What is offline secure storage?

Offline secure storage (OSS) is a data protection method where data is physically disconnected from the internet when not in use. Unlike cloud storage, data stored offline has zero remote attack surface — it cannot be hacked, ransomed or accessed remotely because it is not connected to any network. Firevault provides this through hardware-encrypted vaults that are physically isolated.

How does Firevault protect against ransomware?

Firevault protects against ransomware by physically disconnecting your data from the internet. Ransomware can only encrypt data it can reach over a network. When your data is stored offline in a Firevault, ransomware attacks cannot reach it. Even if your entire network is compromised, your offline vault remains untouched and intact.

How much does Firevault cost?

Firevault Vault starts from £75 per month (inc VAT) for individuals. Business Storage starts from £360 per month (inc VAT). Enterprise Platform pricing is available on request. All plans include hardware encryption, identity verification, and physical disconnection by default.

Who is Firevault designed for?

Firevault is designed for individuals protecting passports, wills and crypto keys; professionals such as solicitors, accountants and consultants protecting client data; SMEs and businesses protecting crown jewel data; and regulated industries including healthcare, financial services and legal sectors requiring offline backup for compliance with GDPR, NIS2, DORA and FCA regulations.

Is Firevault GDPR compliant?

Yes. Firevault is designed to support GDPR compliance by keeping sensitive personal data physically isolated and offline. Physical disconnection ensures data is not exposed to network-based attacks, supports data minimisation principles, and provides an audit trail of access. Firevault is also designed to support NIS2, DORA, FCA and SRA compliance requirements.

What is a physical air gap?

A physical air gap is a security measure where a computer or storage device is completely isolated from the internet and all unsecured networks. Unlike a logical or software air gap, a physical air gap cannot be bridged remotely. Firevault uses a Layer 1 physical air gap — your data is stored on hardware that is physically disconnected from any network when not in active use.

Control Module

FV-Archive: Immutable Offline Retention

Audit trails, regulatory evidence, and forensic records must be beyond the reach of anyone who might want to alter them. Archive stores evidence on physically disconnected media, making tampering impossible regardless of who attempts it.

Back to Control

Control Module

If the person who committed the act can reach the evidence of that act, your audit trail is worthless. Physical disconnection ensures the evidence remains intact regardless of who wants it destroyed.

Immutable

Evidence stored on write-once, physically disconnected media

Zero

Network paths to archived evidence during retention

Compliant

Meets GDPR, NIS2, DORA, and ISO 27001 retention requirements

Verified

Cryptographic integrity on every retrieval

The Problem

Evidence you cannot protect is evidence you cannot use.

Log Tampering

Attackers who compromise systems routinely delete or modify logs to cover their tracks. Network-connected logging infrastructure is a high-priority target during any breach.

Regulatory Evidence Loss

Compliance records stored on network-accessible systems can be accidentally deleted, intentionally destroyed, or encrypted by ransomware, leaving organisations unable to demonstrate compliance.

Chain of Custody Gaps

Evidence that has been stored on systems accessible to the individuals under investigation cannot maintain a defensible chain of custody for legal or disciplinary proceedings.

The Scenario

Scenario: Tamper-Proof Evidence After Insider Incident

A senior database administrator is suspected of exfiltrating customer records. The internal investigation team needs to review database access logs, query histories, and data export records. The administrator, aware of the investigation, attempts to delete relevant logs from the SIEM and modify database audit trails. With Archive, all database access logs and session recordings are stored on physically disconnected media from the moment they are generated. The administrator has no network path to the archived evidence. The investigation proceeds with a complete, tamper-proof record of every query, export, and access event.

"Without Archive, the suspect would have destroyed the evidence before we could preserve it. The logs on the SIEM were modified within hours of the investigation starting. The Archive copies were untouchable."

Module Overview

Evidence that cannot be tampered with, by anyone.

FV-Archive provides immutable, physically disconnected storage for audit trails, compliance evidence, and forensic records. Write-once media, physical disconnection, and multi-party retrieval ensure that evidence remains intact regardless of who wants it destroyed.

Physically disconnected, write-once evidence storage
Multi-party authorisation for all evidence retrieval
Cryptographic integrity verification on every access
Configurable retention meeting all major regulatory frameworks
Defensible chain of custody for legal proceedings
Automated compliance reporting for audit

Archive — How It Works

Module 1 of 4

Archive captures audit trails, session recordings, and compliance evidence and stores them on physically disconnected, write-once media. Once written, the evidence cannot be modified, deleted, or accessed from any network-connected system. Retrieval requires multi-party authorisation and physical access procedures.

View all nine modules

Featured In

Key Capabilities

Write-Once Storage

Evidence is written to media that does not support modification or deletion. Once recorded, the evidence is permanent.

Physical Disconnection

Archived evidence exists on physically disconnected infrastructure with no network path from any connected system.

Multi-Party Retrieval

Accessing archived evidence requires authorisation from multiple designated parties, maintaining chain of custody and preventing unauthorised access.

Cryptographic Integrity

Every archived item is hashed at ingestion. On retrieval, integrity is verified against the original hash to confirm no tampering has occurred.

Configurable Retention

Retention periods are configured per evidence type, meeting GDPR data minimisation, NIS2 incident reporting, and industry-specific regulatory requirements.

Compliance Reporting

Automated reports document archived evidence types, retention compliance, integrity verification results, and access history for regulatory audit.

Demo to Live

Adoption Guide

Step 1

Evidence Inventory

Identify all audit trails, compliance records, and forensic evidence that require immutable, tamper-proof storage.

Step 2

Retention Policy Design

Define retention periods, ingestion schedules, multi-party retrieval requirements, and destruction procedures for each evidence type.

Step 3

Initial Evidence Ingestion

Transfer existing audit trails and compliance records to Archive, verify cryptographic integrity, and test retrieval procedures.

Step 4

Continuous Evidence Capture

Automate evidence ingestion from all governed systems with continuous integrity verification and compliance reporting.

Step 1

Evidence Inventory

Identify all audit trails, compliance records, and forensic evidence that require immutable, tamper-proof storage.

Step 2

Retention Policy Design

Define retention periods, ingestion schedules, multi-party retrieval requirements, and destruction procedures for each evidence type.

Step 3

Initial Evidence Ingestion

Transfer existing audit trails and compliance records to Archive, verify cryptographic integrity, and test retrieval procedures.

Step 4

Continuous Evidence Capture

Automate evidence ingestion from all governed systems with continuous integrity verification and compliance reporting.

Organise a Demo

Questions

Frequently Asked

Ready to take the next step?

See how Control can govern your data paths with physical enforcement no software exploit can bypass.

View the nine modules

FV-Archive: Immutable Offline Retention

Evidence you cannot protect is evidence you cannot use.

Log Tampering

Regulatory Evidence Loss

Chain of Custody Gaps

Scenario: Tamper-Proof Evidence After Insider Incident

Evidence that cannot be tampered with, by anyone.

Archive — How It Works

Key Capabilities

Write-Once Storage

Physical Disconnection

Multi-Party Retrieval

Cryptographic Integrity

Configurable Retention

Compliance Reporting

Adoption Guide

Evidence Inventory

Retention Policy Design

Initial Evidence Ingestion

Continuous Evidence Capture

Evidence Inventory

Retention Policy Design

Initial Evidence Ingestion

Continuous Evidence Capture

Explore More

FV-Vault

FV-Lock

Insider Threat Mitigation

Frequently Asked

Ready to take the next step?

Your privacy matters