Built to be trusted with your fleet.

The Bolina website and application are hosted on Vercel, which delivers the product over a global, automatically-scaling edge network with DDoS protection and managed TLS.

Application data is stored in a managed EU-region database with encrypted object storage for uploaded documents. Infrastructure is provisioned through trusted, SOC 2-compliant cloud providers.

All traffic is encrypted in transit using TLS 1.2+. Data is encrypted at rest using AES-256, including database contents, backups, and uploaded files.

Customer data is stored and processed within the European Economic Area. Where a sub-processor operates outside the EEA, transfers are covered by Standard Contractual Clauses or an adequacy decision.

Bolina supports role-based access control, so owners, managers, and crew each see only what their role permits. Internally, access to production systems is restricted to authorised personnel, granted on a least-privilege basis, and protected with mandatory multi-factor authentication.

Databases are backed up automatically with point-in-time recovery. Backups are encrypted and stored in the EEA. We maintain a disaster-recovery plan with defined recovery objectives and test restores periodically.

Bolina Marine acts as a data controller for account data and a data processor for the operational data you enter. We honour data subject rights (access, rectification, erasure, portability), keep a record of processing activities, and sign Data Processing Agreements with customers on request.

Read our Privacy Policy for the full detail.

We are building toward formal certification as we scale:

• SOC 2 Type II — target audit window 2026
• ISO/IEC 27001 — certification targeted for 2027

Dates are targets and may change. For current documentation or a security questionnaire, contact contact@bolinamarine.com.