MARPOL Annex I · MEPC.312(74) · IACS UR E26 / E27

Regulatory compliance, verified

ShipORB maps every technical requirement from MARPOL Annex I, MEPC.312(74), and IACS UR E26/E27 to specific features in the platform.

Mapped against MARPOL Annex I Regulation 17 MEPC.312(74) IACS UR E26 / E27 MEPC.1/Circ.736/Rev.2

Three pillars of maritime compliance

ShipORB addresses every regulatory framework that governs electronic Oil Record Books.

MARPOL Annex I

Regulation 17 - Oil Record Book

The foundational international convention requiring every ship of 400 GT and above to maintain an Oil Record Book documenting all machinery space and cargo/ballast operations involving oil.

MEPC.312(74)

Guidelines for Electronic Record Books

The IMO resolution establishing specific requirements for electronic ORBs: tamper-evident records, digital signatures, access control, data backup, and the ability to produce printed copies matching the prescribed format.

IACS UR E26/E27

Maritime Cybersecurity

Unified Requirements from the International Association of Classification Societies mandating cybersecurity measures for onboard systems, including network security, access control, and intrusion detection.

Compliance matrix

How each MEPC.312(74) requirement maps to ShipORB's implementation.

RequirementDescriptionShipORB ImplementationStatus
MEPC.312(74) - Record Integrity
§3.1Tamper-evident recordingSHA-256 hash chain + append-only SQL triggers✓ Full
§3.2Digital signature per entryECDSA P-256 per-officer signatures✓ Full
§3.3Prevent unauthorised modificationImmutable append-only log, RBAC enforcement✓ Full
§3.4Record amendments with audit trailAmendment entries linked to original via hash reference✓ Full
MEPC.312(74) - Access Control & Authentication
§4.1Unique user identificationPer-officer credentials with TOTP 2FA✓ Full
§4.2Role-based accessOfficer → C/E review → Master verification workflow✓ Full
§4.3Master's page-by-page signingDual-auth Master verification per page✓ Full
MEPC.312(74) - Data Management
§5.1Data backup and recoveryAutomated backup to NAS + USB export scripts✓ Full
§5.2Minimum 3-year data retentionSQLite + PostgreSQL with configurable retention✓ Full
§5.3Produce printed copy in prescribed formatIMO-format PDF export on-vessel and shore-side✓ Full
MEPC.312(74) - System Requirements
§6.1Operate in shipboard conditionsOffline-first, runs on ruggedised shipboard hardware✓ Full
§6.2Flag state approval mechanismType approval planned under DNV-CG-0339; no certificate heldPlanned
IACS UR E26/E27 - Cybersecurity
E26 §4Network segmentation & monitoringWazuh SIEM + dedicated VLAN configuration✓ Full
E27 §5Secure communicationsNetbird WireGuard VPN + TLS 1.3 everywhere✓ Full
E27 §6Vulnerability managementAutomated scanning, patching, log rotation✓ Full

How ShipORB implements each requirement

Detailed technical mapping from regulation to code.

1 Tamper-Evident Hash ChainMEPC.312(74) §3.1 - Record integrity

Every ORB entry contains a SHA-256 hash of the previous entry, creating an unbreakable chain. If any entry is modified, all subsequent hashes become invalid, immediately revealing tampering.

  • Go crypto/sha256 library for hash computationship-service
  • SQLite triggers enforce append-only behaviourdatabase
  • Chain verification endpoint for PSC inspectorsapi
2 ECDSA Digital SignaturesMEPC.312(74) §3.2 - Per-entry authentication

Each officer has a unique ECDSA P-256 key pair. When signing an entry, the officer's private key signs the entry hash, producing a cryptographic proof that this specific officer approved this specific record.

  • FIPS 140-3 validated Go Cryptographic Module v1.0.0 (CMVP #5247)ship-service
  • Key pairs generated on-device, private key never leaves vesselsecurity
  • Signature verification in PDF export & dashboardship-core + react
3 Role-Based Entry WorkflowMEPC.312(74) §4.1–4.3 - Access control

The system enforces a three-stage workflow: the responsible officer creates and signs the entry, the Chief Engineer or Chief Mate reviews and countersigns, and the Master provides final verification with dual authentication.

  • State machine: DRAFT → SIGNED → REVIEWED → VERIFIEDship-service
  • TOTP second-factor for all signing operationsauth
4 Offline Operation & Data SyncMEPC.312(74) §6.1 - Shipboard conditions

All functionality operates without internet connectivity. SQLite provides on-vessel storage, and NATS JetStream handles reliable ship-to-shore synchronisation when connectivity returns.

  • SQLite with SQLCipher for the encrypted on-vessel storeship-core
  • NATS JetStream with at-least-once delivery guaranteesync
5 IMO-Format Printed OutputMEPC.312(74) §5.3 - Prescribed format export

PDFs generated in the exact IMO-prescribed Oil Record Book format, including operation codes, item numbers, tank details, and signature blocks. Available from both vessel and shore.

  • PDF generation on-vessel for offline inspectionsship-service
  • USB export via dedicated script for PSCscripts
6 Data Backup & RetentionMEPC.312(74) §5.1–5.2 - Recovery & archival

Automated daily backups to NAS with hash verification on restore. Shore-side PostgreSQL provides long-term retention. Minimum 3-year archival with configurable policies.

  • backup-ship.sh - automated NAS + USB backupscripts
  • restore-ship.sh - hash-verified database restorescripts
7 Maritime CybersecurityIACS UR E26/E27 - Network & system security

Full compliance with IACS Unified Requirements E26 (system resilience) and E27 (onboard communication security) through defence-in-depth architecture.

  • Wazuh SIEM - file integrity monitoring, IDS alertsinfra
  • Netbird WireGuard VPN - encrypted ship-to-shore tunnelinfra
  • Kubernetes NetworkPolicy - pod-level micro-segmentationk8s

Type approval roadmap

The route to a certificate under DNV-CG-0339, and what is finished before it starts. Phase timings are relative to submission, which has not been made.

  1. Completed
    MEPC.312(74) gap analysis

    Every requirement in the resolution traced to a platform feature and recorded as a checklist against DNV-CG-0339.

  2. Completed
    Cryptographic baseline implemented

    The SHA-256 hash chain and the ECDSA P-256 signatures run inside the FIPS 140-3 validated Go Cryptographic Module v1.0.0, CMVP certificate #5247.

  3. Planned Month 1
    Pre-application to DNV

    Software development plan and software requirements specification submitted under DNV-CG-0339, opening a programme of roughly twelve months.

  4. Planned Months 2 to 6
    Design and implementation review

    Software design description, security architecture, source code and test results reviewed by the society.

  5. Planned Months 9 to 10
    Sea trial

    Three months of trial operation on two vessels, following factory acceptance testing.

  6. Planned Months 11 to 12
    Type approval certificate

    Issue of the type approval certificate, which is the precondition for flag state acceptance rather than the acceptance itself.

  7. Planned After certification
    Flag state acceptance

    Acceptance sought from the flag Administrations of the vessels in scope, each of which decides for itself under MEPC.312(74).

Classification society readiness

ShipORB is designed against the type approval requirements these societies publish. It holds no type approval certificate today, and none is described here as issued or in progress.

DNV

Type approval planned

Lloyd's Register

Type approval planned

Bureau Veritas

Type approval planned

ClassNK

Type approval planned

Need a compliance deep-dive?

Our maritime compliance team can walk you through the full regulatory mapping for your flag state.