In The Green Airlines we followed one applicant all the way to an Air Operator Certificate (AOC), and found that the certificate is not a form with a status on it. It is a box holding several things at once, and any one of them can fail on its own. That article stood inside one authority and looked outward. This one steps back and asks a smaller question. The answer is a lot stranger.
Green Airlines has the feasibility study. Khalid, who owns it, has the bank behind him, four people hired with a hundred years of experience between them, and a company registered with the Ministry of Commerce. His Director of Operations knows the document they need is called an Air Operator Certificate (AOC), and that getting one will take most of a year. So he does the obvious thing and goes looking for the application form.
There isn't one.
Not hidden, not behind a login, not buried three clicks down a government website. Green Airlines could have been set up in any of six places. In three of them, at the moment he starts looking, there is no form an applicant can get hold of. In a fourth, the office he is looking at is not the one that will issue his certificate. And in the single place where a form does exist, and can be downloaded and filled in, half of it is not his to fill.
None of this is a mess. All six of these authorities run the same five-phase Air Operator Certification (AOC) process, and all six run it properly. What differs is something the process description never mentions: what happens in the minutes before Pre-Application begins.
For anyone building software to hold this, that silence is the whole problem. You cannot design the first screen until you know what the first step actually is: sending in a form, making a phone call, sitting through a meeting, or being politely pointed at a different building.
Where the five phases came from
Start with the part that never changes.
Air Operator Certification, anywhere on earth, runs through five phases: Pre-Application, Formal Application, Document Evaluation, Demonstration and Inspection, and Certification. You will find that order in the inspector handbooks of the General Authority of Civil Aviation (GACA) in Saudi Arabia. You will find it in a European Union Aviation Safety Agency (EASA) leaflet called, with no frills at all, "5 phases to an AOC." Singapore uses it. So does Air Safety Support International (ASSI), which regulates aviation across the United Kingdom's Overseas Territories. These are authorities with no shared legal tradition, no common parent rulebook, and no duty at all to one another. They have all ended up with the same five words in the same order.
Figure 1 — The shared sequence
The shared sequence — guidance, not a Standard, and used almost everywhere. Only the way into the first box changes from one authority to the next.They did not get there on their own.
The International Civil Aviation Organization (ICAO) publishes Doc 8335, the Manual of Procedures for Operations Inspection, Certification and Continued Surveillance. Part III is titled "The AOC — Application, Evaluation and Certification," and its chapters run: general, Pre-Application, Formal Application, Document Evaluation, Operational Demonstration and Inspection, Maintenance Control Demonstration and Inspection, and Certification.
So the five phases live in a manual. Not a treaty, not a Standard, not anything a state has to follow. Annex 6 to the Chicago Convention requires a State to control its operators by issuing an AOC. It says nothing about how the checking should be done. Doc 8335 fills that gap with guidance, and it is careful about its own standing: it offers one acceptable way to comply, not a rule, and it notes that a state may find it useful to borrow the detailed requirements of another state that has already built full procedures.
Guidance travels further when it is taught. ICAO and the United States Federal Aviation Administration (FAA) built the Government Safety Inspector (GSI) course together, and it trains operations and airworthiness inspectors from member states in the five-phase process. Every inspector who passes through carries the model home. Do that for a few decades and one manual's chapter headings become the shape almost every regulator uses.
That leaves an odd situation for anyone trying to model this work. The five phases are the most consistent thing in international aviation certification, and nobody is obliged to use them. They are a habit that won.
There is a practical result. Because the phases came from ICAO rather than from any one country's rulebook, they outlive changes to those rulebooks. Saudi Arabia built its regulations on the American model and is now bringing them in line with the European one, a project named openly in GACA's own structure, where the Aviation Safety and Environmental Sustainability Sector oversees the rewrite of the General Authority of Civil Aviation Regulations (GACARs). The five phases are not at risk in that change. Europe uses them too. What changes is what happens inside them.
Saudi Arabia: the form exists, and half of it is not yours
GACA has a Pre-Application Statement of Intent (PASI). Two pages, numbered 8400-6 — and the number itself is a small piece of history, because it is the FAA's Form 8400-6, carried across when Saudi Arabia built its regulations on the American model.
Green Airlines' quality manager can get it, fill it in, and hand it over. Of the six authorities here, GACA is the only one where "the applicant submits the PASI" is simply true, with no catch attached.
The form asks for the company name and address, and separately for the address of the main base where flying will be done, which is often not the same place and may not exist yet. It asks for a planned start date. It asks for the three-letter company code the applicant wants, in order of preference, with room for three. It asks for management staff by name, title, and telephone. It has checkboxes for the type of certificate, the part of the regulations that applies, and whether the operation carries passengers, cargo, or both, scheduled or not. It asks for aircraft by make, model, and series, with seat count or payload. It asks for the area of the world the operator plans to fly in, leaves a box for anything else, and ends with a signature declaring intent.
Then, at the bottom of page two, the form changes hands.
Figure 2 — The first step does not end when the form arrives. The two marked…
The first step does not end when the form arrives. The two marked fields record where the file was sent and who was put in charge — the team being built in the margin of a form.Section 2 is headed "To Be Completed By GACA," with fields for who received the form and when. Section 3, also GACA's, has room for a pre-certification number, the date the application was passed to Airworthiness, and the name of the Airworthiness representative given responsibility for it.
Those last two lines are the most useful thing on the document.
They tell you that the first step does not end when the form arrives. That is where an inside process begins, one the applicant never sees: the file is sent somewhere else, a date is written down, and a named person becomes responsible for it. The paper form has a margin for this because the paper process needed somewhere to record it.
None of which means Saudi Arabia is still working on paper. GACA delivers its services to the public through an online platform, Ajwaa, and those services have been moving online for some years now. That is exactly why these two lines matter, instead of being a museum piece. When a paper form becomes software, its boxes become columns, and a box that named one department in print becomes a column that can hold one department. The limit survives the move into software unless somebody spots it first.
They also tell you what the form gets wrong. It names Airworthiness, and one representative. GACA's own inspector handbook is less tidy about it: an application may need to be shared with other parts of GACA, and it names the Economic Authority and Security as examples. Operating manuals, it adds, may need approval from several divisions at once — flight operations and airworthiness together. More than one department is usually involved, and which ones varies. The printed form locked a single department into its layout, which is exactly the mistake you inherit if you copy a form into a database without first asking what the form is for.
There is a second Saudi complication, and Green Airlines meets it before it meets any of this.
An Air Operator Certificate shows that an operator can fly safely. It says nothing about whether the operator is allowed to be in the business of selling air transport. That is a completely different document — an Economic License — sitting under a different body of regulation and issued by a different part of the authority.
The economic rules set out what a national carrier has to show. Its main place of business in Saudi Arabia. More than half Saudi ownership, with real control. Enough money to meet its obligations for twenty-four months and to cover its fixed and running costs for ninety days without counting a single riyal of revenue. A business plan covering at least the first two years. The required insurance. At least one aircraft, owned or dry-leased. The fee paid. The Authority then has ninety days to decide, counted from the moment all the needed information has arrived, and the Economic License runs five years.
Not one of those is a safety question. Every one of them has to be settled before the airline can trade.
Figure 3 — Two Executive Vice Presidents, one applicant, and no obvious front…
Two Executive Vice Presidents, one applicant, and no obvious front door — which is why a model that recorded one owning department against the service had to be rebuilt when the order changed.And it belongs to a different sector. GACA's published structure shows eight sectors reporting to the President. Economic Policies and Logistics Services collects license applications, checks the requirements, and issues and renews economic licenses across all civil aviation activities. Aviation Safety and Environmental Sustainability issues and renews licenses and certificates for individuals, air traffic controllers, air operators, and airworthiness. Two sectors, two Executive Vice Presidents, and one applicant who wants to start an airline and has no idea which of them should own his case.
So Green Airlines' real first question is not where the AOC form lives. It is which of these two doors to knock on, and the honest answer is that the order has moved. People who worked with GACA some years back will tell you the technical side came first and the economic check followed. More recent practice runs the economic license first, with the certification project starting only once it has been granted.
Both orders make sense. Checking the money before committing inspectors to months of work protects the thing the regulator has least of. Checking the technical side first avoids licensing a company that turns out to be incapable of flying anything. Sensible people have argued this both ways.
For a systems designer, though, which order is right is beside the point. What matters is that the order changed at all. Any model that recorded a single owning department against the AOC service had to be rebuilt the day it did.
The two documents are also tied together after they are issued, in both directions. If an air carrier's AOC is suspended or withdrawn, the Authority immediately suspends or cancels its Economic License. And the license is suspended if the carrier has not started flying within a hundred and eighty days of being granted it and meeting all operating and security requirements. Neither document means much on its own, and the failure of either takes down the other.
The UK Overseas Territories: the authority sends you the form
ASSI is a company owned by the United Kingdom Civil Aviation Authority (UK CAA), set up to provide safety regulation for the Overseas Territories — Bermuda, the Cayman Islands, Gibraltar, the Falklands, and the rest. A separate company doing a regulator's job, which is a structure worth noting on its own.
ASSI says plainly that its process follows ICAO's five phases. Its account of Pre-Application is the clearest I have found anywhere, and it quietly turns around the idea that the applicant is the one who starts things.
Pre-Application, the way ASSI describes it, establishes that the applicant is not only possibly eligible for an AOC but actually has the ability, the skill, and the resources to run safe and efficient operations and to meet the requirements. It confirms the company understands the rules it will be held to. It sets out what the authority expects. And it judges whether the nominated postholders are suitable, which ASSI notes can mean sitting down with them face to face.
Then comes the sentence that matters. If the first enquiry and proposal looks genuine and realistic, a Prospective Operator's Pre-Assessment Statement (POPS) and Intended Operations Specification form is sent to the applicant. The completed form, with Nominated Postholder forms for the relevant staff, is then submitted to ASSI.
The form is not the front door. It is what arrives after somebody has decided to let you in.
Read the order carefully. The applicant does not download the form and send it back. The applicant asks a question. Someone at the authority decides whether that question is serious. Only then is the form released.
This has a result that is invisible on paper and impossible to ignore in software. If the form only goes to applicants who look credible, then by the time a completed form arrives, a decision has already been made and written down somewhere. There is a record older than the form. A system whose first event is "applicant submits the PASI" has nowhere to put it.
The United Kingdom: no form at all, and a clock that runs out
The UK CAA, which regulates the United Kingdom rather than the Territories, goes one step further. It does not begin with a form in any sense.
Its guidance describes a Pre-Application meeting. The applicant makes contact, a meeting is arranged, and at that meeting the authority explains what will be required, works through the planned operation, and identifies which extra approvals will be needed. Navigation approvals, carriage of Dangerous Goods (DG), and others may each need applications of their own.
Only if the meeting goes well does the authority send the application form, SRG1801, with the checklists that come with it. There are several: a separate document for each part of the Operations Manual (OM), a form for the Accountable Manager and every nominated person, and equipment statements.
Figure 4 — Four ways in, and not one of them can be worked out from the…
Four ways in, and not one of them can be worked out from the process model. Where a form appears at all, the authority may hand it out rather than the applicant go and get it.The UK also puts two clocks on the process, and they are worth setting beside the Saudi ninety days. The formal application should arrive no later than ninety days before flying is due to start, the OM no later than sixty. And there is a limit at the far end: an application may be rejected if not enough progress has been made after twelve months.
That second clock is the interesting one, because The Green Airlines ran into the same problem from the other side. In that story the applicant's revision time and the authority's review time were tangled together, and the point was that a regulator that cannot separate its own delay from the applicant's cannot defend its own performance numbers. The UK has taken a harder line. The applicant's delay is not only left out of the measurement; past a point it ends the application. Something that stops moving eventually stops existing.
One more British difference worth recording. A UK AOC is issued with no end date, apart from a few restricted categories. It does not expire, so it never needs renewing. Set that against the ICAO model, where Doc 8335's certification chapter has separate sections on how long an AOC lasts and how it is renewed, and against the Saudi framework, whose governing regulation has articles on duration, surrender and renewal.
In a data model this is not a setting you can flip. An authority whose certificates expire needs a renewal case type, expiry monitoring, and a whole class of work that simply does not exist in an authority whose certificates do not.
Europe: you are in the wrong building
Green Airlines, had it been founded in Europe, would have had a different problem. Its Director of Operations would have gone looking for EASA, found it, found its long list of documents on Air Operator Certification, and been in the wrong place.
EASA is direct about this. In Europe, as everywhere else, the AOC is issued by the National Aviation Authority (NAA) of the State where the operator has its main place of business — the State of the Operator (SoO). A member state can hand those duties to EASA under Article 64 or Article 65 of the Basic Regulation, and when that happens EASA becomes the authority in charge of first certification, ongoing oversight, and enforcement. But that is an exception, granted on request. It is not how Europe normally works.
So the answer to where a European applicant sends a Pre-Application statement is: to one of twenty-seven national authorities, each with its own procedures, its own language, and its own reading of the same European regulation.
EASA does publish the paperwork. There is a Prospective Operator's Pre-Application Statement (POPS), TE.AOC.00093. There is a formal application form, FO.AOC.00094. And there is a large set of compliance checklists, roughly eighteen of them, covering the management system, each part of the OM, the Continuing Airworthiness Management Organisation (CAMO) arrangements, aircraft equipment, and every specific approval asked for.
EASA also does something in Pre-Application that nobody else here does so openly. It calculates.
Before certification goes ahead, the operation is judged to be Complex or Non-Complex, and the judgment is made against a named list: staff above twenty full-time equivalents, how much work is contracted out, the number of aircraft types, the number of aircraft, what those aircraft are, how many specific approvals are being asked for and of what kind, and the parts of the world the operator will fly in. The result changes what the operator has to build, and in particular how its management system must be organized.
The Green Airlines argued that completeness can be calculated — that if the requirements for a type of operation live as data rather than as prose in a PDF, the system can tell an applicant what is missing before they press Submit rather than three weeks after. EASA's Complexity Determination is that argument already running, and taken one step further. It is not checking whether the applicant has met a fixed set of requirements. It is working out which set applies.
Figure 5 — Whether an approval sits inside the certificate, hangs off the…
Whether an approval sits inside the certificate, hangs off the certification, or is a case of its own writing onto a certificate already issued — each authority has answered differently.Europe draws a different line around specific approvals, too. Saudi Arabia treats operational approvals — Low Visibility Operations (LVO), Performance-Based Navigation (PBN), Extended-Range Twin Operations (ETOPS), Dangerous Goods (DG), around thirty of them — as separate listed services attached to the certificate through its Operations Specifications (OpSpecs). The UK says separate applications may be needed. EASA takes them inside the AOC application, where the formal application covers the planned operations including the specific approvals being asked for. One application, one review, several approvals falling out at the end.
Three authorities, three reasonable answers to the same structural question. Whether an approval is part of the certificate, a child of the certification, or a case of its own that writes onto a certificate already issued is one of the genuinely hard decisions in this work. No amount of reading the regulations settles it, because the regulations disagree with each other.
There is a further European twist with nothing like it anywhere else here. The money side — the Operating Licence, without which a European carrier cannot sell a seat — is never EASA's, under any circumstances. It stays with the member state under separate law. Saudi Arabia splits money from safety across two sectors of one authority. Europe splits it across two institutions, one above the member states and one inside them.
South Africa: what the form is actually for
The South African Civil Aviation Authority (SACAA) publishes technical guidance for its own inspectors, and in doing so it says more plainly than any document written for applicants what a Pre-Application statement is really for.
The guidance tells inspectors to have applicants complete the POPS and send it to the authority's office. Then it explains why. The authority uses the statement to judge how complex the planned operation will be, and to work out the level, experience, and availability of the inspectors needed to take it on. It also uses it to record the pre-approval number given to the applicant, and that number exists to track how the approval project is going.
Three separate things are happening in that passage, and none of them is what an applicant would assume was happening.
Figure 6 — Two authorities on different continents, working under different…
Two authorities on different continents, working under different rulebooks, both treat inspector availability as a gate on the certification timetable.The first is a judgment about complexity — the same call EASA makes through the named list in its Complexity Determination, made here by an experienced person reading a form.
The second is staffing. Level, experience, and availability. The authority is not only deciding whether this applicant is credible. It is deciding whether it currently has the right people free to take them on. A scheduling limit, sitting quietly inside what looks like a simple first step.
The third is that the pre-approval number is described as a project tracking number. Not a reference number for letters. A project number.
Pre-application is not the applicant applying. It is the authority deciding whether to open a project, and if so, who will staff it.
Saudi Arabia's handbook says the same thing in different words. When a PASI arrives, an office manager assigns inspectors to a Certification Team and names one of them Certification Project Manager (CPM). From the moment it is appointed, that team handles everything to do with the applicant, no matter who the applicant contacted first. The handbook goes on to describe the applicant's Schedule of Events — every document, activity, and purchase with the applicant's own estimated date against it — and says the CPM reviews it for order, workability, completeness, and inspector availability.
Inspector availability, again. Two authorities on different continents, working under different rulebooks, both treating staff capacity as a gate on the certification timetable.
Singapore, and the shape of the pattern
The Civil Aviation Authority of Singapore (CAAS) publishes its Air Operator Certification as a five-phase process and gives the application forms straight to would-be applicants. It sits closer to the Saudi end than the British one: the forms are published, you can get them, and the applicant sends them in.
So we have six authorities lined up on a scale that has nothing to do with where their rules came from.
At one end, forms are public and the applicant starts things: Saudi Arabia and Singapore. In the middle, the authority looks at an enquiry first and then hands out the form: the UK Overseas Territories. At the other end, no form exists until a meeting has happened: the United Kingdom. And off the scale completely, the authority you are looking at may not be the one that certifies you: Europe.
Five identical phases. Four different ways in.
What is the same
The shared part deserves care, because there is a lot of it, and it is what makes a single model possible at all.
All six keep the money check separate from the safety check. Saudi Arabia does it across two sectors of one authority. The UK does it across two groups of one authority, with airline licensing sitting well away from safety regulation. Europe does it across two institutions. None of them lets one check stand in for the other, and none lets an operator carry paying traffic on a safety certificate alone.
All six treat Pre-Application as a filter rather than a formality. The method varies — a judgment call, a meeting, a complexity calculation, a check on who is free — but each of them is deciding whether to spend its people before it spends them. ICAO's manual explains why in one dry line: certification is expensive for the regulator as well as for the applicant.
And all six know that the applicant's delay and the authority's delay are two different things. Europe's rules allow the review period to be extended where the applicant fails to send information on time, and paused where serious problems go uncorrected. The UK allows rejection after twelve months without progress. Saudi Arabia's economic clocks start when all the needed information has arrived, not when the application was filed.
All of them run Pre-Application, Formal Application, Document Evaluation, Demonstration and Inspection, and Certification, in that order, because a manual published in Montréal said so and a training course taught it to everyone who mattered.
What this means for the model
The certification process travels. The organization running it does not.
That is the finding, and it carries more weight than it first appears to. A system built on the phases will survive a reorganization, a change of regulatory model, and a shift in which department owns which step, because the phases are the steady layer. A system built on the organization chart will not, because the organization chart is the layer that moves — as Saudi Arabia has already shown by moving the starting point between two sectors, and will show again when the alignment project with Europe lands.
There is a less comfortable half to this. Because the way into Pre-Application differs so widely, the first step cannot be worked out from the process model at all. Whether the applicant sends a form, asks for one, attends a meeting, or is pointed at another institution is a decision each authority has made for itself. Any system hoping to serve more than one of them has to hold all four shapes without pretending they are versions of a single one.
So the five phases give us a skeleton, and the six front doors tell us where the skeleton stops helping. What remains is to build each phase properly, starting with the one that turns out not to be about applications at all.
Pre-Application, on the evidence of these six authorities, is where an authority decides whether there is a project worth opening, works out how hard it will be, and finds out whether it has anybody free to run it. Everything that follows depends on those three answers, and not one of the three is a field on a form.
Glossary
Air Operator Certificate · AOC — The certificate that allows an operator to fly commercial air transport. Issued by the State of the Operator; without it no seat can be sold.
Pre-Application Statement of Intent · PASI — GACA's phase-one form, declaring that an applicant intends to seek certification. Form 8400-6, inherited from the FAA form of the same number.
Prospective Operator's Pre-Assessment Statement · POPS — The matching phase-one document at EASA, ASSI and SACAA. In some authorities the regulator hands it out rather than the applicant going and getting it.
Operations Specifications · OpSpecs — The lines attached to a certificate setting out exactly what the operator is allowed to do: which routes, which aircraft, which special operations.
Operations Manual · OM — The operator's own manual describing its structure, responsibilities, procedures and controls. Submitted for approval during Document Evaluation.
Certification Project Manager · CPM — The inspector chosen to lead a certification team and act as the applicant's single point of contact from then on.
National Aviation Authority · NAA — A State's own civil aviation regulator. In Europe the NAA, not EASA, is normally the authority in charge of an AOC.
State of the Operator · SoO — The State where an operator has its main place of business, and which is responsible for certifying and overseeing it.
Economic License — The separate Saudi document establishing that an operator may be in the business of selling air transport. Valid five years; different from the AOC and issued by a different sector.
Ajwaa — GACA's online services platform, through which its services are delivered to the public.
Operating Licence — The European equivalent of the Economic License, held by the Member State rather than EASA.
Continuing Airworthiness Management Organisation · CAMO — The organization responsible for keeping an aircraft airworthy over its life. In Europe its approval must exist before an AOC can be issued.
Complexity Determination — EASA's judgment of an operation as Complex or Non-Complex against a named list, which changes what the operator's management system must contain.
Standards and Recommended Practices · SARPs — ICAO's Annex provisions. A Standard is a “shall”; a Recommended Practice is a “should.”
Low Visibility Operations · LVO — Flying below the normal visibility limits, which needs a specific approval.
Performance-Based Navigation · PBN — Navigation based on set performance requirements rather than on particular equipment, which needs a specific approval.
Extended-Range Twin Operations · ETOPS — Twin-engine flying beyond a set diversion time from a suitable airport, which needs an authorization.
Dangerous Goods · DG — Items or substances that can be a risk in transport; carrying them needs a specific approval.
Government Safety Inspector course · GSI — The ICAO and FAA training course that taught the five-phase certification model to inspectors worldwide.
Schedule of Events — The applicant's own list of documents, activities and purchases with estimated dates, reviewed by the CPM for order, workability, completeness and inspector availability.