AURORA Ai · Aviation SMS and QMS software From the first report to evidence a regulator can verify.

AURORA Ai is standalone aviation SMS and QMS software that gives airlines and aircraft operators one place for confidential safety and security reporting, mandatory occurrence reporting, bowtie risk assessment, audits and findings, safety performance indicators, management of change and controlled documents. Each person starts the day with one queue of their work across every module, live risk scores give no credit to a barrier whose assurance check has lapsed, and a safety case closes only after independently verified corrective action and separate Safety Manager and Accountable Manager sign-offs.

Email me the brochure, AURORA Ai
Safety managers, quality teams and accountable executivesIndependent productFits your operation as it changes
AURORA Ai safety performance chart with synthetic demonstration data. Unstable approaches reach 6.31 per 1000 sectors against a 4.00 target, inside the alert level 2 zone, with Action required beside an 18-month trend and shaded alert zones from the baseline mean plus one, two and three standard deviations.
Safety performance against its alert levelsDemonstration data · Click to enlarge
In brief

What is AURORA Ai?

AURORA Ai is FlightAtom's aviation SMS and QMS software: one standalone safety and quality management system for airlines and aircraft operators. It covers confidential occurrence reporting with mandatory occurrence report tracking, bowtie risk assessment, audits and findings, safety performance indicators, management of change, controlled documents and crew training readiness. A safety case closes only after independently verified corrective action and sign-off by both the Safety Manager and the Accountable Manager.

Category
Aviation SMS and QMS software
Built for
Safety managers, quality teams and accountable executives
Applied AI
Classifies reports, drafts bowties, action plans and lessons, and answers with cited records; risk scores, event risk classes, indicator alert levels and priorities use fixed rules
Availability
Available · independent product
Fits your operation
As your operation grows or changes, we adapt AURORA Ai to fit, and you approve each change before it goes live.
How it works · AURORA Ai

A lapsed assurance check withdraws a barrier's live credit.

AURORA Ai scores every threat-to-consequence path: prevention barriers lower a threat's likelihood, recovery barriers lower a consequence's severity, and the highest-scoring path sets the exposure. The live score gives a barrier no credit while its assurance check is lapsed or ineffective.

Threats
  • Unstable approach continuedThe approach is not stable at the gate height and the crew continues to land.
  • Landing distance shortfallWeight, tailwind or a shortened runway leave less distance than the landing requires.
  • Contaminated runwayStanding water or ice on the runway reduces braking on the landing roll.
Prevention barriers
  • Stabilized approach gateA go-around policy at the gate height; its assurance check is current and effective.
  • No live creditLanding performance assessmentCrews calculate landing distance before descent; its assurance check is overdue, so it earns no live credit on its threat's paths.
  • Runway condition reportCrews receive the current runway surface condition and braking action before landing.
Top event
Runway excursion on landingAURORA Ai scores every path from each threat through this event to each consequence.
Recovery barriers
  • Runway end safety areaA cleared, graded area beyond the runway end limits damage to an overrunning aircraft.
  • Rescue and firefighting responseAirport rescue services reach the aircraft under a rehearsed emergency plan.
Consequences
  • Aircraft damageHull and landing gear damage once the aircraft leaves the paved surface.
  • Injury to occupantsInjuries during the overrun or the evacuation that follows.
Example bowtie with fictional data. The highlighted barrier's assurance check is overdue, so it earns no credit in the live score; the approved baseline is unchanged.
Inside AURORA Ai

Follow a safety signal to an accountable decision.

Explore the current product interface with demonstration data. Open any screenshot for a closer look.

01 / AURORA Ai

Start the day with Today

One queue for everything assigned to you across the modules, most urgent first, under a brief assembled by rules from live records. Synthetic demonstration data.

AURORA Ai Today view for a safety manager, with synthetic demonstration data. The Aurora brief titled Operations handover, tagged Critical watch and 88% confidence, summarises 12 active signals at a critical watch level above a strip of 9 open occurrences, 2 this month, 5 open risks and 5 high risks, with a Build handover button. Quick actions read Report occurrence, Add action and My actions. Below, the Queue shows For me 40, Delegated and Inbox 38 with module facets and overdue items such as an emergency response plan to read and corrective actions; on the right are critical Signals and a Health grid of registers by urgency.
Start the day with TodayDemonstration data · Click to enlarge
02 / AURORA Ai

Report forms that keep working offline

Offline, a named bird-strike report waits in the outbox and sends once the connection returns, while the next one is written on the same form, which separates safety from security reports. Synthetic demonstration data.

AURORA Ai Report an occurrence form while offline, with synthetic demonstration data. An offline banner runs across the top and the offline outbox is open with one queued report, Bird strike on climb-out, DEM118. A second bird-strike report is being written in a three-step form (What happened, Aviation details, Identity) with title, description and dictation button, type, phase of flight and severity, then event time, registration N103DA, flight DEM207 and location KBOS. A Safety or Security switch sits at the top right, and Cancel, Save as draft and Submit report stay in a sticky bar.
Report forms that keep working offlineDemonstration data · Click to enlarge
03 / AURORA Ai

Mandatory reports tracked to the hour

A runway excursion carries its event risk class (ERC 502) and a confirmed mandatory report, with the 72-hour due time, the recorded notification and the regulator's reference. Synthetic demonstration data.

AURORA Ai occurrence record OCC-2026-0002, Runway excursion during landing rollout, with synthetic demonstration data. Header chips show In progress and ERC 502. The MOR decision step is open: reporter declared Mandatory, office decision Confirmed MOR, notification due 22 Jun 2026 04:25 UTC, regulator notified 20 Jun 2026 and regulator reference DCAA-MOR-0142, with a Suggest with AI button. Internal comments are marked Not visible to the reporter. The facts rail lists type, phase, severity S4 Hazardous and reporter, with Open safety case, Assign training (AI), Publish lesson and one linked action.
Mandatory reports tracked to the hourDemonstration data · Click to enlarge
04 / AURORA Ai

Baseline, current and planned risk

Each assessment shows the approved baseline, the current score and the score its planned controls should reach, with its review date and a decision to continue, continue with conditions or stop. Synthetic demonstration data.

AURORA Ai risk register with synthetic demonstration data. The stat strip shows 7 assessments, 3 top risks, 1 review due and 1 intolerable or stop. Each assessment row shows reviewer, department, next review (one overdue by 12 days), current verdict and score such as Mitigate 3×B, the baseline score such as 3×4 = 12, the planned verdict and score, actions, related cases and findings, a SIRA result such as Improve or Monitor, and a status of Continue or Continue with conditions. Older assessments are marked Legacy.
Baseline, current and planned riskDemonstration data · Click to enlarge
05 / AURORA Ai

Closure only on evidence

A ramp-collision safety case with verified corrective action has the Safety Manager's approval and still needs the Accountable Manager's sign-off before it can close. Synthetic demonstration data.

AURORA Ai Control Centre safety lifecycle with synthetic demonstration data. The case portfolio lists three governed cases. CASE-2026-003, Ramp vehicle collision with parked aircraft, is open at Sign-off, 83 percent along a rail from Classify through Investigate, Root cause, CAPA and Monitor to Closed, with owner, target date and linked occurrence OCC-2026-0003. The Safety Manager has approved and the Accountable Manager is pending, with the note that closure needs an approval from each required management role.
Closure only on evidenceDemonstration data · Click to enlarge
06 / AURORA Ai

An audit programme you can see

Recurring internal and outside audits sit on one calendar, where a missed run and checklist questions that have gone stale are flagged. Synthetic demonstration data.

AURORA Ai audit programme calendar for 2026 with synthetic demonstration data. A risk-based audit plan card sits above five checklists, each with its frequency, item count, owner or outside auditor (Example Audit Partners, Example Ground Handling Ltd), next due date, last run, monthly marks for completed, missed and due runs, stale-item flags and run history. The document control audit is overdue and marked Missed in September.
An audit programme you can seeDemonstration data · Click to enlarge
07 / AURORA Ai

Regulatory change into managed change

For an amended clause of a fictional demonstration rule set, the impact trace lists the linked findings and the audits, occurrence and training item it suggests, each with its reason (here a clause link and shared topics). Synthetic demonstration data.

AURORA Ai record for an amended clause, DOR 125.235 of a fictional demonstration rule set, with synthetic demonstration data. The Assess step shows an impact trace, tagged 90% confidence, listing two findings linked to the clause, two audits in the same framework with shared topics, an occurrence and a training item, each with the reason it was suggested, plus citation chips. The header offers Broadcast announcement, Trace impact (AI) and Mark assessed, and a side card offers Find affected checklists.
Regulatory change into managed changeDemonstration data · Click to enlarge
08 / AURORA Ai

Safety performance against alert levels

Unstable approaches rose to 6.31 per 1000 sectors, past alert level 2 of the indicator's own baseline, so the indicator asks for action. Synthetic demonstration data.

AURORA Ai safety performance indicator SPI-UA, Unstable approaches per 1000 sectors, with synthetic demonstration data. The latest value of 6.31 per 1000 sectors misses its 4.00 target and is at alert level 2, marked Action required and Deteriorating. An 18-month chart shows the values against the target line and shaded alert zones set at the baseline mean plus one, two and three standard deviations. Below are the monthly measurement entry and history, and the side rail shows the definition, the alert-level method and recent periods.
Safety performance against alert levelsDemonstration data · Click to enlarge
09 / AURORA Ai

Evidence a regulator can verify

The public verifier checks a dossier's Ed25519-signed manifest and lifecycle in the browser, and a ZIP chosen on the device matches the signed artifact hash without being uploaded. Synthetic demonstration data.

AURORA Ai public regulator dossier verifier with synthetic demonstration data. It shows Signature and lifecycle integrity valid, guidance to confirm the issuer independently and to retain a lifecycle checkpoint, and a local file check reading File matches the signed artifact for a ZIP bundle. It also shows the manifest and artifact SHA-256 hashes, the Ed25519 key fingerprint, the media type and size, and a one-event signed lifecycle chain.
Evidence a regulator can verifyDemonstration data · Click to enlarge
Capabilities

SMS and QMS work, with the controls built in.

Each process keeps its owner, its evidence and the approvals behind it in one standalone system.

Confidential safety and security reporting

Staff file a report as safety or security, on forms your administrators configure, from an installable app that holds a named report written offline and sends it once the connection returns. Security reports are visible only to people with security access, a report can be filed without linking it to the reporter's account, seeing who filed a named report takes a separate permission, and unfinished reports stay as private drafts.

Mandatory reports and event risk classification

Each report can carry an event risk classification on the ARMS matrix, from the worst credible outcome and the barriers that remained. When the safety office confirms a mandatory occurrence report, AURORA Ai tracks it against a 72-hour window from the event and records when the regulator was notified and its reference. Lessons and case dossiers can be shared de-identified, and a de-identified lesson cannot be published while identifiers remain.

Bowtie risk with no credit for lapsed barriers

A barrier whose assurance check is missing, overdue, expired or ineffective earns no credit in the live risk score, which the register shows beside the approved baseline and the planned score. AURORA Ai scores every threat-to-consequence path in a bowtie risk network, and each assessment ends in a verdict and a decision to continue, continue with conditions or stop. Accepting a risk needs a review date and every approval its policy requires, never from the requester, and is kept in an append-only ledger.

Safety cases that close on evidence

No one signs off a safety case on unverified corrective action. A case cannot reach root cause until its investigation has a summary, a finding and recorded evidence, enter corrective action without a documented root cause, or leave it until someone other than each action's owner and completer verifies it with evidence. Closure then needs an effective monitoring result with at least one recorded observation and sign-off by the Safety Manager and the Accountable Manager as two different people, neither of them the case owner or delegate.

Audits and findings with deadlines that hold

Recurring checklists run from an audit programme calendar that flags missed runs and stale questions, a checklist item that requires evidence cannot record a result without it, and a failed item raises a linked finding. Findings are graded Level 1, Level 2 or Observation with response and closure deadlines; a deadline extension is decided by someone other than the person who asked, and a Level 1 finding cannot be closed by the person responsible for it. Outside auditors submit evidence and sign-off through a short-lived, single-use link, with no account needed.

Safety performance indicators with alert levels

Safety objectives are measured by indicators fed from occurrence reports, event risk classes, findings, overdue corrective actions, training currency, document acknowledgements, equipment or manual entry, as counts or rates per flight hour or sector. Alert levels sit at the baseline mean plus one, two and three standard deviations, or at fixed values, each period is marked on target or at its alert level, and monthly, quarterly and annual reports are produced as PDF.

Evidence a regulator can verify

A regulator can check, without an account, that a dossier is unchanged since the operator signed it and whether it has since been revoked or superseded. Evidence packs leave AURORA Ai as reproducible dossiers with an Ed25519-signed manifest, and the public verification page hashes the file and checks the signature in the regulator's own browser. A scoped workroom lets the regulator raise requests with the operator.

Regulatory change into managed change

Amendments are recorded in the regulation library, and for each change AURORA Ai shows the clause before and after, suggests the findings, audits, risks, occurrences and training items it is likely to affect with a reason for each, and finds the audit checklist questions that cite the clause. One action opens a management-of-change task list from that trace. Formal changes follow a governed run from an approved template, with phase gates, named approval roles and required evidence, and the change owner cannot approve or reject their own gate.

Controlled documents, read and understood

Controlled documents carry one draft at a time, a publish gate and revision comparison, and reach the right people through audience rules by role, department, position, crew rank and fleet. Readers see what changed for them and can take a short comprehension quiz whose answers stay hidden until they pass, while late readers get reminders. AURORA Ai also flags numeric limits that conflict between published documents.

Actions, safety boards and emergency response

Actions from every module sit in one hub with owners, due dates, postponement requests decided by someone other than the requester, and a close-out the assigner verifies. Safety Review Board and safety action group series carry open items forward into the next agenda, invitations download as calendar files, and actions in the minutes become a tracked workflow. Emergency response plans run from an activation console with checklists, call trees, a live elapsed timer and an append-only timeline.

Crew readiness from signed-off records

Readiness is computed from signed-off training, check and medical records against requirements set by rank, fleet and base, with independently approved exemptions. Checks are graded on form-based grade sheets, including competency-based grading against the nine ICAO competencies, and revalidation dates follow the operator's rules. AURORA Ai builds a prioritised recovery plan that never changes a schedule and can suspend a time-bound role assignment when a required qualification lapses.

Applied AI

AI grounded in your own safety records.

AURORA Ai applies AI to reading and drafting: classifying reports, drafting bowties and action plans, and finding the records behind an answer. Risk scores, closure gates and approvals run on rules the application enforces.

Answers and drafts from your records

The AURORA Ai assistant answers from your occurrences, hazards, risks and current published documents, and every citation comes from a record it retrieved, not from the model. It also classifies reports with an ADREP-inspired event code, flight phase and severity, suggests the event risk class and whether a report is mandatory, and drafts bowties, corrective action plans, safety lessons and workflows for the owner to adopt.

A day that starts with one queue

Today brings each person's work from every module into one queue, ordered by due date and split into their own tasks, tasks they delegated and the Assurance Inbox, which ranks work by a fixed rule weighing consequence, deadline, exposure, accountability and staleness. Above it, the Aurora brief and shift handover are assembled by rules from live records, so every item links to a source record and the model only writes the summary.

AI the operator controls

Every AI request passes through one gateway that keeps external model processing off until the operator enables it and can use an approved self-hosted model instead; without one, rules-based fallbacks run. Each call is recorded in an AI audit ledger with the model, prompt and response excerpts, confidence and user, and the operator can switch off the assistant and briefs, corrective-action and bowtie drafting, impact tracing and training advice.

Evaluate AURORA Ai

Make the next step measurable.

Agree a representative sample and a baseline from your current process. These are proposed evaluation measures, not published performance results.

Bring a representative example

An occurrence, risk assessment, and corrective action from the same workflow.

Inspect the complete workflow

Follow ownership, the approval record, and closure evidence.

Compare with your baseline

Action preparation time; overdue actions; completeness of closure evidence.

Questions & answers

Before you book a demo.

Which SMS and QMS processes does AURORA Ai cover?

AURORA Ai covers safety and security occurrence reporting, mandatory occurrence report tracking, event risk classification, hazard and bowtie risk assessment, risk acceptance, investigations, safety cases with gated corrective action and effectiveness monitoring, audit programmes and findings, safety performance indicators, management of change, regulatory change tracing, controlled documents, crew training readiness, actions, safety meetings, emergency response plans, and an equipment and calibration register with a 90-day due-date forecast.

Can AURORA Ai replace our existing SMS tool or spreadsheets?

AURORA Ai is a standalone SMS and QMS, so it runs as the operator's safety and quality system without another FlightAtom product or a separate core system. Historical occurrence reports can be imported from CSV: AURORA Ai suggests a column mapping for the team to confirm, flags issues row by row so they can be fixed, and skips any row that still has an error when the import loads.

Does AURORA Ai support confidential or anonymous safety reporting?

AURORA Ai supports confidential reporting. Staff can submit a report without linking it to their account, and on a named report, seeing who filed it requires a separate reporter-identity permission. Security reports are visible only to people with security access. When a named report is closed, the team can publish closure feedback to the reporter inside AURORA Ai, and the reporter can acknowledge it.

Does AURORA Ai track mandatory occurrence reports?

Yes. The reporter can declare a report mandatory, the safety office records its decision, and AURORA Ai tracks a confirmed mandatory occurrence report against a 72-hour window from the event, showing it as pending, overdue or notified. The team records when the regulator was notified and the regulator's reference; AURORA Ai does not send the notification itself.

Can staff report safety occurrences without an internet connection?

Yes. AURORA Ai installs from the browser as an app. A named report written without a connection is held on the device and sent once, without duplicates, when the connection returns. Report fields also accept voice dictation.

Does AURORA Ai support bowtie risk assessment?

Yes. AURORA Ai builds bowtie risk networks of threats, barriers and consequences and scores every threat-to-consequence path. A barrier loses its credit when its assurance check is missing, overdue, expired or ineffective, so live exposure rises against the approved baseline. The risk register shows the baseline, current and planned scores side by side, and AURORA Ai can draft a bowtie and suggest controls from the hazard and its linked occurrences for the risk owner to review.

Does AURORA Ai track safety performance indicators?

Yes. Safety objectives are measured by indicators fed from occurrence reports, findings, overdue corrective actions, training currency, document acknowledgements, equipment or manual entry, as counts or rates. Each indicator has a target and alert levels set at the baseline mean plus one, two and three standard deviations, or at fixed values, and monthly, quarterly and annual reports are produced as PDF.

How does AURORA Ai support audit evidence?

Checklist items that require evidence cannot record a result without it, failed items raise linked findings, findings link to regulation clauses with response and closure deadlines, and outside auditors can submit evidence and sign-off through a single-use link. Safety cases keep their verification and sign-off records. Evidence packs leave AURORA Ai as reproducible dossiers with an Ed25519-signed manifest, which a regulator can check on a public verification page that hashes the file and verifies the signature in their own browser.

What does AURORA Ai's AI do?

AURORA Ai's AI classifies reports with an ADREP-inspired event code, flight phase and severity, suggests event risk classes and mandatory reporting, drafts bowties, corrective action plans, safety lessons and workflows, summarises the Today brief and shift handover, and answers questions with citations to the operator's own records. Every request passes through one gateway, external model processing stays off until the operator enables it, and each call is recorded in an AI audit ledger.

Does AURORA Ai support single sign-on?

Yes. AURORA Ai supports OpenID Connect single sign-on, SCIM 2.0 user and group provisioning, and built-in authenticator-app multi-factor authentication with step-up for sensitive actions. Time-bound role assignments can be blocked or flagged by separation-of-duties rules, certified in access reviews, and suspended automatically when a required qualification lapses.

What happens to AURORA Ai when our operation grows or changes?

As your fleet, routes, rules or teams change, we adapt AURORA Ai to match, and you approve each change before it goes live.

See AURORA Ai in action

Start with your workflow.

A focused walkthrough, with the people and decisions that matter to your team.

Request a demo