Vault product icon Compliance · DORA

DORA compliance with Offline Secure Storage®.

DORA requires financial entities to withstand ICT disruptions. Offline Secure Storage® provides physical resilience: critical financial data held on hardware that is physically disconnected from the ICT estate.

Schedule a demo View all compliance

ICT third-party concentration
Operational resilience failure
Recovery-time breach
Regulator reporting gaps

Gold copies
Audit trail
Verified access
Offline

As featured in

The reality

DORA exists because these failures keep happening.

Each incident below reached a financial or regulated organisation through systems that were connected and reachable at the time. DORA now holds boards directly accountable for exactly this class of failure.

A recovery copy that lives inside the same ICT estate shares its fate. OSS holds the gold copy on hardware with no network path while it is closed.
Every session is authorised out of band, logged and time bounded, giving your compliance team a record it can put in front of a supervisor.
Physical disconnection is a property of the hardware, not a configuration that can drift, so the control survives audit after audit.

Incident 1

Capita: £14m ICO fine.

The ICO fined outsourcer Capita £14 million over a 2023 cyber attack that affected the personal data of more than 6 million people. ICO, October 2025.

Answered byCritical data, disconnected

Incident 2

Jaguar Land Rover: about £1.9bn.

A cyber attack halted production at JLR factories in September 2025. The Cyber Monitoring Centre put the cost to the UK economy at about £1.9 billion, with over 5,000 organisations affected.

Answered byRecovery from intact gold copies

Incident 3

LastPass: £1.2m ICO fine.

The ICO fined LastPass £1.2 million after a 2022 breach in which attackers took encrypted password vaults belonging to up to 1.6 million UK users. ICO, December 2025.

Answered byA full audit trail

How OSS helps

Physical resilience
for financial services.

Critical records and recovery copies are written to dedicated RAID 1 drives inside a Firevault Bunker, outside the production ICT estate. Access is authorised out of band from a registered phone, a physical connection is created for the session, and the drives disconnect when it ends.

Step 1 of 3

Remove

Critical financial data are taken off ICT infrastructure and written to dedicated RAID 1 drives inside a Firevault Bunker.

No cloud. No shared portal.

Where the records are: Dedicated RAID 1 drives
Live network: No longer holds the archive
Access: Identity-checked

Illustration.

Schedule a demo How OSS works

CAF-aligned

Supporting DORA's resilience pillars, not replacing them.

Firevault is not a DORA certification body and OSS is not a certified DORA product. What it provides is a physical control that supports ICT risk management, incident recovery and resilience testing obligations. Full mapping detail is available on request.

Offline Secure Storage® and CAF

Objectives B and D

Physically disconnected gold copies support B3 Data Security, B5 Resilient Networks and Systems, and D1 Response and Recovery Planning.

How OSS works

Control Blueprints and CAF

Objectives A and C

Identity-verified access, session logging and separation of operational and archived data support A2 Risk Management, A4 Supply Chain and C1 Security Monitoring.

See Control Blueprints

Firebreak® and CAF

Objective B at the OT boundary

Physical-layer OT/IT separation supports B2 Identity and Access Control, B4 System Security, and B5 Resilient Networks and Systems.

Explore Firebreak®

The products

Which Offline Secure Storage® fits financial entities?

Every tier is the same physical principle at a different scale. Choose the access pattern that matches your recovery objectives and the teams who depend on them.

Vault

On-demand access, 24/7, to a digital safe deposit box. 2TB, 4TB or 8TB, from £360 a month inc VAT.

Create your Vault Explore Vault

LUV

Deep cold storage for archived transaction records and compliance files accessed periodically. 300GB, with one nominated access day each week within a 12-hour window. £74.99 a month inc VAT, 36-month commitment.

Choose LUV Explore LUV

Storage

Scalable offline capacity from 20TB upwards, designed with the solutions team around your requirement.

Talk to us Explore Storage

Vault

Physically offline between sessions.

Open a session

Ask from your registered phone and confirm it is you.

A session requested from a phone while files open on a desktop

File Manager

Work with your files for up to 120 minutes.

LUV

Opens on a day you choose each week, for 12 hours.

Storage

From 20TB, growing in 20TB steps.

Use cases for financial services

What financial entities take offline first.

The records a disruption must never reach, and the copies your recovery plan assumes will still be there.

Transactions

Archived transaction and settlement records

Recovery

Gold copies of critical ICT systems

Third parties

ICT third-party contracts and registers

Evidence

Incident and resilience-testing evidence

Governance

Management body decisions

How to get started

From discovery call to go-live.

1
Discovery call

Understand what you need to protect and how you operate.
2
Vault configuration

Select your tier, capacity and access model.
3
Identity verification

Complete KYC/AML and set up multi-factor authentication.
4
Go live

Data ingestion, access policy activation and ongoing support.

Secured Firevault Bunker entrance with biometric entry and monitored access

Every Offline Secure Storage® instance is built on the same four physical principles.

A control the hardware enforces.

Every Offline Secure Storage® instance is built on the same four physical principles.

Physical storage

Offline Secure Storage instances are held on dedicated physical hard drives, not in S3 cloud buckets, shared storage pools or multi-tenant infrastructure. Your selected data is assigned to real hardware, with dedicated RAID 1 drives providing resilience.
Explore physical storage
Physical ownership

Each Offline Secure Storage instance is allocated to a specific customer, with dedicated physical capacity and clearly defined ownership. Your data is not pooled, commingled or held within a shared storage estate.
Explore physical ownership
Physical control

Access begins outside the normal network path. An authorised out-of-band command, such as SMS, controls the physical Layer 1 connection to your #OSS instance. When access is not required, that network path is physically disconnected.
Explore physical control
Physical security

Your #OSS hardware is housed in carefully selected, professionally managed data centres with layered physical security, resilient power and environmental controls. Access is tightly controlled using three-factor authentication, including biometric identification, supported by 24/7 monitoring, restricted access zones and a complete audit trail.
Explore physical security

Explore more

Related routes.

Questions

What financial entities ask first

DORA expects financial entities to maintain reliable backup and recovery arrangements. OSS holds recovery copies on dedicated hardware that is physically disconnected between sessions, so a compromise of the production ICT estate cannot reach the copy you intend to recover from.

No. DORA does not certify products. OSS is a physical control that supports your own compliance programme, and every session is logged so the evidence is available for supervisors and internal audit.

On dedicated hardware in a secure Firevault Bunker. For security, we do not publish Bunker locations.

With a Vault, request a session at any time, 24/7, from your registered phone, sign in with your credentials and MFA, and work in File Share during a session of up to 120 minutes. LUV opens on your nominated access day each week, for 12 hours.

All questions about OSS

Keep the recovery copy outside the ICT estate.

LUV from £74.99 and Vault from £360 a month, including VAT. 36-month commitment, first payment at checkout.

Get started Schedule a demo

Schedule a demo Get started

DORA compliance with Offline Secure Storage®.