Security
How your fleet's records are kept
Your reports, fuel figures and crew records are your company's. Here is what keeps them that way, in the database, in the office and on board.
What protects your data
The safeguards, one by one
Each of these is how the platform is built today.
Each company kept apart
Row-level security in the database itself separates every company's records, not only the apps.
Your own account
Everyone in the office signs in with their own account. Passwords are stored only as one-way hashes.
Permissions by role
Each person sees only the vessels and actions they have been given.
Sessions you can end
Each signed-in session records its browser and IP address so it can be recognised and ended, and every session expires.
Two-factor for our staff
OptiMarine staff sign in to the platform with two-factor authentication.
Role PINs on board
The Bridge and the Engine Room each open the tablet with their own PIN, stored only as a hash.
Every filing attributed
Each report and record filed on board is stamped with the role and the tablet that filed it.
Kept on the tablet until sent
The tablet holds the vessel's records on the device so the crew can work offline; its sign-in key sits in the Android Keystore or iOS Keychain.
A revoked tablet wipes itself
Revoke a tablet from the office and it deletes its key, PINs, queued filings and records the next time it connects.
Encrypted in transit
Every connection to the platform is HTTPS, and HSTS tells browsers never to fall back to plain HTTP.
Nothing tracking you
Neither app contains analytics, crash reporting or advertising, and the web app sets no cookies.
Location only when asked
The tablet reads its position only when an officer taps Use tablet GPS while filing, never in the background.
Questions
Common questions
Can another company see our records?
No. Each company's records are separated by row-level security in the database, so a request made for one company cannot read another's, whatever the app asks for.
What if a tablet is lost or stolen?
Each role still needs its PIN to open it. Revoke the tablet from the web app and it deletes everything it holds the next time it connects: its key, PINs, queued filings and stored records.
Who in our office can see what?
Each person signs in with their own account and sees only the vessels and actions your company has given them.
Who do I ask about security?
Write to info@optimarine.io.
Request a demo
See it on your own fleet.
Tell us about your vessels and we'll walk you through OptiMarine on real vessel data, starting with what you want to fix.
We reply within one business day.
Prefer email? info@optimarine.io