Credibility belongs in verifiable proof, not claims. This page maps how CelesteOS earns trust at audit, where data lives, and why the product sits alongside your class-approved PMS rather than replacing it.
CelesteOS seals every action, every fault, every handover, every signature into a cryptographic receipt. The receipt is independently verifiable by anyone, anywhere, without trusting us. The verifier is open at verifier.celeste7.ai.
Why this matters: ISM Code external audits require objective evidence that the safety management system actually works on board (IMO MSC-MEPC.4/Circ.4). PSC inspectors check planned maintenance records during inspection. Records that can be independently proven authentic remove the question of whether logs were assembled under pressure.
Verify a sample receipt ↗CelesteOS operates to SOC-2 control principles: access controls, encryption at rest and in transit, audit logging, vendor due diligence, change management, and incident response.
We have not yet engaged a Type 1 or Type 2 auditor. Independent attestation will follow once pilot operations stabilise and the customer cohort warrants the cost of audit. We do not claim certification we do not hold.
Where a buyer requires specific control evidence before pilot signature, we will share our internal control register and supporting documentation under NDA on request to contact@celeste7.ai.
CelesteOS data is processed by Supabase Inc. (US region). International data transfer is governed by Standard Contractual Clauses (EU SCCs for EU customers) and the UK International Data Transfer Addendum (for UK customers). All data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher.
Backups follow Supabase Pro-tier defaults: point-in-time recovery with a seven-day rolling window. Production secrets and signing keys are held outside the application database.
A signed Data Processing Agreement (DPA) listing all sub-processors is available on request to contact@celeste7.ai before pilot signature. EU-region residency, where data must remain inside the EU, is available on request and provisioned on a per-tenant basis (Supabase EU region).
For the full disclosure of categories processed, legal bases, retention periods, and your statutory rights, see the privacy policy.
CelesteOS produces audit evidence aligned with the following codes and resolutions:
It runs alongside your existing PMS and its class approvals. We do not replace your DNV, LR, BV, or ABS Type Approved system. We index it, search it, and seal its outputs.
This is deliberate. Adding CelesteOS does not require re-certifying your PMS, re-training your engineers on a new platform, or migrating any data. Your existing approvals remain intact.