For Samoa's border agencies
TravelPass
One online arrival and departure declaration.
Each border agency sees only the parts
it is allowed to see.
False Cognitive Technologies · October 2026

False Cognitive Technologies · TravelPass · October 2026
2
Each border agency needs a different part of one record
Customs, Immigration, Health, Agriculture and Tourism all need information about the same traveller, and none should see more than its job requires.
We understand a paper card can be read only where it is
Anyone handling a card sees all of it
We understand totals are counted or keyed by hand
We ask each agency to confirm this and share card volumes
Customs and Immigration
Need passport, travel details and declared items when the traveller reaches the counter.
Agriculture and Fisheries
Need to know who is bringing plants, food or animals, and nothing about anyone else.
Ministry of Health
Needs to know who arrived, on which flight or voyage, and where they are staying, for follow-up in an outbreak.
Tourism, Ports and Airport authorities
Need totals and trends for planning, without names or passport numbers.
False Cognitive Technologies · TravelPass · October 2026
3
Travellers fill in one form and each agency sees its part
A website for travellers and a secure back office for the border agencies, both working from one database.
Travellers
Complete the declaration online before travel, on a phone or computer, with no app to install. One declaration can list a family travelling together.
Customs, Immigration and Health
See the full record and look a traveller up by confirmation number. Only Customs and Immigration may change a record; the officer edit screen is not built yet. Health reads only.
Agriculture, Environment and Police
See a reduced record. Agriculture sees only the declared items in its mandate. Police see travel details without names.
Planning agencies
The Tourism Authority, Ports Authority and Commerce see totals and trends only: arrivals, source markets, carriers and the visitor exit survey.
False Cognitive Technologies · TravelPass · October 2026
4
A declaration reaches the officer in four steps
01
The traveller declares online
Trip type, personal details, travel details and a customs and agriculture declaration. Departing visitors also answer a short exit survey. The declaration saves to the database.
02
The traveller gets an e-Declaration
A confirmation number and QR code appear on screen after submitting. Arriving travellers can also download a PDF copy; the PDF button on the departing and transit forms does not work yet. The traveller can look the declaration up again.
03
The officer opens it at the border
At Faleolo or the wharf, the officer searches the declarations list by confirmation number, name or passport. The QR scanner screen is still being connected to live records.
04
Each agency sees its own view
Officers sign in and see the record at their agency's access level. Automatic routing of flagged declarations to agency dashboards is designed and shown as a demo, but not yet built.
Working today: steps 1 and 2 (PDF for arrivals only), officer search and access levels. Not yet built: QR scanning on live records and routing.
False Cognitive Technologies · TravelPass · October 2026
5
Travellers can declare on a phone, with no app to install
Start or retrieve
Start a declaration, or find one by number or passport.
Trip type
Arriving, departing or in transit; resident or visitor.
Personal details
Names, passport and citizenship, as on the passport.
Customs and agriculture
Plants, animals, currency, goods and restricted items.
False Cognitive Technologies · TravelPass · October 2026
6
Officers start from a dashboard and a look-up screen
Dashboard
Declarations submitted and in draft, today's arrivals, recent declarations and top citizenships. The bell shows each new declaration.
Look-up at the counter
The officer types the confirmation number. In this build the screen checks sample records, and camera decoding is simulated.
Sample data; figures are illustrative. Names are fictitious.
False Cognitive Technologies · TravelPass · October 2026
7
Each agency sees one of five levels of detail
| Level | Agencies in the Samoa build | What they see in the demonstration set-up |
| 1 | Ministry of Customs and Revenue; Immigration | The full record. The only level the server lets change a record; the edit screen is not built yet. |
| 2 | Ministry of Health | The full record, read only, including contacts and accommodation for follow-up in an outbreak. |
| 3 | Agriculture and Fisheries; Natural Resources and Environment | Name, masked passport, no date of birth; flight or voyage, dates and route; mandate and restricted items |
| 4 | Ministry of Police | Names redacted, passport masked, no birth date. Full travel details, including accommodation, and all items. |
| 5 | Tourism Authority; Ports Authority; Commerce, Industry and Labour | Totals and trends only. Individual records are refused, even when an alert is active. |
False Cognitive Technologies · TravelPass · October 2026
8
Agriculture and Police see less of the same declaration
Agriculture and Fisheries, level 3
Name shown; passport masked to the last four digits; date of birth and airline hidden. Contacts, address and other agencies' items are removed.
Ministry of Police, level 4
Name replaced with [REDACTED], passport masked and date of birth hidden. Airline, accommodation and other travel details stay visible.
Sample data; figures are illustrative. The traveller is fictitious. An alert can lift levels 3 and 4 for one traveller or a country of concern.
False Cognitive Technologies · TravelPass · October 2026
9
Arrival trends show traffic by day, carrier and market
Arrival Trends report, last 60 days
Summary totals and daily arrivals by visitors, returning residents and transit, with departures. Sample data; figures are illustrative.
Arrivals by carrier
Each airline's share of arrivals, with sea arrivals counted apart. For the Airport Authority and the Ports Authority.
Busiest weekdays
Average arrivals for each day of the week, to plan staffing at Faleolo and the wharves.
Source markets
Arriving visitors by citizenship, for the Tourism Authority and Immigration.
Items declared
Arrivals declaring produce, animals, currency or restricted items, for Agriculture and Customs.
False Cognitive Technologies · TravelPass · October 2026
10
A visitor exit survey shows stay, spend and islands
Visitor Exit Survey, Tourism Authority view
Totals, purpose of visit and length of stay; islands and spend by country sit below. Sample data; figures are illustrative.
Length of stay
Visitors grouped by days stayed, with average stay for each purpose of visit.
Spending
Average spend for each purpose of visit, with totals and spend per visitor-day above the charts.
Islands visited
Share of visitors who reached Upolu, Savai'i, Manono and Apolima.
Spend by home country
Shown only where at least three visitors from that country answered.
False Cognitive Technologies · TravelPass · October 2026
11
The code limits who sees personal data and logs views
Levels applied on the server
The server removes fields an agency may not see before it sends a record. One production setting bypasses this; see gap 1 next.
Officer and API views logged
Officer views record user, agency, level, time, network address and the alert that applied. API views record that an alert applied.
Alerts are narrow
An alert lifts levels 3 and 4 for one named traveller, or for travellers from countries of concern. Level 5 is never lifted.
Scoped API tokens
Tokens are limited to named permissions and endpoints, rate limited and stored only as a hash.
Named staff accounts
Officers sign in with their own account and role. Sign-ins expire after 12 hours, and production runs over HTTPS only.
Scheduled backups
Hourly, daily, weekly or monthly database backups, each kept for a set number of days.
False Cognitive Technologies · TravelPass · October 2026
12
Five security gaps we close before any real data
| Gap | Risk under today's settings | Our fix |
| 1. Administrator key on the web server | Anyone reaching the back-office addresses, signed in or not, can read full records, create tokens, get backups | Remove the key from the web server, so every request has a named user in the log |
| 2. Token, backup and settings screens | Any officer, even at level 5, can create API tokens, change limits or download a backup, which is unencrypted | Restrict them to system administrators and encrypt backups |
| 3. Look-up by number alone | A confirmation number alone returns the full record, including passport and date of birth | Also require surname and date of birth |
| 4. API tokens without an agency | A token with no agency gets the full record, and its creator can name any agency | Every token carries an agency set by a system administrator |
| 5. Gaps in the audit log | Look-ups, backup downloads and token creation are not logged; a failed log write does not stop access | Log all three, stop access if logging fails, make the audit table write-once |
False Cognitive Technologies · TravelPass · October 2026
13
The form works; scanner, routing and Samoan need building
| Part | Working now | Needed before go-live |
| Traveller form | All three forms save with a number and QR code; PDF for arrivals only; travellers can look a declaration up | PDF for departing and transit; WS- numbers in place of AS-; tala and Samoan law in questions |
| Language and wording | Samoa branding; Samoan text drafted, but only the top banner switches language | Every page on the language switch, with native-speaker review; remove American Samoa wording and links |
| Officer screens and scanner | List, detail view, reports and CSV export; officer search on live records; scanner on sample records | Level 1 edit screen, notes, list export, officer accounts; scanner on live records with camera |
| Routing and alerts | Rules screen and agency dashboards are a design demo; new declarations show in the back-office bell only | Rule engine on live declarations; out-of-hours email or SMS alerts if the agencies want them |
| Flights and ports | Airport, port, carrier, flight, schedule and voyage screens, on sample data with no database | Store them in the database and agree who keeps the lists up to date |
False Cognitive Technologies · TravelPass · October 2026
14
Paper stays as a fallback; Government sets law and hosting
Link to ASYCUDA or airlines?
Not today. Other systems can read declarations through the API at their agency's level, one tested link at a time.
How will travellers know?
We propose notices from airlines, travel agents and the Tourism Authority. The pilot uses test data only.
No declaration on arrival?
Paper cards stay at Faleolo and the wharves for anyone who has not declared online, and for outages.
Legal basis and retention
Government decides. The privacy notice and a deletion schedule for declarations must be set before real data.
Where is the data held?
We propose a server Government chooses, closed to the internet until gaps 1 and 2 close. Backups go to BunnyCDN, a commercial service, today.
Cost, ownership and exit?
Indicative costs are set out in the written proposal. Government owns the data; backups are standard database files it can take away.
False Cognitive Technologies · TravelPass · October 2026
15
Pilot plan: an officer trial on test data within 2 weeks
01
Days 1 to 3
Agree access and wording
Confirm each agency's level, including the Airport Authority
Collect the arrival card wording, thresholds and fines
Name a contact and pilot officers in each agency
Confirm the indicative costs in the written proposal and the training we propose
02
Days 4 to 10
Fix and configure
Close the five security gaps and encrypt backups
Pilot server not reachable from the internet until gaps 1 and 2 are closed
WS- numbers, tala and Samoan law in the form
Scanner on live records; accounts for pilot officers
03
Days 11 to 14
Officer trial and sign-off
Pilot officers look up test declarations at Faleolo and the wharf; we time each look-up
Each agency signs off what its level shows
Security review confirms the five gaps are closed
04
After the pilot
Build, then decide on live use
Gagana Samoa on every page, with review
Routing rules and agency dashboards on live data
Officer edit and account screens
Decision on live use, with paper still accepted
What we ask
Name one contact in each agency, confirm the access levels, share the current arrival card and thresholds, agree where the pilot server sits and how the trial will be judged, and give today's card volumes as a baseline.
Fa'afetai tele lava
One declaration from each traveller, seen by each agency only as far as its role allows.
False Cognitive Technologies · zachary.zemby@falsecognitive.io
One online form
Number and QR code today; PDF for arrivals
Five access levels
Applied by the server; officer and API views logged
Reports for planning
Arrival trends and a visitor exit survey, totals only
Pilot within 2 weeks
Security fixes, then an officer trial on test data