Security

Your records, protected and provable.

Maintenance records are legal records. MRO Tracker is built so every entry shows who did the work and when, and only the right people can see or change it.

Row-level securityMFA and single sign-onWho and when on every entry
New: electronic signatures and signing historyHow MRO Tracker sign-offs line up with the FAA's guidance, AC 120-78B, with a free PDF brief.
Read more →
New: Part 5 SMS is due May 28, 2027What Part 135 and air tour operators need, what inspectors look for, and signatures that hold up under AC 120-78B. Free PDF brief.
Read more →
Access control

The right people see the right records

  • Data separated by group. Row-level security in the database keeps each organization and group to its own aircraft, work and records.
  • Roles for every job. App, flight and maintenance roles control who can administer, dispatch, inspect, perform RII or sign off work.
  • Sign-in rules you set. Password rules per organization for length and character types, with every user signing in with their own account.
  • Multi-factor sign-in. A second step after the password: an authenticator app, an email code or a text code, with recovery codes as a backup. Admins can require it for everyone in their organization.
  • Single sign-on. Sign your team in through your own identity provider, such as Okta, Microsoft Entra ID, Google Workspace or OneLogin, over SAML or OIDC. MRO Tracker never sees their company password.
Sign-offs

Signatures that hold up

  • Sign the way your shop works. Draw, PIN or biometric signatures, with location recorded when allowed and one to five signature levels, each tied to a role.
  • Signed records lock. Once signed, an entry cannot be quietly edited. Changing it needs an approver and a reason, and both are kept on the record.
  • Flight sign-offs are tamper-evident. Releases, FRAT and weight and balance sign-offs are stored with a SHA-256 hash in an append-only log.
  • Mapped to FAA guidance. See how sign-offs and signing history line up with AC 120-78B: Electronic signatures.
Every change recorded

A full audit trail

Every administrative action is logged: role changes, invitations, group and billing changes, imports, overrides and flight-ops settings.

Login history shows each user's sign-ins, so you can answer who had access and when.

Life-limited parts keep their own signed history: every install, removal, overhaul, life correction and approved extension is recorded, back to birth, and limits and extensions are approved by the Director of Maintenance.

Your data stays yours

Export your records to CSV or PDF whenever you want. Plans are month to month, and leaving never means losing your history.

Security questions or a vendor review? Contact us and we will walk your team through it.