Your Records Stay Yours.Separate, Private, Exportable.
How X3 Maritime protects your company's records, who can see them and which services run it.
Your own workspace
Every company has its own workspace in X3 Maritime's own database. Records are never shared between companies, and every query is limited to your company.
Documents and photos
Files you attach are stored per company in X3 Maritime's own storage, served only to signed-in members of your company.
Drug and alcohol privacy
Test records are visible only to owners, admins and your designated representative (49 CFR 40.321). Everyone else sees only cleared or not cleared. Records can't be deleted before their retention date (49 CFR 40.333).
Every change kept
Each record keeps a history of who changed what and when. Read-only access is available for auditors, port captains and TPOs.
Passwords and sessions
Passwords are stored as salted PBKDF2 hashes. Sessions use secure, HTTP-only cookies. All traffic is encrypted (HTTPS with HSTS).
Payments
Card details go straight to Stripe. We never see or store full card numbers.
Your data is yours
Export everything at any time as a file. If you leave, we keep your records 30 days so you can take them, then delete them.
Who runs the service
Cloudflare (hosting, database, file storage), Stripe (payments), Resend (email), Twilio (texts you opt into), and OpenRouter (the AI behind Ask X3 answers — it receives your question, never your records).
Not an agency
X3 Maritime organizes records and dates. It is not affiliated with the U.S. Coast Guard, OSHA or any agency; qualified people make every determination.
Found a security issue? Email [email protected]. See also our Privacy Policy and Terms.