EASA (European Union Aviation Safety Agency)

The European Union Aviation Safety Agency was established by Regulation (EC) No 1592/2002 of the European Parliament and of the Council, adopted 15 July 2002, and became operational on 28 September 2003 with its headquarters in Cologne, Germany. It succeeded the Joint Aviation Authorities (JAA), a co-operative body formed in 1970 under the auspices of the European Civil Aviation Conference (ECAC), which had produced the Joint Aviation Requirements (JARs) that national civil aviation authorities adopted voluntarily but without a common enforcement mechanism. EASA replaced that voluntary framework with legally binding European Union law, bringing type certification and maintenance organization approvals under a single competent authority from day one.

EASA's current legal foundation is Regulation (EU) 2018/1139 of the European Parliament and of the Council, adopted 4 July 2018 and replacing the earlier Basic Regulation (EC) 216/2008. The 2018 Basic Regulation significantly expanded EASA's mandate beyond its original core of initial airworthiness to include safety oversight of unmanned aircraft systems (UAS), air traffic management and air navigation services (ATM/ANS), and aerodromes — aligning the legal framework with the Single European Sky initiative. EASA currently encompasses 31 Member States: the 27 EU Member States plus Iceland, Liechtenstein, Norway, and Switzerland under EFTA agreements.

EASA issues its rules in a two-tier structure. Implementing Rules (IRs) are adopted by the European Commission — formally Commission Regulations — with EASA as the proposer following a rulemaking process that includes Notice of Proposed Amendment (NPA) and Comment Response Document (CRD) phases. Acceptable Means of Compliance (AMCs) and Guidance Material (GM) are issued directly by EASA as non-binding but practically influential standards. The major implementing regulations relevant to training organizations and operators are: Commission Regulation (EU) 1178/2011 (aircrew licensing — Part-FCL, Part-MED, Part-ARA, Part-ORA); Commission Regulation (EU) 1321/2014 (continuing airworthiness — Part-M, Part-CAMO, Part-145, Part-66, Part-T); Commission Regulation (EU) 965/2012 (air operations — Part-ORO, Part-ARO, Part-CAT, Part-NCC, Part-NCO, Part-SPO); Commission Regulation (EU) 748/2012 (initial airworthiness — Part-21); and Regulation (EU) 376/2014 (occurrence reporting). For UAS, Commission Delegated Regulation (EU) 2019/945 and Commission Implementing Regulation (EU) 2019/947 define the operational categories and rules.

Within the EASA framework, national Civil Aviation Authorities (CAAs) remain the competent authorities that issue certificates and conduct oversight of operators and organizations in their territory. The relationship is one of delegated implementation: EASA sets the standards and audits Member State compliance through Article 85 standardization visits; the CAAs approve ATOs, issue Part-FCL licenses, oversee AOC holders, and conduct ramp inspections. Major national CAAs include the DGAC (Direction Générale de l'Aviation Civile) in France, the LBA (Luftfahrt-Bundesamt) in Germany, ENAC in Italy, AESA in Spain, and the CAA in the Netherlands (ILT). The UK Civil Aviation Authority, while historically aligned with JAA and then EASA standards, formally departed from the EASA system upon Brexit and now operates UK-specific implementing regulations that mirror but diverge from the EU framework.

EASA and the FAA maintain a Bilateral Aviation Safety Agreement (BASA), most recently updated in 2011, which provides mutual recognition frameworks for type certificates, supplemental type certificates, maintenance approvals, and environmental testing. Technical Implementation Procedures (TIPs) under the BASA govern the specific validation pathways. The BASA reduces duplicative certification costs for manufacturers and operators active on both sides of the Atlantic but does not create automatic mutual recognition of airman licenses — license conversion between EASA Part-FCL and FAA certificates requires a separate process.

For EASA Approved Training Organizations (ATOs) and Declared Training Organizations (DTOs), every element of the operation — syllabus structure, instructor qualifications, fleet airworthiness, course records, and quality management — is subject to the implementing rules under Regulation (EU) 1178/2011 and the associated AMC/GM material in Part-ORA. ATOs must demonstrate a functioning quality and safety management system, maintain a Head of Training who meets Part-FCL qualifications, and keep Training and Procedures Manuals that are current and consistent with actual operations. Any change to the ATO's exposition document must be notified to the competent authority, and certain changes require prior approval before implementation. The distinction between which changes are self-declarable and which require approval is itself a compliance discipline — a school that implements an approval-required change under the wrong category generates an ATO finding that can trigger enhanced oversight.

For combined ATO and AOC operators — schools that hold both an ATO certificate and an Air Operator Certificate for commercial charter or aerial work alongside their training activity — the Part-ORO organizational requirements apply in addition to Part-ORA, and the accountable manager must maintain visibility across both regulated entities. The compliance monitoring function required by Part-ORO.GEN.200 must cover all applicable regulatory requirements, not just the ones most recently audited. Schools expanding across EASA Member States face an additional layer of complexity: the ATO certificate is issued by the State in which the principal place of business is located, but operations in another Member State may require notification to the host State's CAA and, depending on scope, a local approval.

Aviatize's compliance and auditing module is built around the EASA regulatory framework. ATO exposition documents — the Operations Manual, Training Manual, and associated procedures — are held as version-controlled records within the platform. Every revision is time-stamped, linked to the change justification, and distributed electronically to the staff whose roles require acknowledgment, generating the evidence trail that national CAA auditors examine when verifying that the organization's documented procedures match its actual operations. The module flags changes that cross the threshold from self-declarable to approval-required, prompting the compliance monitoring manager to initiate the regulator notification before the change takes operational effect.

The training management module enforces Part-FCL course structure requirements at the scheduling layer. For integrated and modular ATPL programs, the system tracks each student's progression against the applicable syllabus hours, simulator periods, and knowledge test prerequisites defined in the ATO's approved training program. Instructor qualification records — TRI, TRE, FI, IRI authorizations, recency, and proficiency check status — are maintained with expiry alerting so that the ATO never inadvertently rostered an instructor whose authorization has lapsed. For organizations managing multiple course types (PPL, IR, CPL, ATPL, type rating) on a single certificate, Aviatize's centralized student records and digital data and records capability make it practical to demonstrate, at short notice, that every training delivery was conducted by a qualified instructor on an airworthy aircraft in accordance with the approved syllabus.