Nautilus

16 domains in detail

Each domain below is an independently deployable microservice with its own Postgres database. Each publishes domain events to the Quanta bus and subscribes to events from the domains it depends on. None of them share schemas.

Where a feature is not in Phase 1, the phase is called out explicitly.

Domain 1 — Identity & Guest Profile

The single source of truth for who a guest is, across every domain.

  • Universal guest record. One identity per guest across folio, POS, gangway, muster, dining, spa, telehealth, and signage. Loyalty (tier, points, enrollment), preferences, dietary, accessibility, and complaint history live on the record, not in per-module silos.
  • Identity capture. Passport / MRZ scan, biometric photo, document verification.
  • Travel companions, groups, cabin-mate linkage.
  • Relationship graph. Typed, consent-tagged. Family-on-board view, returning-guest "shared history" surfaced to consenting crew and guests.
  • Voyage journal. Guest-curated photo-and-note timeline. Selective post-cruise sharing.
  • Trust principles. Verified-only social surfaces, no third-party advertising on identity-bound surfaces, no algorithmic feed in social.
  • Designed from scratch, inspired by four pillars from Relate-360: Connection Mapping, Relationship Discovery, Story Sharing, Authentic Identity.
  • Identity & access management via Zitadel (OIDC / OAuth2).
  • Privacy. DSR endpoints (access / rectify / erase / port / restrict / object). Per-category retention. Crypto-erasure for non-deletable stores. Per-tenant region pinning.

Domain 2 — Reservation & Check-in

CRS-agnostic, retrofit-friendly, offline-ready.

  • CRS integration. Versonix Seaware as the first-class adapter. Pluggable adapter contract for Infor Cruise and others.
  • Pre-cruise online check-in from web or mobile app.
  • Pier offline check-in — full check-in workflow with no connectivity to the ship.
  • Onboard check-in — crew-assisted plus self-service.
  • Cabin assignment with upgrades, special needs, group blocks.
  • Board-card issuance. RFID, NFC, or mobile QR.
  • Immigration / health / customs questionnaires.

Domain 3 — Onboard Accounts & Billing

A real-time guest folio, multi-currency, vendor-agnostic on payments.

  • Real-time folio. Every consumption event posts immediately. No batch reconciliation at end of cruise.
  • Fully cashless ship.
  • Package plans with real-time consumption posting.
  • Onboard credit — promotional, loyalty, service-recovery.
  • Multi-currency with live FX and per-currency cashbook.
  • Vendor-agnostic payment-processor adapter. Stripe reference adapter; Adyen adapter on demand. No SDK lock-in.
  • Embark-authorization → incremental auths → end-of-cruise capture. Network tokens + account updater so cards never expire mid-cruise.
  • Chargeback evidence pack auto-assembled from folio lines, cabin location timeline, and recording / transcript metadata.
  • PCI DSS Level 1 tokenization — no raw card data in SPMS.
  • Predictive spend alerts (Phase 4) via Quanta — early-warning when a guest's spend velocity diverges from norm.

Domain 4 — Point of Sale

The same codebase on every form factor. Offline by default.

  • Device-independent browser PWA — terminal, tablet, phone, iTV, kiosk.
  • Offline POS with local queue. Auto-post on reconnect.
  • Allergen / dietary surfacing at point-of-order, sourced from Domain 1.
  • Kitchen Display System integration.
  • Guest-initiated ordering from cabin iTV, mobile, or poolside.
  • Self-service kiosks.
  • EMV + contactless + QR payments.
  • Voice ordering (Phase 4) via Quanta + CallCraft. Guest dials a number, AI takes the order, posts to folio.

Domain 5 — Gangway & Access Control

Commodity hardware. Fully offline. SOLAS-compliant.

  • Real-time embark / disembark tracking for guests, crew, and visitors.
  • Commodity Android tablets with RFID / NFC / QR readers — no proprietary scanner hardware.
  • Offline gangway mode with local queue.
  • Tender boat handling.
  • Manning control — rule-based crew shore-leave with violation escalation.
  • Live headcount dashboard for the bridge and emergency-response.
  • SOLAS compliance + ENOAD submissions.
  • EU-LISA-compatible interface.
  • Heimdall anomaly detection on access patterns.

Domain 6 — Safety & Muster

Functions completely offline. Required to.

  • Muster list management.
  • Mobile mustering — crew scans guest cards on tablets.
  • Real-time muster progress dashboard.
  • Fully offline muster capability. This is non-negotiable; muster cannot depend on shore connectivity.
  • Fire drill scheduling with scan-attendance.
  • Medical module — patient record on card-tap, medication inventory, incident logging, integrated with Domain 16 telehealth.
  • STCW certification tracking for crew.
  • AI-guided emergency announcements + mustering instructions (Phase 4) via Quanta + CallCraft over the ConnectOne PA/GA tier.

Domain 7 — Dining & Restaurant

Unified across fine-dining, buffet, casual, and room service.

  • Table reservations across every venue.
  • Floor-plan visual drag-and-drop assignment.
  • Pre-cruise dining reservations from mobile and web.
  • Recipe management with allergens.
  • Time- and venue-based menu scheduling.
  • Waiter-tablet integration with KDS.
  • Cover forecasting from historical data (Phase 4 feature uses Quanta-driven forecasts).
  • Live signage feed — change a menu, every restaurant menu board on the ship updates within seconds.

Domain 8 — Shore Excursions & Activities

Catalog, inventory, waitlists, and AI recommendations.

  • Tour catalog — port-of-call shore excursions, onboard activities, fitness classes.
  • Inventory + oversell + waitlists.
  • Pre-cruise + onboard booking + self-service kiosks.
  • AI tour recommendations (Phase 4) via Quanta — personalized to the guest's profile, history, and prior activity on the cruise.
  • Voice booking via CallCraft — "I want the snorkel tour in Cozumel."
  • Manifest generation for tour operators.
  • Vendor management with quality feedback loop.
  • Live signage feed — excursion availability and weather cancellations propagate to signage in real time.

Domain 9 — Spa & Wellness

Resource-aware booking, integrated with the wellness profile.

  • Resource-aware booking — room + therapist + equipment all reserved as a unit.
  • Pre-cruise booking import.
  • Wellness profile — treatment history, contraindications, allergens.
  • Revenue tracking integrated with Domain 3 onboard accounts.
  • Therapist scheduling.

Domain 10 — Crew, HR & Payroll

Maritime-grade. ILO-compliant. STCW-aware.

  • Full crew lifecycle — recruit, onboard, deploy, transfer, offboard.
  • Maritime payroll — multi-currency, allotments, cross-flag-state handling.
  • ILO working-hour monitoring with violation escalation.
  • STCW + certification expiry tracking with auto-reminder.
  • Crew accommodation management.
  • Recruitment-agency portal integration.
  • eLearning.
  • Crew mobile app integrated with Domain 14 CrewApp comms.

Domain 11 — Materials & Supply Chain

Real-time inventory. AI-driven forecasting. Fleet-wide visibility.

  • Ship inventory — F&B, retail, hotel, technical.
  • Real-time consumption posted from Domain 4 POS events.
  • AI demand forecasting (Phase 4+) via Quanta.
  • Auto-reorder PO generation.
  • Vendor catalogs.
  • EOQ + min/max calculations.
  • Ship ↔ HQ procurement visibility. Fleet-wide spend dashboard for HQ procurement teams.
  • Receiving module.
  • Waste tracking (regulatory + sustainability).

Domain 12 — Fleet Management & HQ Intelligence

Live fleet operations. Event-stream sync. Not batch.

  • Live fleet-wide KPI dashboard — occupancy, RevPax, ancillary spend, in-progress muster, gangway counts.
  • Event-stream sync. HQ sees ship data as it happens, with replay-on-reconnect for vessels with degraded connectivity.
  • Centralized config push — pricing, menus, packages, housekeeping rotas.
  • Voyage / itinerary management.
  • Fleet maintenance.
  • Financial consolidation with GL export.
  • Regulatory compliance dashboard — SOLAS, MARPOL, STCW, ENOAD.
  • Quanta-driven anomaly detection across the fleet — revenue, inventory, crew, content.

Domain 13 — Quanta AI Services (differentiator)

The reason Nautilus exists. AI is a fabric, not a feature.

  • 24/7 multilingual AI Concierge across mobile, iTV, kiosk, voice. Same brain, every surface.
  • Natural-language booking — "Book the spa for tomorrow at 2."
  • Personalized recommendations for shorex, dining, spa, retail.
  • Predictive spend alerts + offers based on folio velocity.
  • Operational anomaly detection — revenue, inventory, crew shore-leave, content safety.
  • Voice-first service requests. Guest dials cabin extension, AI answers, takes the order, posts to POS.
  • Multi-modal identity correlation — voice, text, behavior all tied to one guest record.
  • Post-cruise AI engagement — voyage journal recap, return-cruise recommendations.

Underneath: NATS JetStream + Quanta agent contract (AGENT_MESSAGES / AGENT_RESPONSES streams), tenant-isolated via cross-account JetStream sourcing. Inference is performed by individual agents — CallCraft for voice, Heimdall's DeBERTa service for content analysis, plus external models where they fit. The fabric is what makes them pervasive.

Domain 14 — Unified Communications (ConnectOne + CallCraft)

A full Cloud PBX in the box, extended for ship deployment, with AI-voice as a native participant.

ConnectOne Cloud PBX — full-featured, cruise-extended

  • Virtual receptionists, ring groups, advanced call forwarding.
  • Call recording with retention policies.
  • E911 with Kari's Law + dynamic routing.
  • RoboAgent spam filter.
  • Hot desking.
  • TLS / SRTP encryption.
  • NIST SP 800-171 compliance.

Maritime specialization

  • Cabin-as-extension — cabin SIP endpoint + paired mobile + iTV all register against one extension.
  • 4,000+ extensions per vessel (Princess Lodges / Westmark benchmark).
  • Folio-bound billing — telephony charges flow into Domain 3 in real time.
  • PA/GA tiered announcements — ship-wide, decks, venues, with priority overrides for emergency.
  • Fleet-wide federation.
  • Accessibility handsets — TTY, amplified, visual-alert.
  • Parent ↔ childcare devices.
  • Satellite-aware codecs — quality adapts to VSAT / Starlink conditions.
  • Offline PBX — calls within the vessel keep working when the uplink is down.

CrewApp

Role-based voice + push-to-talk + chat on commodity smartphones. Replaces DECT fleets (proven on Cunard Queen Anne).

GuestApp

Passenger voice / video / messaging over ship WiFi. Guest-to-guest video calling.

Omnichannel federation

SMS / Viber / Telegram / iMessage / WhatsApp folded into a single guest-identity thread. The crew sees one conversation; the guest gets to use the channel they prefer.

CallCraft AI-voice

AI agents that join calls and rooms via the Quanta agent contract. Use cases:

  • AI Notes — call summaries on every call.
  • Voice ordering — guest dials, AI takes the order, posts to folio.
  • Concierge intents — natural-language booking and information lookup.
  • AI-guided emergency mustering.

Domain 15 — Mobile, Cabin TV & Digital Signage

One React PWA codebase. Five form factors. Live everywhere.

Mobile

White-label native iOS / Android with a shared React Native codebase.

Cabin iTV — first-class platform

The same React PWA, smart-TV form factor. Specifically:

  • Live linear TV (HLS / DASH unicast), VOD library, music / radio.
  • Daily program, port-of-call dossier, live ship position, voyage tracker, dress code, interactive deck-plan wayfinding.
  • In-cabin folio review. Room-service ordering. Dining / spa / excursion booking. Crew quick-call shortcuts.
  • iTV is a video-call endpoint — guest ↔ guest, guest ↔ crew, telehealth video to the medical center.
  • Cabin GRMS integration — lighting + scenes + HVAC + drapes + DND / Make-Up-Room + wake-up sequences + mood scenes.
  • Mandatory safety video gating wired to Domain 6 muster.
  • Accessibility profiles.
  • COPPA-tier kids profile enforced through Heimdall SafeSpace.

Fleet-wide digital signage (powered by extended signsync)

Built on the existing NT Connect signsync platform, extended for cruise:

  • Restaurant menu boards live from Domain 7.
  • Venue wait-time / availability boards.
  • Activity boards from Domain 8.
  • Excursion availability boards with live inventory + waitlist + weather cancellations.
  • Gangway boards.
  • Daily-program signs.
  • Interactive wayfinding kiosks.
  • Ship-data overlays.
  • Emergency override synced to ConnectOne PA/GA.
  • Quanta-prioritized promo slots.
  • Audience-aware zone tagging — child-zone signage routed through Heimdall SafeSpace.
  • Multi-language rotation.
  • Per-screen heartbeat monitoring.

Domain 16 — Telehealth & Location Intelligence

Telehealth is core, not optional. Location intelligence doubles as revenue intelligence.

  • Guest-initiated video consultations from mobile or iTV.
  • Shore-side specialty consults via VSAT / Starlink with bandwidth-adaptive codecs.
  • Pre-public-space health screening.
  • Symptom triage chatbot (Quanta) routing low-acuity to self-care, mid to telehealth, high to physical exam at the medical center.
  • Medical record on card-tap.
  • Medication inventory.
  • Crew telehealth — occupational, mental, routine.
  • BLE wearable + gateway opt-in location services (guest consent required).
  • Anonymized contact tracing.
  • Hotspot identification.
  • Anonymized occupancy heatmaps — safety + revenue intelligence.
  • Quarantine workflow integration with PBX (room-only outbound), room-service, and access control.

See architecture → See roadmap → See tech stack →