Security by design
AI that multiplies your specialists without leaking your ship.
Shipping is critical infrastructure, and the fastest way to compromise it now is not an intrusion — it is a well-meaning superintendent pasting a crew list, a class report or an access key into a chat window. Full Ahead Maritime puts a hard boundary in front of every model call, proves what crossed it, and uses multi-agent panels that keep a named human in command of the decision.
Three controls between your data and any model
Egress boundary
Personal data is removed before the request leaves
- Crew emails, phone numbers, passport and seaman's book numbers stripped in transit
- Bank, card, national and tax identifiers removed without the user having to notice them
- Precise personal positions generalised; the vessel's operational position is untouched
- The redaction is shown in the interface before you send, not discovered afterwards
Hard refusal
A credential in a prompt stops the request
- Private keys, API keys and session tokens are detected and the call is refused, not sanitised
- Nothing is sent to any model, so there is nothing to withdraw
- The operator is told to rotate the key, because that is the only correct response
- The refusal is recorded, so a near miss is visible to whoever owns the risk
Proof
An auditable record that is not itself a breach
- Every AI request logged with surface, model, outcome and what class of data was stripped
- A SHA-256 fingerprint of the sent text — never the text itself
- Workspace-scoped and server-written only; the application cannot forge or edit an entry
- Answers the question an auditor actually asks: what left, when, and what was in it
Multi-agent panels: three hours of a specialist in ninety seconds
One superintendent cannot be a class surveyor, a purchaser, a vetting inspector and a human factors specialist at eleven at night with a generator tripping. A panel can — and unlike a single assistant, it tells you where those disciplines do not agree.
Specialists, not one voice
A single model answers as an average of everything it has read. A Full Ahead Maritime panel seats five disciplines — chief engineer, reliability, superintendent, class, purchasing — each accountable for one duty of care and told to stay inside it.
They argue before they advise
Round one is blind, so a confident opinion cannot anchor the room. Round two shows every seat the others and asks it to attack them. The chair is forbidden from averaging disagreement away.
Disagreement is the deliverable
Where the specialists split, the split is published with the reasons. That is precisely where a human must decide, and it is the part a summary would have deleted.
Never inventing the record
Every seat is instructed to say data is missing rather than produce a certificate date, running hour or part number that was not given to it. Confidence is stated and lowered honestly when inputs are thin.
What we will not do
| Common practice | Why it is a risk | Full Ahead Maritime |
|---|---|---|
| Paste-anything AI chat over fleet data | Crew personal data and keys leave the company on the operator's judgement alone | Every prompt passes a deterministic redaction boundary first, shown before sending |
| Logging full prompts for quality review | The audit log becomes the largest copy of the data it was meant to protect | Hash fingerprints and redaction counts only; the prompt text is never stored |
| Biometric or wearable fatigue monitoring | Health data on seafarers is disproportionate, resented and hard to defend | Fatigue inferred from work, rest and watch patterns — never biometrics or wearables |
| One AI answer presented as the recommendation | Hidden disagreement is presented as certainty and the human stops checking | Panel dissent published in full, with mandatory human verification steps |
Ask us the question your DPO will ask
"What personal data of our crew has ever been sent to an AI model?" Every call to an outside model is recorded inside the product with a SHA-256 fingerprint of what was sent and its length — the text itself is never stored. You can read that record in front of us, on any day you ask.