Security at Bollard Marina

Access controls

• Each person signs in with their own account. You choose who can see your marina.
• Roles limit what people can do. Owners, managers, dockhands and accountants each get only the access their job needs. Dockhands have no billing access.
• On the Fleet plan, permissions are set per harbor, so a person can work in one harbor and not see another.
• Boaters sign in to their own portal and see only their own contract, slip, invoices and documents.

Separation between marinas

Every record in Bollard belongs to a marina. Bollard runs on Supabase Postgres, and row level security in the database checks that on every query, so one marina’s data is separated from every other marina’s at the database level, not only in the app.

Data in transit and at rest

• Connections to the Bollard website and app use encryption (HTTPS).
• Data stored in our database and file storage is encrypted at rest.
• Passwords are stored in protected form, never as plain text.

Payments

Card and bank payments are handled by Stripe. Card and bank details go to Stripe, and we do not store full card numbers or bank account numbers. Stripe’s own security program covers the card and bank data it processes.

Audit log

Bollard keeps an audit log of important actions in your account, such as contract changes, payments and role changes, with who did them and when. Signed contracts carry their own audit record.

Backups

Our database is backed up on a regular schedule so we can restore service after a failure. Backups are encrypted and roll off on a schedule after data is deleted.

Where your data lives

Bollard is hosted and operated in the United States. Our service providers are listed in the Data Processing Addendum.

Your control

You can export your data at any time. After you cancel, your account stays available read-only for 90 days so you can export it. See the Privacy Policy for what we collect and how long we keep it.

Certifications

We do not hold any security certification or audit report today, and we do not claim one. If that changes, we will list it here.

Report a security issue

If you think you have found a vulnerability, email support@bollardmarina.com with the subject “Security” and enough detail to reproduce it. Please do not access other customers’ data or disrupt the service while testing. See the Acceptable Use Policy.