--- title: "Ransomware-Proof Gold Copy Backups | Firevault" url: https://fire-vault.com/oss-for-gold-copy-backups description: "Go beyond immutable backups. Create a 'gold copy' of your data in a true physical air gap, making it impossible for ransomware to access or encrypt. Explore." lang: en-GB --- Use cases (https://fire-vault.com/oss-for-use-cases) OSS Use Cases # Gold Copy Backups Beyond Ransomware Reach Ransomware operators delete every backup they can reach before they encrypt. A gold copy held behind a physical air gap is the one backup they cannot touch. Why OSS: https://fire-vault.com/solutions/oss 93% Of ransomware attacks specifically target backup infrastructure before encrypting production systems. Source: Sophos State of Ransomware 2024 Threats addressed Encryption of primary and backup Attacker deletion of snapshots Immutable-store bypass Failed restore under pressure 01 The problem ## Why the current setup leaves this data exposed. Ransomware operators know that backups are the last line of defence. That is why 93% of attacks specifically target backup infrastructure before encrypting production systems. Cloud-connected backups are reachable, and therefore encryptable. Network-attached storage sits on the same network as the threat. Once backups are gone, the organisation has no choice but to pay. 02 How it plays out ## The scenario, and what physical disconnection changes. One realistic sequence of events, then the controls that break it. Scenario A mid-size firm's entire network is encrypted overnight. The attackers had already compromised the cloud backup account and deleted all snapshots before triggering the ransomware. The NAS device on the local network was encrypted alongside production servers. With no clean backup available, the firm faced a £1.5M ransom demand and 34 days of downtime. Protection - Gold copies stored on physically air-gapped media, no network path exists for ransomware to reach them - Tamper-evident storage with 24/7 physical monitoring ensures backup integrity - Rapid recovery, gold copies are always intact, verified, and ready for restoration - Scalable from terabytes to hundreds of terabytes of critical data 03 The outcome ## Ransom paid. Hours, not weeks, to restore. Zero With gold copies stored offline in Firevault OSS, the firm restored operations within hours instead of weeks. No ransom was paid, no data was lost, and the board could demonstrate to regulators that proper technical measures were in place. > The only backup an attacker cannot encrypt is the one they cannot reach. Hardware The data sits on Firevault hardware, not a shared cloud tenancy. Disconnect Offline by default. No standing network path in or out. Command Access opens on your instruction, identity checked and logged. Location Held in a Firevault Bunker. Firevault provisions the location unless you request one in writing. 04 Keep exploring ## More ways organisations use #OSS. Every use case follows the same four physical principles, applied to different data. Related Customer Databases (https://fire-vault.com/oss-for-customer-databases) Identity Documents (https://fire-vault.com/oss-for-identity-documents) Data Protection ### Customer Databases Take customer data offline and out of reach. Explore https://fire-vault.com/oss-for-customer-databases Governance ### Board Records Protect governance and board papers. Explore https://fire-vault.com/oss-for-board-records Identity ### Identity Documents Protect passports and personal IDs offline. Explore https://fire-vault.com/oss-for-identity-documents Image: Mark Fermor (https://fire-vault.com/assets/mark-fermor-aWtKNSv7.jpg) Image: David Bailey (https://fire-vault.com/assets/david-bailey-Dgqj8eaE.jpg) Image: Kenny Phipps (https://fire-vault.com/assets/kenny-phipps-CVyooRsR.jpg) Online Now Get started ## Protect what matters. Control what moves. Choose your Vault and check out in minutes. Dedicated hardware, identity-locked to you, physically disconnected when closed. From £360 a month including VAT. 36-month commitment. First payment at checkout. From £360/mo VAT included 36-month plan Get started ## Structured data ```json [ { "@context": "https://schema.org", "@type": "WebPage", "@id": "https://fire-vault.com/oss-for-gold-copy-backups#webpage", "url": "https://fire-vault.com/oss-for-gold-copy-backups", "name": "Ransomware-Proof Gold Copy Backups", "description": "Go beyond immutable backups. Create a 'gold copy' of your data in a true physical air gap, making it impossible for ransomware to access or encrypt. Explore.", "isPartOf": { "@id": "https://fire-vault.com/#website" }, "about": { "@id": "https://fire-vault.com/#organization" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://fire-vault.com/images/og/og-base-home.jpg" }, "inLanguage": "en-GB", "breadcrumb": { "@id": "https://fire-vault.com/oss-for-gold-copy-backups#breadcrumb" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "@id": "https://fire-vault.com/oss-for-gold-copy-backups#breadcrumb", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://fire-vault.com" }, { "@type": "ListItem", "position": 2, "name": "Ransomware-Proof Gold Copy Backups", "item": "https://fire-vault.com/oss-for-gold-copy-backups" } ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://fire-vault.com/#organization", "name": "Firevault", "legalName": "Firevault Limited", "url": "https://fire-vault.com", "logo": { "@type": "ImageObject", "url": "https://fire-vault.com/logo.png", "width": 200, "height": 60 }, "foundingDate": "2025-03", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "address": { "@type": "PostalAddress", "addressCountry": "GB", "addressLocality": "United Kingdom" }, "contactPoint": [ { "@type": "ContactPoint", "contactType": "customer service", "email": "hello@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] }, { "@type": "ContactPoint", "contactType": "sales", "email": "sales@fire-vault.com", "availableLanguage": "English", "areaServed": [ "GB", "EU", "US", "AE" ] } ], "founder": [ { "@type": "Person", "name": "Mark Fermor", "jobTitle": "Founder, CTO and CMO" }, { "@type": "Person", "name": "David Bailey", "jobTitle": "Founder and CEO" } ], "areaServed": [ "United Kingdom", "Europe", "United States", "Middle East" ], "sameAs": [ "https://www.linkedin.com/company/firevault", "https://x.com/firevaultuk" ], "slogan": "Disconnect to Protect", "brand": [ { "@type": "Brand", "name": "Offline Secure Storage" }, { "@type": "Brand", "name": "Control by Firevault" }, { "@type": "Brand", "name": "Firebreak" } ], "knowsAbout": [ "Offline Secure Storage", "Physically disconnected data storage", "Physical Air Gap Data Protection", "Ransomware Protection", "Ransomware recovery", "3-2-1-1-0 backup rule", "AI kill switch", "Operational technology security", "Critical national infrastructure resilience", "Data Sovereignty", "GDPR Compliance", "NIS2 Compliance", "DORA Compliance", "NCSC Cyber Assessment Framework" ] }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://fire-vault.com/#website", "name": "Firevault", "alternateName": [ "Firevault", "Firevault UK", "Firevault Limited" ], "url": "https://fire-vault.com", "publisher": { "@id": "https://fire-vault.com/#organization" }, "inLanguage": "en-GB", "description": "Protect what matters with Offline Secure Storage and control what moves with Control by Firevault. Physically disconnected, always reachable by you.", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://fire-vault.com/learn?q={search_term_string}" }, "query-input": "required name=search_term_string" } } ] ```