Security piqlVault
An article describing security measures for a piqlVault
Summary
The piqlVault is a specialised long-term storage facility designed to preserve data on piqlFilm for 500+ years. To achieve this, it adheres to stringent international standards, including ISO 18911:2010 (guidelines for archival photographic film storage) and the Content Delivery & Security Association (CDSA) CF-4 physical security requirements. These standards ensure the vault’s interior is maintained in optimal conditions and protected from all hazards – fire, water, biological or chemical agents, and unauthorized access – thereby guaranteeing the longevity and security of the stored data.
The piqlVault’s multi-faceted security design – spanning structural fortification, climate-controlled preservation, fire/water disaster mitigation, strict access control, and constant surveillance – creates an environment where data on piqlFilm remains safe and stable for centuries. By following ISO 18911 archival standards and CDSA’s stringent security framework, Piql ensures that our most critical information can truly be “made immortal,” safeguarded against both time and threat.
In 2025, Piql announced the collaboration with the global leader in facility management for archival records, Iron Mountain. This is a concrete example of At the piqlVault powered by Iron Mountain Norway, the security principles of a piqlVault are implemented at the highest standards and can be used as a model for best-practice piqlVaults around the world. To read more about the specific features of a piqlVault, see down belo.
piqlVault by Iron Mountain Norway
This facility located outside the capital of Norway, Oslo is operated by Iron Mountain Norway and is certified to ISO 9001 (Quality Management) and ISO 27001 (Information Security). It follows best practices for vault operation; it also aligns with ISO 22301 for comprehensive emergency preparedness and business continuity.
Security measures at this site are extremely rigorous: the vault has alarmed doors, 24/7 video surveillance, and direct links to emergency response teams for any fire or intrusion events. Access is tightly controlled through a secure card system managed in compliance with PCI-DSS standards, ensuring that only authorised individuals can enter.
Iron Mountain additionally upholds top-tier data privacy and security certifications – including NAID AAA certification for secure document destruction – and holds a NAID Privacy+ credential, underscoring its commitment to confidentiality in all handling of stored materials. All operational procedures in this vault comply with Norwegian archival regulations and are fully GDPR compliant, meaning data privacy is built in. Critically, even on-site staff cannot view or access clients’ data: information on piqlFilm is inaccessible to anyone at the facility except certified Piql technicians during an authorized retrieval process
This ensures a highly secure, controlled chain of custody for the data. In summary, the Iron Mountain Norway piqlVault exemplifies the piqlVault security model in practice – combining certified facility management with layered physical security, environmental control, and strict access governance to protect valuable data for generations to come.
piqlVault Features in-depth
Physical Security Features
To guard against physical intrusion and environmental threats, the piqlVault facility is built with robust security features and infrastructure:
- Dedicated Secure Vault: The piqlVault is a segregated, purpose-built room used solely for storage, with no other activities permitted nearby. This isolation keeps the environment stable and free from external contaminants. The vault’s perimeter and walls are sealed (e.g. with vapor barriers like asphalt or aluminum paint) to prevent moisture ingress, though fresh paint is avoided due to harmful fumes. The entire physical facility is constructed to meet or exceed local building codes, including provisions for seismic protection to withstand earthquakes. Its location is carefully chosen to mitigate flood risk (above basement level in flood-prone areas, or in controlled underground sites). Additionally, backup power generators are in place to keep climate control and security systems running for days during any outage, ensuring continuous protection.
- Intrusion Detection: A comprehensive alarm system is active whenever staff are not present, so any unauthorised entry triggers immediate. Heavy vault doors and alarmed access points help secure the facility against break-ins. The vault is also monitored by security personnel (see Surveillance) and follows strict procedures to prevent any undetected access.
Environmental Controls
Carefully controlled environmental conditions are critical for preserving piqlFilm over centuries. The piqlVault maintains archival-quality climate control and air purity:
- Temperature and Humidity: The vault climate is maintained at a cool, stable temperature between 4 °C and 21 °C, with daily fluctuations no greater than ±2 °C. Relative humidity is kept in the optimal 20–50% range, never varying by more than ±5% within a 24-hour. These conditions minimize film degradation – avoiding heat-induced warping or high-humidity mold growth, as well as brittleness from overly dry air.
- Air Filtration and Purity: The piqlVault is equipped with high-quality HVAC systems. Incoming air is filtered to remove dust and particulate matter, and scrubbed of gaseous pollutants (such as sulfur compounds, ozone, ammonia, solvent vapors, etc.) that could corrode or oxidize the film. The ventilation is designed for slight positive pressure inside the vault, pushing out dust and contaminants whenever doors open. Mechanical filters (dry-media type with ≥85% efficiency, non-combustible construction) and dehumidifiers keep the air clean and stable.
- Cleanliness Protocols: Sticky mats or air showers are placed at the vault entrance to trap dust from anyone entering. Cleaning equipment is stored outside the vault and designed to produce minimal particles, ensuring the storage area remains as dust-free as possible. No chemical fumes or reactive substances are allowed near the storage room – for example, no paint work, industrial processes, or printing apparatus is located nearby – to avoid introducing impurities that could react with the piqlFilm. Overall, the vault operates like a clean-room, maintaining an immaculate environment in line with ISO 18911 recommendations.
Fire and Water Protection
Fire and flooding are among the greatest threats to any archive. The piqlVault implements multiple layers of protection to prevent fire or water damage to the films:
- Fire Detection & Suppression: The facility is outfitted with multi-spectrum fire detectors – including flame, heat, and smoke sensors – throughout the vault. In compliance with fire codes, an active fire suppression system is in place; notably, it minimizes the use of water. Traditional sprinklers are a last resort because water can damage film, so the piqlVault favors advanced oxygen-reduction fire suppression, which keeps oxygen at levels too low to support fire but safe for personnel. This prevents fire outbreaks without soaking the archive. Handheld fire extinguishers (Class A, B, C) are also stationed in the vault for quick response. Additionally, fire-control dampers are installed in all HVAC ducts to automatically isolate the vault if smoke or heat is detected, stopping fire from spreading through ventilation.
- Structural Fire Resistance: While piqlFilm itself is made of a polyester base that is relatively slow-burning and can withstand high temperatures for short periods, the vault’s construction further mitigates fire risk. Walls, doors, and storage cabinets have fire-resistant ratings as required by local regulations. Any openings (like air vents) are protected by the aforementioned dampers. These measures ensure that if a fire occurs, it can be detected and suppressed almost immediately, avoiding catastrophic loss.
- Water/Flood Protection: The vault is designed to be water-tight and flood-safe. Wherever possible, vaults are located away from flood plains or at higher elevations; if a vault must be underground, enhanced humidity control and drainage are implemented to prevent water ingress. Perimeter walls are vapor-sealed, as noted, to block moisture seepage. Inside the vault, storage shelves are elevated at least 15 cm (6 inches) off the floor, so that in the event of minor flooding or sprinkler discharge, the piqlFilm containers remain above water level. Importantly, the fire suppression strategy avoids water where possible, but if any water does reach the films (through pipe leaks or firefighting), strict emergency handling procedures are in place. Any piqlFilm that gets wet is kept wet (to prevent emulsion layers from drying and sticking together) and sent immediately for professional re-washing and drying. This salvage protocol ensures that even in a worst-case scenario, the data can be recovered without permanent damage. Overall, by removing flood risks and controlling humidity, the vault safeguards against water-related deterioration.
Access Control
Tight access control policies restrict who can enter the piqlVault, thereby protecting the data from theft, tampering, or sabotage:
- Restricted Entry: The vault is secured such that only authorized personnel with a legitimate business need may enter. It is segregated and monitored to prevent any unauthorized. Entry points are protected by electronic access control systems (e.g. key cards or biometric readers), and the vault remains locked and alarmed when not actively in use. All access permissions are managed according to strict standards (for example, piqlVault by IM Norway follows PCI-DSS norms for access card security)
- Visitor Management: Any visitors or non-essential staff are subject to rigorous controls. The piqlVault maintains detailed visitor registration logs and screening procedures. Visitors must have pre-approved justification, and upon arrival they are searched as needed and escorted at all times within secure areas. Policies clearly outline these procedures, ensuring no unaccompanied or unrecorded persons ever enter the vault’s secure space.
- Personnel Authorization: Only trained, certified Piql operators handle the piqlFilm within the vault. General staff or outsiders cannot directly access or retrieve the data carriers. This not only protects the physical films from mishandling, but also ensures that data access is tightly controlled even inside the vault (the films themselves require a specialized piqlReader to interpret, and without authorization no one can use it). Notably, because piqlFilm is an offline, WORM (Write-Once-Read-Many) medium, it cannot be hacked remotely – any data theft would require physical removal of the film. Thus, by limiting physical access, the vault neutralises cyber threats entirely. Intruders would have to break in, which is extremely difficult given the vault’s layered security and 24/7 monitoring, and even then they could not easily read or alter the data without Piql’s proprietary equipment. These measures together make unauthorized data access virtually impossible.
Surveillance Measures
Continuous surveillance and monitoring provide an active defence, deterring unauthorised access and enabling rapid response to any security incident:
- 24/7 CCTV Coverage: The piqlVault is under constant video surveillance. CCTV cameras cover all entrances and any sensitive areas where piqlFilm is handled or stored. This includes monitoring of receiving ports (in automated systems) and storage aisles, creating a complete visual audit trail of all activities. The camera system is professionally managed: recordings are retained for at least 90 days, and access to surveillance footage is limited to personnel with a legitimate security role. Each video is time-and-date stamped for accuracy and evidentiary value. Regular maintenance checks and service agreements ensure that cameras and recording equipment remain fully functional at all times. The vault is also well-lit to guarantee clear camera images and safe navigation for staff.
- On-Site Security Personnel: In addition to electronic surveillance, security guards are an integral part of piqlVault’s security. Trained guards are on duty whenever vault operators are not present, providing human oversight during nights, weekends, or other off-hours. They monitor the CCTV feeds in real time and perform routine patrols of the premises. Guards follow detailed post orders and protocols (aligned with CDSA guidelines) for responding to any alarms or suspicious activityfile-7whxjbuxgobhqxqzklgg31. Their presence not only allows immediate response to incidents but also serves as a strong deterrent against attempted breaches. In essence, the combination of live guards and constant video monitoring ensures that any threat – whether detected electronically or by human vigilance – will be noticed and acted upon immediately.