Questions from IT departments

Is our data separated from other customers?

Yes. Every company gets its own, fully separate system with its own server, database, file storage and keys. See your own system.

Where is our data hosted?

In a data centre in the EU, by default in Germany. See where your data is.

Do you follow a security standard?

Our setup follows the recommendations of the German Federal Office for Information Security (BSI), such as IT-Grundschutz and its technical guidelines for encryption.

Is data encrypted on the way?

Yes. All connections use TLS 1.2 or newer, and unencrypted requests are redirected to HTTPS. See encryption on the way.

How are attacks blocked?

A web application firewall and intrusion prevention check every request, and block known attack patterns, attempts to exploit known vulnerabilities and addresses that behave like attackers. Their rules update automatically every day. See protection against attacks.

Do you scan for vulnerabilities?

Yes. Every day, our systems are scanned for known vulnerabilities (CVEs), and findings are fixed with priority. See updates.

How quickly are security updates applied?

Security updates of the operating system are installed automatically every day. The software and components we use are kept up to date through an automated update process. See updates.

How are backups made?

Every night, encrypted, to a separate location, with integrity checks every week. See backups.

Do you support multi-factor authentication and single sign-on?

Yes. People sign in with their company Microsoft account, so your multi-factor authentication and Conditional Access policies apply. See access and sign-in.

Can we limit access to our network or VPN?

Yes, on request: the office part can be limited to your IP ranges or VPN, while ship PCs keep working from anywhere. See limiting access to your network.

What happens if a ship PC is stolen?

Disconnect it in the fleet overview. It can no longer connect, and the next time it tries, its copy of the documents is removed. Its key is protected by Windows and can’t simply be copied to another PC.

Can the crew change documents or bring in files?

No. The app on board is read-only and nothing can be imported. The crew can only save copies, for example to fill in a form. See read-only on board.

Does the assistant use the internet or general knowledge?

No. It answers only from your documents and always names its sources. See the assistant.

Is our data used to train AI?

The AI service is used through its business interface and is covered by our data processing agreement. If you prefer, the assistant can use your own AI provider or account.

What happens to our data when the contract ends?

Your whole system is deleted, with all its data and backups. Before that, you can get an export of your documents. See when the contract ends.

Can we get a data processing agreement (AVV) or your TOMs?

Yes, both are available on request.

How do we report a vulnerability?

Please write to security@maridex.app. We also publish our contact in /.well-known/security.txt.