Who could, who did, where it sits
Authority comes from title, action scope, company access and approval limits; every successful change is written with who, what and when.
AerSynx Quality and Compliance is aviation quality and compliance software for quality and compliance teams, covering nightly sanctions screening of business partners, vendor approval, controlled documents, training records, findings and an audit trail.
Who could change a record, whether the change was recorded, and where the evidence sits — answered by the system rather than by memory, with sanctions screened every night.
For the quality manager who answers the auditor, and the compliance officer who answers the regulator.
Included in every module
Quality and Compliance is not sold on its own. It comes with each main module, so start from the workspace your team runs and the oversight on this page sits around it.


Authority comes from title, action scope, company access and approval limits; every successful change is written with who, what and when.
Four sanctions lists synced nightly, every partner screened, parent matches inherited, matched partners flagged for compliance review.
A purchase order cannot be confirmed to a supplier quality has not approved. A single-order quality concession, approved through the quality manager's chain, cannot open a blacklisted supplier.
A supplier earns its approval with documents and a second pair of eyes; the purchase order checks it before it can be confirmed.
Business partner · vendor roleone record for every roleper partner typeuploaded with their expiryfour eyesa second person approvesconfirmrefused while the supplier is unapprovedsingle order · quality managernever opens a blacklisted supplierdaily reportapproval lapses with the documentwho · what · whenevery approval leaves a line

One partner record that can be both vendor and customer, with each role approved on its own. Every night four sanctions lists are synced and partners are screened against them: the US Consolidated Screening List, the EU Financial Sanctions Files, the UK FCDO sanctions list and the UN Security Council list. A confirmed match on a parent company carries over to its subsidiaries, a confirmed match is flagged on the order screen for whoever raises the order, and an order with a blacklisted partner cannot be confirmed. Partner documents with an expiry date raise an email warning before they lapse.

| Module | Primary job | Signals |
|---|---|---|
| Findings | Findings, closed by an approver | closing takes an approverevery status change audited |
| Controlled Documents | Revisions, approval, folder access | approval before currentread & sign |
| Vendor Approval | Approved suppliers, enforced on the PO | no PO to unapprovedfour-eyes approval |
| Training and Authorisations | Training, stamps, the signer gate | courses · exams · certificatesOutlook invites · reminders |
| Audit Trail | Who, what, when | who · what · whenwritten after the response |
| Business Partners and Sanctions | Partner master, nightly screening | 4 lists, nightlyparent match inherited |
| Agreements and Projects | Agreements and commercial projects | configurable expiry reminderscompany-owned |
| Permissions, Titles and Companies | Authority on one screen | every action namedfail-closed |
Closing a finding takes an approver who holds the quality approval right, a permission that has to be granted explicitly rather than inherited from module access. Every status change on a finding is written to the audit trail with who, what and when.
Controlled documents in folders, each with its own revision history. The revision number is assigned automatically, a new revision goes to an approver before it becomes current, and a rejection has to carry its reason. Only one revision is current at a time, and each folder decides by title or by person who can see it and who can upload to it. Read & sign: opening an approved revision records who read it and when, and the quality team sees who has read it and which members who can see the document have not; a read stays on record even if the reader later loses access.
A supplier is approved against the documents its type requires, by a second person, and the approval lapses when a required document expires. A purchase order cannot be confirmed to a supplier that is not approved. For a single order, a quality concession can be requested through the quality manager's approval chain; it never opens a blacklisted supplier. Expiring partner documents are reported every morning.
Courses, sessions, exams and certificates, with a training matrix report. Each session goes to its attendees by email as an Outlook meeting request: accepted into the calendar, updated in place when the session changes and removed when it is cancelled. As recurrent training falls due, the person is emailed 90, 60 and 30 days ahead and then every day over the last 15, and the quality team receives one summary. Authorisations and stamp assignments raise an in-app notification from 90 days before they lapse, to the quality team and to the holder if they have a login, and a continuous renewal or stamp handover clears it. Authorisations and stamps are checked at the sign-off itself: a work card closes only when the signer's authorisation, stamp, licence and recurrent training are valid on that day.
Every successful change written with who, what and when, after the response returns so the trail never slows the work. Explorable across the whole organisation, filterable by module, entity and person.
One partner record that can be both vendor and customer, with each role approved on its own. Every night four sanctions lists are synced and partners are screened against them: the US Consolidated Screening List, the EU Financial Sanctions Files, the UK FCDO sanctions list and the UN Security Council list. A confirmed match on a parent company carries over to its subsidiaries, a confirmed match is flagged on the order screen for whoever raises the order, and an order with a blacklisted partner cannot be confirmed. Partner documents with an expiry date raise an email warning before they lapse.
Commercial agreements with an expiry countdown and configurable expiry reminders, owned by a company; commercial projects that gather the demand, orders, stock and sales of one venture with the parties in their roles. Partial project totals say how many records were hidden from the viewer.
Authority from title, action scope, company access and approval limits, managed on one screen: every permissioned action named, fail-closed, a person-level revoke that beats even the organisation admin. Login access and employment are separate axes; a title cannot be held without a login.
The questions this workspace gets asked most often.
It answers the questions an auditor asks: who was permitted to change a record, whether the change was recorded, and where the supporting evidence sits. Findings, controlled documents, approvals and training live alongside the operational record rather than in a separate quality system.
Through the permission matrix and the audit trail together. Every action is named individually and granted by title, with company access and approval limits as separate axes; a person-level revoke overrides every grant, including the organisation admin's. The trail then answers who actually did it.
Four lists are synchronised nightly and every partner is screened against them, with a blacklist report each Monday. Screening runs on a schedule rather than at onboarding only, because a partner that was clean when it was approved may not be clean next quarter.
Not just that a value changed, but who changed it, when, and under which authority — and it has to survive the person leaving. Every successful create, update and delete is logged against the organisation, so "who moved this next-due date" is a question the system answers rather than one asked around the office.
Quality comes with Supply, CAMO, Technical Records, Lease Management, Production and Overview. Pick the one your team works in; the demo starts there and the quality layer comes with it.