Regulation sets the pace
Welcome to the first issue of our technology newsfeed for the maritime industry. Each month we go through what actually shipped, what got mandated and what quietly stopped being supported, across cruise, ferry and offshore.
This month, regulation moved faster than product launches: the Cyber Resilience Act and the Entry/Exit System both tightened in September, while vendors focused on adding AI to systems cruise lines already use. Our takeaway: know what software runs on your ships, and check when it stops being supported.
NIST just moved the goalposts on face recognition
August 2026Biometrics
The latest benchmark results show the top algorithms, including IDEMIA, NEC, SenseTime and Youverse, now perform almost identically on standard tests like mugshot matching. The accuracy race is basically over.
So what’s next? The real differentiator is how these systems handle the messy stuff: bad lighting, off-angle shots, webcam quality, and consistent results across different age groups and demographics.
If you’re evaluating a face recognition vendor for your operations, don’t just ask for the accuracy number. Ask how it performs in your actual conditions.
Sources: NIST, Biometric Update
Otalio: from challenger to Product of the Year finalist
August 2026Property management
Five years ago, Otalio was the new name in shipboard property management. Today it is on the shortlist for Seatrade Cruise Product of the Year.
The Hamburg-based company is one of three finalists with its Shipboard Passenger Management System, alongside MarineXchange’s MXP365 and Zeero Group’s biofuel technology. Winners will be announced on 16 September at Seatrade Cruise Med in Las Palmas. One detail stands out: Oracle Hospitality, Otalio’s main competitor, is a principal sponsor of the ceremony.
The shortlist follows real wins at sea. After MSC Cruises and Explora Journeys, Norwegian Cruise Line Holdings is now moving to Otalio across all three of its brands:
- Norwegian Aqua (April 2025)
- Oceania Allura (July 2025)
- Seven Seas Mariner (September 2025)
- Norwegian Luna (March 2026)
- Seven Seas Voyager (May 2026)
Sources: Seatrade Cruise News, Otalio, MySQL case study
EES after 6 September: the safety valve is gone, but not everywhere
September 2026Border control
On 6 September, the EU’s Entry/Exit System lost its summer safety valve. Until then, border officers could pause fingerprint and face scans when queues grew too long. They needed it: according to Airports Council International, waits reached up to five hours in July. IATA says a passport check that used to take 20–25 seconds now takes about 90. Even so, nine Schengen countries are still not running full checks, and Brussels has informally accepted this without setting a new deadline. Spain is the exception and runs the system in full.
For maritime, the picture is mixed. At Dover, only coach passengers and freight drivers go through full EES checks, and pre-registration kiosks were not expected before September. For cruise lines, one rule helps: passengers on round trips from UK ports are generally exempt from registration at Schengen ports of call. The lesson for operators is simple. The faster and cleaner passenger data is captured before the border, the shorter the queue at it. That is exactly why the industry is pushing for wider pre-registration.
Sources: Euronews, Euro Weekly News, The Local
The CRA is live. Here’s what it means for onboard software
September 2026Cybersecurity
Since 11 September, the EU Cyber Resilience Act has required software and hardware makers to report actively exploited vulnerabilities and severe incidents: an early warning within 24 hours, a full notification within 72 hours, and a final report within 14 days of a fix. The rule covers products already on the EU market, not just new releases. Reports go through ENISA’s Single Reporting Platform, which went live the same day, and at launch it offered no API. Even a fully automated monitoring pipeline ends with someone filling in a web form.
For suppliers of onboard systems, this adds a new layer on top of IACS UR E26 and E27. The triggers are different. E26/E27 come through class approval for ships contracted from July 2024. The CRA applies because a product is sold in the EU, whatever the ship’s age. But the core work is the same: know every component in your software, monitor it continuously, and have a clear path from “we found a problem” to “the customer has a fix”. In practice, that means:
- an up-to-date SBOM for every product version running on board,
- a named owner who decides within hours whether an issue must be reported,
- an ENISA platform account set up before the first incident, not during it,
- a way to deliver patches to ships at sea, not only at the next port call.
The Commission has published practical guidance for manufacturers, and the full CRA requirements follow in December 2027. The 24-hour clock is already running. Not sure whether your onboard systems are in scope? We are happy to walk through it with you.
Sources: European Commission, ENISA, Freshfields
Three new cruise brands pick Versonix Seaware as it moves into AI
August 2026Reservation systems
Versonix’s Seaware reservation platform has added three cruise brands in four months, as the company builds AI tools into the system.
StarDream Cruises went live in May, The Ritz-Carlton Yacht Collection signed in June, and Atlas Ocean Voyages followed in August, ahead of its first expedition sailing yacht due in 2028. At the same time, Versonix is developing three AI products that lines can adopt step by step: revenue management with real-time demand forecasting, analytics you can query in plain language, and a conversational booking assistant. For cruise lines, the reservation system is turning from a booking database into a pricing and sales engine.
Sources: Versonix, Seatrade Cruise News
Two end-of-support dates, and a faster link to sea
September 2026DevOps
Two platforms common in shipboard edge setups are reaching end of life. Kubernetes 1.34 stops getting patches on 27 October 2026, now that 1.37 is out. AWS IoT Greengrass V1 lost support on 1 June 2026, and new deployments should use V2. Ships tend to be updated less often than shore systems, so older versions stay on board longer than anyone plans. If either still runs on your vessels, it no longer receives security fixes. Under the EU Cyber Resilience Act, which now requires vulnerabilities to be reported within 24 hours, that is a risk worth closing.
The good news is that updating ships is getting easier. Low-orbit satellite links now give many vessels 100–200 Mbps with latency under 50 ms, and fleets increasingly treat the ship as an edge site managed from shore. In one example, maritime IT provider NexusOcean manages eight vessels from a single console, setting systems up before departure and updating firmware without downtime. The architecture that works: ships run on their own when the link drops and sync with shore when it is back. Patching at the next port call is no longer the only option.
Sources: Kubernetes, Scale Computing
The magnetic stripe is on its way out, on land and at sea
September 2026Access control
Hotels are moving on from magstripe keycards. According to lock maker Honeywell Onity, many hospitality groups now require properties to switch to RFID keycards by late 2026. More rules follow through 2027: MIFARE Ultralight C or stronger for new builds, and a phase-out of the older MIFARE Classic chip. Payments are heading the same way. Mastercard no longer requires the stripe on new cards in Europe, stops issuing striped cards worldwide from 2029, and expects them gone by 2033.
For cruise lines, this matters because one card does many jobs: cabin key, boarding pass and onboard charge account. Ships that still rely on magstripe for any of these will find it harder each year to source compatible locks, encoders and readers. The upgrade is not just new card stock. Locks, card printers with RFID encoders, gangway readers and the PMS that issues the credentials all have to speak the same language. Planning it as one project, not four, saves time and avoids cards that open the door but fail at the bar.
Sources: Honeywell, FinTech Futures
A radar that tells the crew what the ship will do next
August 2026Offshore
On an offshore wind service vessel, every technician transfer to a turbine starts with a go/no-go call. Dutch company NextOcean wants to take the guesswork out of it. It will install its WavePredictor motion radar on ESVAGT NJORD, a service operations vessel working at the Dudgeon wind farm in the UK North Sea. The system combines radar and software to predict the vessel’s movements in real time, giving the officer on watch a clearer picture before deciding whether a transfer is safe.
“On an SOV, the crew makes dozens of go/no-go calls a day,” says NextOcean CEO Karel Roozen. The promise is twofold: safer transfers, and more workable days when technicians can actually reach the turbines. ESVAGT, a Danish operator with more than 40 offshore support vessels, is betting that data can support crew judgement without replacing it.
Sources: Digital Ship, Offshore Magazine
Carnival brings digital casinos to its entire fleet
June 2026Onboard revenue
Carnival Cruise Line has completed the rollout of Konami’s SYNKROS casino management system across all 29 of its ships. It is the second Carnival Corporation brand to adopt the platform after Holland America Line, bringing the total to 40 casinos at sea. Guests now get personalised rewards and offers, plus cashless play linked directly to their onboard account.
That last point is the interesting one. Onboard revenue systems no longer work alone: casino, bars, spa and shops all feed the same guest folio in the property management system. Every new system that touches guest spending adds one more integration to build, test and maintain across the fleet. Carnival Corporation says further rollouts across its brands are planned.
Sources: CruiseMapper
Two new frontier models, one clear message: AI now does the work, not just the chat
September 2026Artificial intelligence
Anthropic has released Claude Fable 5.1 and Mythos 5.1, and OpenAI has released GPT-6 Astra. Both launches put the emphasis on the same two areas where earlier models were weakest: scientific research and computer use.
Computer use is the part that will reach ordinary businesses first: models that fill in forms, update records and test software on their own. For anyone running software on ships, that matters. Long, unattended agent runs over a low-bandwidth link have been hard to justify, and more reliable models are starting to change that calculation.