For aircraft operators and aviation organisations
Three regimes now bear on an operator's data and systems.
An operator working in more than one country answers to more than one data-protection law, to Part-IS and to the EU AI Act. Lexaero builds one framework that covers all of them, and its founder has built one before. Each client's documents and findings stay confidential to that client.
Why now
All three are already in application
- 1 Sep 2023Swiss FADP. The revised Swiss data-protection act applies wherever an operator has a Swiss entity or handles data with effect in Switzerland. Its fines of up to CHF 250,000, for intentional breaches of specified duties, are aimed at the responsible individuals, where the GDPR fines the company.In force
- 22 Feb 2026EASA Part-IS. Information-security management under Regulation (EU) 2023/203 became mandatory for AOC holders. Electronic flight bags and technical logs put flight-critical data in audit scope.Applies
- 2 Aug 2026EU AI Act. The transparency obligations joined the AI-literacy duty already in application. The high-risk obligations were postponed in July 2026 and now start on 2 December 2027, or on 2 August 2028 for AI built into regulated products.Applies in part
Experience
Built, delivered and in daily use
A framework designed and built by the founder is in daily use at a group in this sector with companies in several countries.
Full data-protection framework
Several data-protection regimes as one system: policies, records of processing, processor agreements and transfer terms across the group.
EASA Part-IS gap review
A full gap assessment against Part-IS, mapped to existing safety and compliance management.
AI policy and an internal AI assistant
A board-adopted AI policy and a working internal compliance assistant.
One adviser across the group
Commercial and regulatory work for the same group, by the same adviser.
The entry point for operators
The Regulatory Readiness Diagnostic
Three weeks, fixed fee, every entity in the group. Data protection under every regime that applies, a Part-IS gap assessment that includes electronic flight bags, technical logs and cloud-based scheduling and crew systems, and an AI inventory classified under the AI Act.
Why Lexaero
Sector experience
Part-IS and its integration with a safety management system, learned in practice inside the sector. The fee does not pay for learning the basics of your industry.
Founder-delivered
Every deliverable is produced by the founder. You deal with one person from the first call to the debrief.
Fixed fees
Scoped engagements at fixed prices. You know the number before the work starts.
Next step
Thirty minutes, your structure against the three regimes.
Describe the group in a few lines and name two time slots. A reply normally follows within one working day.