Industry Focus

Superyacht Shoreside

Our industry is built on exceptionalism. AI adoption demands the same.

The information flowing through your business is among the most sensitive in any industry. Most of it is now touching AI.

Ownership structures, charter guest communications, crew medical records, financial data — each category carries governance obligations, most currently unmanaged.

Data Exposure

The information flowing through a superyacht shoreside business is among the most sensitive in any sector.

Most of it is now touching AI.

High Sensitivity Low AI Exposure
High Sensitivity High AI Exposure
Lower Risk Zone
Lower Governance Priority Zone
← Less AI interaction  ·  More AI interaction →

Select any point to explore its data category, governance priority, and GDPR classification.

Govern Immediately
Governance Required
Oversight Advised
Lower Governance Priority
The Two Problems

Regulation and Separation

Regulatory Exposure

Where GDPR Changes the Stakes

Several data categories common to shoreside operations constitute Article 9 special category data — the highest protection tier. Crew medical records, biometric documents, and health information embedded in guest communications all qualify.

Processing this data through AI tools without a documented lawful basis creates legal exposure. Cross-jurisdictional transfers — EU data through US-hosted platforms — require transfer mechanisms most businesses do not have.

Operational Separation

The Silo Problem

Certain data categories must not only be protected — they must be operationally separated. Crew medical records cannot be accessible to the same systems handling charter guest profiles. UBO documentation should not flow through the same AI environment as vendor contracts.

Most shoreside businesses have never mapped these boundaries. The first step is making the exposure landscape visible.

Structured Direction

What Structured Adoption Looks Like

Compass AI Blueprint maps your specific exposure landscape. It documents which data categories require governance, where operational siloing is legally necessary, and what AI tool use requires a documented lawful basis before it continues.

The output is a formal Blueprint — a decision-ready reference point for leadership, available in a secure client portal. Whether you continue into Navigator or not, the documentation remains yours.

This practice is built on 20+ years inside superyacht and maritime operations — from crew to senior management, contract oversight, and governance. We understand what moves through a shoreside business.

Who This Suits

Who This Approach Suits

Yacht Management Companies

Handling owner data, crew records, and charter operations across jurisdictions. The oversight gap is widest here.

Shipyards & Refit Specialists

Technical documentation, subcontractor data, and project records increasingly processed through AI tools without documented boundaries.

Charter Brokers & Agencies

Guest personal data — including health and dietary information — flowing through CRM and communication platforms with AI features enabled by default.

Marine Surveyors & Naval Architects

Survey reports, classification records, and inspection data touching AI summarisation tools. Retention obligations conflict with privacy rights.

Crew Agencies & Training Providers

Crew medical records, biometric documents, and employment data at scale. Article 9 exposure is concentrated here.

Family Offices with Yacht Interests

UBO structures, financial records, and cross-entity data requiring formal separation and documented AI oversight.

Begin the Conversation

Review detailed materials outlining scope, structure, and investment — independently, at your own pace.