What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

ISO 27001

Physical Enforcement of Annex A Controls

ISO 27001 requires organisations to implement appropriate controls from Annex A. Firevault Control provides physical enforcement for network segmentation, access control, and business continuity controls that demonstrate a higher standard of protection.

Back to Control

ISO 27001

ISO 27001 certification demonstrates intent. Physical control enforcement demonstrates reality. The gap between the two is where breaches happen.

Annex A controls with physical enforcement

100%

Network segmentation physical evidence

A.8

Technology controls with physical backing

Full

Continuous ISMS evidence generation

The Certification Challenge

Demonstrating control effectiveness is difficult.

Point-in-Time Audits

ISO 27001 surveillance audits capture a snapshot. Between audits, control effectiveness can degrade through configuration drift, human error, or undocumented changes.

Network Control Evidence

Demonstrating continuous network segmentation effectiveness requires evidence that logical controls have been maintained without interruption.

Access Control Gaps

Access reviews happen periodically, but between reviews, excessive access can accumulate as roles change and projects begin and end.

The Scenario

Scenario: Surveillance Audit with Physical Evidence

During an ISO 27001 surveillance audit, the auditor examines network segmentation controls under Annex A.8.22 (Network segmentation). The organisation presents twelve months of continuous physical boundary state logs showing unbroken zone separation. Every conduit activation is documented with multi-party authorisation records, time stamps, and data flow logs. The auditor notes that this level of continuous evidence exceeds what they typically see with software-only implementations, where gaps between configuration audits leave uncertainty about control effectiveness. With Firevault Control, the evidence is irrefutable. Physical boundaries were maintained continuously, and every exception was explicitly authorised and logged.

"Our previous auditor accepted our firewall rules as evidence of network segmentation. Our new auditor asked how we knew the rules had been continuously correct between audits. We could not answer that question with software-only controls."

Framework Mapping

Physical enforcement for ISO 27001 controls.

Organisations strengthen their ISMS with physical control enforcement that provides continuous, irrefutable compliance evidence. Network segmentation is physical. Access control is multi-party authorised. Business continuity is guaranteed through air-gapped archives. Evidence is generated continuously for surveillance audits.

Physical enforcement of Annex A technology controls
Continuous network segmentation evidence for A.8.22
Multi-party access control for A.5.15 and A.5.16
Air-gapped business continuity for A.5.30
Tamper-proof audit logs for certification evidence
Continuous ISMS evidence between surveillance audits

Fracture — A.8.22 Network Segmentation

Module 1 of 4

Provides physical enforcement of Annex A.8.22 network segmentation requirements. Zone boundaries are physical, providing irrefutable evidence of continuous segmentation effectiveness.

View all nine modules

Featured In

Key Capabilities

Physical Control Enforcement

Annex A controls are enforced physically, providing a higher standard of protection than software-only implementations.

Access Control Evidence

Every access authorisation, session, and revocation is documented in tamper-proof logs for ISMS records.

Continuous ISMS Evidence

Automated logging generates continuous evidence for Statement of Applicability controls, eliminating gaps between surveillance audits.

Segmentation Assurance

Physical network segmentation provides irrefutable evidence of zone separation for A.8.22 compliance.

Audit-Ready Documentation

Tamper-proof logs and automated reports provide complete audit trails ready for certification and surveillance audits.

Recovery Assurance

Air-gapped recovery demonstrates ICT readiness for business continuity beyond what network-connected backups can provide.

Demo to Live

Adoption Guide

Step 1

SoA Mapping Assessment

Map your Statement of Applicability against Control module capabilities to identify where physical enforcement strengthens your ISMS.

Step 2

Control Architecture Design

Design physical enforcement for priority Annex A controls, starting with network segmentation and access control.

Step 3

Pre-Audit Validation

Deploy and validate continuous evidence generation before your next surveillance audit to demonstrate physical control effectiveness.

Step 4

ISMS Integration

Full integration with your ISMS including continuous evidence generation, automated reporting, and air-gapped record preservation.

Step 1

SoA Mapping Assessment

Map your Statement of Applicability against Control module capabilities to identify where physical enforcement strengthens your ISMS.

Step 2

Control Architecture Design

Design physical enforcement for priority Annex A controls, starting with network segmentation and access control.

Step 3

Pre-Audit Validation

Deploy and validate continuous evidence generation before your next surveillance audit to demonstrate physical control effectiveness.

Step 4

ISMS Integration

Full integration with your ISMS including continuous evidence generation, automated reporting, and air-gapped record preservation.

Organise a Demo

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

Physical Enforcement of Annex A Controls

Demonstrating control effectiveness is difficult.

Point-in-Time Audits

Network Control Evidence

Access Control Gaps

Scenario: Surveillance Audit with Physical Evidence

Physical enforcement for ISO 27001 controls.

Fracture — A.8.22 Network Segmentation

Key Capabilities

Physical Control Enforcement

Access Control Evidence

Continuous ISMS Evidence

Segmentation Assurance

Audit-Ready Documentation

Recovery Assurance

Adoption Guide

SoA Mapping Assessment

Control Architecture Design

Pre-Audit Validation

ISMS Integration

SoA Mapping Assessment

Control Architecture Design

Pre-Audit Validation

ISMS Integration

Explore More

NIS2 Framework

Cyber Essentials

NIST CSF Framework

Frequently Asked

Ready to take the next step?

Your privacy matters