--- title: "Keep Deal and Portfolio Data Confidential | Off… | Firevault" description: "Protect due diligence, valuations and transaction documents with Offline Secure Storage. Physically disconnected storage for investment and M&A data rooms." lang: en-GB json-ld: | [ { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/oss-for-investment-and-ma#webpage", "url": "https://fire-vault.com/oss-for-investment-and-ma", "name": "Keep Deal and Portfolio Data Confidential", "description": "Protect due diligence, valuations and transaction documents with Offline Secure Storage. Physically disconnected storage for investment and M&A data rooms.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-home.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/oss-for-investment-and-ma#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/oss-for-investment-and-ma#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Keep Deal and Portfolio Data Confidential", "item": "https://fire-vault.com/oss-for-investment-and-ma" } ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": "GB" } ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "knowsAbout": [ "Offline Secure Storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Firevault has rewritten the rules for data protection & storage via its offline secure storage (OSS) platform, for users to vault everything that matters.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } } ] --- Recent Breaches Breaches [2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po)[2026 PowerSchool 62.4M records ](https://www.bleepingcomputer.com)[2026 DISA Global Solutions 3.3M records ](https://techcrunch.com)[2026 Globe Life 850K records ](https://www.securityweek.com)[2026 Co-operative Group 6.5M records ](https://www.bbc.co.uk/news/articles/cly7z9zj3l1o)[2026 Harrods Attempted intrusion ](https://www.reuters.com/business/retail-consumer/uk-luxury-retailer-harrods-latest-target-cyber-attack-2025-05-01/)[2026 Legal Aid Agency (Ministry of Justice) 2.1M records ](https://www.gov.uk/government/news/legal-aid-agency-data-breach)[2026 Adidas UK Customer contact details ](https://www.bbc.co.uk/news/articles/c78jkev1el2o)[2026 Peter Green Chilled Order and logistics data ](https://www.bbc.co.uk/news/articles/c0k7yy8n3g5o)[2026 Jaguar Land Rover Production and IT systems disru... ](https://www.bbc.co.uk/news/articles/cx2gx8p3rzeo)[2026 Collins Aerospace (RTX) Check-in and boarding disruptio... ](https://www.bbc.co.uk/news/articles/c789e7l1z7po) [View All →](/learn/breaches) [![Firevault - offline secure storage, physically disconnected from the internet](/assets/logo-color-DBVl0KCg.png)](/) Products Solutions [Why OSS](/why-oss) More [Help](/help)[Get started](/get-started) Overview Where deals leakThe principleEvidenceDeal checklistWhat goes offlineAccess and controlWhen it mattersChoose protectionQuestions Offline Secure Storage® (#OSS) for investment and M&A # Keep M&A data offline and out of reach. _Air-gapped storage for deal rooms and portfolio records._ Due diligence material, valuations, models, board approvals and portfolio records. Deal information loses value the moment it leaks, so the definitive set should not sit permanently reachable once the room closes. [Protect your deal data](#checklist) [See what belongs offline](#choose) Offline Secure Storage Post-deal archive Controlled sharing Audit evidence ![Keep M&A data offline and out of reach.](/assets/deal-room-transaction-hero-BxwCt-vR.jpg) Offline by default What deal teams protect ### The documents behind the transaction. Diligence**Due diligence files** Valuation**Models and valuations** Legal**Transaction documents** Governance**Approvals** Portfolio**Holding records** Archive**Closed deals** Storage**Dedicated hardware** Access**Controlled by you** When closed**No standing network path** A simple confidentiality question ## When the data room closes, where does the definitive deal record actually live? Transaction material is duplicated across advisers, platforms and inboxes, then left connected for years. **01** ### A deal leaks before announcement. Price, terms or intent reach the market through one of many reachable copies. **Market risk** **02** ### An adviser is breached. Diligence material is exposed through a third party you do not control. **Supply chain** **03** ### Warranty claims arrive later. The disclosed set must be produced accurately, years after completion. **Legal risk** **04** ### Portfolio data is aggregated. One compromise exposes commercially sensitive information across multiple holdings. **Concentration** The Firevault principle ## The problem is not only leaks. It is that deal material is most reachable when it is most valuable. Diligence packs, models and investor correspondence are assembled quickly, shared widely and left online long after completion. Value and exposure peak at the same moment. If deal and portfolio material is physically disconnected between working sessions, the window in which it can be reached is one you choose. **Select → Secure → Disconnect → Access when required** ### A path that does not exist cannot be used Between sessions there is no data room link, no share and no credential leading to the material. ### Data rooms are convenience, not containment Access lists grow, downloads persist and copies survive in environments you do not control. ### Timing is the exposure Price-sensitive material only needs to be reachable while the work is being done. ### Custody evidence supports the transaction Recorded retrieval demonstrates handling to counterparties, regulators and investors. The transaction checklist ## Decide what survives the data room. Live transactions need a connected room. What follows completion is a long-lived record that rarely needs to be online. Your deal inventory ### Six areas most investors already hold. Use this as a first-pass inventory before deciding which Firevault product fits. **Diligence → Valuation → Legal → Governance → Portfolio → Archive** What you checked ### Diligence - ✓ Financial diligence - ✓ Legal diligence - ✓ Commercial reports - ✓ Technical assessments - ✓ Vendor material What you paid ### Valuation - ✓ Financial models - ✓ Forecasts - ✓ Pricing analysis - ✓ Comparables - ✓ Investment memoranda What you signed ### Legal - ✓ Sale and purchase agreements - ✓ Disclosure letters - ✓ Warranties and indemnities - ✓ Shareholder agreements - ✓ Completion documents What was approved ### Governance - ✓ Investment committee papers - ✓ Board approvals - ✓ Conflict records - ✓ Mandate evidence - ✓ Delegated authorities What you hold ### Portfolio - ✓ Ownership records - ✓ Reporting packs - ✓ Covenant evidence - ✓ Valuation updates - ✓ Exit planning material What you retain ### Archive - ✓ Closed transactions - ✓ Historic data rooms - ✓ Fund records - ✓ Investor correspondence - ✓ Regulatory evidence The Firevault difference ## A data room is for the deal. This is for afterwards. Virtual data rooms are built for controlled collaboration during a transaction. Firevault holds the definitive record once the process ends. Everyday and connected ### Keep convenience where it helps. Connected rooms and platforms suit live processes and active diligence. - • Live data room access - • Active diligence questions - • Working models in progress - • Current portfolio reporting - • Everyday adviser collaboration Important and offline ### Give consequence a different state. The definitive record can be available when required without remaining permanently reachable. - ✓ Completed transaction documents - ✓ Disclosed diligence sets - ✓ Final models and valuations - ✓ Investment approvals - ✓ Long-term portfolio archive **A closed data room is still a connected platform. Firevault gives the definitive record somewhere else to live.**Online when you need it. Offline when you do not. Ownership, sharing and evidence ## Release deal material deliberately. Deal records are needed by lawyers, auditors and investors for years. Ownership, controlled sharing and recorded access are separate decisions. VERIFIED OWNER DEAL TEAM LEGAL OR AUDITOR SUCCESSION ROUTE The owner controls everyday access. Selected documents can be released to counsel or auditors without exposing the archive. No permanent room access ### Access is a decision, not a default. Firevault separates ownership, sharing and evidence so a historic deal does not remain permanently exposed. **One vault per user**Access is linked to a verified individual rather than a fund-wide credential. **Share a document, not the archive**Release the specific record a claim, audit or investor request requires. **Recorded retrieval**Retrievals are logged, supporting warranty, audit and regulatory positions. This is not only about leaks ## Useful across the investment lifecycle. Approvals, claims, audits and exits all depend on producing the definitive record accurately. Pre-announcement ### Limit what can leak. Sensitive material held offline until the process requires it. **Confidentiality** Completion ### Close the room properly. The definitive set moves to protected storage rather than staying connected. **Transition** Warranty claim ### Produce the disclosed set. The exact material disclosed at completion, retained and retrievable. **Legal** Fund audit ### Evidence decisions. Approvals and mandate evidence available for auditors and investors. **Compliance** Portfolio review ### Protect aggregated data. Commercially sensitive holdings information is not permanently reachable. **Governance** Exit ### Prepare with a clean record. The historic archive supports the next transaction without a search. **Value** Evidence and guidance ## Market abuse and diligence obligations require demonstrable control of inside information. Regulation places responsibility on firms to control access to price-sensitive information and to evidence that control. [FCA / UK MAR Issuers and firms must control access to inside information and maintain records of who holds it. Read the source](https://www.handbook.fca.org.uk/handbook/DTR/2/) [ICO Personal data within diligence material remains subject to appropriate technical and organisational measures. Read the source](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/security/a-guide-to-data-security/) [NCSC NCSC guidance recommends holding critical copies offline and separate from connected environments. Read the source ](https://www.ncsc.gov.uk/guidance/offline-backups-in-an-online-world) Who this applies to ## Where deal and portfolio exposure appears most often. Concise routes into the industry and audience pages where this need appears most often. [Investment and M&A](/oss-for-investment-and-ma) [Professional services](/oss-for-professional-services) [Legal firms](/legal) [Protect intellectual property](/oss-for-intellectual-property) [Business and teams](/oss-for-business) [Control third-party access](/control-for-third-party-access) The Firevault response ## Offline Secure Storage®, then the product that fits the volume. This page is about the exposure. Capacities, access models, specifications and pricing sit on the product pages so you can choose once the requirement is clear. Offline Secure Storage® Offline Secure Storage holds deal and portfolio material on dedicated hardware that is physically disconnected until you ask for it. [Why Offline Secure Storage](/why-oss) ### Vault On-demand access to a digital safe deposit box for diligence archives, models and completed transaction records. [Explore Vault](/vault) ### LUV A low use vault for signed documents, investor records and deal essentials, reached on a nominated access day. [Explore LUV](/luv) ### Storage Scalable offline capacity from 20TB upwards, designed with the solutions team around your requirement. [Explore Storage](/storage) Why Firevault ## Process on top. Physical protection underneath. Confidentiality agreements set expectations. Physical disconnection reduces what is technically reachable. **01** ### Physical storage Offline Secure Storage instances are held on dedicated physical hard drives, not in S3 cloud buckets, shared storage pools or multi-tenant infrastructure. Your selected data is assigned to real hardware, with dedicated RAID 1 drives providing resilience. **02** ### Physical ownership Each Offline Secure Storage instance is allocated to a specific customer, with dedicated physical capacity and clearly defined ownership. Your data is not pooled, commingled or held within a shared storage estate. **03** ### Physical control Access begins outside the normal network path. An authorised out-of-band command, such as SMS, controls the physical Layer 1 connection to your #OSS instance. When access is not required, that network path is physically disconnected. **04** ### Physical security Your #OSS hardware is housed in carefully selected, professionally managed data centres with layered physical security, resilient power and environmental controls. Access is tightly controlled using three-factor authentication, including biometric identification, supported by 24/7 monitoring, restricted access zones and a complete audit trail. Firevault Bunkers provide jurisdictional physical resilience across our international infrastructure. Questions investors ask ## Before you move deal records offline. The goal is a definitive, defensible record rather than another platform. Does this replace a virtual data room? No. Use a data room for the live process. Firevault holds the definitive record once the transaction completes. Can auditors or counsel be given access? How long can records be retained? How quickly can we retrieve a document? Does this help with regulatory examination? Confidentiality that outlasts the deal ## Start with the definitive record that must survive completion, claims and audit. Offline Secure Storage from Firevault. Online when you need it. Offline when you do not. [Protect your deal data](#choose) [Talk to Firevault](/contact) Secured by Design Offline by Default [![Firevault - offline secure storage](/assets/logo-white-official-BKfZ19hm.png)](/) The world's first offline secure storage platform for data. Dedicated hardware. Physically disconnected. Online when you need it, offline when you do not. Not Cloud Not HSM Not SaaS Offline by Design Secure by design [ hello@fire-vault.com](mailto:hello@fire-vault.com) United Kingdom Independently certified by [ ![Cyber Essentials Certified](https://fire-vault.com/__l5e/assets-v1/6f8f42a2-89e1-4c20-938f-3f34d30bc90c/cyber-essentials-2026.png) ![Cyber Essentials Plus Certified](https://fire-vault.com/__l5e/assets-v1/8a77bf2c-6711-4762-b093-c4d650153bc9/cyber-essentials-plus-2026.png) ](https://registry.blockmarktech.com/certificates/) ### Stay Updated Security insights, product updates, and threat intelligence delivered to your inbox. Subscribe I agree to receive emails from Firevault. Unsubscribe anytime. ### Products Data Protection & Storage [ ![Offline Secure Storage product icon](/assets/vault-icon-BhL4-R9F.svg) Offline Secure Storage® (#OSS) A Digital Safe Deposit Box ](/offline-secure-storage) Network Evolution & Rapid Protection (#NEARP) [ ![Control product icon](/assets/control-icon-B9EWHzCT.png) Control Data Path Governance ](/control)[ ![Firebreak product icon](/assets/firebreak-icon-7zSCkB1t.png) Firebreak Physical Network Segmentation ](/firebreak) ### Firevault - [Offline Secure Storage® (#OSS)](/offline-secure-storage) - [LUV](/luv) - [Vault](/vault) - [Why OSS](/why-oss) - [Meet Firevault](/about) ### Solutions - [Keep Personal Data Secure](/oss-for-personal-records) - [Keep Customer Data Secure](/oss-for-customer-data) - [Keep Critical Data Beyond Ransomware](/oss-for-ransomware-recovery) - [Protect Director Data from Fines & Liability](/oss-for-directors-and-boards) - [Secure the Data Your Business Depends On](/oss-for-business) - [Keep Intellectual Property Secure](/oss-for-intellectual-property) - [OSS Use Cases](/oss-for-use-cases) - [Compliance & Risk](/compliance) - [Network Evolution & Rapid Protection (#NEARP)](/solutions/control) ### Resources - [Firevault Playbooks](/playbooks) - [The Leaders' Playbook](/playbook/leaders) - [Firebreak for Water Playbook](/playbook/firebreak-water) - [A Control Blueprint for AI](/playbook/ai-control-blueprints) - [Knowledge Vault](/learn/knowledge) - [White papers](/learn/whitepapers) - [How OSS Works](/how-oss-works) - [How OSS Physical Disconnection Works](/offline-secure-storage/what-is-oss) ### Company - [Press and Media](/press-media) - [Knowledge Vault](/learn/knowledge) - [FAQs](/learn/faq) - [Help Centre](/help) - [Careers](/careers) - [Invest in Firevault](/investors) [](https://www.linkedin.com/company/firevault-limited)[](https://www.facebook.com/profile.php?id=61581962517246)[](https://twitter.com/firevaultuk)[](/rss.xml) Firevault - Disconnect to Protect® [Site Map](/sitemap)● [Privacy Charter](/privacy-charter)● [Terms of Service](/terms)● [Planet Pledge](/planet-pledge)● [Vault User Commitment](/vault-commitment)● [LUV User Commitment](/luv-commitment)● [Cookie Policy](/cookies) © 2026 Firevault Limited Company No. 16320803 · VAT No. 490 8551 64 · Registered in England and Wales Get started ![Firevault](/favicon.svg) Tell us what you need to protect. Privacy ## You decide what we measure Essential cookies keep this site working. Everything else is optional and off until you say otherwise. Read the [Privacy Charter](/privacy-charter) or the [Cookie Policy](/cookies). Accept allEssential only Manage options