For Samoa's border agencies

TravelPass

One online arrival and departure declaration.
Each border agency sees only the parts
it is allowed to see.

False Cognitive Technologies · October 2026

tp-home-desktop screenshot

False Cognitive Technologies · TravelPass · October 2026

2

Each border agency needs a different part of one record

Customs, Immigration, Health, Agriculture and Tourism all need information about the same traveller, and none should see more than its job requires.

We understand a paper card can be read only where it is

Anyone handling a card sees all of it

We understand totals are counted or keyed by hand

We ask each agency to confirm this and share card volumes

Customs and Immigration

Need passport, travel details and declared items when the traveller reaches the counter.

Agriculture and Fisheries

Need to know who is bringing plants, food or animals, and nothing about anyone else.

Ministry of Health

Needs to know who arrived, on which flight or voyage, and where they are staying, for follow-up in an outbreak.

Tourism, Ports and Airport authorities

Need totals and trends for planning, without names or passport numbers.

False Cognitive Technologies · TravelPass · October 2026

3

Travellers fill in one form and each agency sees its part

A website for travellers and a secure back office for the border agencies, both working from one database.

Travellers

Complete the declaration online before travel, on a phone or computer, with no app to install. One declaration can list a family travelling together.

Customs, Immigration and Health

See the full record and look a traveller up by confirmation number. Only Customs and Immigration may change a record; the officer edit screen is not built yet. Health reads only.

Agriculture, Environment and Police

See a reduced record. Agriculture sees only the declared items in its mandate. Police see travel details without names.

Planning agencies

The Tourism Authority, Ports Authority and Commerce see totals and trends only: arrivals, source markets, carriers and the visitor exit survey.

False Cognitive Technologies · TravelPass · October 2026

4

A declaration reaches the officer in four steps

01

The traveller declares online

Trip type, personal details, travel details and a customs and agriculture declaration. Departing visitors also answer a short exit survey. The declaration saves to the database.

02

The traveller gets an e-Declaration

A confirmation number and QR code appear on screen after submitting. Arriving travellers can also download a PDF copy; the PDF button on the departing and transit forms does not work yet. The traveller can look the declaration up again.

03

The officer opens it at the border

At Faleolo or the wharf, the officer searches the declarations list by confirmation number, name or passport. The QR scanner screen is still being connected to live records.

04

Each agency sees its own view

Officers sign in and see the record at their agency's access level. Automatic routing of flagged declarations to agency dashboards is designed and shown as a demo, but not yet built.

Working today: steps 1 and 2 (PDF for arrivals only), officer search and access levels. Not yet built: QR scanning on live records and routing.

False Cognitive Technologies · TravelPass · October 2026

5

Travellers can declare on a phone, with no app to install

tp-home-mobile screenshot
tp-declaration-mobile screenshot
tp-step-2-mobile screenshot
tp-declaration-customs-mobile screenshot

Start or retrieve

Start a declaration, or find one by number or passport.

Trip type

Arriving, departing or in transit; resident or visitor.

Personal details

Names, passport and citizenship, as on the passport.

Customs and agriculture

Plants, animals, currency, goods and restricted items.

False Cognitive Technologies · TravelPass · October 2026

6

Officers start from a dashboard and a look-up screen

../per-system/assets/tp/tp-dash-crop screenshot
../per-system/assets/tp/tp-scan-crop screenshot

Dashboard

Declarations submitted and in draft, today's arrivals, recent declarations and top citizenships. The bell shows each new declaration.

Look-up at the counter

The officer types the confirmation number. In this build the screen checks sample records, and camera decoding is simulated.

Sample data; figures are illustrative. Names are fictitious.

False Cognitive Technologies · TravelPass · October 2026

7

Each agency sees one of five levels of detail

LevelAgencies in the Samoa buildWhat they see in the demonstration set-up
1Ministry of Customs and Revenue; ImmigrationThe full record. The only level the server lets change a record; the edit screen is not built yet.
2Ministry of HealthThe full record, read only, including contacts and accommodation for follow-up in an outbreak.
3Agriculture and Fisheries; Natural Resources and EnvironmentName, masked passport, no date of birth; flight or voyage, dates and route; mandate and restricted items
4Ministry of PoliceNames redacted, passport masked, no birth date. Full travel details, including accommodation, and all items.
5Tourism Authority; Ports Authority; Commerce, Industry and LabourTotals and trends only. Individual records are refused, even when an alert is active.

False Cognitive Technologies · TravelPass · October 2026

8

Agriculture and Police see less of the same declaration

../per-system/assets/tp/tp-agri-crop screenshot
../per-system/assets/tp/tp-dhs-crop screenshot

Agriculture and Fisheries, level 3

Name shown; passport masked to the last four digits; date of birth and airline hidden. Contacts, address and other agencies' items are removed.

Ministry of Police, level 4

Name replaced with [REDACTED], passport masked and date of birth hidden. Airline, accommodation and other travel details stay visible.

Sample data; figures are illustrative. The traveller is fictitious. An alert can lift levels 3 and 4 for one traveller or a country of concern.

False Cognitive Technologies · TravelPass · October 2026

9

Arrival trends show traffic by day, carrier and market

../per-system/assets/tp/tp-report-trends screenshot

Arrival Trends report, last 60 days

Summary totals and daily arrivals by visitors, returning residents and transit, with departures. Sample data; figures are illustrative.

Arrivals by carrier

Each airline's share of arrivals, with sea arrivals counted apart. For the Airport Authority and the Ports Authority.

Busiest weekdays

Average arrivals for each day of the week, to plan staffing at Faleolo and the wharves.

Source markets

Arriving visitors by citizenship, for the Tourism Authority and Immigration.

Items declared

Arrivals declaring produce, animals, currency or restricted items, for Agriculture and Customs.

False Cognitive Technologies · TravelPass · October 2026

10

A visitor exit survey shows stay, spend and islands

../per-system/assets/tp/tp-report-survey screenshot

Visitor Exit Survey, Tourism Authority view

Totals, purpose of visit and length of stay; islands and spend by country sit below. Sample data; figures are illustrative.

Length of stay

Visitors grouped by days stayed, with average stay for each purpose of visit.

Spending

Average spend for each purpose of visit, with totals and spend per visitor-day above the charts.

Islands visited

Share of visitors who reached Upolu, Savai'i, Manono and Apolima.

Spend by home country

Shown only where at least three visitors from that country answered.

False Cognitive Technologies · TravelPass · October 2026

11

The code limits who sees personal data and logs views

Levels applied on the server

The server removes fields an agency may not see before it sends a record. One production setting bypasses this; see gap 1 next.

Officer and API views logged

Officer views record user, agency, level, time, network address and the alert that applied. API views record that an alert applied.

Alerts are narrow

An alert lifts levels 3 and 4 for one named traveller, or for travellers from countries of concern. Level 5 is never lifted.

Scoped API tokens

Tokens are limited to named permissions and endpoints, rate limited and stored only as a hash.

Named staff accounts

Officers sign in with their own account and role. Sign-ins expire after 12 hours, and production runs over HTTPS only.

Scheduled backups

Hourly, daily, weekly or monthly database backups, each kept for a set number of days.

False Cognitive Technologies · TravelPass · October 2026

12

Five security gaps we close before any real data

GapRisk under today's settingsOur fix
1. Administrator key on the web serverAnyone reaching the back-office addresses, signed in or not, can read full records, create tokens, get backupsRemove the key from the web server, so every request has a named user in the log
2. Token, backup and settings screensAny officer, even at level 5, can create API tokens, change limits or download a backup, which is unencryptedRestrict them to system administrators and encrypt backups
3. Look-up by number aloneA confirmation number alone returns the full record, including passport and date of birthAlso require surname and date of birth
4. API tokens without an agencyA token with no agency gets the full record, and its creator can name any agencyEvery token carries an agency set by a system administrator
5. Gaps in the audit logLook-ups, backup downloads and token creation are not logged; a failed log write does not stop accessLog all three, stop access if logging fails, make the audit table write-once

False Cognitive Technologies · TravelPass · October 2026

13

The form works; scanner, routing and Samoan need building

PartWorking nowNeeded before go-live
Traveller formAll three forms save with a number and QR code; PDF for arrivals only; travellers can look a declaration upPDF for departing and transit; WS- numbers in place of AS-; tala and Samoan law in questions
Language and wordingSamoa branding; Samoan text drafted, but only the top banner switches languageEvery page on the language switch, with native-speaker review; remove American Samoa wording and links
Officer screens and scannerList, detail view, reports and CSV export; officer search on live records; scanner on sample recordsLevel 1 edit screen, notes, list export, officer accounts; scanner on live records with camera
Routing and alertsRules screen and agency dashboards are a design demo; new declarations show in the back-office bell onlyRule engine on live declarations; out-of-hours email or SMS alerts if the agencies want them
Flights and portsAirport, port, carrier, flight, schedule and voyage screens, on sample data with no databaseStore them in the database and agree who keeps the lists up to date

False Cognitive Technologies · TravelPass · October 2026

14

Paper stays as a fallback; Government sets law and hosting

Link to ASYCUDA or airlines?

Not today. Other systems can read declarations through the API at their agency's level, one tested link at a time.

How will travellers know?

We propose notices from airlines, travel agents and the Tourism Authority. The pilot uses test data only.

No declaration on arrival?

Paper cards stay at Faleolo and the wharves for anyone who has not declared online, and for outages.

Legal basis and retention

Government decides. The privacy notice and a deletion schedule for declarations must be set before real data.

Where is the data held?

We propose a server Government chooses, closed to the internet until gaps 1 and 2 close. Backups go to BunnyCDN, a commercial service, today.

Cost, ownership and exit?

Indicative costs are set out in the written proposal. Government owns the data; backups are standard database files it can take away.

False Cognitive Technologies · TravelPass · October 2026

15

Pilot plan: an officer trial on test data within 2 weeks

01

Days 1 to 3

Agree access and wording

Confirm each agency's level, including the Airport Authority

Collect the arrival card wording, thresholds and fines

Name a contact and pilot officers in each agency

Confirm the indicative costs in the written proposal and the training we propose

02

Days 4 to 10

Fix and configure

Close the five security gaps and encrypt backups

Pilot server not reachable from the internet until gaps 1 and 2 are closed

WS- numbers, tala and Samoan law in the form

Scanner on live records; accounts for pilot officers

03

Days 11 to 14

Officer trial and sign-off

Pilot officers look up test declarations at Faleolo and the wharf; we time each look-up

Each agency signs off what its level shows

Security review confirms the five gaps are closed

04

After the pilot

Build, then decide on live use

Gagana Samoa on every page, with review

Routing rules and agency dashboards on live data

Officer edit and account screens

Decision on live use, with paper still accepted

What we ask

Name one contact in each agency, confirm the access levels, share the current arrival card and thresholds, agree where the pilot server sits and how the trial will be judged, and give today's card volumes as a baseline.

Fa'afetai tele lava

One declaration from each traveller, seen by each agency only as far as its role allows.

False Cognitive Technologies · zachary.zemby@falsecognitive.io

One online form

Number and QR code today; PDF for arrivals

Five access levels

Applied by the server; officer and API views logged

Reports for planning

Arrival trends and a visitor exit survey, totals only

Pilot within 2 weeks

Security fixes, then an officer trial on test data

TravelPass · 1 / 16
Speaker notes · slide 1
Talofa lava. TravelPass replaces the paper arrival and departure card with one declaration the traveller completes online before travel. Customs, Immigration, Health, Agriculture and the planning agencies all work from that one record, and the server decides how much of it each agency may see. What you see today is a demonstration build with Samoan branding and sample data. We will be clear about which parts work today, which need building, and which security gaps we close before any real data.