Security & Compliance

All customer data is stored and processed exclusively in the European Union. We use certified EU-based datacentres and do not transfer data outside the EU under any circumstances.

We maintain a documented incident response procedure. In the event of a security incident affecting customer data, we will notify affected customers within 72 hours in accordance with GDPR requirements.

Yes. Marad holds ISO/IEC 27001:2022 certification issued by LRQA (Lloyd's Register), valid until 09 October 2028. A copy of the certificate is available on request.

DNV Type Approval confirms that Marad's Planned Maintenance System meets the requirements set by Det Norske Veritas (DNV), one of the world's leading classification societies. For fleet operators, this means vessels using Marad are exempt from mandatory five-yearly machinery openings, only manufacturer recommendations apply, reducing cost and operational disruption.

We operate a responsible disclosure programme. Please report vulnerabilities to security@marad.com. We ask that you give us reasonable time to investigate and remediate before public disclosure. We commit to acknowledging all reports within 5 business days.

Our Data Protection Officer (DPO) is Jacob Hakvoort (dpo@marad.com). Our Chief Information Security Officer (CISO) is Johannes van Urk (security@marad.com). Both are available to answer questions from customers and regulators.