Data Security
A fleet system holds owner contact details, crew personal data, and the alarm codes and Wi-Fi passwords for vessels worth millions. Here is who can reach it, and where it lives.
Who Can See What Is Your Decision
Most data loss in a crewed operation is not a break-in. It is a departing crew member who still has access, a shared login nobody rotated, or a person who could see more than the job required.
No Passwords to Steal
Signing in means receiving a one-time code by SMS or email. There is no password to be reused from another breach, written on a whiteboard in the crew mess, or left saved in a browser on the boat's shared laptop — and removing someone's access does not depend on remembering which password they knew.
Roles Decide What Each Person Sees
Every person carries a role on every vessel — Owner, Captain, Engineer, Crew — and entire features can be hidden by role across the organization. Sensitive items get their own place: Wi-Fi passwords, door codes and alarm codes are stored securely rather than typed into a general notes field everyone aboard can read.
Encrypted in Transit and at Rest
Marina Wi-Fi is shared with strangers, and that is where connections get intercepted. Every connection to YACHTWAVE® is encrypted, and browsers are told to refuse an unencrypted one outright. Behind that sit firewalls, access controls, regular security assessments and staff trained on data security and privacy.
An Audit Trail That Names Names Ultimate Edition
Every addition and amendment to the official logbook is tracked — by whom, when, and from where. A record that can be quietly changed is not a record.
Access, in Practice
- One-timecodes by SMS or email — no stored password to steal
- Per vesselroles, so access follows the boat as well as the person
- Org-widefeature visibility by role — hide what a role has no business seeing
- Separatesecured storage for Wi-Fi, door and alarm codes
- Trackedlogbook amendments — who, when, from where
Full technical detail is available under NDA for security reviews and owner due diligence. Report a security issue →
Where Your Data Lives, and How It Gets Back
Not on a phone, not on the boat, and not in a cupboard in our office.
100% Cloud-Based
Every record lives in the cloud and is available to every authorized crew member, anywhere in the world — not trapped on one device the way boating apps that store to the phone leave it. A phone lost overboard costs you a phone, not the vessel's history.
Enterprise-Grade Cloud, Behind a Global Network
All YACHTWAVE data is hosted with DigitalOcean, an enterprise cloud provider trusted by hundreds of thousands of businesses worldwide. Every request reaches it through Cloudflare first, so denial-of-service floods are absorbed at the edge before they touch the application — and because Cloudflare reaches 348 cities, the same network that filters the traffic is what makes the app quick from Palma or Fort Lauderdale.
Backed Up Daily, Recoverable to the Minute
The database is backed up automatically every day to storage separate from the server that runs it, and every change is written to a running log alongside it. That means recovery is not limited to last night's copy — the data can be restored to a specific point in time, which is what you need when the problem is a mistake rather than a disaster.
Independently Audited Infrastructure
Your data sits in facilities examined by outside auditors, not self-declared as secure: SOC 2 Type II and SOC 3 Type II attestations, ISO 27001 and PCI-DSS — the same standards banks are held to. The reports are published, renewed on the auditor's schedule, and there for you to read.
Infrastructure Certifications
Certifications held and published by DigitalOcean and its data center operators. Cloudflare, the network in front, holds its own SOC 2 Type II report and ISO 27001 certification.
Cloud hosting, audited infrastructure, daily backups, passwordless sign-in and role-based access are part of every YACHTWAVE® edition. The logbook audit trail is Ultimate Edition.
Compare every feature, edition by edition →
Ask Us the Hard Questions
Security questionnaires, owner due diligence, a broker's IT policy — send them over. We would rather answer in detail than in adjectives.
CONTACT US