
The twelve questions an AI use policy has to answer
July 17, 2026
What an insurer, auditor or client reads for in an AI use policy: twelve questions that test any draft, template-started or written from scratch, before someone asks to see it.
Industries · Passenger Vessels
The DSM Certificate runs five years, but the system runs on your own paper between audits, the mid-term visit and the annual self-assessment, and 38.3 million domestic sea passengers travelled in 2024, most of them on river ferries and island runs. What AI is already doing across operations like yours, and the safest way to start.
The season sets your calendar and the SMS sets your evenings, and AI has arrived across the business in the middle of both: a supervisor polishing an incident report in ChatGPT, marketing drafting the campaign with it, the booking platform answering guests about refunds through an AI agent you never configured. Each use makes a busy day easier. This page sets out what that means for a passenger vessel operator: the pressures, what the tools can do for you, and the first step.
Prefer to talk it through first? .
2,300+
DCV inspections in AMSA's 2025-26 plan, with a focused campaign on passenger vessel safety.
71%
of tourism operators reporting AI already in use across parts of the business.
15-30%
OTA commission on every booking before processing and cancellation costs.
Where this sits for you
Those same uses form a pattern without an owner: guest records moving through tools that were never procured, safety-adjacent documents drafted by systems that have never stood on your deck, and a brand that carries the story if one of them gets it wrong. You already run the discipline this needs. Your safety management system names who checks what before the vessel leaves the berth, and AI governance applies the same discipline to a new hazard class, so the productivity your teams found stays and the practice becomes reviewable.
The Merchant Shipping (Vessels in Commercial Use for Sport or Pleasure) Regulations 2025 came into force on 12 December 2025, giving legal effect to a single Sport or Pleasure Vessel Code in place of the Yellow, Blue, Red and Intended Pleasure Vessel codes, phased in from new vessels first, with existing vessels transitioning at their next renewal examination or within three years. The MCA, the UK's maritime safety regulator, is bringing the whole small commercial trade through that transition now, and transitions are when the paperwork gets rewritten.
The 2022 safety-standards regulations ended grandfather rights for older domestic passenger vessels, carrying recommendations from the Thames Safety Inquiry into the 1989 Marchioness disaster into damage stability, liferaft and lifejacket capacity and fire detection requirements, biting at the first Passenger Certificate renewal survey after 28 December 2024, with a documented risk-assessment route for exemption. The overhaul is a documentation event before it is a steelwork event.
On 22 August 2020 the RIB Seadogz struck a navigation buoy in Southampton Water at 38.4 knots and fifteen-year-old passenger Emily Lewis died. The skipper was acquitted of manslaughter yet convicted, with the owner, on merchant shipping offences, both receiving suspended prison sentences, and the MAIB, the UK's marine accident investigator, recommended that all UK operators of small commercial high-speed craft review their risk assessments against the voluntary code.
The MAIB's current material stresses drills and dynamic risk assessment done in a controlled manner, and signals that its future reports will move past having a risk assessment toward whether anyone is managing the risk. Risk assessments, drill records and training files are the primary evidence it reads after an accident.
The MCA Enforcement Unit's 2024 report records five prosecutions, including suspended imprisonment and an obstruction charge for failing to provide documentation to surveyors, so documentation failures are themselves charged offences, and the enforcement record arrives on an annual clock.
The Digital Markets, Competition and Consumers Act 2024 gave the CMA, the UK's competition and consumer regulator, direct fining powers of up to 10 percent of global turnover for unfair commercial practices from April 2025, with fake reviews explicitly banned. Whatever answers your guests, answers under that regime.
Your World
The DSM cycle and AI literacy
UKThe DSM Certificate runs five years, with an MCA audit at mid-term and an annual self-assessment between, and the certificate is withheld if the self-assessment does not arrive.
The booking stack speaks for you
FareHarbor serves UK boat and tour operators from its global base inside Booking Holdings, with Rezdy, Checkfront, Bókun and UK-grown Beyonk competing in the same trade, and the platform agents answer your guests in your name, with the CMA's new consumer regime standing behind whatever they say.
The Opportunity
At the ferry tier the deployment is public: Stena Line runs an AI chatbot for UK customers, Direct Ferries has put ferry search inside ChatGPT across more than 4,000 routes, and UK-based vendors market AI navigation and risk systems to ferry operators. Below that tier AI arrives the way it arrives everywhere, through the booking stack and the office rather than through a decision: platform agents answering guests about refunds, inclusions and weather policy from live availability, crews drafting review replies and campaign copy in public tools, supervisors polishing incident reports before they enter the record.
The UK asks for none of this by statute. There is no AI act; government policy runs five principles through the regulators you already answer to, with UK GDPR over passenger and marketing data, the ICO, the UK's data protection regulator, holding the operative AI guidance, and its statutory code of practice on AI and automated decision-making in progress. What endures is evidentiary: the risk assessment the MAIB reads, the self-assessment the MCA reads, and the refund promise your booking agent makes read under consumer law with turnover-percentage penalties behind it. The workflows stay; a named person checks what reaches a guest, the crew or the record.
Marketing and reviews
Crews draft campaign copy and guest-review replies in ChatGPT and Canva, turning an evening job into a short one, and a named person reads each post before it goes out in the operator's name.
Guest answers on the booking stack
Platform agents such as FareHarbor Agent and Rezdy assistants answer guests about refunds, inclusions and weather policy from live availability, so the register names who owns and checks what those agents say.
Incident reports and toolbox notes
Supervisors polish incident reports and toolbox-talk notes with a chatbot, and FareHarbor's own survey lists SOPs, agreements and training materials among operator uses, so a named person verifies the wording before it reaches crew or the regulator.
Grant and funding writing
Owners draft grant applications and funding submissions with AI, and the operator confirms the figures and the claims before lodging.
Dynamic pricing
Rezdy's pricing engine proposes fares against demand, and a person signs the rate card before it goes live.
These are the workflows the prompt library and training stand up, under the standard the AI use policy, approved-tools register and verification checkpoints set.
Where to start
Nine departments to one shared standard in a day, with verified certificates.
The organisational read in about five minutes, four readings back.
The working start across the departments: the AI use policy, approved-tools register and verification checkpoints drafted for adoption inside your organisation, with a prompt library that starts the first governed workflow, 90 days of team education for every department in the client portal, a recorded briefing, a 30-minute walkthrough call and 30 days of email support. USD $690 founding, then USD $990.
The readiness review, risk classification and policy framework for the multi-department operator.
The relationship that holds as tools and rules move between seasons.
Documented Work

3 role-based workshop days, designed from a 12-department audit · 18 people certified, from maintenance and marine to finance and the executive team · Every participant left with a working AI setup and a reusable Skill built on a real task from their own role · Weeks later, reported publicly by the client: the team using AI more, sharing wins, and a real shift in the day to day
A twelve-department audit produced three role-based workshop days that certified eighteen people across ten departments, with the CHART quality method and the data rule embedded across the team and every certificate carrying a public verification page.
Read full engagement
500 staff · 22-vessel harbour fleet · 38 active systems · 9 departments
Eighteen to twenty hours of structured interviews across 13 stakeholders surfaced what the systems could not show: one team member losing 40% of her working week to manual data entry, and the same pattern of invisible reconciliation burden repeating across all nine departments.
Read full engagementReading

2026
The regulators, the obligations, and the moves that matter first.

2026
The EU AI Act and adjacent regimes reaching EU marine operators.

July 17, 2026
What an insurer, auditor or client reads for in an AI use policy: twelve questions that test any draft, template-started or written from scratch, before someone asks to see it.

Written from inside your world
Kristina Agustin
Founder & Principal Digital Navigator, Southern Sky AI
20+ years in international superyacht and maritime operations. Legally trained (LLB, Graduate Diploma of Legal Practice). AI educator and consultant. ATSE Elevate Scholar 2026.
Start Here
Read your position in about five minutes. Twenty plain questions in, four readings back: the AI risks as they reach your business, the regulations that already apply to you, the cost of leaving that use unmanaged, and the moves that matter most, ranked from the top.
Get your baselineQuestions
The AI Baseline Report reads your position in about five minutes, and your answers pre-fill everything that follows.
Run the Baseline