Live manifest
Who is aboard, who is ashore — folded from an append-only event log that doubles as the audit trail. Offline-tolerant steward scanning with idempotent replay.
Signed travel passes
Ed25519-signed QR credentials with zero personal data in the code, verifiable at the gangway without a network round-trip.
Return deadlines & red flags
All-aboard times drive automatic reminders, overdue escalation and a single red-flag queue — including no-shows and muster misses.
Bookings, claimed securely
Passengers link externally purchased bookings via one-time codes to the booking's registered contact — or with a one-tap emailed sign-in link. Notifications meet the EU 30-minute delay-information rule out of the box.
Two native apps
A passenger app (tours, family travel passes, safety briefing, chat, notifications — offline-first, DE/FR/EN) and a crew app for the gangway: offline pass verification, tour groups, muster with persons-on-board, departure sign-off.
Operations built in
Office console for tour content, passenger chat and pass revocation; audited event log; signing-key rotation that never bricks a dock device; daily database backups.
For operators & partners
Rivoyage complements your booking channels — it doesn't replace them. Catalogue data stays yours; the platform adds the operational safety layer at the gangway and on board. We're inviting operators to pilot it on a single ship.
For developers
The full REST contract is published at
/openapi.yaml (OpenAPI 3) and
browsable interactively at /docs (Swagger UI).
Public discovery starts at GET /v1/voyages;
service health at /healthz.