Your models, datasets and regulatory evidence — under your physical control, in your territory, ready for inspection. Sovereign cloud in your territory with proven immutability — and a dedicated physical, air-gapped golden copy as the last line of defence. Delivered as a managed service by heimr.
AI has created a new class of evidence: model versions, training datasets, model cards, decision logs. Retaining, indexing and proving them is an obligation — not an option.
Retain and prove.
PRA, FCA, DORA, GDPR, BACEN, CVM. Regulators require you to prove, years later, which model decided, on what data and when — with no tamperable trail.
Data that cannot leave the country.
Sensitive information that cannot — legally or strategically — live outside your national territory. Foreign cloud removes that data from your control and your jurisdiction.
Last line of defence.
A genuinely offline, immutable copy is virtually impossible to reproduce online. Physical air-gap is not a luxury: it is what remains when everything else fails.
“We do not sell cheap storage. We sell the ability to survive a regulatory inspection without panic.”
All three offers share the same custody foundation and combine as your needs evolve — start where the pressure is greatest and expand without changing provider.
Air-gapped golden copy with recovery drills tested and documented every cycle.
Auditable immutable retention with cryptographic attestation and chain of custody, mapped to sector requirements.
Long-term cold archiving with guaranteed physical sovereignty and contracted RTO, on national territory.
Subscription by protected capacity and governance tier. Onboarding includes data classification and retention-policy design.
Managed capacity.
Auditable proof.
Inspection-ready.
The three offers are use cases — what you need to retain and why. The three tiers are governance levels — how far you go in proving it. Each offer is delivered in one of the three tiers.
| Offer \ Tier | Custody | Assurance | Sovereign+ |
|---|---|---|---|
| Cyber Recovery Vault | Available | Recommended | Typical delivery |
| Regulatory Vault | Available | Typical delivery | Recommended |
| Sovereign Archive | Typical delivery | Available | Available |
heimr does not compete on £/TB. We compete where the cloud cannot deliver: regulatory proof, physical sovereignty and jurisdictional control, and guaranteed recovery.
Four honest questions. If the answer to any is no, the vault is probably not the right fit for you — and we say so before you spend time on it.
“If the data goes into a GPU or answers a query, it is not for the vault. If it is large, cold, must last for years and requires air-gap or regulatory proof — it is exactly the case.”
Is there a regulatory or sovereignty reason that PREVENTS using public cloud?
Is the data cold (rarely accessed) and long-retained (years)?
Do you value immutability proof and chain of custody — not just storage?
Significant volume (typically hundreds of TB to multiple PB) and willingness to enter long-term contracts?
You leave the conversation with a clear diagnosis: what must be retained, for how long, under which framework — and the vault design that meets the obligation without waste.