Credibility belongs in verifiable proof, not claims. This page maps how CelesteOS earns trust at audit, where data lives, and where CelesteOS stands on class society Type Approval.
CelesteOS seals every action, every fault, every handover, every signature into a cryptographic receipt. Anyone can check a receipt's integrity with open SHA-256 math at verifier.celeste7.ai; signature validation is not yet performed. The verification protocol describes exactly what is checked.
Why this matters: ISM Code external audits require objective evidence that the safety management system actually works on board (IMO MSC-MEPC.4/Circ.4). PSC inspectors check planned maintenance records during inspection. Records whose integrity can be independently checked help remove the question of whether logs were assembled under pressure.
How verification works ↗CelesteOS operates to SOC-2 control principles: access controls, encryption at rest and in transit, audit logging, vendor due diligence, change management, and incident response.
Crew sign in through Microsoft Entra single sign-on using their own organisation's Microsoft 365 work account, with multi-factor authentication enforced by Microsoft. CelesteOS never receives or stores a crew password.
CelesteOS has not yet engaged a Type 1 or Type 2 auditor. Independent attestation will follow once pilot operations stabilise and the customer cohort warrants the cost of audit. No certification is claimed that is not held.
Where a buyer requires specific control evidence before pilot signature, CelesteOS shares its internal control register and supporting documentation under NDA on request to contact@celeste7.ai.
CelesteOS customer data is stored on Hetzner servers in Germany (European Union). Edge delivery, the session-security cache, error monitoring and AI processing take place partly in the United States; those transfers are governed by Standard Contractual Clauses (EU SCCs) and the UK International Data Transfer Addendum. Data is encrypted in transit using TLS 1.2 or higher, and backups are encrypted.
Encrypted backups are held in Germany. Production secrets and signing keys are held outside the application database.
A signed Data Processing Agreement (DPA) listing all sub-processors is available on request to contact@celeste7.ai before pilot signature.
For the full disclosure of categories processed, legal bases, retention periods, and your statutory rights, see the privacy policy.
CelesteOS produces audit evidence aligned with the following codes and resolutions:
Scheduled maintenance, faults, work orders, certificates and handover live in one record. Your equipment register, certificates and work-order history are imported as they are, and every action is sealed and independently verifiable.
CelesteOS is audit evidence, not class approval. It does not hold DNV, LR, BV or ABS Type Approval.