What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

NIS2

Physical Compliance with NIS2 Directive Requirements

NIS2 requires essential and important entities to implement appropriate technical measures for network security, access control, and incident handling. Firevault Control provides physical enforcement that demonstrably exceeds directive requirements.

Back to Control

NIS2

NIS2 requires appropriate and proportionate measures. For essential services that underpin national infrastructure, appropriate means physical, not just logical.

Art. 21

Full Article 21 requirements coverage

100%

Physical network segmentation enforcement

24hr

Incident notification capability support

Full

Automated compliance evidence generation

The Compliance Challenge

NIS2 demands demonstrable security measures.

Proportionate Measures

NIS2 requires measures proportionate to the risk. For essential services, this means demonstrating that security measures go beyond standard software controls.

Network Segmentation

Article 21 requires network segmentation, but many organisations rely on VLAN-based separation that can be bypassed through misconfiguration.

Management Accountability

NIS2 introduces personal liability for management bodies. Demonstrating appropriate measures requires evidence that goes beyond compliance checklists.

The Scenario

Scenario: NIS2 Audit with Physical Evidence

An essential entity faces its first NIS2 compliance audit. The assessor examines network segmentation controls and finds that existing firewall-based segmentation, while configured correctly today, has experienced three misconfiguration incidents in the past year that temporarily created paths between zones. Each incident violated NIS2 requirements for the duration it existed. The organisation cannot demonstrate continuous compliance. With Firevault Control, the organisation presents physical zone boundary evidence showing continuous, unbroken zone separation. Conduit activations are logged with multi-party authorisation records. The assessor can verify that physical boundaries were maintained at all times, providing evidence of continuous compliance.

"Our auditor asked us to prove that our network segmentation had been continuously effective for the past twelve months. With firewall logs, we could show configuration at a point in time. We could not prove there had been no gaps between audits."

Framework Mapping

Exceed NIS2 requirements with physical measures.

Essential and important entities achieve NIS2 compliance through physical measures that demonstrably exceed directive requirements. Network segmentation is physical, not logical. Access control is multi-party and time-limited. Business continuity is guaranteed through air-gapped archives. Compliance evidence is generated continuously.

Physical network segmentation exceeding Article 21 requirements
Multi-party access control satisfying Article 21(2)(d)
Continuous compliance evidence between assessments
Management accountability documentation for Article 20
Rapid incident containment for notification timelines
Air-gapped recovery exceeding business continuity requirements

Fracture — Article 21(2)(c) Network Security

Module 1 of 4

Provides physical network segmentation that directly satisfies NIS2 Article 21(2)(c) requirements for network security. Physical boundaries demonstrate a higher standard of protection than the directive requires.

View all nine modules

Featured In

Key Capabilities

EU Data Sovereignty

Data residency within UK and EU jurisdictions supports NIS2 requirements for appropriate data handling and sovereignty.

Management Accountability

Documented multi-party authorisation and governance processes demonstrate management oversight required by Article 20.

Continuous Evidence

Automated compliance logging generates continuous NIS2 evidence, eliminating gaps between point-in-time assessments.

Incident Response

Physical zone isolation capabilities support the rapid incident containment required by NIS2 notification timelines.

Audit-Ready Records

Tamper-proof logs provide complete audit trails for every network boundary state, access authorisation, and incident response action.

Recovery Assurance

Air-gapped recovery archives demonstrate business continuity capability that exceeds NIS2 disaster recovery requirements.

Demo to Live

Adoption Guide

Step 1

NIS2 Gap Assessment

Map your current security measures against NIS2 Article 21 requirements to identify where physical enforcement strengthens your compliance position.

Step 2

Compliance Architecture Design

Design physical zone boundaries and access controls that satisfy and exceed NIS2 requirements for your entity classification.

Step 3

Evidence Validation

Deploy Control in a representative environment to validate compliance evidence generation and prepare for your first NIS2 assessment.

Step 4

Full Compliance Deployment

Organisation-wide deployment with continuous compliance evidence, multi-party governance, and air-gapped recovery assurance.

Step 1

NIS2 Gap Assessment

Map your current security measures against NIS2 Article 21 requirements to identify where physical enforcement strengthens your compliance position.

Step 2

Compliance Architecture Design

Design physical zone boundaries and access controls that satisfy and exceed NIS2 requirements for your entity classification.

Step 3

Evidence Validation

Deploy Control in a representative environment to validate compliance evidence generation and prepare for your first NIS2 assessment.

Step 4

Full Compliance Deployment

Organisation-wide deployment with continuous compliance evidence, multi-party governance, and air-gapped recovery assurance.

Organise a Demo

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

Physical Compliance with NIS2 Directive Requirements

NIS2 demands demonstrable security measures.

Proportionate Measures

Network Segmentation

Management Accountability

Scenario: NIS2 Audit with Physical Evidence

Exceed NIS2 requirements with physical measures.

Fracture — Article 21(2)(c) Network Security

Key Capabilities

EU Data Sovereignty

Management Accountability

Continuous Evidence

Incident Response

Audit-Ready Records

Recovery Assurance

Adoption Guide

NIS2 Gap Assessment

Compliance Architecture Design

Evidence Validation

Full Compliance Deployment

NIS2 Gap Assessment

Compliance Architecture Design

Evidence Validation

Full Compliance Deployment

Explore More

DORA Framework

Control for Critical Infrastructure

ISO 27001 Framework

Frequently Asked

Ready to take the next step?

Your privacy matters