Technical summaryMariner's Desk Suite Spec Sheet
What the Mariner's Desk suite is built on, what it runs on, and what it does with data. For IT and compliance reviewers.
01The components
Two applications and one shared backend.
| Component | Who uses it | How it's delivered |
|---|
| Mariner's Desk | Seafarers, on their own phones | Web app, installable to the home screen. Also on Google Play for Android. |
| Mariner's Desk HQ | Shore office and fleet staff | Web app, used in a browser on a computer. |
Both apps use one shared backend. A seafarer's records are held once, in their own account. HQ reads them only for companies that a seafarer has linked to.
03Offline operation and sync
How the apps behave when the connection drops.
- Records are saved to the device first, so entries work without a connection.
- Changes are sent to the cloud when the connection returns.
- Companies see records once they've synced. Records added before linking are shared once the link is made.
- Backup and restore are available from Settings in Mariner's Desk. Records already on a device are merged on restore, not duplicated.
04Access control and security
Who can read and change what.
- Row-level access control. Each person's records are protected by database policies, so data is readable only by the people and companies allowed to see it.
- Consent-based changes. Company staff can propose certificate changes and sea-service sign-offs. Changes to a seafarer's own record need the seafarer's acceptance.
- Audit log. Recorded actions can't be edited or deleted, and entries can't be written in another person's name.
- Roles. Admin, editor, Master or Chief (own vessel), and viewer.
- Sign-in. Email and password. Reset by an emailed code. A PIN and optional biometric unlock on the seafarer app.
- Review. Internal review before each pilot, including hand-tested flows. No third-party penetration test, and no ISO 27001 or SOC 2 certification of our own application. The database and hosting layer (Supabase) is independently SOC 2 Type II and ISO 27001 certified.
05Data handling
What is stored, where, and how it leaves.
- Stored in a managed cloud database, with file storage for scans and documents.
- Exports are available at any time: CSV for lists, an audit pack for inspections, and a full company backup in JSON for admins.
- Email is sent through a transactional email provider from a Wilson Maritime Group address, for sign-in codes, invites and notifications.
- Retention after account deletion. A seafarer's own records are removed. Rest-hours records and sea-service sign-offs that a company has countersigned are kept for the company, shown under the seafarer's name marked as account deleted.
- Emergency card is visible only to the seafarer.