Security at the gangway.

No one boards until they’re cleared. The search rules follow the ISPS level you set.

The iPad welcome screen at the gangway, with the active security level shown in the top corner and buttons for Visitor In, Visitor Out and crew sign in and out.
iPad · the welcome screen, with the level in force

You control each ISPS level.

You decide what happens at Levels 1, 2 and 3, from automatic check-in to a mandatory search of every visitor. Raise the active level the moment port risk or the threat changes.

Core
The admin security level page. Level 1 Normal is active with its search threshold set to search every 20 visitors, and switches for contact details, ID verification, the search notice and the restricted step. Level 2 Heightened sits below it, set to search every 5 visitors.
Admin · what each level means for this vessel

Level 1 · Normal

Routine security measures. One visitor in twenty is held for a search.

Level 2 · Heightened

Additional measures in force. One in five, and check-in holds until a crew member clears it.

Level 3 · Exceptional

Probable or imminent threat. Every visitor is held and searched before boarding.

A typical setup. Each level’s search frequency, ID checks and restricted access are yours to define in the admin. Change the active level and every crew phone hears it, instantly. What the Code itself asks for is set out in the ISPS Code explained.

Nobody boards until they are cleared.

The ISPS security notice on the iPad, naming the vessel, stating the security level in force, and that all persons seeking to board may be required to present identification and submit to search.
iPad · the notice, before anything else
The iPad host selection screen asking who are you visiting, with a card per head of department showing photo, rank, department and whether they are on board or ashore.
iPad · heads of department, on board or ashore
The iPad check-in screen reading Security Search Required, with a crew PIN field, a Verify PIN button, and a Call for Assistance button for when no crew member is at the gangway.What reaches the crew member’s phone at the same moment: a WhatsApp message saying a visitor security search has been triggered on the Gangway iPad, and the Muster Mate alert with the visitor’s name, company, host and the iPad to go to.
iPad · the hold, and the alert it sends to a crew phone
The iPad review screen before check-in completes, showing the visitor name and company, the head of department they are visiting, and Searched by Marcus Williams, Bosun.
iPad · searched by, with the crew member named
The admin visitor board listing current visitors with company, host, whether they were searched and their last activity, and offboarded visitors with departure times below.
Admin · the visitor board, and the visitors who have left
The guest fields page in the admin: the field the boards group by (Party), the fields shown under a guest’s name, and the fields kept on the record only, this vessel’s being Nationality, Passport expiry and Joining port.
Admin · what a guest record holds, and what you add to it

The check-in, in the order a visitor meets it. And what happens for guests.

The vessel is named, the level in force is stated, and the visitor is told they may be asked for identification and to submit to search. Access is granted at the Master’s discretion, and the screen says so before a single field is filled in.

Heads of department are listed with photo, rank, and whether they are aboard or ashore. The host’s phone gets the arrival with the visitor’s name and photo. The visit is filed under the host who took it.

The kiosk holds the check-in and alerts the right crew member by push or WhatsApp, with name and photo. A 4-digit PIN, set in the admin, clears the hold. If nobody is at the gangway, the visitor can call for assistance from the screen.

The crew member signs as search officer and records the ID they verified: passport, driving licence, government, company or work ID. Who searched, when, and the outcome, on the visitor’s record. Agreements are signed on the iPad before boarding and kept with it.

Company, host and whether a search was carried out, per visitor, with the ones who have left below. It exports as a PDF: visitor, came in, left, searched by, and both signatures.

The owner’s party do not go through visitor sign-in, an agreement or a photo. They carry a name, a cabin, a date of birth and a document, and they are counted on the muster roster like anyone else aboard.

Add the fields your flag or port actually asks for: nationality, passport expiry, joining port. Or import the whole manifest from a spreadsheet.

And email, for the office. The admins who opt in get a note when a search is triggered or completed, an agreement is signed, a flagged visitor appears, or someone is still aboard at day’s end.

Core What you need at the gangway

The vessel owns its data.

UK and EU GDPR

The vessel is the data controller. Muster App Ltd is the processor.

UK data residency

Crew and visitor data is stored and processed in AWS’s London region.

Encrypted in transit and at rest

TLS 1.3 in transit, AES-256 at rest. Photos and IDs stored encrypted.

SOC 2 aligned controls

Access control, audit logging and change management modelled on the SOC 2 framework.

You control retention

Keep records as long as you need. Delete any visitor whenever you want.

Right to erasure

If a visitor asks to be forgotten, wipe their record, photo and agreement in the admin.

The detail is in the privacy policy.

Try it with your crew.

Visitor check-in is on every plan.

14-day free trial. Refund policy