation
Continuous compliance evidence between assessments
Competitive differentiation in supply chain tenders
Air-gapped recovery for guaranteed malware protection
Stronger CE Plus evidence for technical verification

Fracture — Boundary Firewall Enforcement

Module 1 of 4

Provides physical boundary enforcement that exceeds Cyber Essentials firewall requirements. Physical boundaries cannot be bypassed through misconfiguration, providing a higher assurance standard.

View all nine modules

Featured In

Key Capabilities

Physical Boundary Protection

Physical network boundaries exceed Cyber Essentials boundary firewall requirements, providing demonstrable protection that cannot be misconfigured.

Governed Access Control

Multi-party authorisation provides access control evidence that exceeds baseline requirements and demonstrates active governance.

Continuous Evidence

Automated logging generates continuous compliance evidence, strengthening your position for Cyber Essentials Plus assessment and renewals.

Secure Configuration Support

Physical zone separation ensures secure configuration requirements are maintained regardless of individual system configuration states.

Assessment-Ready Logs

Tamper-proof logs provide complete audit trails ready for Cyber Essentials Plus technical verification.

Clean Recovery Capability

Air-gapped backups ensure clean system restoration, supporting malware protection requirements with guaranteed uncompromised recovery.

Demo to Live

Adoption Guide

Step 1

Baseline Assessment

Review your current Cyber Essentials controls and identify where physical enforcement provides the greatest assurance improvement.

Step 2

Physical Boundary Design

Design physical boundary enforcement for your network perimeter and internal zone boundaries aligned to your Cyber Essentials scope.

Step 3

Pre-Assessment Deployment

Deploy Control before your next Cyber Essentials Plus assessment to generate continuous evidence and validate physical boundary effectiveness.

Step 4

Full Boundary Enforcement

Organisation-wide physical boundary enforcement with continuous evidence generation and air-gapped recovery capability.

Step 1

Baseline Assessment

Review your current Cyber Essentials controls and identify where physical enforcement provides the greatest assurance improvement.

Step 2

Physical Boundary Design

Design physical boundary enforcement for your network perimeter and internal zone boundaries aligned to your Cyber Essentials scope.

Step 3

Pre-Assessment Deployment

Deploy Control before your next Cyber Essentials Plus assessment to generate continuous evidence and validate physical boundary effectiveness.

Step 4

Full Boundary Enforcement

Organisation-wide physical boundary enforcement with continuous evidence generation and air-gapped recovery capability.

Organise a Demo

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

Exceed UK Baseline Certification with Physical Isolation Evidence

Baseline certification is necessary but not sufficient.

Baseline vs Reality

Boundary Device Limitations

Supply Chain Requirements

Scenario: Supply Chain Tender with Physical Evidence

Physical measures that exceed baseline certification.

Fracture — Boundary Firewall Enforcement

Key Capabilities

Physical Boundary Protection

Governed Access Control

Continuous Evidence

Secure Configuration Support

Assessment-Ready Logs

Clean Recovery Capability

Adoption Guide

Baseline Assessment

Physical Boundary Design

Pre-Assessment Deployment

Full Boundary Enforcement

Baseline Assessment

Physical Boundary Design

Pre-Assessment Deployment

Full Boundary Enforcement

Explore More

ISO 27001 Framework

NIS2 Framework

NIST CSF Framework

Frequently Asked

Ready to take the next step?

Your privacy matters