The record only matters if it's yours.

Your yacht is her own world

Every vessel's information is scoped to that vessel inside the database itself, using row-level security, which is enabled on every table we hold. It is the database deciding what you can see, not the screen you happen to be on.

The same boundary applies to the assistant. When someone asks KŌDŌ a question, it answers from that yacht's record and nothing else.

Access follows the person, not the password

A deckhand, a chief engineer, a captain, a management company, an owner and a charter guest each see a different slice of the same record. A guest sees the trip. An owner sees the oversight and the money. Crew see their department's work.

Personal documents belong to the person. Passports and identity documents stay private to the crew member who uploaded them unless they choose to share them, and that choice is theirs to reverse.

Encrypted, and hosted on AWS

Everything is encrypted in transit and at rest, on managed AWS infrastructure. We publish our subprocessors rather than burying them, and a data processing agreement is available for management companies that need one on file.

Never used to train a model

Your yacht's record is never used to train an AI model, ours or anyone else's, and it never feeds another vessel's assistant.

Answering a question does send the relevant passages to our AI providers for that single request, under agreements that forbid training on them. Those providers are named in the privacy policy. We would rather tell you that plainly than claim nothing ever leaves the building.

When the signal drops

Work that cannot wait keeps going. Task completions, fault reports, engine-room rounds, drills and the statutory record books queue on the device and sync the moment there is a connection again, stamped with the time the crew actually did the work, not the time the boat found signal.

Screens already loaded stay readable from the last sync. Full offline browsing of every screen is still being built, and we would rather tell you exactly where that line is than have you discover it in a bay with no coverage.

Yours to take, at any time

A complete export of the vessel's record is one action away, at no charge, in a format you can read without us. Crew can separately export their own personal record, including their sea time, because that belongs to them and follows them to the next boat.

There is no hostage clause. Leaving KŌDŌ should cost you nothing but the decision.

Honest about what we are

KŌDŌ is a young company, founder-led. The security fundamentals were built in from the start rather than bolted on for a questionnaire, but we do not yet carry the audit badges a large vendor would show you.

If you need to understand how something works before you trust it with the yacht, ask and we will show you properly, including the parts that are still being built.