Both the paper Oil Record Book and an approved electronic one are legal under MARPOL Annex I. The amendments in IMO resolution MEPC.314(74), in force since 1 October 2020, added the electronic record book as a lawful alternative, with the guidelines in MEPC.312(74) setting the conditions. So this is not a choice between a compliant option and a non-compliant one. It is a choice between two media that have to satisfy the same regulation in different ways, and they handle some of those requirements very differently.

The honest comparison is regulation by regulation, not feature by feature. The requirements are fixed by MARPOL Annex I and the MEPC.312(74) guidelines; what varies is how well each medium meets them under the conditions of an actual ship and an actual inspection. The points below take each requirement in turn.

The paper book needs no approval; it is the default form MARPOL has always required. The electronic book is accepted only after the ship’s flag Administration approves the system, under the MEPC.314(74) amendments. Class societies support that approval with type approval against the framework, for example DNV Type Approval Programme No. 1-433.20, and new ships also have to meet the IACS cyber requirements UR E26 and E27 for vessels contracted for construction on or after 1 July 2024.

So the electronic route carries an approval step the paper route does not. That is the one place paper is simpler. It is also the only one, and the approval is a one-time gate rather than a daily cost.

Signatures: a manual check versus a structural guarantee

MARPOL Annex I requires the officer in charge to sign each completed operation, and the Master to sign each completed page, under Reg.17 for Part I and Reg.36 for Part II. On paper this is a duty the crew has to remember and an inspector has to verify by hand, page by page, and a missing signature is invisible until someone finds it.

An electronic system can make the signature a structural property instead of a habit. ShipORB binds an ECDSA P-256 signature to each entry and refuses to close a book while any page that holds entries is still unsigned by the Master, where a page is a fixed 25-entry block matching the paper form’s lines per page. The duty does not change; what changes is that the system enforces it rather than trusting it, so the inspector’s signature check is already guaranteed before they run it.

Corrections: a struck line versus a linked amendment

Annex I sets out how to correct a paper entry: strike the error with a single line so it stays legible, initial it, and make the correct entry. The original must remain readable, because the point is that corrections are visible, not hidden. This works, but it leaves the inspector to judge whether a struck line is an honest fix or the start of a cover-up, and the paper gives no further evidence either way.

The electronic equivalent keeps the visibility and removes the ambiguity. A correction is a new amendment entry linked to the original; nothing is overwritten, and both are shown together. Because every entry is part of a hash chain, the system can also prove that neither the original nor the amendment was touched after the fact, which is the assurance the struck-and-initialled line was reaching for but could never fully give.

Integrity: trust versus proof

This is the requirement where the two media are furthest apart. A paper book’s integrity rests on the inspector’s eye and the crew’s honesty. There is no way to prove a paper entry was not back-dated if the handwriting matches, and falsified Oil Record Books have been the basis of pollution prosecutions, including cases under the United States Act to Prevent Pollution from Ships. Paper records what was written; it does not record when, or whether it was changed.

An electronic system can record exactly that. ShipORB chains each entry to the one before it with a SHA-256 hash, so any change to a stored entry breaks every hash after it, and the verification check reports the first entry where the stored bytes no longer match. The result is that integrity moves from something asserted to something computed: an inspector re-runs the check and gets a definite answer, not an impression. That single shift is the strongest argument for the electronic form.

Inspection: page-turning versus filtering

A PSC inspection of a paper book is slow manual work: paging through entries, checking each for a signature, and cross-referencing months of records against the oily-water separator hours, the oil content meter, and the sludge tank levels, all under time pressure. The medium does not help; it just holds the data.

An electronic inspection runs on a LAN device on the vessel, fully offline, as MEPC.312(74) requires. The officer filters to a date range or an operation code in seconds, opens any entry to see its full Created, Reviewed, Verified trail with times and identities, re-runs the integrity check, and exports an IMO-format PDF for any range with a per-page verification stamp. The same checks are made; they are just faster and more definite, and the exported copy can itself be re-verified later.

Retention and continuity: a shelf versus a chain

MARPOL Annex I requires the book to stay on board and be kept for three years after the last entry. For paper that means storing physical books and hoping none are lost or damaged across that span, which routinely covers more than one book. Continuity between a closed book and its successor rests on the books simply being kept together.

An electronic system holds the full retained record in an encrypted on-vessel database and links each closed book to the next with a continuity hash, so the chain a surveyor verifies runs unbroken across every book the vessel has kept. A backup protects against hardware failure, which is part of the MEPC.312(74) requirement, not an extra. The three-year obligation is the same; the electronic form is harder to lose and easier to prove complete.

Where paper still has the edge

Paper has two genuine advantages worth stating plainly. It needs no approval and no hardware, so a vessel can keep a paper book with nothing but the form and a pen. And it is the universal fallback: if an electronic system is unavailable, the crew switches to paper immediately, records the time of the switch, and enters the paper records into the electronic system once it is restored. An electronic ORB does not remove the paper fallback; it sits alongside it.

That fallback is the reason the choice is not all-or-nothing. The electronic book carries the day-to-day record with integrity paper cannot match, and paper remains the backstop for the hours a system might be down. For most of the requirements, signatures, corrections, integrity, inspection, retention, the electronic form meets the regulation more reliably; for the approval step and the absolute-fallback case, paper is simpler. The compliance page maps each requirement to how ShipORB satisfies it, and the MEPC.312(74) explainer covers the guidelines in full.