Skip to main content
The safety endpoints cover the Safety Management System (SMS) required by 14 CFR Part 5. They are split across two route groups:
  • /api/v1/sms/* — Report lifecycle, investigations, CPAs, evidence, AI triage, compliance, and metrics
  • /api/v1/safety/* — Risk assessments (SRM), risk controls, safety reports, hazard notifications, and audit log
All endpoints require authentication unless otherwise noted.

SMS Reports

Manage safety reports (hazard, incident, near-miss, concern, observation, audit finding). Base path: /api/v1/sms/reports Anonymous reporting is available at /api/v1/sms/public/anonymous-report (no auth required, rate-limited to 10 requests per minute).

List Reports

Update Report Status

Report statuses: submitted, under_review, corrective_action, closed

Investigations

Manage safety investigations linked to reports. Base path: /api/v1/sms/investigations

Create Investigation

Investigation types: standard, full, rapid Statuses: assigned, in_progress, pending_review, closed, cancelled Update fields include: rootCause, contributingFactors, immediateActions, findings, recommendations, lessonsLearned, investigationMethod, findingSummary

Corrective and Preventive Actions (CPAs)

Manage CPAs generated from investigations or standalone. Base path: /api/v1/sms/cpas

Create CPA

CPA types: corrective, preventive Statuses: open, in_progress, completed, verified, cancelled Verification fields: verifiedBy, verifiedAt, effectivenessRating, recurrenceCheckDate

Risk Assessments (SRM)

Manage Safety Risk Management assessments per 14 CFR 5.53. Base path: /api/v1/safety/risk-assessments

Create Risk Assessment

Source types: report, investigation, audit, external, proactive Severity: 1 (negligible) to 5 (catastrophic) Likelihood: A (frequent) through E (extremely improbable) Risk levels: minimal, low, moderate, elevated, high Statuses: draft, active, mitigated, accepted, closed

Risk Controls

Manage controls linked to risk assessments per 14 CFR 5.55. Base path: /api/v1/safety/risk-controls

Create Risk Control

Control types: engineering, administrative, ppe, training, procedure Statuses: proposed, implementing, implemented, verified Effectiveness: effective, partially_effective, ineffective

Hazard Notifications

Track notifications sent to external parties about identified hazards per 14 CFR 5.57. Base path: /api/v1/safety/hazard-notifications Notified party types: certificate_holder, manufacturer, service_provider, regulator, other Notification methods: email, letter, phone, in_person, electronic_system, other

Evidence Management

Upload and manage evidence files (photos, documents) attached to safety records. Base path: /api/v1/sms/evidence Evidence files are stored securely and can be attached to reports, investigations, and CPAs.

SMS AI Triage

AI-powered analysis of safety data. Base path: /api/v1/sms/ai AI features include automated triage, trend analysis, and natural language report processing with semantic search capabilities.

Compliance Tracking

Track SMS compliance items and generate Declaration of Compliance (DOC) documents. Base path: /api/v1/sms/compliance

Safety Metrics

Aggregate safety performance metrics and SPI tracking. Base path: /api/v1/sms/metrics

Safety Audit Log

An append-only audit trail of all safety record changes. Base path: /api/v1/safety/audit-log
The safety audit log is append-only and cannot be modified or deleted, in compliance with 14 CFR 5.97 (SMS records retention).
Last modified on April 11, 2026