Launching Q1 2027. Join the waitlist for early access.
14 CFR Part 5 · Safety Management

Safety / SMS — 14 CFR Part 5 with the 5×5 risk matrix

ASAP / Hazard / SIRS reports, anonymous reporter pattern, 5×5 risk matrix, FOQA CSV ingestion, finding closure, corrective-action tracking.

What you get

Reports — ASAP / HAZARD / SIRS

Three report kinds with distinct workflows. ASAP confidentiality is enforced — reporter identity is hidden until manager unlocks it with a recorded justification.

5×5 risk matrix

Likelihood × severity scoring with auto-tiered NEGLIGIBLE / MINOR / MAJOR / HAZARDOUS / CATASTROPHIC. Heat-map view shows risk concentration.

FOQA CSV ingestion

Drop a CSV from CEFA, GE FOQA, or Honeywell — one row per event becomes a HAZARD report with auto-categorization. Trends roll into the risk matrix.

Findings + corrective actions

Per-finding tracking with assigned-to + due-date. Closure requires evidence URL + sign-off. Late findings escalate to leadership.

Anonymous reporter pattern

ASAP reports default to anonymous. The reporter_user_id field is encrypted; manager unlock fires an audit event with a justification string.

Audit-ready closure

Every state transition (NEW → TRIAGED → IN_REVIEW → CLOSED) writes an audit row. The /app/inspection mode shows the safety log filtered for any time window.

FAQ

How is reporter anonymity enforced for ASAP?

The reporter user ID is stored encrypted at rest. The platform exposes only "Submitted by [Anonymous]" until a manager runs the reveal mutation, which captures their justification + writes an audit event. Reveals are themselves visible in the audit log.

Does FOQA ingestion handle CEFA / GE / Honeywell formats?

Yes — the CSV parser supports header-row variants from the three major FOQA platforms. Column names normalized to event_type, flight_number, tail_number, event_date, severity, details. Each row becomes a HAZARD report.

What's the 5×5 risk matrix?

FAA Part 5 SMS framework — 5 likelihood levels × 5 severity levels, color-coded. Hazards plot onto the matrix; risk concentration tells the safety officer where to focus.

How do findings + corrective actions work?

Each finding has an assignee + due date + closure status. Closure requires uploading evidence (R2 URL) + manager signoff. Late findings auto-escalate via email.

Can I export the safety log for a FAA Part 5 audit?

Yes — full CSV export including every state transition, every reveal event, every finding closure. Filterable by date range, kind, severity.

Who uses this

Other features

Be first to see it on real data.

Launching Q1 2027 — join the waitlist for early access.