Security at Marine Weather Intelligence

Our customers in shipping, offshore energy and yachting rely on our routing and weather intelligence for operations at sea. Protecting their data and keeping our services available is part of that responsibility.

Our security programme

Our information security programme follows the international standard ISO/IEC 27001:2022. It is approved by our CEO, led by a designated Security Manager and reviewed every month by management. We are working towards ISO/IEC 27001 certification, targeted for 2027.

Where your data is hosted

Customer data is hosted in data centres in France operated by certified European cloud providers. Data is encrypted in transit (TLS) and at rest. Each customer's data is logically separated from other customers' data.

Access to your data

Only staff who need it for your service can access your data, with personal accounts and multi-factor authentication. Access rights are reviewed every quarter. All staff sign confidentiality undertakings and our security rules, and receive security training every year.

Secure development

Every change to our software is reviewed by a second engineer and checked by automated security tests before deployment. Our platform is scanned for vulnerabilities every month, and will be tested by independent security experts from Q2 2027.

Resilience

Our services run in two data centres in France, are backed up daily to a separate location, and our recovery plan is tested every year.

Incidents

We have a documented incident response plan. If an incident affects your data or service, we inform you without undue delay.

Privacy

We process personal data in line with the GDPR. See our privacy policy: marine-weather.com/privacy-policy

Security documents

Customers and prospects can request, under NDA, a summary of our security and privacy policies and, once available, our latest security test summaries, by contacting security@marine-weather.com.

Report a vulnerability

If you believe you have found a security vulnerability in one of our services, please email security@marine-weather.com with a description and the steps to reproduce it. We will acknowledge your report within 3 working days, keep you informed, and fix confirmed issues as quickly as possible according to their severity.

We ask you to: give us reasonable time to fix the issue before any disclosure; not access, modify or delete data that is not yours; not degrade our services (no denial of service, no social engineering of our staff, no physical tests). We will not take legal action against researchers who act in good faith and follow these rules. We do not run a paid bug bounty programme at this time.