Quality and Standards

As a pilot, you already know the difference between an app and a tool you’d actually rely on pre-flight. We built Vela Air to meet that bar. We hold no formal certifications — we’re honest about that — but every part of how we build, secure, and operate the platform is actively aligned against internationally recognised standards. That means structured quality objectives, continuous security monitoring, formal aeronautical data quality requirements, and software engineering practices drawn from aviation-grade frameworks. We track our compliance posture, close gaps when we find them, and document it all — because the consequences of getting it wrong aren’t abstract to us either.

Standards List

Aviation & Airborne Software

  • UK CAA EFB Type B — We align our development and approval pathway to the UK Civil Aviation Authority’s requirements for electronic flight bag applications used in commercial operations.
  • Aeronautical Data Quality (ADQ / CAP 1054) — The accuracy, integrity, timeliness, and traceability of every piece of aeronautical data we present is held against ICAO and CAA quality standards.
  • RTCA DO-178C / EUROCAE ED-12C — Our software testing practices draw from the international standard for airborne software assurance, including structural coverage requirements used across the aviation industry.

Information Security

  • ISO 27001:2022 — International standard for information security management; our security controls, risk management, and incident response are structured against this framework.
  • NIST Cybersecurity Framework 2.0 — The US federal cybersecurity risk framework, covering how we govern, identify, protect against, detect, respond to, and recover from threats.
  • NCSC Secure Development Guidelines — UK National Cyber Security Centre principles for how we write code, manage credentials, secure our build pipeline, and protect the supply chain.
  • CIS Benchmarks — Industry-consensus security configuration baselines applied to our infrastructure: containers, databases, and web servers.

Quality Management

  • ISO 9001:2015 — International quality management standard governing our processes, defect management, customer feedback loops, and continual improvement programme.

Payment & Regulatory

  • PCI DSS v4.0 — Payment card industry security requirements. Your payment data is never processed or stored by us — handled entirely through Stripe’s certified infrastructure.
  • UK NIS Regulations 2018 — UK legislation on network and information systems security, applicable to digital services operating in the aviation sector.