EASA Part-IS · Now mandatory for Part-145 MROs

Your Part-IS ISMS. Built, managed, and inspection-ready.

AeroNova is the only platform purpose-built for EASA Part-IS compliance. Generate all 11 mandatory ISMS documents, manage your risk register, track incidents with 72-hour countdown, conduct management reviews, track all-staff training, manage system changes, run internal audits, and simulate an NAA inspection — all in one place. Used by Quality Managers who need to be compliant, not just documented.

Part-IS consultant: €8,000–15,000 setup + €3,000–6,000/year retainer. AeroNova: €149/month. Covers everything — including management review, all-staff training records, and change management IS assessments that consultants charge extra for.

14-day free trial No credit card EU data hosting Cancel anytime

If AeroNova doesn't help you get inspection-ready, cancel anytime. Your data exports in one click.

0

Part-IS Articles Covered

0

ISMS Documents Generated

0

Inspection Questions Simulated

0h

Incident Notification Tracked

Used by Part-145 MROs across Europe · Documents reviewed by aviation compliance experts · Built to EASA AMC standards · Purpose-built for Part-IS — not a generic ISO 27001 tool · EU Frankfurt data hosting · GDPR compliant

The Part-IS challenge

Your NAA sends an inspection notice

You have weeks to demonstrate a functioning ISMS — 11 mandatory documents, a risk register, an incident log, an evidence vault, and an audit trail. No single piece of it exists yet. Where do you start?

A consultant quotes €10,000 and 3 months

You need compliance now, not in a quarter. And you need ongoing management, not a one-time engagement that leaves you on your own. And after they leave, you are on your own for ongoing management.

Part-IS is new territory for most Quality Managers

EASA now requires you to manage information security with the same rigour as airworthiness. Most Quality Managers have never done this before — Part-IS is entirely new regulatory territory.

See AeroNova in action

Twelve integrated modules covering all 13 Part-IS articles. Click any module to see exactly what it does.

ISMS Generator

IS.I.OR.200–260

Answer 30 targeted questions about your systems, access controls, suppliers, and security posture. AeroNova generates all 11 mandatory Part-IS documents with your specific technical details — AMOS configuration, named suppliers, identified gaps, and treatment plans. Not a template — a document specific to your organisation.

IS Policy

200

Risk Methodology

210

Access Control

215

Incident Response

220

BCP

225

Supplier Security

240

Training

240

Audit Programme

250

Monitoring

260

Management Review

260

Continuity

225

  • AI generates all 11 mandatory documents
  • Accountable Manager approval workflow with timestamps
  • Documents structured exactly as NAA inspectors expect

Generated in minutes — reviewed and signed by your Accountable Manager

AeroNova is a compliance management tool. Generated documents require review and competent authority approval. Your organisation remains accountable for Part-IS compliance.

How it works

From onboarding to staying inspection-ready in three steps.

STEP 01

Onboard in minutes

Complete a 5-section discovery profile covering your IT systems, access controls, suppliers, and current security state. The more detail you provide, the more accurate your documents. Takes 10-15 minutes and saves weeks of document writing.

STEP 02

Build your ISMS

Generate your 11 ISMS documents with AI. Upload evidence tagged to Part-IS articles. Build your risk register, log incidents, manage corrective actions, and track suppliers — all mapped to specific Part-IS requirements. Set up your management review workflow, add your complete staff register, configure your change management process, and establish your supplier security register. AeroNova covers all 13 Part-IS articles — IS.I.OR.200 through IS.I.OR.260.

STEP 03

Stay audit-ready

Run your annual internal audit, log findings, and close corrective actions. Monitor EASA regulatory updates. Export your complete compliance dossier when an inspection is announced — documents, records, and audit trail in one place. Every Monday, your IS Manager receives a personalized briefing — specific risks due for review, evidence gaps to address, and one action to take this week. Generated automatically from your live compliance data.

A typical compliance journey with AeroNova

Month 2: ISMS generatedMonth 4: Audit completedMonth 6: Inspection ready

Illustrative sample — actual results depend on your organisation's starting point and ongoing activity.

NAA Part-IS oversight has started across Europe.

The organisations that implement their ISMS now will pass their inspections. The ones that wait face Major findings, corrective action notices, and potential EASA approval suspension. AeroNova covers all 13 Part-IS articles — including management review with AM sign-off, all-staff training records, and IS change management — things consultants charge €15,000 to implement. Get compliant in days, not months.

Start free assessment

Regulatory updates and compliance tips. No spam. Unsubscribe anytime.

There is a better way

Without AeroNova

  • Weeks building documents from scratch
  • Risk register in a spreadsheet
  • Incidents tracked in email threads
  • Evidence scattered across email folders and shared drives
  • Scrambling before every inspection
  • No audit trail proving ongoing compliance management
  • No AM management review records
  • No all-staff training register
  • No IS impact assessment for system changes

With AeroNova

  • ISMS documents generated in one afternoon
  • Risk register with aviation-specific risk categories and AI-powered suggestions
  • Incidents logged with 72h countdown
  • Inspection Simulator shows gaps before the inspector does
  • Complete IS.I.OR audit trail proving continuous compliance — not just point-in-time
  • Annual management review with AM digital sign-off
  • Complete staff training register with expiry alerts
  • IS impact assessment logged for every system change

Simple, transparent pricing

Part-IS consultants typically focus on initial ISMS setup. AeroNova manages the ongoing compliance lifecycle — risk register, incidents, evidence, audits, and regulatory monitoring. At €149/month, AeroNova costs less than a single hour of a Part-IS consultant — and works for you every day of the year.

Free

Start with a free readiness assessment

€0/month

  • Part-IS readiness assessment across all 13 articles
  • Instant compliance score and gap report
Get started

No credit card required to start

Most popularEarly adopter

Starter

Full compliance toolkit

€124/month (billed €1,490/year)

  • ISMS Generator (11 docs)
  • Risk Register
  • Incidents & CAs
  • Evidence Vault with AI tagging
  • Inspection Simulator
  • Basic Audit Checklist
  • Regulatory Updates
  • Management Review workflow (IS.I.OR.205)
  • Staff Training register — up to 25 staff (IS.I.OR.240)
  • Change Management register (IS.I.OR.230)
  • BCP Testing log (IS.I.OR.225)
  • Vulnerability register (IS.I.OR.235)
  • AI Assist (50/day)
  • PDF Export
  • Up to 3 team users
Start free trial

No automatic charge without your confirmation

Early adopter

Professional

For growing organisations

€249/month (billed €2,990/year)

Everything in Starter, plus:

  • BCP Testing log (IS.I.OR.225)
  • Vulnerability register (IS.I.OR.235)
  • Full Audit Toolkit with findings and reports
  • IS Manager Training — 6 modules with certificates auto-filed as IS.I.OR.240 evidence
  • Weekly IS Manager Briefing every Monday
  • Year-over-year compliance reports and trend charts
  • Full compliance KPI metrics dashboard
  • Unlimited staff in training register (Starter is capped at 25)
  • AI Assist 200/day (Starter is 50/day)
  • Up to 10 users (Starter is 3 users)
Start free trial

No automatic charge without your confirmation

NAA Part-IS oversight activities began across EU member states in early 2026. Internal audits and surveillance visits are underway. If your organisation does not yet have a functioning ISMS, the time to act is now.

Start free trial

Trusted by aviation professionals

AeroNova had our ISMS documents structured and ready to review within hours of receiving the inspection notice. Our IS Manager finally had a system to work from instead of starting with a blank page.

Quality Manager, Part-145 MRO

The evidence vault meant we could answer every inspector question with a specific tagged document. No scrambling, no searching through folders.

IS Manager, CAMO

We use AeroNova alongside our consultant. They focused on the complex parts — AeroNova handles everything ongoing.

Accountable Manager, ATO

Frequently asked questions

No. A consultant sets you up once. AeroNova keeps you compliant forever. We're a compliance management tool that helps you build and maintain your ISMS documentation, risk register, and audit trail. For complex organisations or those requiring specialist guidance, a qualified consultant remains valuable. AeroNova complements that work and manages the ongoing compliance lifecycle.

AeroNova generates documents using a detailed discovery profile specific to your organisation — including your actual systems, named suppliers, identified security gaps, and treatment plans. NAAs assess your organisation's compliance, not the tools you use. Your Accountable Manager reviews, adapts, and signs all documents. AeroNova helps you create well-structured, regulation-aligned starting points — final approval rests with your competent authority. Note: The Information Security Management Manual requires submission to and approval by your competent authority before it takes effect. AeroNova helps you build inspection-ready documentation — your NAA issues formal approval.

Yes. AeroNova is designed for Quality Managers, not IT professionals. Every feature uses plain language aligned to Part-IS requirements. If you can manage a maintenance quality system, you can manage AeroNova. The language and workflows are built around what Quality Managers already know.

You can export all your data at any time from Settings — one click. After cancellation, data is retained for 30 days then permanently deleted. Nothing is locked in.

Most organisations complete onboarding and generate their initial ISMS documents in a few hours. The platform is designed to get you started quickly.

Full access to your chosen plan — every feature, no limitations. No credit card required. No automatic charge without your explicit confirmation.

Yes. AeroNova is built against EASA AMC and GM to Part-IS Issue 1 — the official Acceptable Means of Compliance and Guidance Material published by EASA. Every feature maps to a specific Part-IS article requirement.

Yes. The 14-day trial requires no credit card and no purchase order. Explore the full platform, generate your ISMS documents, and involve procurement only when you are ready to subscribe. Nothing is charged without your explicit confirmation.

Yes. AeroNova covers every article from IS.I.OR.200 to IS.I.OR.260 — ISMS documentation, risk assessment with AM acceptance workflow, incident management with 72-hour countdown, business continuity planning with BCP testing records, change management with IS impact assessment, vulnerability register with remediation tracking, staff awareness training for all employees, physical security documentation, internal audit toolkit, supplier management, and compliance monitoring. Every feature maps to its specific Part-IS article. Twelve integrated modules in total.

AeroNova guides your Accountable Manager through all 8 mandatory agenda items required by IS.I.OR.205 and records their formal digital sign-off with timestamp. The completed review is automatically saved as inspection evidence. If an inspector asks to see your management review minutes — you have them ready instantly.

The Staff Training Register lets you add all employees and log their IS awareness training completion — even when training happens outside AeroNova in face-to-face sessions or your own LMS. The register tracks completion dates, expiry dates per person, and sends 30-day reminders when training renewal is due. Every record is automatically filed as IS.I.OR.240 evidence.

Your data is safe

Your compliance data never leaves the European Union. Hosted in Frankfurt, Germany — meeting GDPR and EU data residency requirements. Your data is always yours. Export everything with one click — documents, risks, incidents, evidence, audit history.

Cancel anytime

No minimum contract on monthly plans. Export your documents and data before you leave. Nothing is locked in. Annual plans are billed upfront and non-refundable after the 14-day trial period.

Built for aviation

Designed by aerospace engineers who understand EASA regulations, not generic compliance software repurposed for aviation.

Cybersecurity consulting

Need additional cybersecurity services? Get in touch

CISAISO 27001 AssociateEthical HackingCiscoACLApplied Data Science
Start free assessment