Live in production · eu-north-1

The last mile of the internet, staged inside the aircraft

AMOS Edge Aviation Network (AEAN) is an ISO-by-design SaaS control plane for onboard edge-internet optimisation. Every event hash-chained. Every clause mapped to code.

Request pilot access See how it works →
✈ AS9100D quality management
🔒 DO-326A / ED-202A airworthiness security
🇪🇺 EASA Part-145.A.55 records retention
📋 ICAO Annex 19 safety management
🛡 NIS2 + ISO 27001
Product

Your fleet. Your policies. Your audit trail.

AEAN gives aviation operators a production-grade cloud control plane for managing onboard edge appliances — with regulatory compliance built into the code, not bolted on after.

Hash-chained event log — Every state change appended to an immutable, tamper-evident log. Boot-time integrity check on every deployment.
RTM as code — Every regulatory clause in AS9100D, DO-326A, EASA, and ICAO mapped to the function that implements it, verified at build time.
Read-only circuit breaker — Any tamper alarm, hash-chain break, or anomaly trips the system into a safe read-only mode automatically.
KMS-signed content packs — Signed with AWS KMS (RSASSA_PSS_SHA_256). Edge nodes verify offline. The signing key never leaves KMS.
👤
Operator / Curator
Browser → Command Center
→
JWT · TLS 1.3
🛰
Wavult Aero
Cloud control plane
eu-north-1 · AWS
→
mTLS · edge JWT
✈
Onboard Edge Node
Aircraft appliance
TPM-attested
🛫
Fleet Registry
Register aircraft by tail number, ICAO24, operator, and certifying authority. Full history — every registration event hash-chained and queryable by regulators.
EASAFAAAS9100D
🔌
Edge Node Enrolment
TPM EK certificate + quote-based attestation. Firmware version pinned per model. Re-enrolment creates a retirement event — full hardware lifecycle in the log.
TPMDO-326A
📦
Signed Content Packs
Curators publish packs. KMS signs the canonical manifest. Edge nodes verify offline with a cached KMS public key. Signature never touches application memory.
KMSRSA-4096PSS
📊
Telemetry Ingest
Cache hit rates, bandwidth samples, flight-phase tagged. Critical events — tamper alarms — automatically promoted to the safety-sensitive audit log and trip the circuit breaker.
ICAO Annex 19GDPR
🔄
Prefetch Policies
Four-eyes promotion gate: draft → reviewed → QA-approved → live. The same actor cannot advance two consecutive steps. Fully logged, fully reversible.
Four-eyesAS9100D
🔗
Hash-Chained Event Log
Every mutation appended with SHA-256 over (prev_hash ‖ canonical_payload). Postgres trigger blocks UPDATE and DELETE — even for superusers. Boot-time tamper detection.
SHA-256Append-onlyEASA 145.A.55
Compliance

Regulatory coverage — built in, not bolted on

Every clause in every standard below is mapped to the source function that implements it. The RTM verifier runs at Docker build time. No clause, no ship.

AS9100D
Aviation Quality Management
✓ Implemented
DO-326A
Airworthiness Security (FAA)
✓ Implemented
ED-202A
Airworthiness Security (EASA)
✓ Implemented
EASA 145
Part-145.A.55 Records
✓ Implemented
ICAO 19
Annex 19 Safety Management
✓ Implemented
ISO 27001
Information Security
✓ Implemented
NIS2
EU Network & Info Security
✓ Implemented
GDPR
Onboard PII
✓ Implemented
How it works

From content pack to aircraft — in four steps

1
Curator publishes a content pack
The curator submits a manifest via the Command Center. Wavult Aero validates, computes canonical JSON, and calls KMS to produce an RSA-PSS-SHA256 signature. The pack and its signature are appended to the hash-chained log.
POST /aero/v1/content-packs → validate manifest (zod) → canonical JSON → KMS.Sign(RSASSA_PSS_SHA_256) → appendEvent('aero.content_pack.published.v1') ← 201 { event_id, manifest_sha256, chain_hash }
2
Policy is promoted through four-eyes gate
Prefetch policies move through draft → reviewed → QA → live. No single actor can advance two consecutive steps. Every transition is logged and signed.
3
Edge node syncs over mTLS
The onboard appliance authenticates with an edge-node-scoped JWT (audience wavult-aero-edge). It receives all active packs for its tail number and model. It verifies each signature offline using the cached KMS public key — no internet required in flight.
4
Tamper alarm → automatic read-only mode
If the edge node detects physical tampering or a sensor anomaly, the telemetry event is classified as aviation-safety-sensitive and trips the cloud circuit breaker instantly. All mutating operations return 503. Auditors and on-call are paged automatically. The full chain is preserved for investigation.
Pricing

Simple, per-aircraft pricing

Annual contracts. No per-seat fees. No data egress charges for telemetry within eu-north-1.

Business Aviation
€30k / aircraft / year
Part-135 · Fractional · Corporate
  • Fleet registry up to 10 aircraft
  • Edge node enrolment & management
  • Signed content packs (unlimited)
  • Telemetry ingest + tamper detection
  • Full audit log with hash-chain proof
  • AS9100D & DO-326A evidence exports
  • 1-day SLA on P1 incidents
Get started
MOST POPULAR
Regional Airline
€200k / fleet / year
Part-121 · EASA CAT · 10–60 aircraft
  • Everything in Business Aviation
  • Fleet up to 60 aircraft
  • Four-eyes prefetch policy gate
  • Multi-org operator roles
  • EASA 145.A.55 retention automation
  • ICAO Annex 19 SMS evidence
  • DPIA & RoPA templates included
  • 4-hour SLA on P1 incidents
  • Dedicated customer success
Request demo
Major Airline
Custom
100+ aircraft · IFE vendor co-funding
  • Everything in Regional
  • Unlimited fleet size
  • White-label control plane option
  • MRO integration support (EASA 145)
  • STC installation partner coordination
  • Custom data residency
  • 1-hour SLA on P1 incidents
  • Executive escalation path
Talk to us
API

Production API — live today

Full OpenAPI 3.0 spec available. JWT authentication via identity-core. All endpoints return structured errors and correlation IDs.

AEAN Control Plane · api.wavult.com/aero
All systems operational
GET /health Service health + circuit breaker state ✓ Live
POST /v1/fleet/aircraft Register aircraft (aero_admin) ✓ Live
GET /v1/fleet/aircraft/:tail/history Full hash-chained tail history ✓ Live
POST /v1/fleet/:tail/edge-nodes Enrol edge node (TPM attestation) ✓ Live
POST /v1/content-packs Publish signed content pack (aero_curator) ✓ Live
GET /v1/content-packs/sync Edge node sync — returns active packs for tail ✓ Live
POST /v1/telemetry/ingest Batch telemetry + tamper alarm ingest ✓ Live
POST /v1/prefetch-policies Create prefetch policy (aero_operator) ✓ Live

Ready to put your fleet on the edge?

One conversation with our team is all it takes to understand whether AEAN fits your operation. No sales process theatre.

Book a 30-minute call →