Trust & security
Your fleet records deserve serious handling.
Certificates, maintenance history and inspection evidence are regulated records. This page sets out, plainly, how Full Ahead AI Ship Manager stores and protects them — and what we do not claim.
Encrypted in transit and at rest
All traffic is served over HTTPS with TLS. Database storage and uploaded evidence files are encrypted at rest by the managed cloud platform.
Tenant isolation at the database layer
Every record carries an organisation id and is protected by row-level security policies enforced by the database itself — not by application code that could be bypassed.
Role-based access
Administrator, superintendent and crew roles are stored separately from user profiles and checked server-side, so a client cannot elevate its own permissions.
Append-only audit trail
Actions are written to an audit log with no update or delete path. What was recorded stays recorded — the evidence standard inspectors and auditors expect.
Managed EU infrastructure
Application and database run on managed cloud infrastructure with automated patching, monitoring and daily backups handled by the platform provider.
Offline resilience
The app is installable and keeps working at sea: last-synced data stays readable without signal, and changes made offline queue locally and upload when the link returns.
Our data commitments
- We process personal data as a controller for account data and as a processor for the fleet data you upload, in line with the GDPR.
- We do not sell personal data and we do not use your fleet data to train third-party AI models.
- Subprocessors are limited to our cloud hosting, payment (Paddle, as Merchant of Record) and AI providers.
- You can export or request deletion of your workspace data at any time by writing to hello@fullahead.app.
- Suspected vulnerabilities can be reported to hello@fullahead.app; we aim to acknowledge within two business days.
What we do not claim
Full Ahead AI Ship Manager is an independent product operated by Georgios Zografos, Cyprus. We are not currently ISO 27001 or SOC 2 certified, and we are not endorsed, approved or certified by any flag administration, class society, the IMO or any other regulator. The software helps you organise and evidence compliance work; responsibility for statutory compliance remains with the vessel operator.