Security & Compliance

All customer data is stored and processed exclusively in the European Union. We use certified EU-based datacentres and do not transfer data outside the EU under any circumstances.

We maintain a documented incident response procedure. If a data breach involves customer personal data, we notify affected customers within 24 hours of becoming aware of it, so they can meet the 72-hour GDPR reporting deadline where it applies.

Yes. Marad holds ISO/IEC 27001:2022 certification issued by LRQA (Lloyd's Register), valid until 09 October 2028. You can download the certificate from the Resources section of this page.

DNV Type Approval confirms that Marad's Planned Maintenance System meets the requirements set by Det Norske Veritas (DNV), one of the world's leading classification societies. For fleet operators, this means vessels using Marad are exempt from mandatory five-yearly machinery openings, only manufacturer recommendations apply, reducing cost and operational disruption.

We operate a responsible disclosure programme. Please report vulnerabilities to security@marad.com. We ask that you give us reasonable time to investigate and remediate before public disclosure. We commit to acknowledging all reports within 5 business days.

Our Data Protection Officer (DPO) is Jacob Hakvoort (dpo@marad.com). Our Chief Information Security Officer (CISO) is Johannes van Urk (security@marad.com). Both are available to answer questions from customers and regulators.