An airline is not really a fleet of aircraft. It is a system for operating them safely, thousands of times a day, under conditions that range from routine to genuinely hostile -- and the difference between an airline you would put your family on and one you would not is almost entirely invisible from the departure lounge. It lives in the operating rules. Annex 6 is where ICAO writes them.
Annex 6 to the Convention on International Civil Aviation governs the operation of aircraft: how they must be flown, crewed, equipped, dispatched, and maintained to a common safety standard. If Annex 8 is about whether an aircraft is fit to fly and Annex 1 is about whether a person is fit to fly it, Annex 6 is about whether the operation -- the whole organised activity of running flights -- is fit for purpose.
Three books for three kinds of flying
Annex 6 is split into three parts, because the demands of a scheduled airline are not the demands of a private business jet, and neither matches a helicopter. Part I covers International Commercial Air Transport with aeroplanes -- the airlines, where the standards are strictest. Part II covers International General Aviation with aeroplanes -- privately operated flying, held to a standard appropriate to its lower exposure. Part III covers International Operations with helicopters, whose unique capabilities and risks need their own rules. The structure says something important: the level of regulation scales with the stakes, and a fare-paying public gets the most protection.
The Air Operator Certificate
The keystone of commercial operations is the Air Operator Certificate (AOC). You cannot run a commercial airline without one. The AOC is the formal authorisation, issued by the State of the Operator, certifying that the operator has the organisation, management, procedures, personnel, and resources to conduct its operations safely. It is not a one-time gift. The issuing state has a continuing duty to supervise the holder, audit it, and revoke the certificate if standards slip. The AOC is, in effect, the state vouching for the airline -- and accepting responsibility for watching it.
Behind the certificate sits a document most passengers never hear of but that effectively runs the airline: the operations manual. Annex 6 requires the operator to produce and maintain one, setting out the procedures, limitations, and instructions its staff must follow. It is the airline's own rulebook, derived from the regulations and approved by the authority -- the place where global standards become this carrier's specific way of doing things, from how it calculates performance to how it handles an emergency.
Operational control
One concept inside Annex 6 quietly separates a real airline from an amateur operation: operational control. The operator -- not just the captain alone -- is responsible for initiating, continuing, diverting, or terminating a flight in the interest of safety. There is a system behind the aircraft: dispatch, flight planning, monitoring, and the authority to say no. A flight is a joint undertaking between the crew in the air and the operation on the ground, and Annex 6 insists that this structure exist.
The people and their limits
Annex 6 sets requirements for flight crew -- composition, qualifications, and the operator's obligation to train and check them recurrently, not merely to hire licensed pilots and assume they stay current. But its most distinctive human-factors contribution is the management of fatigue.
Flight and duty time limitations cap how long crews may work and how much rest they must receive, because a tired pilot is a degraded pilot in ways that are well documented and unforgiving. Annex 6 also provides for the Fatigue Risk Management System (FRMS) -- a data-driven alternative that lets an operator manage fatigue scientifically rather than only by fixed hour limits, provided it can demonstrate an equivalent or better level of safety. Fatigue is treated as a hazard to be managed, the same as any mechanical risk.
The stakes are not theoretical. A 2009 accident in the United States, in which a regional airliner crashed on approach, put crew performance, training, and fatigue at the centre of the public conversation and led to substantially revised flight, duty, and rest rules and tougher experience requirements for airline pilots. It is a recurring pattern: the duty and rest limits in the rulebook are written, in large part, from the record of what happened when people flew too tired.
Equipment, performance, and the limits of dispatch
An aircraft must carry the right instruments and equipment for the operation, and it must perform within defined operating limitations -- it has to be able to climb, stop, and clear obstacles with margin, even with an engine failed at the worst moment. Annex 6 ties dispatch decisions to those performance facts rather than to optimism, and requires that suitable alternate aerodromes be planned, with weather minima, so a flight always has somewhere to go if the destination closes.
It also governs the Minimum Equipment List (MEL) -- the disciplined framework that defines what may be unserviceable and still allow a flight to depart legally. The MEL is widely misunderstood as a way to fly broken aircraft; it is the opposite. It is a pre-analysed, authority-approved list that prevents ad hoc judgement calls about acceptable defects, so that "it'll be fine" is replaced by a documented decision with a time limit attached.
Fuel, weather, and flying far from land
Annex 6 covers all-weather operations -- the rules for operating in low visibility -- and the fuel and oil requirements that ensure an aircraft carries enough to reach its destination, divert to an alternate, hold, and still land with a reserve. Critically, it requires active in-flight fuel management, not just correct planning at the gate; the crew must keep checking that the plan still holds as conditions change.
Then there is Extended Diversion Time Operations (EDTO) -- the modern, broader term for what most travellers know as ETOPS. These are the rules that let a twin-engine airliner fly routes far from any diversion airfield, such as long ocean crossings, by imposing extra reliability, maintenance, and contingency requirements proportional to how long the aircraft could be from a safe landing. EDTO is why two engines can now do what once required four.
Everything else that makes an operation safe
Annex 6 reaches across the rest of the operation as well. It requires flight recorders -- the flight data recorder (FDR) and cockpit voice recorder (CVR) that make accidents investigable. It addresses operator security duties, dangerous goods awareness, the role and training of cabin crew -- who are safety crew first and service staff second -- and the operator's continuing-airworthiness and maintenance obligations, the duty to keep each aircraft in a fit condition between the deeper checks governed by airworthiness rules.
Binding it together is the link to Annex 19 (Safety Management). A modern operator must run a Safety Management System (SMS) -- a structured way of identifying hazards and managing risk before it becomes an accident. Annex 6 is where that requirement meets daily operations.
A safe airline is not one that avoids problems. It is one built so that the ordinary problem never becomes the extraordinary accident.
How states turn it into law
States implement Annex 6 through their operational regulations, and the major systems map onto it cleanly. Saudi Arabia regulates operators through the General Authority of Civil Aviation (GACA). The United States uses 14 CFR Part 121 for scheduled airlines and Part 135 for commuter and on-demand operators -- two tiers reflecting Annex 6's own distinction between heavy commercial transport and lighter operations. Europe, under the European Union Aviation Safety Agency (EASA), uses Part-ORO (organisation requirements) and Part-CAT (commercial air transport) within its Air Operations Regulation. Same destination, different national road.
The cabin is safety equipment too
It is easy to think of the cabin as the service half of the aircraft, but Annex 6 treats it as a safety system. The operator must equip aircraft with the emergency gear an evacuation depends on -- slides, exits, lighting, life jackets and rafts for overwater flights, oxygen, fire extinguishers, first-aid and medical kits -- and must train and check the cabin crew who manage it. The benchmark behind the layout is the certified evacuation standard: a full aircraft must be clearable in ninety seconds with half the exits blocked. Cabin crew are the people who deliver that in a real emergency, which is why their drills, numbers, and currency are regulated, not left to the airline's discretion.
Oversight, too, does not stop at the operator's home country. When an aircraft lands abroad, the visited state can inspect it on the ramp -- checking documents, condition, and crew -- under programmes such as Europe's Safety Assessment of Foreign Aircraft (SAFA). It is a deliberate backstop: a way for the rest of the world to spot an operator whose home regulator may not be watching closely enough, and a reminder that an AOC issued in one place is, in the end, accountable everywhere it flies.
Where it still falls short
The honest weak points in operations regulation are not about the rules existing -- they exist -- but about how rigorously they are lived.
- Fatigue-management maturity. Fixed hour limits are blunt, and FRMS done well is demanding; many operators and regulators are still building the data culture it requires, and fatigue remains under-reported.
- MEL discipline. The framework only works if defects are genuinely tracked and rectified within the time limits, rather than items being repeatedly deferred until an aircraft is flying on a long list of accepted faults.
- Consistency of operational oversight. An AOC is only as good as the supervision behind it, and the depth and competence of that oversight varies between states.
Step onto a well-run aircraft and you see almost none of this. You see a clean cabin and an on-time departure. What you do not see -- the dispatch release, the fuel calculation checked against the latest winds, the deferred-defect log, the crew's duty clock, the diversion airfields plotted along an ocean track -- is the actual product. Annex 6 is the specification for that invisible machine, and the reason the visible part so rarely goes wrong.