Trust & Compliance Center
Security architecture, privacy practices, and legal agreements — everything you need to evaluate Y Marine OS with confidence.
Security by Design
Data Encryption
All data is encrypted in transit (TLS 1.2+) and at rest. Credentials are hashed using industry-standard algorithms.
Role-Based Access Control
Every user sees only what their role, organization, and yacht assignments permit. Permissions are resolved server-side.
Tenant Isolation
Organizations cannot read, create, update, or delete data belonging to another organization. Enforced at the database layer.
Signed Integrations
External platforms connect through HMAC-signed requests with nonce-based replay protection. Credentials are never stored raw.
Privacy & Compliance Standards
GDPR
Data subject rights, lawful processing, and cross-border transfer safeguards for EU/EEA residents.
Data Processing
Formal DPAs, subprocessor disclosures, and transparent data retention policies.
Privacy by Design
Data minimization, purpose limitation, and privacy-protective defaults built into every feature.
Data Retention
Clear retention schedules with automated deletion and export capabilities for data subjects.
Y Marine OS does not claim certifications such as ISO 27001 or SOC 2 unless they have been formally obtained and verified. Legal documents are structural templates pending professional legal review.
Service Agreements & Policies
All documents are available for review. Acceptance is tracked per user with version history.
Terms of Service
The terms governing your use of Y Marine OS.
Privacy Policy
How we collect, use, and protect your data.
Cookie Policy
How cookies and similar technologies are used.
Data Processing Agreement
Our DPA for customers processing personal data.
Subprocessors
Third-party services that may process data on our behalf.
Acceptable Use
Permitted and prohibited uses of the platform.
AI Policy
How AI features operate within the platform.
Data Retention
How long different data types are retained.
Data Deletion
How to request and execute data deletion.
Security Overview
Our security architecture and practices.
Service Availability
Uptime commitments and incident response.
Reseller Terms
Terms for partners reselling Y Marine OS.
Data Subject Rights
Access & Export
Request a copy of your personal data at any time.
Rectification
Correct inaccurate or incomplete personal data.
Erasure
Request deletion of your data, subject to legal obligations.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to certain processing activities.
Restriction
Request restriction of processing in certain circumstances.
Have compliance questions?
Contact us for security-specific inquiries, DPAs, or enterprise compliance reviews.