Firevault, offline secure storage, physically disconnected from the internet
Why OSS

Storage: scalable offline secure storage.

From 20TB to 300TB. Start with how much data needs to be offline, then define how it is written, how often it moves, and when the physical connection should exist. Authorised sessions last up to 120 minutes.

  • 20TB to 300TB
  • Offline by default
  • Dedicated hardware you own
  • API and SFTP access

Quoted, not listed. Expansion in fixed 20TB blocks.

Designed with our solutions teamSpecified around your data, retention duties and where the hardware lives. Priced in a written proposal, not an online checkout.

Cyber Essentials Plus certifiedDedicated hardware your organisation ownsFirevault Bunkers: Europe live, US and Middle East next

As featured in

  • TechRadar Pro logo
  • Yahoo Finance logo
  • Channel Insider logo
  • Security Buyer logo
  • SecurityBrief logo
Your existing systemsBackup platforms, archives and retained records
Approved transfer windowData moves during defined connection windows, on a repeatable schedule.
Storage product iconStorageDedicated hardware your organisation owns

Outside authorised windows, Storage is physically disconnected.

Illustration

Capacity
20TB to 300TB
Hardware
Owned by you
Default
No network path
Access
API and SFTP

Capacity

How much data actually needs to be offline?

Not every byte in the estate needs Offline Secure Storage®. The first design decision is the size of the protected data set today, and how it will change.

Current volume

How much needs protecting now?

Growth

How quickly will it grow?

History

How much history must you retain?

Headroom

What margin do you want?

Working protected data set

20 TB

20TB300TB

1 block of 20TB

A design input, not a quote. Above 300TB, see Enterprise.

Transfers

How does data need to arrive in Storage?

Choose the write path

Scheduled sync, SFTP, a REST API, your existing backup workflow, or a mix. The write path is set by the systems already producing the data.

API and SFTP access, with a complete audit trail

An SFTP endpoint and REST scheduling API fit the backup estate you already run, with delegated access and every connection, disconnection and transfer recorded.

Choose the way data needs to enter

Access windows

Then decide when Storage is allowed to be connected.

Capacity alone does not say how it should behave

Initial ingest, change rate, frequency and concurrency shape the design: the same 100TB can look very different depending on how often it is written.

Connected only for its authorised purpose

The default state is physically disconnected. Each window has a trigger, a duration, a completion check and a disconnect.

Four questions about behaviour

Where it lives

A Bunker, your building, or both at once.

In a Firevault Bunker

Your hardware is racked in a protected physical location, and Firevault handles the facility, power and physical disconnection.

On your premises, or a hybrid of both

The same hardware and the same physical disconnection, racked inside your own building. Or keep the working set on site and the gold copy in a Bunker, so a single site loss does not remove the archive.

Three places it can live

Pricing model

Two things set the price: who reaches it, and how much of it there is.

Storage is quoted, not fixed, because the build is specified around your estate. The model is published, so you can see how the number is made.

Vault product iconVault

One person, identity locked: 2TB, 4TB or 8TB.

From£360/month

inc VAT, 36-month commitment

See Vault
  • Up to 8TB of dedicated storage
  • 24/7 on-demand access
  • Ready to buy online
This page

Storage product iconStorage

The organisation: 20TB to 300TB.

Quoted

A written proposal against the specified system

Speak to our solutions team
  • OSAP, Offline Secure Access Profile: one named person, with their own identity-locked route
  • OSSC, Offline Secure Storage Capacity: dedicated, RAID 1 mirrored, in 20TB blocks
  • Each additional person has their own profile

Enterprise product iconEnterprise

National scale: 300TB and beyond.

Quoted

Delivered as a programme

See Enterprise
  • 300TB and beyond, in 20TB blocks
  • Out-of-band management plane
  • SC and DV cleared personnel where required

Storage is priced in a written proposal against the specified system. See the full pricing model

Physics, not promises

Physics, not promises.

Storage is built on four physical principles, from 20TB to 300TB. Enterprise continues at 300TB and above.

Dedicated drives, RAID 1 mirrored, allocated in 20TB blocks. Not cloud buckets, shared pools or multi-tenant infrastructure.

Learn more

Dedicated hardware your organisation owns, with a defined lifecycle: commissioning, maintenance, renewal, then return or destruction to certificate.

Learn more

No standing network path. A route exists only for an authorised window, then the hardware disconnects.

Learn more

In a Firevault Bunker, behind three independent entry checks and 24/7 monitoring, on your own premises, or both.

Learn more

Physical storage: real drives

Offline Secure Storage physical drives and dedicated hardware rack in a Firevault Bunker

Compare

Offline Secure Storage® against the usual alternatives

How physical disconnection differs from cloud and on-premises copies.

Offline Secure Storage® against the usual alternatives
Question Cloud backup or archive On-premises copy Offline Secure Storage®
Reachable from the production network? Yes, over the internet Yes, over the LAN No. Physically disconnected at the hardware level when closed
Survives a domain-wide compromise? Only if credentials hold Rarely No standing network path to reach while it is disconnected
Who holds the hardware? The provider You, with your own upkeep Dedicated hardware assigned to you, in a Firevault Bunker
Evidence for auditors and insurers? Configuration screenshots Configuration screenshots A physical control, plus a logged record of every session

Read the full comparison

Who it is for

Organisations holding terabytes, not a personal vault.

Storage is the organisation tier of Offline Secure Storage®.

  • Regulated professions
  • Finance and insurance
  • Industry and infrastructure
  • Data-heavy operators
  1. LUV product iconLUV300GB, one person
  2. Vault product iconVault2TB to 8TB, one professional
  3. Storage product iconStorage20TB to 300TB, the organisation
  4. Enterprise product iconEnterprise300TB and beyond, at national scale

Beyond 300TB, Storage keeps growing.

Capacity continues in 20TB blocks with no upper limit, no migration and no new platform. Beyond 300TB it is designed with our team as Enterprise, with multi-site and on-premise options.

How it is designed

Storage is designed around your requirements, not bought off a shelf.

Bring the data numbers. We will design the Storage around them.

  1. 01

    Discovery

    A short conversation about the data you hold, the growth you expect and the obligations you carry.

  2. 02

    Volume and retention

    We size the allocation to the volume you actually need, then set the expansion path in fixed 20TB blocks.

  3. 03

    Access and integration

    API, SFTP and session controls mapped to your teams and systems, so governed access fits how you already work.

  4. 04

    Deployment and pricing

    Bunker, on premises or hybrid, with commissioning, support and a written proposal priced to the specified system.

Speak to our solutions team

Specifications

Storage, specified.

Capacity
20TB to 300TB, in fixed 20TB blocks
Hardware
Dedicated drives, RAID 1 mirrored, owned by your organisation
Default state
Physically disconnected at the hardware level (Layer 1)
Access
Authorised windows: scheduled, on demand or event-triggered
Integration
SFTP and a REST scheduling API on an out-of-band control plane
Evidence
Every connection and disconnection recorded; exportable for SIEM
Where it lives
A Firevault Bunker, your premises, or a hybrid of both
Access profiles
One Offline Secure Access Profile per named person
Pricing
Quoted against the published model, in a written proposal
Tools

Questions

Questions about Storage

Start with the working protected data set: what needs protecting now, how quickly it grows, how much history you must retain, and the headroom you want. Storage runs from 20TB to 300TB in fixed 20TB blocks.

Yes. Data is written through scheduled sync, SFTP, a REST API or your existing backup workflow, in authorised windows.

Storage is physically disconnected by default. Access is available on demand, 24/7, or in scheduled authorised windows through SFTP, REST API and backup workflows. Each session lasts up to 120 minutes, then the physical connection closes.

Named people, each with their own identity-locked route in, holding defined rights over defined data sets. Every connection, disconnection and identity verification is recorded and exportable for SIEM ingestion.

In a Firevault Bunker, on your premises, or a hybrid of both, with the working set on site and the gold copy in a Bunker, so a single site loss does not remove the archive.

Storage is quoted against a published model with two parts: Offline Secure Access Profiles (who reaches it) and Offline Secure Storage Capacity (how much there is). You receive a written proposal.

No. Vault and LUV are ready to buy online. Storage is designed with our solutions team around your requirements.

Storage can help support GDPR, NIS2, ISO 27001 and NIST CSF obligations, with NCSC CAF outcome mapping available on request. Firevault holds Cyber Essentials Plus.

The same architecture continues in 20TB blocks, with no migration and no new platform. Beyond 300TB is designed with our team as Enterprise, with multi-site and on-premise options.

All questions about OSS

Talk to our solutions team

Bring the numbers: how much data, how it arrives, who needs to reach it and where it should live. We will design Storage around them.

  • Mark FermorCTO, CMO & Founder
  • David BaileyCo-Founder & CEO
  • Kenny PhippsSolutions Lead