Rivoyage

Every passenger accounted for,
before every departure.

A digital platform for European river-cruise operators: a safety-critical live passenger manifest, return deadlines with escalation, and pre-departure reconciliation — plus itinerary and onboard information in the passenger app.

Live manifest

Who is aboard, who is ashore — folded from an append-only event log that doubles as the audit trail. Offline-tolerant steward scanning with idempotent replay.

Signed travel passes

Ed25519-signed QR credentials with zero personal data in the code, verifiable at the gangway without a network round-trip.

Return deadlines & red flags

All-aboard times drive automatic reminders, overdue escalation and a single red-flag queue — including no-shows and muster misses.

Bookings, claimed securely

Passengers link externally purchased bookings via one-time codes to the booking's registered contact. Notifications meet the EU 30-minute delay-information rule out of the box.

For operators & partners

Rivoyage complements your booking channels — it doesn't replace them. Catalogue data stays yours; the platform adds the operational safety layer at the gangway and on board. We're inviting operators to pilot it on a single ship.

Demo environment. This instance runs on demonstration data — sample itineraries on the Rhine, Danube, Seine, Douro and Rhône — and resets periodically. Nothing here is a real sailing. Try the demo console →

For developers

The full REST contract is published at /openapi.yaml (OpenAPI 3). Public discovery starts at GET /v1/voyages; service health at /healthz.