Security and trust
Your data is yours. Your ship's word is final. People hold the keys.
Naavra is built so that each company's data stays in its own deployment, ships keep working at sea, and the acts that carry legal weight stay with people.
Data ownership
Your data belongs to you
You own everything you put into Naavra and everything it produces for you. You can export it at any time, in open formats, and when you leave, we delete it on a schedule you can see.
- Export at any time, including after cancellation
- Deletion by destroying your deployment's key, on a published schedule
- Nothing you give a free tool is used to train a model
Offline first
The ship keeps working, and the ship's word wins
Every screen works on board without a connection. When the link returns, records sync. For records made on board, such as logs, readings, permits and reports, what the ship wrote wins; ashore, shore records win; and where both sides edit, the changes are merged and any conflict is shown to a person.
- Works on satellite links and in port with no signal
- Records signed on board stay signed as written
- Every sync is signed with the deployment's own key
Passage plan checked against 3 new notices. Sign it.
Enclosed-space permit drafted for 10:00. Only you can issue it.
12 records wait to sync. What the ship wrote, wins.
Deployment isolation
Each company in its own deployment
Its own encryption key
Every deployment has its own key in its own region. No deployment's key is ever used for another's data.
Separated at the database
Row-level security and separate schemas keep each company's records apart, tested on every release.
Region of your choice
Singapore is our primary region; deployments can also live in the EU or India where your data needs to stay.
Append-only audit
Every act, by a person or a colleague, is written to an audit trail that cannot be edited, with write-once storage.
Single sign-on and strong login
Sign in with your company's identity provider, with passkeys and multi-factor authentication.
Signed and scanned releases
Every release is scanned for vulnerabilities and secrets, and signed before it runs.
The controls
Controls you can see and hold
Twenty-four human-only acts
Sending money to the bank, issuing a permit to work, the Master's authority and more. Fixed in code; no setting can hand them to a machine.
Learn moreFour eyes where it matters
Two different people for payments, bank details, approval limits and configuration changes.
Limits on every colleague
Managers set what each colleague may do, pause it at once, and see every act it took.
Learn moreAccess reviews
Every account is reviewed by its manager on a schedule, and leavers lose access on the day they leave.
Protection from hostile content
Incoming mail and files are treated as data, never as instructions to a colleague.
API scopes that cannot reach a human-only act
No API key, integration or outside agent can be granted a human-only act.
Learn moreCertification
Our certification programme is under way
We are working toward ISO/IEC 27001:2022 certification and a SOC 2 Type II report, with an independent penetration test every year. We will publish each result when it is issued. Until then, we do not claim them.
ISO/IEC 27001:2022
Programme under wayAn information security management system covering the platform and the service.
SOC 2 Type II
Programme under waySecurity, availability and confidentiality, over an observation period.
Independent penetration testing
Programme under wayExternal, web, API, mobile and cloud, plus a test of the colleagues themselves.
Our cloud provider holds its own certifications for the physical data centres. We will share our security documentation under a non-disclosure agreement on request.
Questions from your security team?
We will walk your security team through the architecture, the controls and the programme.