PSTI Statement of Compliance
United Kingdom — Product Security and Telecommunications Infrastructure Act 2022
YachtLINK™ (model YLK-1-WIFI) complies with the UK Product Security and Telecommunications Infrastructure Act 2022 and the Product Security Regulations 2023. The signed Statement of Compliance (YW-PSC-UK-001), our vulnerability disclosure policy and our security-update support period are published on this page.
Statement of Compliance
The full text of the statement is reproduced below. The signed original is the authoritative document — it is shown at the foot of this page and available for download.
STATEMENT OF COMPLIANCE (No. YW-PSC-UK-001)
Made under the Product Security and Telecommunications Infrastructure (Product Security) Act 2022 and the Product Security (Security Requirements for Relevant Connectable Products) Regulations 2023, Schedule 4.
1. Product: YachtLINK™ NMEA 2000® Marine Gateway, model YLK-1-WIFI (UK consumer connectable product). Batch: all production units of model YLK-1-WIFI; each unit is individually identified by the 12-hex-character serial number on its product label.
2. Manufacturer: Durban Equity Holdings II, LLC (dba YACHTWAVE), 935 N Beneva Rd, Ste 609-2056, Sarasota, FL 34232, USA.
UK Authorised Representative: Euverify Ltd, 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, United Kingdom.
3. Declaration: The manufacturer declares that it has complied with the applicable security requirements of Schedule 1 to the 2023 Regulations, including by meeting conditions for deemed compliance in Schedule 2 (ETSI EN 303 645):
- Passwords (Schedule 1, paragraph 1): every unit is manufactured with a unique per-device password, generated at production, not based on or derivable from public information or the product serial number, and printed on the unit's label (ETSI EN 303 645 provisions 5.1-1 and 5.1-2).
- Reporting security issues (Schedule 1, paragraph 2): security issues may be reported to [email protected]; the vulnerability disclosure policy, including acknowledgment and status-update practice, is published at www.yachtwave.com/compliance-uk-psti.
- Security-update information (Schedule 1, paragraph 3): the minimum support period stated below is published at the same address.
4. Defined support period: security updates will be provided for a minimum of five (5) years from the date of first retail sale of the unit; for any given unit the support period therefore ends no earlier than the fifth anniversary of its first retail sale.
Signed for and on behalf of: Durban Equity Holdings II, LLC (dba YACHTWAVE)
Name, function: John E. O'Keefe, Chief Executive Officer
Place and date of issue: Sarasota, FL, USA · August 8, 2026
Signature: as shown on the signed original below.
Vulnerability Disclosure Policy
This is the policy referred to in paragraph 3 of the statement above, published at the address named in it.
If you believe you have found a security vulnerability in a YACHTWAVE product or service, please report it to [email protected]. Include the product model, firmware version if known, and enough detail to reproduce the issue. We will acknowledge your report within 5 business days, keep you informed of progress, and will not take legal action against good-faith security research. Please do not publicly disclose an issue before we have had a reasonable opportunity to address it.
We also ask that you avoid accessing or modifying other users' data, and avoid any action that could degrade the service or the safety of any vessel. The same policy, together with the device data and privacy notice, is published on our Product Security & Disclosure page.
Minimum Security-Update Support Period
This is the information referred to in paragraph 3 of the statement above, published at the address named in it.
Minimum security-update support period: five (5) years from the date of first retail sale of the unit.
Updates are delivered automatically over the air when the device is online; no user action is required. The period runs from the sale of the individual unit, so a unit sold later is supported for the same five years from its own date of sale. This period may be extended, but will not be shortened.
Signed Original
The executed statement is shown below. If it does not display in your browser, use the download link above.
Product conformity for Great Britain under the Radio Equipment Regulations 2017 is declared separately — see the UK Declaration of Conformity.