Industries · Government & Registries

AI for European maritime authorities and registries.

The AI Act runs the clock across Europe, EMSA sets the tone for maritime data, and Malta and the Isle of Man are competing on how they handle the technology: the artifacts an authority or a registry needs are the same in each capital, and they are the ones an auditor asks to see.

The annual report goes to Parliament with your name in it. The board pack arrives monthly, the ministerial clock runs in days, and the right to information reaches the drafts in the building. Somewhere between those deadlines, staff found the new tools: a board paper summarised here, a residents' reply drafted there, a chat history holding content your records system has never seen.

The record so far

221obligations

tracked across 25 jurisdictions

  • Every founding document reviewed by the legally trained founder before delivery.

  • Documents usually within two business days.

  • Training certificates independently verifiable at southernsky.ai/verify.

Start Here

Read your organisation's position in about five minutes. Twenty plain questions in, four readings back: the kinds of AI risk as they reach your organisation, the frameworks that already apply to you, the cost of leaving that use unmanaged, and the moves that matter most, ranked from the top.

Get your baseline

Where this sits for you

The pressures in your world

The audit offices have already named the pattern across government, adoption running ahead of governance, and the frameworks have arrived with your organisation in scope: use registers, risk assessments, mandatory training, records of the AI-touched outputs. The mandates assume depth your office fills with one person wearing four hats. There is a version of this where the office meets the mandate with evidence, the training register fills with verified certificates, and the next audit finds an orderly file. It starts with knowing your position.

  1. The AI Act clocks now run in the ministry

    EU

    Under the EU AI Act, the European Union's AI law, the Article 4 AI literacy duty has applied to organisations deploying AI since 2 February 2025 with no public-sector carve-out, the Article 50 transparency obligations have applied since 2 August 2026, and the high-risk AI system duties, which reach a maritime authority when AI is used in essential public services, law enforcement or administration of justice, apply from 2 December 2027 under the EU's AI omnibus (Regulation (EU) 2026/1744, in force since 27 July 2026). The clocks are running against every European maritime authority now.

  2. Article 27: the fundamental rights impact assessment

    EU

    For high-risk AI in public services, Article 27 of the AI Act requires a fundamental rights impact assessment before first use, covering purpose, affected persons, risks of harm and human oversight measures. A maritime authority using AI for essential public services carries that assessment as an operating artifact, not a compliance one-off.

  3. EMSA sets the tone for maritime data

    EU

    The European Maritime Safety Agency, the EU's maritime safety authority, publishes on maritime digitalisation, AI use in monitoring and the CISE, the EU's Common Information Sharing Environment for maritime surveillance. National authorities read those publications as the operating baseline their own programs will be measured against.

  4. UK: the Playbook is now the reference standard

    EU

    The UK Government's AI Playbook, first published February 2025 with an updated version in October 2025, sets ten principles for public sector AI use including meaningful human control, transparency of AI-generated content and clear governance responsibilities. UK maritime authorities read the Playbook as the settled reference, not a discussion document.

  5. UK: the NAO found a plan, not yet the practice

    EU

    The UK's National Audit Office, its public spending auditor, reported in March 2024 that adoption of AI across government departments is at an early stage and that governance for AI is still being developed, while noting the state of readiness varies significantly across departments. That gap is the one an authority now closes with a written position, a use register and a review rule.

  6. Malta: the register competes on how it handles the technology

    EU

    Malta, an EU member with one of Europe's largest ship registries, positions the registry through its Maltese Maritime Forum on innovation and digital services, and the AI Act's clocks reach Valletta on the same dates as every other European capital.

  7. Isle of Man: a Crown Dependency running its own AI programme

    EU

    The Isle of Man, a Crown Dependency running its own ship registry, published Innovate Man: An AI Ecosystem in 2024 covering government adoption, an AI Council and workforce programs, so the flag now competes partly on the discipline of how its administration handles the technology.

  8. A department's obligations, a staff of dozens

    Annual reports tabled in Parliament, audit committees, risk registers and a legislated strategy cycle all sit with a lean office, and each obligation carries a named accountable officer with little delegable depth beneath them. The rest of this list is that fact, repeated in different uniforms.

  9. The ministerial drum rarely slows

    Correspondence with statutory clocks, estimates briefs and monthly board packs make reporting the highest-volume drafting surface in the organisation. That makes it the first place staff reach for AI, and the last place an unchecked error survives: a fabricated figure in a tabled document is a career event.

Documented Work

From the Log Book

AI Training

3 role-based workshop days, designed from a 12-department audit · 18 people certified, from maintenance and marine to finance and the executive team · Every participant left with a working AI setup and a reusable Skill built on a real task from their own role · Weeks later, reported publicly by the client: the team using AI more, sharing wins, and a real shift in the day to day

Eighteen people, ten departments, one shared standard for how AI gets used across the organisation.

A twelve-department audit produced three role-based workshop days that certified eighteen people across ten departments, with the CHART quality method and the data rule embedded across the team and every certificate carrying a public verification page.

Read full engagement
AI Training

One-day executive foundation session, delivered one-on-one, designed around a tightly controlled corporate IT environment where every tool runs in the browser · A monthly management accounting and insurer reporting workflow, sixteen reports each month, run end to end through the CHART quality method and captured as a reusable skill · A take-home toolkit and a short explainer video, so everything built on the day stays usable after it

A regulated insurance business, and AI capability built one executive at a time.

A one-day, one-on-one foundation session with a senior executive in the marine insurance sector: a governed AI platform with a commercial data agreement behind it, a working environment built from the executive's own context, and a monthly reporting workflow of sixteen insurer reports run end to end and captured as a reusable skill.

Read full engagement

The Opportunity

What AI is already doing

The AI Act's staggered dates now run against every European maritime authority, EMSA sets a visible tone on maritime data, and the flags at Malta and the Isle of Man are competing partly on how their administrations handle the technology. The artifacts an authority or a registry needs are the same in each capital: a written position, a use register, a fundamental rights impact assessment where the use is high-risk, and a review rule that names the human on the file.

Under a written position, AI does defined work across an authority's inbox, a registry's application desk and an inspectorate's file room, each task with a named human check. The same document is what an auditor, a supervising authority and a member of the public expect to see when they ask who signed the decision.

Ministerial correspondence drafts

AI drafts a first reply to a ministerial correspondence item inside its statutory clock, which gets a start on the five-day deadline, and the accountable officer reviews it against the file before it is signed and sent.

Board-pack assembly

AI assembles the monthly board pack from the program leads' sections into one document, which takes load off the highest-volume drafting surface, and a person checks the figures against the source before it goes to the board.

Use-register maintenance

AI helps compile and keep the AI use-case register the mandate requires, each entry with its accountable owner, which produces the artifact the auditor asks for, and the governance lead confirms it before the audit and risk committee sees it.

RTI search support

AI helps locate and summarise correspondence for a right-to-information request across the mailboxes and the records system, which shortens the search, and a person verifies the results against the record before release.

Estimates and question-time briefs

AI drafts estimates and question-time briefs from the underlying material, which gets the brief moving, and the officer checks each fact against the source before it is relied on.

These are the workflows the prompt library and the training stand up, under the standard the documents set.

Where to start

Where to start, and where it leads.

  1. Baseline

    See what AI could do for your organisation. The AI Baseline Report takes twenty questions and about five minutes, and reads back the use cases returning hours in organisations like yours, the rules that already apply to you, and the moves that matter most, ranked from the top.

  2. Training day

    The whole office to one standard on tool use, prohibited inputs and where the records live, with certificates verifiable at southernsky.ai/verify for the training register.

  3. Governance Essentials

    The written position: AI use policy, approved-tools register, training pathway, risk read mapped to the framework that applies to you.

  4. Blueprint

    The organisation-wide build where the mandate covers each unit: inventory, register, assessments, checkpoints, review cycle, done with you.

Kristina Agustin, Founder and Principal of Southern Sky AI

Written from inside your world

Kristina Agustin

Founder & Principal Digital Navigator, Southern Sky AI

20+ years in international superyacht and maritime operations. Legally trained (LLB, Graduate Diploma of Legal Practice). AI educator and consultant. ATSE Elevate Scholar 2026.

About Southern Sky AI

Questions

Questions we hear

For a non-EU registry the Act does not apply directly, though EU offices, EU clients and EU-flagged interactions create touchpoints that deserve mapping. For an EU flag such as Malta, the public-authority provisions apply on the omnibus timetable, with the fundamental-rights assessment duty attaching to high-risk deployments from December 2027. In every case the internal question is identical: staff draft in AI tools today, the register's product is documentary integrity, and a written position covers the gap, while any legal question on the Act's application belongs with qualified counsel.

Start with where you stand.

The AI Baseline Report reads your position in about five minutes, and your answers pre-fill everything that follows.

Run the Baseline

Already know where you stand? Governance Essentials puts your position in writing inside 30 days.