ZAA Portal Wireframe Book

End-to-end workflows10 journeys · 76 steps

Each workflow is a real journey through the system, named by what it produces. Every step cites the screen it happens on, so the workflows and the wireframes are two views of the same design. Decision points name what the system does when the normal path does not apply — which is where most of the regulatory weight sits.

WF-01

Issue a staff authorisation

Produces — An active authorisation record and its certificate, replacing ZAFC-005

ActorsTraining Manager (nominates) · Quality Manager (verifies and issues) · Holder (accepts)

TriggerA person is needed to instruct, assess or examine a subject they are not currently authorised for.

BasisMTOE 3.7.4 · MCAR-147.A.105

STA-PERSONPerson recordSTA-QUALQualifications and evidenceAUT-FLOWNomination and verificationCMP-ASSESSCompetence assessmentAUT-RECAuthorisation recordTRN-FILEIndividual training file

STA-PERSON
Training Manager opens the person's record and checks the completeness checklist. Anything missing is collected before nomination, not during it.
STA-QUAL
Qualifications and evidence are recorded and verified against the original documents. An unverified qualification cannot support the nomination.
AUT-FLOW
Nominate: the proposed scope is built from the approval — course, type, module, category, location. The reason for the nomination is recorded.
AUT-FLOW
Evidence: the system assembles what it holds and names what is missing. The nominator attaches the remainder.
CMP-ASSESS
Where the scope requires it, a competence assessment is carried out against the role template. Each criterion is scored with an evidence note.
AUT-FLOW
Verify: a second, independent person works the eligibility criteria one by one. The system blocks the nominator from verifying their own nomination.
AUT-FLOW
Issue: available only when every criterion passes. The certificate is generated and numbered at this point.
AUT-REC
Accept: the holder acknowledges the scope and its limitations. The authorisation confers nothing until they do.
TRN-FILE
Any continuation training the authorisation depends on is now visible in the holder's training file with its computed due date.

Decision points

Eligibility gap → the nomination stays open with the gap named; it does not fail, and it does not proceed.
Independence conflict → verification is refused and a different verifier is required.
Holder declines → the authorisation is withdrawn before it ever becomes active.

WF-02

Keep an authorisation current

Produces — A recorded review decision and a reset review interval, or a suspension

ActorsQuality Manager · Holder · Training Manager

TriggerThe authorisation's computed review date comes within ninety days.

BasisMTOE 3.7.4 — review interval not exceeding 24 months

NTF-CTRNotifications and communicationsAUT-REVIEWAuthorisation review queueTRN-FILEIndividual training fileAUT-RECAuthorisation record

NTF-CTR
The ninety-day notification fires to the holder and the Quality Manager from the AUT-REVIEW-90 template.
AUT-REVIEW
The review appears in the queue, ordered by date, with the consequence of inaction stated.
AUT-REVIEW
The evidence panel is populated: activity since last review, audit findings involving the holder, their students' examination performance, continuation training status, integrity concerns.
TRN-FILE
Outstanding continuation training is completed and evidenced; currency recomputes immediately.
AUT-REVIEW
The decision is recorded — continue, amend scope, suspend or withdraw — with its reason.
AUT-REC
On continue, the interval resets from the review date. On amend, the new scope is versioned and the holder re-accepts.

Decision points

Review date passes without a decision → the authorisation expires automatically and stops conferring scope that day.
Blocking training overdue → the authorisation suspends automatically; the suspension lifts when the training is recorded.
Integrity concern → withdrawal, which is final and requires a reason.

WF-03

Run a classroom course to certificate

Produces — A closed session record, examination results, and issued certificates

ActorsTraining Manager · Instructor · Examination Manager · Invigilator

TriggerA scheduled course date is reached, or an organisation books a closed cohort.

BasisMCAR-147.A.130 · MCAR-147.A.135 · MTOE Part 2

DEL-CALScheduling calendarDEL-SESSSession recordORG-ALLOCAllocate seatsDEL-ATTAttendance captureEXM-PAPERPaper generationEXM-SITSitting controlEXM-RESResults and analysisCER-ISSUECertificate issue and register

DEL-CAL
The session is created against a date, a room and an instructor. Conflicts and missing instructor authorisations are refused at this point, not discovered later.
DEL-SESS
The course version being delivered is fixed at creation. The course plan ZAFC-007 is generated from the session record.
ORG-ALLOC
Organisation students are allocated from seat pools with prerequisites checked; individual students arrive from their own orders.
DEL-ATT
Attendance is captured per day, on a phone if necessary, offline if necessary. Anyone below the attendance threshold is flagged as it happens.
DEL-SESS
The delivery record tracks what was actually taught against the syllabus. Deviations are recorded with their reason and how they were made good.
EXM-PAPER
A paper is generated against the module quota, from validated questions, with the preparer's independence from instruction checked.
EXM-SIT
The sitting runs: room checklist, identity checks, paper issue and count, invigilator checklist, irregularities, paper count back.
EXM-RES
Results are computed at 75 per cent with no penalty marking. Question analysis runs. ZAFC-004 is generated. The Examination Manager releases the results.
CER-ISSUE
Eligible candidates are issued certificates in bulk, numbered from the register against the current template version.
DEL-SESS
The closure checklist completes only when attendance, delivery record, deviations, feedback and results are all present.

Decision points

Attendance below threshold → certificate eligibility blocked; the candidate is shown with the failing condition named.
Examination failed → a resit is scheduled; the failed attempt remains in the record permanently.
Quota cannot be met from validated questions → the shortfall is reported by module and the sitting cannot proceed until it is resolved.

WF-04

Assess practical training at the aircraft

Produces — A signed practical assessment record, replacing ZAFC-009

ActorsPractical assessor · Student

TriggerA student reaches a practical task on the mandatory task list.

BasisMCAR-147.A.130 · MCAR-66 Appendix III

PRA-LOGPractical logbookREC-STUDStudent record and inspector pack

PRA-LOG
The assessor opens the logbook on a phone at the aircraft, against the task list organised by ATA chapter.
PRA-LOG
The task entry captures what was done, the aircraft, the date, the supervising instructor and the outcome.
PRA-LOG
Photographic evidence is attached at the point of assessment. Offline, the capture queues and is visibly marked as queued.
PRA-LOG
The assessor signs. The system will not offer the signature control to an assessor whose authorisation does not cover the task.
PRA-LOG
The student acknowledges. Both signatures bind to this version of the entry.
REC-STUD
The entry appears in the student record and counts towards the mandatory task list and certificate eligibility.

Decision points

Assessor not authorised for the task → the signature control is absent. The assessment cannot be recorded by that person.
Outcome requires reassessment → the task stays open and the reassessment is tracked as its own entry.
Entry corrected after signing → both signatures invalidate and must be given again.

WF-05

Organisation buys and allocates training

Produces — A seat pool, allocated enrolments, and a compliance position the client can show its own regulator

ActorsOrganisation administrator · ZAA Commerce

TriggerA maintenance organisation needs to train a group against its own regulatory requirement.

BasisCommercial — no regulatory driver

PUB-ENQCorporate enquiryCOM-QUOTEQuotation builderORG-ORDOrders and quotationsACC-PAYCheckout and paymentORG-SEATSSeat poolsORG-IMPORTBulk importORG-SETOrganisation settingsORG-ALLOCAllocate seatsORG-COMPCompliance dashboard

PUB-ENQ
The organisation states its requirement, headcount and timing, and — importantly — the regulatory requirement driving it.
COM-QUOTE
Commerce builds a quotation from the applicable price list with group breaks applied, sets a validity date, and issues it as a numbered ZAOF document.
ORG-ORD
The administrator accepts the quotation inside its validity; it converts to an order at the quoted price.
ACC-PAY
Payment is on account against a purchase order reference, inside the credit limit.
ORG-SEATS
The seat pool appears with its expiry date and what it covers.
ORG-IMPORT
The roster is imported from a spreadsheet; invalid rows are reported individually and returned as a corrected file.
ORG-SET
The administrator maps their own regulatory requirements to ZAA courses once. Everything downstream reads this mapping.
ORG-ALLOC
Seats are allocated to named people with prerequisites checked per person. Each allocated person is notified with their start instructions.
ORG-COMP
The compliance dashboard shows who is current, due and overdue, in the two-year cycle shape. The evidence pack is the thing handed to their auditor.

Decision points

Order beyond credit limit → held for a commercial decision rather than refused.
Prerequisite failure → that person's allocation blocks; the rest of the batch proceeds.
Pool approaching expiry with unallocated seats → flagged ninety days out with the number that will be lost.

WF-06

Individual buys and completes an e-learning course

Produces — A completed course, an examination result and a certificate

ActorsIndividual learner

TriggerAn engineer finds the course through search or a colleague's certificate.

BasisCommercial — the course must be outside the approved scope while distance learning is unapproved

PUB-CATCourse cataloguePUB-COURSECourse detailACC-CARTCartACC-PAYCheckout and paymentACC-DONEOrder confirmationLRN-PLAYCourse launchLRN-PROGCourse progressLRN-EXAMExamination — candidate viewLRN-CERTMy certificates

PUB-CAT
The catalogue is filtered; every card carries its approved or not-approved marker.
PUB-COURSE
The course detail states the scope position plainly, lists outcomes, syllabus, prerequisites and the certificate produced.
ACC-CART
Price, promotional code and tax are shown as separate lines. The price version is held for the cart's lifetime.
ACC-PAY
Card payment; terms accepted with the terms version recorded against the order.
ACC-DONE
Access is provisioned before the confirmation renders. Start now launches the course directly.
LRN-PLAY
The course launches through LTI 1.3 into a full-bleed frame. The learner never sees Moodle.
LRN-PROG
Progress and attempts are written back to the portal. The eligibility checklist shows what remains.
LRN-EXAM
The end-of-course assessment runs; the score is not shown until released.
LRN-CERT
The certificate is downloaded with its verification link and QR code.

Decision points

Course is inside the approved scope → the e-learning purchase option is absent, not disabled. The learner is offered scheduled classroom dates instead.
Access period expires before completion → the learner is warned at thirty days and offered an extension.
Assessment failed → a further attempt is permitted per the course rules; every attempt is retained.

WF-07

Revise a controlled document

Produces — An issued revision, distributed and acknowledged, with CAA approval where required

ActorsDocument owner · Quality Manager · Accountable Manager · MCAA

TriggerA regulatory change, an audit finding, or a change in how ZAA works.

BasisMCAR-147.A.140 · MTOE Part 1

DOC-REGDocument control registerDOC-REVDocument revision workflowCHG-CAARegulatory change and CAA interface

DOC-REG
The document is found in the register; if it is new, the next number in its series is allocated so two people cannot take the same one.
DOC-REV
Draft: the revision is written with its highlights and effective date captured alongside.
DOC-REV
Assess: the change is classified minor or major. The classification decides whether the CAA must approve before issue.
DOC-REV
Review and approve: reviewers and approvers are named; each records their decision.
CHG-CAA
For a major change, a submission is raised and tracked. Issue is unavailable until the approval is recorded.
DOC-REV
Issue: on the effective date, to the holder list.
DOC-REV
Distribute and acknowledge: outstanding acknowledgements stay visible until every holder has read it.

Decision points

Major change → CAA approval required before issue; the Issue action is absent until the approval is logged.
Minor change → issued under indirect approval, with the assessment recorded.
Acknowledgement outstanding past the effective date → visible on the Quality Manager's home tiles.

WF-08

Audit finding to closure

Produces — A closed finding with verified effectiveness

ActorsAuditor · Quality Manager · Action owner

TriggerAn internal audit, a CAA audit, or an internal report.

BasisMCAR-147.A.130 quality system · MTOE 3.4

QLT-PROGAudit programmeQLT-FINDFindingSAF-HAZHazard log and risk registerQLT-REVAnnual review pack

QLT-PROG
The audit is scheduled in the annual plan with an auditor whose independence from the area is checked.
QLT-FIND
The finding records the requirement breached and the evidence — not an observation.
QLT-FIND
Root cause analysis is completed. The interface will not accept a corrective action before it.
QLT-FIND
Corrective and preventive actions are raised separately, each with owner, due date and the evidence expected to close it.
SAF-HAZ
Where the finding reveals a hazard, it is entered in the register with an initial and residual risk assessment.
QLT-FIND
Closure: the expected evidence is attached and the effectiveness verification is carried out at a later date.
QLT-REV
The finding, and any recurrence, appears in the annual review pack automatically.

Decision points

Evidence not attached → the finding cannot close.
Same requirement breached again → flagged recurrent, which changes how it is reviewed.
Due date missed → an extension is recorded with its reason and remains visible in the history.

WF-09

Answer a CAA inspection

Produces — A dated inspector pack and a logged access trail

ActorsQuality Manager · MCAA inspector

TriggerA scheduled or unscheduled CAA audit.

BasisMCAR-147.A.140 · MCAR-147.A.125

CHG-CAARegulatory change and CAA interfaceINS-VIEWCAA inspector viewREC-STUDStudent record and inspector packSTA-PERSONPerson record

CHG-CAA
A named, time-boxed, read-only inspector account is granted. The grant expires on its own date.
INS-VIEW
The inspector searches staff and student records. No create, edit or delete control appears anywhere.
REC-STUD
A student file is produced as a dated pack: enrolments, attendance, examination records and analysis, practical assessments, certificates.
STA-PERSON
A staff file is produced the same way: qualifications, authorisations, training, competence assessments, evidence.
CHG-CAA
The compliance checklist shows evidenced and unevidenced items, each unevidenced item linking to what would close it.
CHG-CAA
Every record the inspector opened is in the access log, which the Quality Manager can read.

Decision points

Finding raised by the inspector → entered as a finding and follows WF-08.
Grant expires mid-audit → extended explicitly, never rolled over silently.

WF-10

Recurrent and continuation training cycle

Produces — A current workforce and the evidence that they are

ActorsTraining Manager · Staff member

TriggerThe annual training plan, or a computed due date falling inside the warning period.

BasisMCAR-147.A.105 · MTOE 3.8

TRN-REQTraining requirement rulesTRN-BOARDCurrency boardTRN-FILEIndividual training fileNTF-CTRNotifications and communicationsDEL-SESSSession recordQLT-REVAnnual review pack

TRN-REQ
Requirements are defined once: what, who it applies to as a rule, how often, what evidence satisfies it, and whether being overdue blocks an authorisation.
TRN-BOARD
The currency board shows people against requirements. Filtering by status answers who is overdue in one step.
TRN-FILE
The individual file shows the computed due dates and what is at risk if they pass.
NTF-CTR
Reminders fire from templates on the configured schedule, to the person and their manager. The trail is what answers 'nobody told me'.
DEL-SESS
Training is delivered — a session, an e-learning course, or a briefing — and recorded with its evidence.
TRN-FILE
Currency recomputes immediately on recording. Any suspended authorisation reinstates.
QLT-REV
Workforce currency is one of the twelve agenda items populated automatically for the annual review.

Decision points

Blocking requirement overdue → dependent authorisations suspend automatically until the training is recorded.
Interval changed by a regulatory update → configuration change with approval; every affected due date recomputes and the count of people who move is shown before the change is applied.
Point-in-time question at audit → answered from stored history, not from today's state.

Public6 screens

PUB-HOME

Home

Public

The academy's front door. Says what ZAA is approved to do, puts the two strongest calls to action above the fold, and routes corporate visitors away from the consumer path immediately.

ZZikura Aviation AcademySign inBrowse courses

MCAR-147 approved maintenance training organisation

Basic knowledge · DHC-6 type training · safety and human factors

Browse coursesTraining for my organisation

Next scheduled

DHC-6 type — 14 Oct, Fuvahmulah

Safety & HF Part 1 — online, any time

MCAR-145 awareness — 2 Nov, Malé

Verify a certificate

Approval ref · contact · policies

Walkthrough

Visitor arrives from a search result, a QR code on someone's certificate, or a link in a quotation.
The masthead states what ZAA is approved to do and carries the approval reference, so the visitor can check it before reading anything else.
Two paths are offered side by side and given equal weight: buying for yourself, and training for your organisation. A corporate visitor is routed to the enquiry form rather than the cart.
Next scheduled courses are listed with dates and locations so a visitor with a deadline can see immediately whether ZAA can meet it.
A signed-in visitor sees My learning in place of Sign in; nothing else on the page changes.

Rules enforced here

The approval reference and its expiry are read from the approval record, never typed into a content page.
A course outside the approved scope is never described on this page in language that implies approval.

Leads to

PUB-CAT PUB-DATES PUB-VERIFY PUB-ENQ ACC-AUTH

Actors: Visitor
Regions: Masthead with approval reference · Two-path split: buy for yourself / buy for your organisation · Next scheduled courses · Certificate verification entry · Approval and contact footer
States: Signed out (default) · Signed in — masthead swaps to My learning
Requirements: CAT-01CAT-02CAT-04CAT-08CER-07CAT-06

PUB-CAT

Course catalogue

Public

Browse and filter everything on sale. Each card states plainly whether the course sits inside the MCAR-147 approval, because that is the first thing a professional buyer needs to know.

ZCourses

Search courses

Filters

Subject

Regulation

Delivery method

Level

Language

Price

18 courses

Safety Management & HF · Part 1 Not approved scope · e-learning · 2 h

Safety Management & HF · Part 2 Not approved scope · e-learning · 1½ h

DHC-6 Type training B1.1 MCAR-147 approved · classroom

MCAR-145 awareness Not approved scope · e-learning

Basic knowledge Module 7 MCAR-147 approved · classroom

General familiarisation DHC-6 Not approved scope · e-learning

Walkthrough

Visitor filters by subject, regulation, delivery method, level, language or price; filters combine and the result count updates live.
Each card carries an approved or not-approved marker taken from the course record — the marker is part of the card, not a badge that can be omitted.
Sorting by next available date surfaces courses the visitor can actually start soon rather than the full catalogue.
An empty result offers the waiting list and the corporate enquiry rather than a dead end.

Rules enforced here

The approved marker is derived from CRS-SCOPE. A course cannot be listed as approved without an approval reference on its course record.
Filter state is held in the URL so a filtered catalogue can be sent to a colleague.

Leads to

PUB-COURSE PUB-DATES PUB-ENQ

Actors: VisitorLearner
Regions: Filter rail: subject, regulation, delivery, level, language, price · Result grid · Approved / not approved marker on every card · Sort and result count
States: No filters · Filtered · No results · Course not currently scheduled — shows register-interest
Requirements: CAT-01CAT-02CAT-03CAT-04CAT-09PRD-02

PUB-COURSE

Course detail

Public

Everything a buyer needs to commit: outcomes, syllabus, duration, who it is for, what certificate it produces, and the approval status stated without ambiguity.

ZCourseSign in

Safety Management & Human Factors — Part 1

Not within ZAA's MCAR-147 approved scope. Professional development course.

Learning outcomes

Explain why this training is required

Find a hazard and judge its risk

Describe a just culture

…

Syllabus

ModuleTitleHours

1Why this subject exists1.0

1aSafety risk management1.5

2Safety culture1.0

Certificate issued on completion

MVR 1,850 · USD 120

Deliverye-learning

Durationabout 2 hours

Access12 months

Add to cartBuy for my organisation

Free preview — first module

Walkthrough

Title block states plainly whether this course sits inside the MCAR-147 approval and, if it does, quotes the approval reference.
Buy panel shows price in the selected currency, the next dates, and remaining seats; for an e-learning product it shows the access period instead.
Outcomes, syllabus, duration and the certificate produced are shown before the price panel is scrolled past, so the visitor buys knowing what they get.
Prerequisites are listed and, for a signed-in learner, checked against their record — met prerequisites are ticked, unmet ones explain what is missing.
Add to cart for an individual; Request a quotation for an organisation.

Rules enforced here

An approved course cannot show an e-learning purchase option while distance learning sits outside the approval — the option is absent, not disabled.
The certificate named here is the certificate template the course version actually produces.

Leads to

ACC-CART PUB-DATES PUB-ENQ ACC-AUTH

Actors: VisitorLearner
Regions: Title block with approval statement · Buy panel — price, currency, dates, seats · Outcomes and syllabus · Certificate produced · Prerequisites · Preview
States: E-learning — buy and start now · Scheduled — choose a date · No dates — register interest · Prerequisite not met — blocked with reason
Requirements: CAT-01CAT-02CAT-05CRS-04CRS-10PRD-06PRD-12PRD-13B2C-07

PUB-DATES

Scheduled dates and booking

Public

Pick a date for a classroom or virtual course, see the seats left and the booking cut-off, and join a waiting list where nothing suits.

ZChoose a date

DatesLocationSeats

14–18 Oct 2026Fuvahmulah6 of 16Book

09–13 Dec 2026Malé14 of 16Book

02–06 Feb 2027FuvahmulahFullJoin list

Booking closes 7 days before the start date. Cancellation policy applies.

Walkthrough

Scheduled sittings are listed with date, location, language, instructor availability and seats remaining.
Booking cut-off and cancellation terms are shown against each date, not buried in terms and conditions.
A full date offers the waiting list; joining it captures the requirement so Commerce can see unmet demand.
Selecting a date puts that specific session in the cart, not the course in general.

Rules enforced here

Seats remaining is computed from the class size limit on the session, which itself comes from the course version and the room.
A session past its cut-off cannot be booked from the public site; it can still be booked by staff with a reason recorded.

Leads to

ACC-CART PUB-COURSE PUB-ENQ

Actors: VisitorLearner
Regions: Date list with location and seats · Cut-off and cancellation policy · Waiting list
States: Seats available · Nearly full · Full — waiting list · Closed — cut-off passed
Requirements: CAT-04CAT-09DEL-01DEL-02B2C-07PRD-13

PUB-VERIFY

Certificate verification

Public

A third party holding a certificate number, or scanning its QR code, confirms whether it is genuine. Shows only what is already printed on the certificate and nothing more.

Verify a Zikura certificate

Certificate number

Verify

Result

Valid

ZAA/COR/2026/0184

HolderAhmed Nazim

CourseDHC-6-300 Type training B1.1

Issued22 Aug 2026

StatusValid

Nothing beyond what appears on the certificate is shown.

Walkthrough

A third party — an employer, an auditor, a regulator — enters a certificate number, or opens the page from the QR code on the certificate itself.
The result panel confirms or denies in one line, then gives holder name, course, issue date and current status.
A revoked or superseded certificate says so explicitly rather than simply failing to verify.
There is no navigation from this page into the rest of the portal and no way to enumerate certificates.

Rules enforced here

Verification returns only what a certificate holder would expect to be public. No examination score, no attempt history, no contact details.
Rate limiting and non-sequential certificate numbers prevent the register being harvested.

Leads to

PUB-HOME

Actors: Anyone — no account
Regions: Number entry · Result panel · Status · No navigation into the rest of the portal
States: Valid · Superseded by a replacement · Revoked · Not found
Requirements: CER-06CER-07CER-08CER-10EXT-01DAT-05

PUB-ENQ

Corporate enquiry

Public

Capture an organisation's requirement and route it into the sales pipeline, rather than losing it to an email address on a contact page.

ZTraining for your organisation

Organisation

Contact name

Telephone

Courses of interest

Approximate headcount

Preferred timing

Send enquiry

What happens next

We reply within one working day

A quotation is issued against your requirement

Accepted quotations convert to an order and seat pool

Walkthrough

Organisation gives its details, the courses or competencies it needs, headcount and timing.
The form asks what regulatory requirement is driving the request — the answer is what lets ZAA propose the right course rather than the one that was named.
On submit, the enquiry creates a lead against a prospective organisation account and routes to Commerce.
The visitor is told what happens next and when, not merely thanked.

Rules enforced here

An enquiry never creates a user account or a purchase — it creates a lead a person must act on.

Leads to

COM-QUOTE PUB-HOME

Actors: Visitor
Regions: Organisation details · Requirement — courses, headcount, timing · Submit · What happens next
States: Empty · Submitted — reference issued
Requirements: CAT-08B2B-09EXT-05EXT-06

Account6 screens

ACC-AUTH

Sign in and register

Account

One entry point for everyone. Staff and organisation administrators land on their own home after sign-in; nobody ever sees a Moodle login.

Password

Staff and organisation administrators are challenged for a second factor.

New here? Create an account

Walkthrough

Sign in, register and reset are one screen with three states rather than three pages.
Registration collects only what is needed to buy; identity evidence is collected later, at the point it is actually required.
A privileged role — any ZAA staff account, any organisation administrator — is challenged for a second factor before the session is established.
A failed sign-in says the credentials did not match; it never says which half was wrong.

Rules enforced here

Multi-factor authentication is mandatory for every ZAA staff account and every organisation administrator. It cannot be switched off per user.
An account locked by repeated failures is unlocked by the user through email, not by support, and the unlock is logged.

Leads to

LRN-HOME ORG-HOME STA-HOME ACC-PROF

Actors: LearnerOrg adminStaff
Regions: Sign in · Register · Reset password · Multi-factor challenge for privileged roles
States: Sign in · Register · MFA required · Locked after repeated failure
Requirements: B2C-01SEC-03SEC-09SEC-10LRN-01

ACC-CART

Cart

Account

Hold several products, show tax separately, apply a promotional code or a negotiated organisation price, and make the total unambiguous before payment.

ZCart

ItemQtyUnitTotal

Safety & HF Part 1 — e-learning11,8501,850

Safety & HF Part 2 — e-learning11,4501,450

Bundle discount — both parts−400

Promotional code

Subtotal2,900

Tax232

Total MVR3,132

Checkout

Walkthrough

Line items show the product, the specific session or access period, and the seat quantity.
Changing seat quantity re-prices against the group price breaks immediately, so the buyer sees the break before committing.
A promotional code is validated on entry and the discount appears as its own line, never folded into the price.
Tax is computed and shown as a line before the total, with the rule that produced it named.

Rules enforced here

A cart containing an approved course cannot be switched to an e-learning delivery at checkout.
Price is taken from the price version in force when the cart was created, and held for the cart's lifetime.

Leads to

ACC-PAY PUB-CAT

Actors: LearnerOrg admin
Regions: Line items with seat quantity · Promotional code · Tax line · Total in the selected currency
States: Empty · Individual purchase · Organisation purchase with negotiated price · Discount applied
Requirements: B2C-03PRD-06PRD-07PRD-08PRD-09PRD-10B2B-04

ACC-PAY

Checkout and payment

Account

Take payment by card through a tokenised gateway, or record a purchase order for an organisation buying on account. Terms acceptance is captured with its version.

ZCheckout

1. Cart2. Details3. Payment4. Done

Payment method

Card

Bank transfer

On account (organisations)

Card number

Expiry

Security code

Purchase order reference (optional)

Card data is handled by the gateway. Nothing is stored by the portal.

I accept the terms and the privacy notice

Pay MVR 3,132

Order summary

2 items3,132

Walkthrough

Billing details default from the profile or the organisation account.
An organisation on account sees Purchase order reference and Pay on account; an individual sees card payment. The two paths never appear together.
Terms are accepted explicitly, with the version of the terms recorded against the order.
On payment, the order is created and seats or enrolments are provisioned before the confirmation screen renders.

Rules enforced here

Pay on account is only offered to an organisation inside its credit limit; beyond it, the order is held and Commerce is notified.
A payment that authorises but fails to capture leaves the order in a named state — it never silently succeeds or silently disappears.

Leads to

ACC-DONE ACC-CART

Actors: LearnerOrg admin
Regions: Billing details · Payment method · Purchase order reference (organisations) · Terms acceptance · Pay
States: Card · Bank transfer · On account — invoice on terms · Payment failed · Payment succeeded after the browser closed
Requirements: B2C-03B2C-04B2C-12B2B-06B2B-07SEC-12PRD-07

ACC-DONE

Order confirmation

Account

Confirm what was bought and get the learner into the content in one click. For an organisation purchase, route straight to seat allocation instead.

ZOrder confirmed

Order ZAA-ORD-2026-0412 confirmed. Access granted.

Start Part 1 nowDownload invoice

What you bought

ItemAccess until

Safety & HF Part 115 Sep 2027

Safety & HF Part 215 Sep 2027

Walkthrough

Confirmation gives the order number, what was bought, and the invoice.
An individual is offered Start now, which launches the course directly.
An organisation is offered Allocate seats, which goes straight to the allocation screen with the new pool selected.
The confirmation email carries the same two actions, so the buyer can act later from their inbox.

Rules enforced here

Nothing on this screen is the only copy of anything — order, invoice and access all exist independently of the confirmation page.

Leads to

LRN-PLAY ORG-ALLOC ACC-INV

Actors: LearnerOrg admin
Regions: Confirmation and order number · Start now / allocate seats · Invoice download · What was bought
States: Individual — start now · Organisation — allocate seats · Scheduled course — joining details to follow
Requirements: B2C-05B2C-06B2B-04B2B-11

ACC-INV

Invoices and receipts

Account

A numbered, downloadable tax invoice for every order, with payment status and, for organisations, ageing.

ZInvoices

InvoiceDateAmountStatus

INV-2026-033115 Sep 20263,132PaidPDF

INV-2026-020402 Jul 202618,500Due 30 dPDF

INV-2026-011811 May 20266,400OverduePDF

Walkthrough

Invoices are listed with number, date, amount, status and payment date.
An on-account organisation additionally sees ageing — current, 30, 60, 90 — and its credit position.
Each invoice downloads as a PDF carrying the ZAA letterhead and the order it settles.
A credit note appears in the same list, linked to the invoice it credits.

Rules enforced here

An invoice is never edited. A correction is a credit note plus a new invoice.

Leads to

ORG-ORD ACC-PROF

Actors: LearnerOrg adminFinance
Regions: Invoice list with status · Download · Payment record · Ageing for on-account customers
States: Paid · Awaiting payment · Overdue · Refunded or partly refunded
Requirements: B2C-06B2C-09B2B-07B2B-08PRD-07

ACC-PROF

Profile and identity

Account

Personal details, communication preferences, and — for anyone enrolling on a course inside the approved scope — the identity evidence that must sit in the training record before enrolment completes.

ZProfile

DetailsIdentityNotificationsSecurity

Identity evidence is required before you can enrol on an MCAR-147 approved course.

Identity document type

Document number

Upload scan

Pending verificationSubmit

Walkthrough

Personal details, contact details and language preference are edited here and nowhere else.
Identity evidence — the document that will be checked at an examination sitting — is uploaded and its verification state shown.
Notification preferences separate regulatory notices, which cannot be switched off, from commercial messages, which can.
Security holds password change, multi-factor enrolment and active sessions.
Data export produces everything held about the person, which is also what satisfies a subject access request.

Rules enforced here

A learner cannot alter their own name once a certificate has been issued in it; a change is a request that a staff member verifies against evidence.
Regulatory notifications are not optional and the interface says so rather than offering a toggle that does nothing.

Leads to

LRN-HOME LRN-REC

Actors: LearnerStaff
Regions: Personal details · Identity evidence · Notification preferences · Security — password and MFA · Data export
States: Identity not provided — approved-scope enrolment blocked · Identity pending verification · Verified
Requirements: B2C-02STF-11REC-01REC-07DAT-05DAT-06NTF-07SEC-03

Learner6 screens

LRN-HOME

My learning

Learner

Everything the learner has bought or been allocated, in progress order, with the next action on each. The default landing page after sign-in.

ZMy learning

My learning

My record

Certificates

Orders

Profile

Continue

Safety & HF Part 1 — Module 4 of 7 · 58%

Courses

CourseProgressAccess until

Safety & HF Part 158%15 Sep 2027Resume

Safety & HF Part 2Not started15 Sep 2027Start

MCAR-145 awarenessComplete—Certificate

Upcoming

DHC-6 type training — 14 Oct, Fuvahmulah

Walkthrough

Continue where you left off is the first thing on the page and resumes the exact position in the exact module.
Courses in progress show percentage complete and what the next step is — a module, an assessment, a scheduled day.
Upcoming scheduled sessions show date, time, location and what to bring.
Access expiring within thirty days is flagged with the date and the option to extend.

Rules enforced here

Progress shown here is read from the learning engine but stored in the portal, so it survives the engine being replaced.
A learner sees their own record only. There is no route from this shell to anyone else's.

Leads to

LRN-PLAY LRN-PROG LRN-REC LRN-CERT

Actors: Learner
Regions: Continue where you left off · Courses with progress · Upcoming scheduled sessions · Expiring access
States: Nothing yet · In progress · Awaiting a scheduled date · Access expiring soon
Requirements: B2C-10LRN-11PRD-12NTF-02

LRN-PLAY

Course launch

Learner

The handoff to Moodle. The learner sees a ZAA page with the course running inside it; there is no Moodle login, no Moodle navigation and no visible change of system.

Zikura · Safety & HF Part 1

Exit to My learning

Course content — delivered by Moodle via LTI 1.3, framed in the portal

No Moodle branding, no Moodle login, no route into Moodle's own interface.

Walkthrough

The portal chrome reduces to a single bar carrying the course name, progress and Exit.
The content frame is full bleed; the learning engine is launched behind it and never named.
Progress is written back to the portal continuously, so closing the browser loses at most the current page.
Exit returns to My learning with the position saved.

Rules enforced here

The launch is an LTI 1.3 launch. The learner never sees a Moodle URL, a Moodle login, or Moodle branding.
If the engine is unreachable, the learner is told the content is temporarily unavailable and their progress is untouched — not reset.

Leads to

LRN-PROG LRN-HOME

Actors: Learner
Regions: Slim portal chrome · Full-bleed content frame · Exit returns to My learning
States: Launching · Running · Connection lost — progress preserved · Completed — result returned to the portal
Requirements: LRN-01LRN-04LRN-05LRN-11LRN-12LRN-13OPS-05

LRN-PROG

Course progress

Learner

Module-by-module progress, assessment results and what stands between the learner and their certificate.

ZSafety & HF Part 1

My learning

My record

Certificates

Orders

Profile

ModuleStatusScore

0 IntroductionComplete—

1 Why this subject existsComplete—

1a Safety risk managementComplete—

2 Safety cultureIn progress—

Final assessmentNot attempted—

Certificate eligibility

All modules complete — 3 of 7

Final assessment passed at 75% — not attempted

Walkthrough

Modules are listed with completion state and time spent.
Assessment attempts show date, score and outcome, with the pass mark that applied at the time.
The certificate eligibility checklist shows every condition — modules complete, attendance met, examination passed, practical assessed — and which are outstanding.
When every condition is met, the checklist says the certificate is being issued and by whom, rather than offering a button the learner cannot press.

Rules enforced here

A learner cannot issue their own certificate. Eligibility is visible; issue is a ZAA action.
Attempt history is never deleted, including attempts that failed.

Leads to

LRN-CERT LRN-REC LRN-PLAY

Actors: Learner
Regions: Module list with completion · Assessment attempts and scores · Certificate eligibility checklist
States: In progress · Assessment failed — retake available · Complete — certificate available · Blocked on an eligibility item
Requirements: LRN-04LRN-06LRN-10CER-02EXM-17

LRN-REC

My training record

Learner

The permanent record of everything the learner has done with ZAA — which they keep when they change employer, and can share with a new one.

ZMy training recordExportShare

My learning

My record

Certificates

Orders

Profile

CourseCompletedResultCertificate

DHC-6-300 Type B1.122 Aug 2026Pass 84%ZAA/COR/2026/0184

Safety & HF Part 1———

MCAR-145 awareness04 Jun 2026Pass 91%ZAA/CC/2026/0771

Practical assessments

DHC-6 task list — 112 of 112 assessed satisfactory

A share link lets an employer verify this record without an account.

Walkthrough

The complete record in one place: courses completed, examination results, practical assessments, certificates.
A share link can be generated for a prospective employer — time limited, revocable, and showing only what the learner chose to include.
Export produces a PDF in the same shape as the inspector pack, so the learner can hand it to anyone who asks.
Every entry names the ZAA record it came from, so a query can be traced.

Rules enforced here

The record is read-only to the learner. A correction is requested and evidenced, never edited.
A share link expires by default and every access to it is logged.

Leads to

LRN-CERT ACC-PROF

Actors: Learner
Regions: Completed courses · Examination results · Practical assessments · Certificates · Share link · Export
States: Private · Share link active · Share link revoked
Requirements: REC-01REC-07REC-10EXT-03CER-11DAT-06

LRN-CERT

My certificates

Learner

Download any certificate as a PDF and produce the verification link or QR code that proves it is genuine.

ZCertificates

My learning

My record

Certificates

Orders

Profile

NumberCourseIssuedStatus

ZAA/COR/2026/0184DHC-6-300 Type B1.122 Aug 2026ValidPDF

ZAA/CC/2026/0771MCAR-145 awareness04 Jun 2026ValidPDF

QR code

Verification link

zaa.edu.mv/verify/0184

Request a replacement

Walkthrough

Certificates are listed with number, course, issue date and status.
Download produces the PDF from the stored certificate record, not a re-render that could drift from what was issued.
The verification link and QR code are shown alongside, so the holder can prove it without involving ZAA.
A lost or damaged certificate is requested as a replacement, which reissues under the same number with a reissue note.

Rules enforced here

A replacement carries the original number and issue date. A new number would break the register.
A revoked certificate remains visible to its holder, marked revoked with the date and reason.

Leads to

PUB-VERIFY LRN-REC

Actors: Learner
Regions: Certificate list · PDF download · Verification link and QR · Replacement request
States: Valid · Superseded · Revoked · Replacement requested
Requirements: CER-06CER-07CER-08CER-11CER-12

LRN-EXAM

Examination — candidate view

Learner

The locked-down electronic examination. One question at a time, no navigation away, a clock that does not stop, and answers that survive a connection drop.

Module 7 examination — candidate A. Nazim

Q 14 of 60 · 48:22 remaining

A maintenance error can remain latent in the aircraft. What follows from that?

Option A

Option B

Option C

Option D

Flag for reviewNext

Navigation away from this page is disabled. Answers are saved as you go.

Walkthrough

The candidate is admitted by the invigilator; the paper opens already assigned to them.
One question at a time, with the option set, a progress indicator and the remaining time announced politely rather than flashing.
Questions can be flagged and returned to; the review screen lists flagged and unanswered questions before submission.
Submit asks once for confirmation and states that the paper cannot be reopened.
On submit, the candidate sees only that the paper was received — never the score.

Rules enforced here

Pass mark is 75 per cent with no penalty marking, per MCAR-66 Appendix II. The rule applied is recorded with the result.
The result is not shown to the candidate until the Examination Manager releases it.
Additional time is an accommodation recorded against the sitting, not a timer that can be switched off.
A network loss does not lose answers — they are held locally and reconciled.

Leads to

LRN-PROG EXM-RES

Actors: Learner
Regions: Question · Options · Progress and clock · Flag for review · Submit
States: Not started — identity check · In progress · Connection lost — resumes at the same question · Submitted · Time expired
Requirements: EXM-11EXM-12EXM-13EXM-14EXM-15PER-05

Organisation9 screens

ORG-HOME

Organisation dashboard

Organisation

The customer's own control room: seats left, people due, spend, and what needs doing this month. This screen is why a maintenance organisation buys from ZAA rather than elsewhere.

ZIsland Aviation Services — trainingBuy training

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

24seats left

7people due

3overdue

112records

7 people have safety and human factors training due within 90 days.

Compliance by requirement

stacked bar — current / due / overdue

Actions

Allocate 6 seats before 31 Oct

3 overdue — order recurrent training

Invoice INV-0204 due in 5 days

Walkthrough

Seats purchased, allocated and remaining across all pools, with the nearest expiry named.
Compliance summary answers the question the administrator is actually asked by their own regulator: how many people are current, how many are due, how many are overdue.
Actions needed lists only things this administrator can do something about — unallocated seats about to expire, people with no training mapped, a quotation awaiting acceptance.
Recent activity shows completions and certificate issues since last visit.

Rules enforced here

An organisation sees its own people and its own orders. It cannot see another client, and it cannot see ZAA's internal quality data.

Leads to

ORG-PEOPLE ORG-SEATS ORG-COMP ORG-ORD

Actors: Org admin
Regions: Seat and spend tiles · Compliance summary · Actions needed · Recent activity
States: Healthy · Seats expiring · People overdue · Credit limit reached
Requirements: B2B-02B2B-05B2B-08B2B-13B2B-15COR-02RPT-01

ORG-PEOPLE

People roster

Organisation

The organisation's own people, organised by department, each with their training status. An administrator can never see anyone outside their organisation.

ZPeopleImport CSVAdd person

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

Search people

Department: All

Status: All

NameDepartmentRoleStatus

Ahmed NazimLine maintenanceCertifying staffCurrentAssign

Ibrahim WaheedBase maintenanceMechanicDue 42 dAssign

Mariyam SanaPlanningPlannerOverdueAssign

Hassan RasheedStoresStorekeeperCurrentAssign

Walkthrough

The roster is filtered by department, role or compliance status.
Each row shows the person, their mapped requirements, their current status and their next due date.
A person is added individually or, for anything beyond a handful, through the bulk import.
Row actions allocate a seat, view the person's record, or mark a leaver.
Marking a leaver stops future allocation but never removes their completed training record.

Rules enforced here

A leaver's training record is retained — it is evidence that training happened, and MCAR-147.A.125 retention does not end when employment does.
An organisation administrator sees their people's training record, not their personal profile data.

Leads to

ORG-IMPORT ORG-ALLOC ORG-COMP

Actors: Org admin
Regions: Department filter · People table with status · Add person · Bulk import · Row actions
States: Empty · Populated · Import in progress · Person left the organisation
Requirements: B2B-03B2B-11B2B-13COR-02SEC-01

ORG-IMPORT

Bulk import

Organisation

Load a roster from a spreadsheet. Valid rows import; invalid rows are reported individually rather than failing the whole file.

ZImport people

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

1. Upload2. Map columns3. Review4. Import

46 rows valid · 3 rows have errors. Valid rows will import.

RowNameIssue

12—Name is empty

28A. LatheefEmail already belongs to another organisation

41S. MoosaDepartment not recognised

Download error reportImport 46 rows

Walkthrough

Download the template, which carries the exact columns and an example row.
Upload the completed file; the system maps columns and shows what it inferred.
The validation report lists every problem row with the row number and what is wrong — it does not reject the whole file.
Commit imports the valid rows and offers the invalid ones as a corrected file to fix and re-upload.

Rules enforced here

A partial import is the normal case, not an error. Valid rows import; invalid rows are reported individually.
An import never overwrites an existing person's training history — it matches on identity and updates only roster fields.

Leads to

ORG-PEOPLE ORG-ALLOC

Actors: Org admin
Regions: Template download · File upload · Column mapping · Validation report · Commit
States: Upload · Mapping · Validated with errors · Imported
Requirements: B2B-03UIX-06OPS-05

ORG-SEATS

Seat pools

Organisation

Prepaid places, what they cover, how many are left and when they expire. The mechanism that lets an organisation buy once and allocate over a year.

ZSeat poolsBuy seats

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

Safety & HF bundle 40 bought · 16 used · 24 left · expires 30 Jun 2027

DHC-6 type training 6 bought · 6 used · 0 left

24 seats expire on 30 June 2027. Allocate or extend before then.

Allocation history

DatePersonCourseAction

12 Sep 2026A. NazimSafety & HF Part 1Allocated

09 Sep 2026M. SanaSafety & HF Part 1Released — withdrew

Walkthrough

Each pool is a card showing what it covers, seats purchased, allocated, consumed and remaining, and the expiry date.
A pool inside ninety days of expiry is flagged with the number of unallocated seats that will be lost.
Buy more adds to an existing pool rather than creating a second pool for the same product.
Allocation history shows who consumed which seat and when.

Rules enforced here

A seat is consumed at enrolment, not at completion. A withdrawal before the course starts returns the seat; after it starts, it does not.
Expiry is a property of the purchase and is shown on every screen where the pool appears.

Leads to

ORG-ALLOC ORG-ORD COM-ORG

Actors: Org adminFinance
Regions: Pool cards with consumed / allocated / remaining · Expiry warning · Buy more · Allocation history
States: Active · Nearly depleted · Expiring · Expired · Depleted
Requirements: B2B-04B2B-05PRD-02PRD-12NTF-06

ORG-ALLOC

Allocate seats

Organisation

Put named people on a course from a pool, one at a time or many at once, with prerequisites checked before the seat is consumed.

ZAllocate seats

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

PoolSafety & HF bundle — 24 left

Filter people

Department: Line maintenance

NameStatusPrerequisite

Ahmed NazimCurrentMet

Ibrahim WaheedDue 42 dMet

Mariyam SanaOverdueNot met

2 selected · 22 seats will remain

Allocate

Walkthrough

Choose the pool, then pick people from the roster with the same filters as the people screen.
Prerequisites are checked for every selected person before the seat is consumed; failures are listed by name with what is missing.
Confirm allocates, enrols, and sends each person a notification with their start instructions.
The allocation appears immediately in the pool's history and in each person's record.

Rules enforced here

A prerequisite failure blocks that person's allocation, not the whole batch.
An allocation beyond the remaining seats is refused with the current figure shown, never queued.

Leads to

ORG-SEATS ORG-PEOPLE ORG-COMP

Actors: Org admin
Regions: Pool selector · People picker with filters · Prerequisite check · Confirm
States: Selecting · Prerequisite failure on one or more people · Not enough seats · Allocated — notifications sent
Requirements: B2B-04B2B-11CRS-10DEL-06NTF-01

ORG-COMP

Compliance dashboard

Organisation

Answers the client's own regulator question: who is current, against what, and by when. Built on the same currency engine ZAA uses for its own staff.

ZComplianceGap reportEvidence pack

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

Requirement: Safety & human factors — every 2 years

Population: all maintenance staff

PersonLast completedDueStatus

Ahmed Nazim22 Aug 202622 Aug 2028Current

Ibrahim Waheed28 Oct 202428 Oct 2026Due 42 d

Mariyam Sana03 Mar 202403 Mar 2026Overdue

Two-year cycle — people plotted against their due dates

Walkthrough

The administrator maps their own regulatory requirements to ZAA courses once; the mapping is then the basis of everything on this screen.
The person-by-requirement matrix shows current, due, overdue or never for every combination.
The two-year cycle view is the shape an MCAR-145 organisation actually needs for its own continuation training evidence.
The gap report lists exactly who needs what and by when, and can be turned into an allocation in one step.
The evidence pack produces a dated PDF with the certificates attached — the thing handed to an auditor.

Rules enforced here

Currency is computed from records and rules, never set by hand — the same engine ZAA uses for its own staff.
The evidence pack states the date and time it was produced and by whom; it is a snapshot, not a live document.

Leads to

ORG-ALLOC ORG-SET ORG-PEOPLE

Actors: Org adminClient quality manager
Regions: Requirement mapping · Person × requirement matrix · Two-year cycle view · Gap report · Evidence pack
States: Requirements not yet mapped · Mapped · Gaps present · Report scheduled
Requirements: COR-01COR-02COR-03COR-04COR-05COR-07RPT-11B2B-14COR-06

ORG-ORD

Orders and quotations

Organisation

The organisation's commercial history: quotations received, orders placed, invoices and their status.

ZOrders

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

Quotations

ReferenceIssuedValue

ZAOF-26/01402 Sep 2026MVR 74,000Accept

Orders and invoices

OrderInvoiceValueStatus

ORD-2026-0412INV-2026-03313,132Paid

ORD-2026-0298INV-2026-020418,500Due 5 d

Walkthrough

Quotations awaiting acceptance are first, with their validity date and an Accept action that converts to an order.
Orders show what was bought, when, and the pool or enrolments they created.
Invoices show status and ageing; the credit position is stated plainly.
Everything downloads.

Rules enforced here

Accepting a quotation creates an order at the quoted price even if the price list has since changed.
A quotation past its validity date cannot be accepted; it can be reissued by Commerce.

Leads to

ACC-INV ORG-SEATS COM-QUOTE

Actors: Org adminFinance
Regions: Quotations awaiting acceptance · Orders · Invoices and ageing · Credit position
States: Quotation open · Quotation accepted · Invoice due · Overdue — ordering blocked
Requirements: B2B-06B2B-07B2B-08B2B-09B2B-10

ORG-SET

Organisation settings

Organisation

Who administers the account, how requirements are mapped for this organisation, and where reports go.

ZSettings

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

AdministratorsRequirementsDepartmentsReportsAgreement

Our requirementSatisfied byInterval

Safety & human factorsZACP-002 Parts 1 and 224 months

MCAR-145 awarenessMCAR-145 e-learning36 months

Add mapping

Walkthrough

Administrators are added and removed here, with multi-factor enrolment enforced before the role takes effect.
Requirement mapping — the organisation's own regulatory requirements against ZAA courses — is maintained here and drives the compliance dashboard.
Departments structure the roster and the reporting.
Report subscriptions schedule the compliance report to named recipients.
The agreement and the negotiated price list are visible but not editable by the client.

Rules enforced here

An organisation cannot edit its own price list or agreement; it can read both. Changes go through Commerce.
Removing the last administrator is refused — an organisation account always has at least one.

Leads to

ORG-COMP ORG-HOME COM-ORG

Actors: Org admin
Regions: Administrators · Requirement mapping · Departments · Report subscriptions · Agreement and price list
States: Default · Editing a requirement mapping · Agreement expiring
Requirements: B2B-01B2B-02B2B-10COR-01COR-07SEC-01

ORG-CAT

Our catalogue

Organisation

What this client can actually buy: the public catalogue plus the courses built for them, at their negotiated prices, with their seat pools shown against each. One place, rather than an administrator holding the private course list in their head.

ZVilla Air — our catalogue

Search our courses

Request a quotation

Dashboard

Catalogue

People

Seat pools

Compliance

Orders

Settings

CourseAvailabilityOur priceSeats leftAction

ZACP-002 Safety and human factorsPublicMVR 3,20018 of 40Allocate

DHC-6-300 type theoryPublicMVR 14,800—Buy seats

Villa Air fuel system differencesBuilt for usIncluded in agreementUnlimitedAllocate

MCAR-145 awarenessPublicQuotation—Request quote

Self-enrolment

Enabled forLine maintenance department

WithinSeat pools only

ApprovalNot required

Our closed cohorts

Type theory — 14 Oct, Malé, 12 seats

Fuel differences — 02 Nov, Hangar 2, 9 seats

Prices shown are this organisation's negotiated prices. The standard price is not displayed alongside — a client sees what they pay, not what they saved.

Walkthrough

The catalogue shows the public courses and the organisation's own private courses together, each marked for what it is.
Prices are this organisation's negotiated prices where one exists, with seat pool availability shown against each course.
A course with seats available offers Allocate; one without offers Buy seats; one priced by agreement offers Request a quotation.
Where self-enrolment is enabled, a learner in the permitted departments can take a seat from a pool without waiting for an administrator.
Scheduled closed cohorts for this organisation are listed with their dates and seats.

Rules enforced here

An organisation sees the public catalogue plus what is assigned to it, and never another client's private course.
The standard price is not displayed beside the negotiated price. A client sees what they pay, not what they saved.
Self-enrolment consumes a seat from a pool and is bounded by that pool. It never creates a purchase.
A learner sees only what has been allocated to them, unless the organisation has enabled self-enrolment for their department.

Leads to

ORG-ALLOC ORG-SEATS ORG-ORD

Actors: Org adminLearner in an organisation
Regions: Available to us — public and private together · Our courses, marked as such · Our price with seat pool availability · Buy now or request a quotation · Self-enrolment allowance · Scheduled closed cohorts
States: Seats available in a pool · No pool — purchase required · Quotation required · Self-enrolment enabled · Course retired — existing enrolments continue
Requirements: B2B-01B2B-04B2B-12PRD-09PRD-10CAT-01COR-01

Staff · People11 screens

STA-HOME

Staff home

Staff · People

A role-shaped landing page. The Quality Manager sees findings and authorisation reviews; an instructor sees today's sessions and their own currency. Same screen, different tiles.

ZZikura Aviation Academy

Search people, courses, records

New

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

MCAR-147 approval valid to 30 Jun 2027 · scope consistent · 0 exceptions today

3authorisations due

5open findings

2overdue actions

14staff due training

My actions

Verify authorisation — I. Waheed (instructor)

Effectiveness check due — Finding 2026-014

Approve MTOE amendment request 26/03

Today

Module 7 examination — 09:00, Room 2

DHC-6 practical — 13:00, Hangar

Recurrent HF session — 15:30

Walkthrough

The approval status strip is the first line on the page: approval reference, expiry, and whether the daily scope consistency check found any exception.
My actions lists only what this person can act on — their own overdue training, findings assigned to them, authorisations awaiting their verification.
Role tiles differ by role: the Quality Manager sees findings and authorisation reviews; an instructor sees today's sessions and their own currency.
Today shows sessions, sittings and deadlines falling today.

Rules enforced here

The tiles a user sees are generated from their grants. A user without examination permissions has no examination tile and no examination item in the rail.

Leads to

STA-LIST AUT-REVIEW QLT-FIND DEL-CAL

Actors: All staff
Regions: Approval status strip · My actions · Role tiles · Today · Alerts
States: Quality Manager · Training Manager · Examination Manager · Instructor · Accountable Manager
Requirements: RPT-05SEC-01CHG-03CHG-04QLT-14TRN-05

STA-LIST

Staff register

Staff · People

Every person with a staff relationship to ZAA, with record completeness, authorisations held and currency status visible without opening anyone.

ZStaff registerGenerate ZAFC-001Add person

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Role: All

Authorisation: All

Status: Active

NamePositionAuthorisationsRecordCurrency

Ali Masnoon ZubairQuality ManagerExaminer · AssessorCompleteCurrent

Ibrahim WaheedInstructorInstructor (theory)2 gapsDue 30 d

Mariyam SanaPractical assessorAssessor — DHC-6CompleteOverdue

Hassan RasheedInvigilatorInvigilatorCompleteCurrent

ZAFC-001 is generated from this register, not maintained separately.

Walkthrough

The register is filtered by role, authorisation type or status — the three questions actually asked of it.
Each row shows record completeness against the MTOE requirements and currency against the training rules.
An incomplete record is visibly incomplete in the list, not only when opened.
Generate ZAFC-001 produces the List of Instructional and Examination Staff from live data, dated and signed.

Rules enforced here

ZAFC-001 is generated, never maintained by hand. If it disagrees with the register, the register is right.
A person cannot be removed from the register — a leaver is marked as such and their record retained.

Leads to

STA-PERSON TRN-BOARD AUT-REC

Actors: Quality ManagerTraining ManagerAdmin
Regions: Filters — role, authorisation type, status · Table with completeness and currency · Generate ZAFC-001 · Add person
States: All staff · Incomplete records only · Leavers included · Filtered by authorisation scope
Requirements: STF-01STF-02STF-08STF-09STF-12AUT-13TRN-04

STA-PERSON

Person record

Staff · People

One person, everything about them: the MTOE 3.8 minimum content, their authorisations, their currency, their evidence and their full history.

ZIbrahim WaheedRequest evidenceNominate for authorisation

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

InstructorRecord 2 gapsCurrency due 30 d

DetailsQualificationsAuthorisationsTrainingEvidenceHistory

Date of birthheld

Contact numberheld

Employment start01 Mar 2024

PositionTheoretical knowledge instructor

First authorisation14 Jun 2024

MTOE 3.8 completeness

Name ✓

Date of birth ✓

Contact number ✓

Experience ✓

Qualifications — 1 unverified

Training records ✓

First authorisation date ✓

Employment start ✓

Walkthrough

The identity header carries name, role, photograph, employment status and a single overall status derived from the tabs beneath it.
Tabs separate details, qualifications, authorisations, training, evidence and history; each tab is the one place its facts are edited.
The completeness checklist names every item the MTOE requires the record to hold and shows which are missing.
The audit trail is always visible at the foot, with the most recent entry never collapsed away.

Rules enforced here

A fact appears on many screens but is edited only here. Every other appearance links back and says so.
No field on this record can be deleted; a correction supersedes and both versions remain readable.

Leads to

STA-QUAL AUT-REC TRN-FILE CMP-ASSESS

Actors: Quality ManagerTraining Manager
Regions: Identity header with status · Tabs — details, qualifications, authorisations, training, evidence, history · Completeness checklist · Audit trail
States: Complete · Incomplete — checklist shows what is missing · Leaver — read only · Correction requested by the person
Requirements: STF-02STF-03STF-07STF-11STF-12REC-05REC-06INT-01

STA-QUAL

Qualifications and evidence

Staff · People

Structured qualification evidence — licences, certificates of recognition, experience periods, language, instructional training — with verification status, because an unverified qualification cannot support an authorisation.

ZQualifications — Ibrahim Waheed

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

DetailsQualificationsAuthorisationsTrainingEvidenceHistory

TypeDetailExpiryVerified

LicenceMCAA AML B1.1 — DHC-6-30031 Dec 2028YesView

Certificate of RecognitionDHC-6 type, theory + practical, level 3—YesView

English proficiencyIELTS 6.0—YesView

Instructional techniqueTrain the trainer, 2024—NoVerify

Experience relevant to the proposed scope

ElementYearsWhere gained

DHC-6 airframe and systems7.5IASL, Manta Aviation

Powerplant PT6A4.0IASL

Walkthrough

Qualifications are recorded by type — licence, type training, instructional technique, assessor training, human factors — each with its evidence attached.
Evidence carries an expiry where the underlying document has one, and the expiry drives the currency engine.
Verification is an explicit action by a named person against the original document, recorded with date and method.
Experience totals are accumulated by element so the eligibility check on an authorisation can read them rather than ask.

Rules enforced here

An unverified qualification cannot satisfy an authorisation eligibility criterion. It can be recorded; it cannot be relied on.
Evidence is held against the record. A link to a shared drive is not evidence.

Leads to

AUT-FLOW STA-PERSON CMP-ASSESS

Actors: Quality Manager
Regions: Qualification types · Evidence with expiry · Verification action · Experience totals by element
States: Unverified · Verified · Expired · Expiring
Requirements: QUA-01QUA-02QUA-03QUA-04QUA-06QUA-07STF-06STF-07

AUT-REC

Authorisation record

Staff · People

One authorisation, its structured scope, its state, and the nine items MTOE 3.7.4 requires it to state. The state machine is visible, not implied.

ZAuthorisation ZAA/AUTH/2024/0031SuspendAmend scopeIssue certificate

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Active

Draft › Nominated › Verified › Issued › ACTIVE › Expiring › Expired

Scope

DimensionValue

TypeTheoretical knowledge instructor

CourseDHC-6-300 type training

ModulesATA 21, 27, 32, 57

CategoryB1.1

LocationFuvahmulah · Malé

Required content — MTOE 3.7.4

Name and position ✓

Scope ✓

Date of first authorisation ✓

Issue date ✓

Review date — 14 Jun 2026 ✓

Limitations ✓

Approving managers ✓

Holder acceptance ✓ 16 Jun 2024

Review due in 30 days. Not reviewed by 14 Jun 2026 the authorisation expires automatically and no longer confers scope.

Walkthrough

The state strip shows the current state and only the transitions this user may perform from it.
Scope is structured — course, type, module, category, location — and built from the approval, so a scope outside the approval cannot be expressed.
The nine items MTOE 3.7.4 requires the authorisation to state are shown as a checklist with each one's value, not as prose to be read for compliance.
The evidence trail links to the qualifications, training and competence assessment that justified the issue.
Version history shows every amendment with what changed and who approved it.

Rules enforced here

Review interval is 24 months maximum per MTOE 3.7.4. The review date is computed; a shorter interval can be set, a longer one cannot.
An authorisation whose review date passes expires automatically and stops conferring scope the same day — nobody has to remember.
Suspension is immediate and reversible; withdrawal is final and requires a reason.

Leads to

AUT-FLOW AUT-REVIEW STA-PERSON

Actors: Quality ManagerHolder
Regions: State strip with permitted transitions · Scope — course, type, module, category, location · The nine required items · Evidence trail · Version history
States: Draft · Nominated · Verified · Issued · Active · Expiring · Expired · Suspended · Withdrawn · Reinstated
Requirements: AUT-01AUT-02AUT-04AUT-05AUT-06AUT-08AUT-09AUT-10AUT-11AUT-15EXT-11

AUT-FLOW

Nomination and verification

Staff · People

The MTOE 3.7.4 procedure as a workflow that cannot be short-circuited: nominate with evidence, verify, issue, accept. Eligibility is evaluated by the system, item by item.

ZNominate — Ibrahim Waheed

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

1. Nominate2. Evidence3. Verify4. Issue5. Accept

Eligibility against the criteria for theoretical knowledge instructor

CriterionEvidenceResult

Certificate of Recognition, type, level 3Held, verifiedMet

Representative experience7.5 yearsMet

English proficiencyIELTS 6.0Met

Regulation and MTOE procedures trainingHeld 2024Met

Instructional technique trainingUnverifiedNot met

Competence assessmentScheduled 22 SepPending

Two criteria outstanding. Verification cannot be recorded until both are satisfied.

Return to nominatorVerify

Walkthrough

Nominate — a manager proposes a person and a scope, with the reason.
Evidence — the system assembles what it already holds and names what is still missing; the nominator attaches the rest.
Verify — a second, independent person works through the eligibility criteria one by one. Each is pass or gap, with the evidence shown beside it.
Issue — only available when every criterion passes and the independence check is clear. The certificate is generated at this point.
Accept — the holder acknowledges the scope and its limitations; the authorisation is not active until they do.

Rules enforced here

The verifier cannot be the nominator. The system checks this and blocks, it does not warn.
Eligibility is evaluated criterion by criterion against stored evidence. A blanket 'I confirm they are eligible' is not offered.
The authorisation confers nothing until holder acceptance is recorded — MTOE 3.7.4.

Leads to

AUT-REC STA-QUAL CMP-ASSESS

Actors: Training ManagerExamination ManagerQuality Manager
Regions: Step indicator · Proposed scope · Eligibility pass/gap report · Independence check · Verification decision · Issue
States: Nominating · Awaiting verification · Gaps — cannot proceed · Verified · Issued, awaiting acceptance
Requirements: AUT-03AUT-05AUT-14QUA-05CMP-05INT-08STF-05

AUT-REVIEW

Authorisation review queue

Staff · People

Work through every authorisation falling due inside one queue, with the five evidence categories MTOE 3.7.4 requires assembled on the same screen.

ZAuthorisation reviews — 7 due

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Queue

I. Waheed — 30 d

M. Sana — 44 d

H. Rasheed — 61 d

A. Latheef — overdue

Ibrahim Waheed — instructor

EvidenceSummary

Recent activity9 sessions in 24 months

Audit resultsNo findings against this instructor

Examination performancePass rate 82% · no question flags

Continuation trainingComplete — 14 Mar 2026

Integrity recordClear

SuspendContinue authorisation

Walkthrough

The queue is ordered by review date, with overdue first and the consequence stated.
Opening one shows the evidence the reviewer needs in one panel: activity since last review, audit findings involving them, examination performance of their students, continuation training status, and any integrity concern raised.
The decision is continue, amend scope, suspend or withdraw — each recorded with a reason.
Where several reviews share the same evidence, the reviewer can progress them together but each decision is still recorded individually.

Rules enforced here

A review cannot be recorded without the evidence panel having been populated — an empty review is not a review.
Continuing an authorisation resets the interval from the review date, not from the original issue date.

Leads to

AUT-REC TRN-FILE QLT-FIND

Actors: Quality Manager
Regions: Due queue · Evidence panel — activity, audits, exam performance, continuation training, integrity · Decision · Bulk progress
States: Due · Overdue — already expired · Reviewed and continued · Reviewed and suspended
Requirements: AUT-07AUT-12AUT-16CMP-06QLT-05

CMP-ASSESS

Competence assessment

Staff · People

Conduct an assessment against a template while observing, on a phone or tablet in a classroom or hangar, and record criterion-level outcomes with evidence.

Competence assessment — I. Waheed

Offline — will sync

TemplateTheoretical knowledge instructor

ObservedModule 7 session, 12 Sep

CriterionRating

Subject knowledge1 2 3 (4) 5

Lesson structure1 2 (3) 4 5

Use of training aids1 2 3 (4) 5

Student engagement1 2 3 (4) 5

Evidence notes

Development actions

SatisfactorySign and submit

Walkthrough

The assessment opens against a template whose criteria come from the role being assessed.
Each criterion is scored on the defined scale with an evidence note — the note is required, not optional.
The overall outcome is proposed from the criteria and can be overridden only with a reason.
Development actions are raised with owners and dates and appear in the person's training file.
Assessor and assessed both sign; the assessed party may record a comment.

Rules enforced here

An assessor cannot assess their own competence, and cannot assess someone who assessed them within the same cycle.
A criterion scored below the threshold forces a development action before the assessment can be closed.

Leads to

TRN-FILE AUT-FLOW STA-PERSON

Actors: Assessor
Regions: Template criteria · Scale per criterion · Evidence notes · Overall outcome · Development actions · Signatures
States: In progress · Offline — queued · Satisfactory · Unsatisfactory — raises a task for the Quality Manager
Requirements: CMP-01CMP-02CMP-03CMP-04CMP-05CMP-07EXT-02EXT-11

TRN-BOARD

Currency board

Staff · People

Every person against every requirement that applies to them, recalculated whenever a record or a rule changes. The screen an auditor is shown.

ZCurrencyAs at date…Export

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Status: All

Requirement: All

Role: All

PersonContinuationSafety & HFRegulationAssessment

A. MasnoonCurrentCurrentCurrentCurrent

I. WaheedDue 30 dCurrentCurrentDue

M. SanaOverdueCurrentOverdueCurrent

H. RasheedCurrentCurrentCurrent—

M. Sana is overdue on a blocking requirement and cannot be assigned as practical assessor.

Walkthrough

The matrix puts people down the side and training requirements across the top, with a status in each cell.
Filtering by status answers who is overdue; filtering by requirement answers who still needs a named course.
The point-in-time query answers the audit question: was this person current on this date? It reads stored history, not today's state.
Export produces the same view as a dated report.

Rules enforced here

No cell on this board can be edited. Status is computed from records and rules — TRN-04.
The point-in-time answer is reconstructed from history, so it does not change when today's status changes.

Leads to

TRN-FILE TRN-REQ RPT-BLD

Actors: Training ManagerQuality Manager
Regions: Matrix — people × requirements · Status filter · Requirement filter · Point-in-time query · Export
States: All current · Gaps · Blocking requirement overdue — assignment prevented · Historical view at a past date
Requirements: TRN-04TRN-05TRN-12TRN-13RPT-01RPT-02

TRN-REQ

Training requirement rules

Staff · People

Where requirements are defined — who they apply to, how often, what evidence satisfies them, whether they block. Configuration, not code, so an MTOE revision does not become a development project.

ZTraining requirementsNew requirement

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

RequirementApplies toIntervalBlockingVersion

Instructor continuation trainingAll instructor authorisations24 monthsYesv3 — 01 Jul 2026

Safety and human factorsAll staff24 monthsNov1

MTOE procedures refresherAll authorised staff24 monthsYesv2

Invigilator refresherInvigilator authorisations24 monthsYesv1

Changing an interval does not rewrite history. Existing records keep the interval in force when they were completed.

Walkthrough

Each requirement is defined once: what it is, who it applies to, how often, and what evidence satisfies it.
Applicability is a rule — role, authorisation type, location — not a list of names, so a new starter picks up the right requirements automatically.
Interval and grace period are set here; changing them re-computes every affected due date and shows how many people move.
The blocking flag decides whether being overdue suspends an authorisation or merely raises an alert.
Every change is versioned with an effective date.

Rules enforced here

Intervals are configuration, not code — OPS-06. A regulatory change to an interval is a configuration change with an approval, not a development project.
Changing a rule never rewrites history. Past currency is evaluated against the rule that was in force at the time.

Leads to

TRN-BOARD TRN-FILE SYS-CONF

Actors: Training ManagerQuality Manager
Regions: Requirement list · Applicability rule builder · Interval and grace · Satisfying evidence · Blocking flag · Version history
States: Active · Draft · Superseded — history preserved
Requirements: TRN-01TRN-02TRN-08TRN-12OPS-06QUA-08

TRN-FILE

Individual training file

Staff · People

One member of staff's whole training history in the MTOE 3.8 shape: initial, continuation, recurrent, on-the-job, with the evidence attached and the next due date computed rather than typed.

ZTraining file — M. SanaRecord trainingPrint file

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Human factors continuation training due in 41 days. Authorisation ZAA-AUT-014 depends on it.

RoleInstructor and practical assessor

TNAZATN-001 · reviewed 12 Mar 2026

Plan2026 annual training plan, item 7

TrainingTypeCompletedEvidenceNext due

Human factors — initialInitial14 Feb 2024Certificate—

Human factors — continuationRecurrent, 24 months20 Oct 2024Attendance + exam26 Oct 2026

MCAR-147 regulation updateContinuation08 Jan 2026Briefing record08 Jan 2028

DHC-6 differencesType03 May 2025Logbook + exam—

Evidence is held against the record, not in a shared drive. Deleting a training entry is not possible; it is superseded.

Walkthrough

The file opens with anything that puts an authorisation at risk stated at the top, naming the authorisation.
The training needs analysis outcome and this person's position in the annual training plan sit alongside their role.
Completed training is listed with type, date, evidence and the computed next due date.
Recording new training attaches evidence at the point of entry and immediately recomputes currency.
The reminder trail shows what was sent, to whom and when — which is what answers 'nobody told me'.

Rules enforced here

Next due is computed from the requirement rule; it is never typed.
A training entry cannot be deleted. A correction supersedes it and both remain.

Leads to

TRN-BOARD STA-PERSON AUT-REC

Actors: Training ManagerStaff member
Regions: Identity and role · Training needs analysis outcome · Completed training with evidence · Due and overdue · Annual plan position · Reminder trail
States: Current · Due within 90 days · Overdue — authorisation at risk · Suspended pending training
Requirements: TRN-03TRN-06TRN-07TRN-09TRN-10TRN-11TRN-14STF-04REC-01

Staff · Courses10 screens

CRS-LIST

Course catalogue (staff)

Staff · Courses

All courses, approved and commercial, with their approval reference, current version and permitted delivery methods. Generates the MTOE Section 1.9 list.

ZCoursesMTOE 1.9 extractNew course

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Approved scopeCommercialAll

CourseScopeVersionDelivery permittedApproval ref

Basic knowledge Module 7Approvedv2 — 01 Jul 2026ClassroomMCAA/147/CA/014

DHC-6-300 type B1.1Approvedv3 — 01 Jul 2026Classroom + practicalMCAA/147/CA/019

Safety & HF Parts 1–2Commercialv0.3 / v0.1E-learning—

MCAR-145 awarenessCommercialv1E-learning + virtual—

Walkthrough

The list is split by approved and commercial, because the two are governed differently and mixing them is how mistakes happen.
Each course shows its current version, status, and which delivery methods it is permitted to use.
Generate MTOE 1.9 extract produces the course list in the shape the MTOE requires.
Creating a course requires the scope decision — approved or commercial — before anything else can be entered.

Rules enforced here

The approved and commercial split is a property of the course, set once and changed only through a controlled change.

Leads to

CRS-VER CRS-SCOPE COM-PROD

Actors: Training Manager
Regions: Approved / commercial split · Version and status · Delivery methods permitted · Generate MTOE 1.9 extract
States: Approved scope · Commercial · Draft version in progress · Withdrawn
Requirements: CRS-01CRS-02CRS-05CRS-12CHG-04

CRS-VER

Course version and syllabus

Staff · Courses

The immutable version a session actually delivers: modules, subjects, hours, examination allocation, material register and the linked course approval form and TNA.

ZDHC-6-300 type B1.1 — v3Publish version

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Published

Approval MCAA/147/CA/019 · TNA ZATN-001 Iss 1

ModuleSubjectHoursExam questions

ATA 21Air conditioning6.08

ATA 27Flight controls10.014

ATA 32Landing gear8.011

ATA 57Wings5.06

Material register

ItemRevisionReviewed

ZAMTM-01 training manualIss 1 Rev 001 Jul 2026

Presentation deck ATA 27Rev 2Overdue

Walkthrough

The version header states the version, its status, its effective date and what changed from the previous version.
The module and subject tree carries hours per subject and the knowledge level per MCAR-66 Appendix I.
Examination allocation sets the number of questions per module and level, which is what the paper generator later reads.
The material register lists the material actually used and its currency.
Links to the course approval form and the training needs analysis complete the pack.

Rules enforced here

A version in delivery cannot be edited. A change creates a new version; sessions in progress continue on the version they started.
Hours and levels must reconcile with the approval before the version can be made effective.

Leads to

CRS-SCOPE EXM-BANK DEL-SESS

Actors: Training Manager
Regions: Version header and status · Module and subject tree with hours · Examination allocation · Material register · Approval form and TNA links
States: Draft · Published · Superseded · Material overdue for review
Requirements: CRS-04CRS-05CRS-06CRS-07CRS-08CRS-09CRS-11

CRS-SCOPE

Approved scope and delivery methods

Staff · Courses

The hard constraint. Delivery methods are set per course here, and distance or self-study learning cannot be selected for any course inside the approval until the approval is extended and the MTOE amended.

ZApproved scope — Basic knowledge Module 7

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Within MCAR-147 approved scope

MCAA/147/CA/014

Delivery methods

MethodPermittedWhy

Classroom at an approved addressYesMTOE 1.6

Classroom at an alternate locationWith procedureMTOE 2.8

Virtual classroomNoNot in approved scope

E-learning / self-studyLockedDSL is not part of ZAA's approved scope — MTOE 2.1

Lifting this restriction requires a change record referencing a CAA approval and an MTOE amendment.

Walkthrough

The scope flag states whether this course sits inside the MCAR-147 approval, and quotes the reference if it does.
The delivery method matrix crosses permitted methods against the scope — classroom, practical, e-learning, virtual classroom.
A restricted method shows what would have to change to lift it: an approval extension and an MTOE amendment, named explicitly.
The result of the daily consistency check is shown with its timestamp.

Rules enforced here

Distance and self-study learning is outside ZAA's approved scope per the MTOE. An approved course therefore has e-learning restricted, enforced in the domain layer — CRS-03.
A restriction is lifted only by a change record that cites the approval extension and the MTOE amendment. It cannot be toggled here.

Leads to

CHG-CAA CRS-VER DOC-REV

Actors: Quality Manager
Regions: Scope flag · Approval reference · Delivery method matrix · Change record required to lift a restriction · Consistency check result
States: Within approved scope — e-learning locked · Commercial — all methods available · Change pending CAA approval
Requirements: CRS-02CRS-03CRS-12LRN-09CHG-01CHG-04OPS-06

CRS-RULE

Course rules and thresholds

Staff · Courses

What this course requires of a student, as against what every course requires. Attendance minimum, pass mark, re-sit allowance, assessment weighting and the validity of what it produces — each shown as inherited or overridden, with the global value visible alongside.

ZZACP-002 — course rulesChange historyPropose override

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

This course is inside the MCAR-147 approval. Pass mark and marking rule are fixed by MCAR-66 Appendix II and cannot be overridden here.

RuleGlobal defaultThis courseSource

Pass mark75%75%Inherited — locked

Penalty markingNoneNoneInherited — locked

Attendance minimum90%100%Overridden — more demanding

Re-sits before re-training21Overridden — more demanding

Minimum re-sit interval30 days30 daysInherited

Certificate validityUnlimited24 monthsOverridden

Assessment weighting

ElementWeightMust pass independently

Written examination100%Yes

Practical assessment—Not applicable

Override rule

A course may be more demanding than the global default. It may never be less. An attempt to set attendance below 90 per cent or the pass mark below 75 per cent is refused, not warned about.

Overrides apply from the next course version. A student already enrolled continues under the rules in force when they started.

Walkthrough

Every rule is listed with the global default beside it, so an override is visible as an override rather than looking like the only value.
A rule fixed by the regulation — pass mark, penalty marking on an approved course — is shown as inherited and locked, with the citation.
Proposing an override asks for a reason and checks the direction: more demanding is accepted, less demanding is refused with the floor named.
Assessment weighting sets how the elements combine and which must be passed independently rather than contributing to an average.
Certificate validity and the re-sit allowance are set here because they differ between a regulatory course and a commercial one.
An override takes effect from the next course version; students already enrolled finish under the rules that applied when they started.

Rules enforced here

A course may be more demanding than the global default. It may never be less — an attempt is refused, not warned about.
Pass mark and marking rule on an approved course are locked to MCAR-66 Appendix II and cannot be overridden at course level at all.
Changing a rule never re-evaluates a completed student. Their result stands against the rules in force at the time.

Leads to

CRS-EXAM CRS-CERT CFG-PARAM

Actors: Training ManagerQuality Manager
Regions: Inherited defaults with source · Course overrides with reason · Attendance and progression rules · Assessment weighting · Re-sit and remediation · Effective on which versions
States: All inherited · Overridden — more demanding · Override rejected — less demanding than the global floor · Draft
Requirements: CRS-05CRS-11DEL-08EXM-14EXM-17CER-02OPS-06

CRS-EXAM

Examination profile

Staff · Courses

Everything the paper generator needs for this course: how many questions from each module at each knowledge level, how long the paper runs, and what invigilation it requires. Defined once per course version rather than decided per sitting.

ZZACP-002 — examination profileTest generatePublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ModuleLevelQuestionsValidated availableSufficient

1 Safety management2831Yes

2 Human factors21044Yes

3 Human error31227Yes

4 Physical environment269Marginal — 1.5x

5 Communication344Insufficient — 1.0x

Total questions40

Duration60 minutes

Time per question1.5 minutes

Reuse window3 sittings

Invigilation

One invigilator per 12 candidates

Invigilator must not have instructed the cohort

Photographic identity check required

Devices surrendered at the door

Permitted material

No reference material

No calculator

Rough paper issued and collected

A module with fewer than twice the required validated questions cannot sustain the reuse window. Module 5 blocks generation until the bank is grown.

Walkthrough

The quota is set per module and per knowledge level, which is what MCAR-66 Appendix I expects and what the paper generator reads.
Beside each quota the system shows how many validated questions exist in that module, and whether the ratio can sustain the reuse window.
Duration is set explicitly rather than derived, but the time-per-question figure is shown so an unrealistic paper is obvious before it is published.
Invigilation requirements — ratio, independence, identity check, device policy — are set per course because a type examination is not invigilated like an awareness course.
Permitted reference material is stated positively: what may be brought in, not what may not.
Test generate produces a throwaway paper against the profile to prove the quota can actually be met before the profile is published.

Rules enforced here

A module with fewer than twice its quota in validated questions cannot sustain the reuse window and blocks publication — EXM-05, EXM-06.
The invigilator independence rule is enforced at the sitting, not merely stated here.
An examination profile is locked to a published course version. Changing it creates a new version rather than altering papers already sealed.

Leads to

EXM-BANK EXM-PAPER CRS-VER

Actors: Examination ManagerTraining Manager
Regions: Quota by module and knowledge level · Total questions and duration · Bank sufficiency check · Reuse window · Invigilation requirements · Open-book and reference material permitted
States: Sufficient bank · Insufficient validated questions in one or more modules · Draft · Locked to a published course version
Requirements: EXM-04EXM-05EXM-06EXM-08EXM-10CRS-07OPS-06

CRS-CERT

Certificate and outcome

Staff · Courses

What a student walks away with. The template used, the wording, the validity period, and — the part that is usually left implicit — which recurrent training requirement completing this course actually satisfies.

ZZACP-002 — certificate and outcomePreview certificate

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

TemplateCertificate of recognition Rev 3

NumberingZAA/CERT/{year}/{seq}

Validity24 months from issue

Satisfies these requirements

RequirementGrantsInterval

Human factors — initialFull—

Human factors — continuationFull24 months

Safety management awarenessPartial — Part 1 only24 months

Sample

Certificate rendered with this course's wording

This mapping is what makes a completion recompute a person's currency automatically. A course with nothing mapped here produces a certificate that satisfies no requirement, which is almost always an oversight.

Walkthrough

The certificate template is chosen from the versioned library rather than designed here.
The scope statement the certificate carries is set per course, because a partial completion must not read like a full one.
Validity is set, and where the course produces a certificate that expires, the expiry is computed from issue rather than typed on each one.
The requirements this course satisfies are mapped explicitly — fully or partially, and against which interval.
The sample renders against real data so the wording is judged as it will be read.

Rules enforced here

The mapping of requirements satisfied is what makes a completion recompute currency automatically — TRN-04. A course with nothing mapped satisfies nothing, which is almost always an oversight rather than an intention.
A partial mapping must say what it covers. A certificate that implies more than the course delivered is a finding waiting to happen.

Leads to

CER-ISSUE CFG-TPL TRN-REQ

Actors: Training ManagerQuality Manager
Regions: Certificate template and version · Wording and scope statement · Validity and expiry · Requirements satisfied by completion · Recognition of prior learning · Sample render
States: Configured · No template assigned · Template superseded — review needed
Requirements: CER-01CER-05CER-06TRN-02TRN-04COR-01

CRS-DEL

Delivery profile

Staff · Courses

How this course is actually run: duration by delivery method, class size limits, instructor ratio, the rooms and equipment it needs, and the day pattern. This is what the scheduling calendar validates a session against.

ZZACP-002 — delivery profilePublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

MethodDurationContact hoursClass sizePermitted

Classroom2 days146 to 16Yes

Virtual classroom2 days146 to 20Yes

E-learning114 minutes1.9UnlimitedOutside approved scope

Blended1 day plus e-learning76 to 16Outside approved scope

Resources required

Classroom with projection

Whiteboard

Printed workbook per student

No aircraft access required

Personnel required

RoleRatioAuthorisation required

Instructor1 per 16Theoretical knowledge instructor, this course

Examiner1 per sittingExaminer, not the instructor of this cohort

E-learning shows as outside scope because CFG-APPR says distance learning is not approved. The restriction is read from the approval, not set here.

Walkthrough

Duration and contact hours are set per delivery method, because the same syllabus takes different time in a classroom and online.
Class size minimum and maximum are set per method; the minimum is what makes a session commercially viable and the maximum is what the approval and the room allow.
Instructor and assessor ratios are set with the authorisation each role must hold, which is what the scheduling calendar checks against.
Facility and equipment requirements are listed so a session cannot be scheduled into a room that cannot support it.
A method outside the approved scope is shown as such, read from the approval record rather than set here.

Rules enforced here

A delivery method's permitted status is read from CFG-APPR. It cannot be enabled on this screen.
A session exceeding the maximum class size is refused at scheduling, with the limit and its source named — DEL-02.
An instructor without the authorisation named here cannot be assigned to a session of this course.

Leads to

DEL-CAL CRS-SCOPE FAC-REG

Actors: Training Manager
Regions: Duration and hours by delivery method · Class size minimum and maximum · Instructor and assessor ratio · Facility and equipment requirements · Day pattern · Instructor authorisation required
States: Configured · Method not permitted by scope · No qualified instructor currently authorised
Requirements: DEL-01DEL-02DEL-03DEL-04CRS-04FAC-04PRA-06

CRS-PREQ

Prerequisites and progression

Staff · Courses

What a student must already hold to start, what the course leads to, and where it sits in a learning path. Checked at allocation and at enrolment, so a person is never taken through a course they cannot benefit from.

ZDHC-6-300 type course — prerequisitesGrant waiverPublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

RequirementEvidenceWaivableWaiver by

Aircraft maintenance licence, category B1.1Verified licenceNo—

Human factors training within 24 monthsZACP-002 certificateYesTraining Manager

Fuel tank safety awarenessCertificate or briefing recordYesTraining Manager

English language, ICAO level 4Assessment recordNo—

Leads to

DHC-6-300 practical assessment

Type rating endorsement application

Learning path

1. Basic knowledge2. Human factors3. Type theory4. Type practical5. Endorsement

A waiver is granted per student against a named requirement with a reason, and appears on that student's record and in the session file. There is no course-wide waiver.

Walkthrough

Entry requirements are defined against evidence types, so the check at enrolment is an evaluation rather than a conversation.
Each requirement states whether it may be waived and who may waive it. Most regulatory prerequisites may not.
A waiver is granted per student against a named requirement with a reason, and appears on that student's record and in the session file.
The courses this one unlocks are listed, which is what builds the learning path and what the catalogue uses to suggest a next step.
A circular dependency between courses is detected and blocked rather than discovered at enrolment.

Rules enforced here

Prerequisites are checked at seat allocation and again at enrolment. A failure blocks that person, not the whole batch.
There is no course-wide waiver. A waiver names a student, a requirement and a reason.
A prerequisite marked not waivable cannot be waived by anyone, including an administrator.

Leads to

ORG-ALLOC PUB-COURSE STA-QUAL

Actors: Training ManagerCommercial lead
Regions: Entry requirements with evidence type · Waiver policy and who may grant one · Courses this one unlocks · Learning path position · Recognition of prior learning · Effect on the catalogue
States: No prerequisites · Prerequisites defined · Waiver granted for a named student · Circular dependency — blocked
Requirements: CRS-08B2B-11PRD-04LRN-05CAT-05

CRS-TASK

Practical task list

Staff · Courses

The mandatory task list the practical logbook is assessed against, organised by ATA chapter, each task carrying its required level and whether it may be assessed by simulation rather than on the aircraft.

ZDHC-6-300 — practical task listCoverage checkPublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ATA chapters

21 Air conditioning — 6

27 Flight controls — 14

32 Landing gear — 19

57 Wings — 8

71 Power plant — 22

TaskLevelMethodMandatory

32-11 Main landing gear removal and installation3Aircraft onlyYes

32-41 Brake unit replacement3Aircraft onlyYes

27-31 Elevator control rigging3Aircraft onlyYes

21-51 Cabin heater functional check2Aircraft or simulationNo

A task marked aircraft only cannot be signed off from a simulation, whatever the assessor records.

Coverage check: 69 mandatory tasks cover every practical element of the syllabus. 0 syllabus elements without a task.

Assessor authorisation is checked per task, not per course. An assessor authorised for landing gear cannot sign a flight controls task.

Walkthrough

Tasks are organised by ATA chapter, which is how an engineer thinks about them and how the logbook presents them.
Each task carries the level it must be performed to, whether it is mandatory, and whether simulation is acceptable in place of the aircraft.
The assessor authorisation required is set per task or per chapter, not per course.
The coverage check compares the task list against the practical elements of the syllabus and reports any element with no task against it.
Publishing locks the list to a course version; a logbook records which version it was assessed against.

Rules enforced here

A task marked aircraft only cannot be signed off from a simulation, whatever the assessor records.
Assessor authorisation is checked per task. An assessor authorised for landing gear cannot sign a flight controls task — PRA-06.
A syllabus element with no task against it is a coverage gap and blocks publication.

Leads to

PRA-LOG CRS-VER AUT-REC

Actors: Training ManagerPractical assessor
Regions: Task tree by ATA chapter · Task detail — level, method, evidence · Mandatory and optional split · Simulation permitted flag · Assessor authorisation required · Coverage check against the syllabus
States: Draft · Published · Coverage gap against syllabus · Superseded
Requirements: PRA-01PRA-02PRA-06PRA-09CRS-06CRS-12

CRS-MAT

Content and materials

Staff · Courses

Where each module's content actually comes from — the learning engine package for e-learning, the presentation and workbook for classroom, and the library references the course depends on. This is what LRN-08 provisions against.

ZZACP-002 — content and materialsRe-provisionAdd material

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

MCAR-66 Issue 3 is flagged for a currency check in the library. Two modules of this course reference it.

ModuleClassroom materialPackageVersionState

1 Safety managementZACP-002 deck Rev 2ZACP-002 Part 1 SCORMRev 1.0Provisioned

2 Human factorsZACP-002 deck Rev 2ZACP-002 Part 1 SCORMRev 1.0Provisioned

6 ProceduresZACP-002 deck Rev 2ZACP-002 Part 2 SCORMRev 1.0Not provisioned

Library references

MCAR-147 Issue 4 — current

MCAR-66 Issue 3 — check due

ZAA-HF-REF Rev 2 — current

Provisioning

The learning engine shell is created from this mapping. A package uploaded but not mapped to a module is never launched, and shows here as orphaned.

A superseded reference raises an action against this course rather than silently leaving students on old material.

Walkthrough

Each module is mapped to the material that delivers it — a classroom deck and workbook, a learning engine package, or both.
The package version is recorded, so it is always possible to say which build of a course a given student actually took.
Library references the course depends on are listed with their currency state, read from the technical library.
Provisioning creates or refreshes the learning engine shell from this mapping; anything uploaded but unmapped shows as orphaned and is never launched.
A superseded reference raises an action against this course rather than silently leaving students on old material.

Rules enforced here

A package that is not mapped to a module is never launched — LRN-08.
Completion, results and certificates are written to portal tables regardless of which package delivered the content, so the record survives a change of engine — LRN-14.
A course whose reference material is superseded is flagged for review; it is not blocked, because judging the impact is a person's job.

Leads to

FAC-LIB SYS-API CRS-VER

Actors: Training ManagerSystem administrator
Regions: Module to content mapping · Learning engine package and version · Classroom material with revision · Library references with currency · Provisioning status · Supersession alerts
States: Mapped and provisioned · Mapped — not yet provisioned · Reference superseded — review required · Package version mismatch
Requirements: CRS-09CRS-10LRN-01LRN-08FAC-07DOC-03

Staff · Delivery4 screens

DEL-CAL

Scheduling calendar

Staff · Delivery

Sessions, examinations and staff assignments on one calendar, with rooms, aircraft and equipment booked against them and double-booking refused.

ZScheduleNew session

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

October 2026

Location: All

Course: All

Week grid — rows are resources (Room 1, Room 2, Hangar, DHC-6 8Q-IAE, Instructors), columns are days

Conflict: Room 2 is booked for the Module 7 examination at the same time.

Walkthrough

Month or week view with resource lanes for rooms, instructors and aircraft.
A conflict — double-booked room, instructor without a current authorisation for the subject, aircraft unavailable — is shown on the calendar before the session is saved.
Filtering by location and course narrows a busy calendar to one question.
Creating a session from the calendar carries the date and resource through to the session record.

Rules enforced here

An instructor without a current authorisation covering the subject cannot be assigned. The assignment is refused, with the missing scope named.
A session at a location not listed in the approval requires the alternate location process before it can be scheduled.

Leads to

DEL-SESS FAC-REG AUT-REC

Actors: Training ManagerAdmin
Regions: Month / week view · Resource lanes · Conflict indicator · Filter by location and course · Create session
States: No conflicts · Conflict — booking refused with the clash shown · Instructor unavailable · Resource out of calibration
Requirements: DEL-01DEL-04DEL-14FAC-05STF-10EXT-04

DEL-SESS

Session record

Staff · Delivery

One delivery of one course version. Everything an auditor needs to reconstruct it — instructors, students, attendance, what was actually taught, deviations, examinations, certificates.

ZDHC-6-300 type B1.1 — 14–18 Oct, FuvahmulahCourse plan ZAFC-007Close session

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Version deliveredv3 — 01 Jul 2026

InstructorsI. Waheed, A. Masnoon

Students12 of 16

StudentsDeliveryDeviationsExaminationsFeedbackClosure

Closure checklist

Attendance complete for all 12 students ✓

All syllabus elements marked delivered — 1 outstanding

Practical assessments complete ✓

Examination sitting closed and analysed ✓

Feedback collected — 9 of 12

Certificates issued — pending closure

ATA 57 has no delivery record. Close the session by marking it delivered or recording a deviation.

Walkthrough

The header records which course version is being delivered — fixed at session creation.
Students are enrolled from organisation pools, individual orders or direct entry; attendance summarises across days.
The delivery record tracks what was actually taught against the syllabus, day by day.
A deviation from the syllabus is recorded with its reason and how it was made good — it is a normal event with a required explanation, not a failure.
Examinations are planned and linked from here.
The closure checklist will not complete while attendance, delivery record, deviations, feedback or examination results are outstanding.

Rules enforced here

A session cannot close with an incomplete delivery record. The checklist names what is missing.
Course plan ZAFC-007 is generated from this record, not written separately.

Leads to

DEL-ATT EXM-PAPER PRA-LOG CER-ISSUE

Actors: Training ManagerInstructorAdmin
Regions: Session header with version delivered · Students and attendance summary · Delivery record against syllabus · Deviations · Examinations · Closure checklist
States: Planned · Running · Syllabus element unmarked — cannot close · Closed · Deviation recorded
Requirements: DEL-01DEL-03DEL-05DEL-06DEL-08DEL-09DEL-10DEL-11DEL-12DEL-13

DEL-ATT

Attendance capture

Staff · Delivery

Mark attendance per session day or module, at the front of a classroom or at an outstation, offline, with the original capture time preserved when it syncs.

Attendance — 16 Oct, Day 3

Offline

Module taughtATA 32 Landing gear

StudentStatus

Ahmed NazimPresent

Ibrahim LatheefPresent

Mariyam SanaLate

Hassan MoosaAbsent

H. Moosa is now below the 90% minimum attendance for this course.

Save — will sync when connected

Walkthrough

The instructor selects the session and the day; the student list is already there.
Present, absent or late is set per student in one pass, with a module taught field for the day.
Offline, the screen keeps working and shows a queued indicator; on reconnection it submits and confirms.
Submitting evaluates the attendance rule and flags anyone who has fallen below the threshold.

Rules enforced here

Attendance below the course's minimum blocks certificate eligibility — the flag appears here and again at certificate issue.
A queued capture is visibly queued. It is never silently lost and never submitted twice.

Leads to

DEL-SESS CER-ISSUE

Actors: Instructor
Regions: Session and day selector · Student list with present / absent / late · Module taught · Offline indicator · Submit
States: Online · Offline — queued · Synced · Below minimum attendance — student flagged
Requirements: DEL-07DEL-08DEL-09EXT-02OPS-05UIX-01

PRA-LOG

Practical logbook

Staff · Delivery

The electronic replacement for ZAFC-009, captured at the aircraft. Task, date, aircraft, supervising instructor, outcome, photographic evidence and both signatures.

Practical logbook — A. Nazim

112 of 128 tasks

AircraftDHC-6-300 8Q-IAE

AssessorM. Sana — authorised DHC-6

ATATaskLevelOutcome

32-11Main landing gear removal and installation3Satisfactory

32-41Brake unit replacement3Satisfactory

27-31Elevator control rigging3In progress

Photo evidence

Assessor signStudent acknowledge

Walkthrough

The assessor opens the logbook at the aircraft, on a phone, against a task list organised by ATA chapter.
A task entry captures what was done, the aircraft, the date, the supervising instructor and the outcome.
Photographic evidence is attached at the point of assessment, not uploaded later from a desk.
The assessor signs; the student acknowledges. Both signatures bind to this version of the entry.
Progress against the mandatory task list is shown so both parties know what is left.

Rules enforced here

An assessor without a current practical assessment authorisation covering the task cannot sign. The signature control is absent.
A signature is invalidated if the entry is subsequently corrected — the correction must be re-signed.
This is the electronic replacement for ZAFC-009 and carries the same content.

Leads to

DEL-SESS CER-ISSUE AUT-REC

Actors: Practical assessorStudent
Regions: Task list by ATA chapter · Task entry · Evidence capture · Assessor signature · Student acknowledgement · Progress against mandatory tasks
States: Not started · In progress · Satisfactory · Requires reassessment · Offline — queued
Requirements: PRA-01PRA-02PRA-03PRA-04PRA-05PRA-06PRA-07PRA-08PRA-09

Staff · Examinations5 screens

EXM-BANK

Question bank

Staff · Examinations

The most tightly controlled data in the system. Questions by course and module, with validation by someone other than the author, revision history, read logging and two-person export.

ZQuestion bankAccess logNew question

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Every read of question content is logged. Bulk export requires a second authorisation.

Modules

ATA 21 — 46

ATA 27 — 88

ATA 32 — 71

ATA 57 — 39

RefQuestionLevelStateFacility

27-014Elevator control rigging — sense of operation3Validated0.68

27-015Cable tension and secondary stops2Awaiting validation—

27-016Interconnected control systems3Flagged — 0.210.21

A question cannot enter a paper until validated by someone other than its author.

Walkthrough

Questions are browsed by course and module through the tree; the list shows validation state and facility index.
Writing a question captures the module, the knowledge level, the options, the correct answer and the reference that justifies it.
A written question enters Awaiting validation and is invisible to paper generation until a different person validates it.
A question flagged by post-sitting analysis appears here for review with its statistics attached.
The access log records every read of question content, by whom and when.

Rules enforced here

A question cannot be validated by its author — EXM-02.
Bulk export requires a second authorisation from a different person and is logged as a separate event.
The question bank is excluded from every non-production environment and from every data copy — SEC-11.

Leads to

EXM-PAPER EXM-RES CRS-VER

Actors: Examination Manager
Regions: Course and module tree · Question list with validation state · Question editor · Usage statistics · Access log
States: Draft · Awaiting validation · Validated · Retired · Flagged by analysis
Requirements: EXM-01EXM-02EXM-03EXM-19SEC-11INT-07INT-08

EXM-PAPER

Paper generation

Staff · Examinations

Generate a paper against a quota per module and level, drawing at random from validated questions, avoiding recent repeats, and enforcing that the preparer did not teach the subjects.

ZGenerate paper — Module 7

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ModuleLevel 1Level 2Level 3Total

ATA 212338

ATA 2735614

ATA 3224511

ATA 571236

I. Waheed taught ATA 27 on this session and cannot prepare this paper. Examination Manager override required, with a recorded reason.

PreparerA. Masnoon

PaperP-2026-0088 · 39 questions · pages 1 of 12

Generate and seal

Walkthrough

The quota is set per module and knowledge level, from the course version's examination allocation.
The independence check runs against the preparer: did this person teach any of the subjects in this paper?
Questions are drawn at random from validated questions, avoiding those used in recent sittings for the same cohort.
The generated paper is previewed with its page numbering, then approved and sealed to a specific sitting.
A quota that cannot be met from validated questions is reported as a shortfall by module, not silently under-filled.

Rules enforced here

The person preparing or marking a paper must not have instructed the subjects it covers — MCAR-147.A.135 and MTOE Part 2.
Pages are numbered and counted so a missing page is detectable at issue and at return.
Once sealed, a paper cannot be regenerated for that sitting — a replacement is a new paper with its own reference.

Leads to

EXM-SIT EXM-BANK AUT-REC

Actors: Examination ManagerExaminer
Regions: Quota definition · Independence check · Generated paper preview · Page numbering · Approve and seal
States: Quota not met — insufficient validated questions · Independence conflict · Generated · Sealed for a sitting
Requirements: EXM-04EXM-05EXM-06EXM-07EXM-24STF-05EXM-08

EXM-SIT

Sitting control

Staff · Examinations

Run the sitting: room preparation checklist, candidate identity, paper issue and return, the ZAFC-006 invigilator checklist, and any irregularity, all timestamped.

ZSitting S-2026-0041 — Module 7, Room 2Record irregularityClose sitting

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

1. Prepare room2. Identify3. Issue4. Sit5. Collect6. Close

Room preparation — ZAFC-006

Seating spaced ✓

Wall charts and teaching aids removed ✓

Nothing on desks but the paper ✓

Invigilator independent of the subject ✓

Papers

CandidatePaperPagesReturned

A. NazimP-0088-0112 of 12Yes

I. LatheefP-0088-0212 of 12Yes

M. SanaP-0088-0311 of 12Short

One paper is short a page. The sitting cannot be closed until every page is accounted for.

Walkthrough

The room preparation checklist is completed before candidates are admitted.
Each candidate's identity is checked against their stored identity evidence and recorded as checked, by whom.
Papers are issued against the candidate list and counted; the count is recorded.
The invigilator checklist — ZAFC-006 — is completed in the system during the sitting.
An irregularity is recorded as it happens, with time, candidate and what occurred.
At close, papers are counted back. The sitting cannot close until issued and returned reconcile.

Rules enforced here

A sitting cannot close with a paper unaccounted for. The discrepancy is named and must be resolved or recorded as an irregularity.
The invigilator cannot be a person who instructed the cohort in the subjects examined.
Chain of custody is recorded at every handover — EXM-11.

Leads to

EXM-RES LRN-EXAM EXM-OFF

Actors: InvigilatorExamination Manager
Regions: Room preparation checklist · Candidate list with identity check · Paper issue and return · Invigilator checklist · Irregularity record · Close
States: Planned · Room prepared · Open · Closed · Paper unaccounted for — cannot close · Irregularity recorded
Requirements: EXM-08EXM-09EXM-10EXM-11EXM-13EXM-15EXM-21AUT-14

EXM-RES

Results and analysis

Staff · Examinations

Mark, release and analyse. The ZAFC-004 examination review and analysis is produced automatically at close, and the actions arising from it are tracked to completion.

ZResults — Sitting S-2026-0041ZAFC-004 analysisRelease results

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Pass mark75% · no penalty marking

Sat12

Passed10

Mean79.4%

CandidatesQuestion performanceActions

QuestionFacilityDiscriminationFlag

27-0140.680.41—

27-0160.210.04Review

32-0220.940.09Too easy

2 questions flagged. Action required under MTOE 3.3 — amend, delete or review marking.

Walkthrough

Results are computed on close, with the pass mark and marking rule that applied recorded against each result.
Question performance is analysed immediately: facility index, discrimination, and any question the cohort failed disproportionately.
A flagged question is routed back to the bank for review and can be excluded from the result with a recorded justification.
Actions arising — a question to retire, a subject to reteach, an instructor to review — are raised from here.
Release is an explicit act by the Examination Manager. Until then no candidate sees a score.
ZAFC-004, the Examination Review and Analysis Form, is generated at close rather than written.

Rules enforced here

75 per cent, no penalty marking — MCAR-66 Appendix II. The rule is recorded with the result, not assumed.
Excluding a question from scoring requires a reason and re-scores every candidate in the sitting consistently.
A released result is never edited. A correction is a new result record superseding it, with both retained.

Leads to

CER-ISSUE EXM-BANK RPT-EFF

Actors: Examination Manager
Regions: Candidate results · Pass mark and marking rule applied · Question performance · Flagged questions · Actions arising · Release control
States: Marked · Analysed · Released · Question flagged — action open · Appeal lodged
Requirements: EXM-14EXM-16EXM-17EXM-18EXM-19EXM-22EXM-23RPT-06

EXM-OFF

Offline capture and retention

Staff · Examinations

What happens when the network is not there and what happens to the record afterwards: offline capture at a client site, reconciliation on return, and the unlimited retention MCAR-147.A.125 requires.

ZOffline captureIssue offline package

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

2 sittings captured offline at Villa Air Hangar 2 are awaiting reconciliation.

SittingLocationCapturedCandidatesState

SIT-2026-0117Villa Air Hangar 211 Sep 20269Awaiting sync

SIT-2026-0114ZAA Room 108 Sep 202612Reconciled

Retention

Examination recordsUnlimited — 147.A.125

Legal holdNone active

Backup

Last verified restore01 Sep 2026

Off-island copyHeld, encrypted

Walkthrough

An offline package is issued for a sitting at a client site with no reliable network — paper, candidate list and checklists travel with it.
Captures made offline are queued locally and visibly marked as such.
On return, the queue syncs; anything that conflicts with server state is listed for manual reconciliation rather than resolved automatically.
Once reconciled, the sitting is sealed and becomes an ordinary examination record.
Retention and legal hold status is shown against the record, along with the last verified restore.

Rules enforced here

Examination records are retained for an unlimited period — MCAR-147.A.125. There is no purge path in the interface.
A conflict is never auto-resolved. A person decides, and the decision is recorded.

Leads to

EXM-SIT REC-STUD

Actors: InvigilatorExamination Manager
Regions: Offline sitting package · Queued captures awaiting sync · Reconciliation and conflict resolution · Retention and legal hold · Backup and restore evidence
States: Package issued · Captured offline · Syncing · Conflict — manual reconciliation · Reconciled and sealed
Requirements: EXT-09EXM-20EXM-21REC-03REC-09DAT-06OPS-05

Staff · Records6 screens

CER-ISSUE

Certificate issue and register

Staff · Records

Certificates as controlled stock: eligibility gate, gapless sequential numbering, the master register, and every number accounted for including spoiled and cancelled.

ZCertificatesIssue for session

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

PendingRegisterCancelled

CandidateCourseAttendanceExaminationPractical

A. NazimDHC-6 type B1.196%Pass 84%CompleteIssue

I. LatheefDHC-6 type B1.192%Pass 78%4 tasks openBlocked

H. MoosaDHC-6 type B1.181%Fail 66%CompleteBlocked

Next number ZAA/COR/2026/0185. The sequence has no gaps; every cancelled number carries a reason.

Walkthrough

Candidates from a closed session are listed with an eligibility checklist each: attendance, examination, practical, prerequisites.
An ineligible candidate is shown with the failing condition named; they cannot be included in the issue.
Numbers are allocated from the register in sequence, against the certificate template version in force.
Bulk issue produces every certificate in one action, each individually numbered and recorded.
Reissue and revoke are separate, reasoned actions visible in the register.

Rules enforced here

A certificate cannot be issued to a candidate failing any eligibility condition. The control is absent, not disabled.
Numbers are allocated by the system and never reused, including after a revocation.
ZAFC-010, the Certificate Master Register, is this register — not a separate workbook.

Leads to

REC-STUD LRN-CERT PUB-VERIFY

Actors: AdminTraining Manager
Regions: Eligibility checklist per candidate · Number allocation · Template version · Register with status · Bulk issue · Reissue and revoke
States: Pending — eligibility not met · Eligible · Issued · Superseded · Revoked · Cancelled before issue
Requirements: CER-01CER-02CER-03CER-04CER-05CER-08CER-09CER-10CER-12CER-13

REC-STUD

Student record and inspector pack

Staff · Records

The MTOE 2.6 training record assembled in one place, and producible as a single PDF pack for an inspector in under a minute.

ZTraining record — Ahmed NazimAudit trailProduce inspector pack

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Copy of identity document ✓

Attendance detail ✓

All examination records and results ✓

Post-examination analysis ✓

Practical training and assessment records ✓

Copies of Certificates of Recognition issued ✓

ItemDetailHeld

Enrolments2 courses✓

Examinations3 sittings, 1 re-sit✓

Practical128 tasks assessed✓

CertificatesZAA/COR/2026/0184✓

Retained without limit under MCAR-147.A.125. Committed records cannot be edited — corrections supersede.

Walkthrough

The student record gathers identity, enrolments, attendance, examination records and analysis, practical assessments and certificates.
Produce pack assembles all of it as a dated PDF — the thing handed to an inspector who asks for one student's file.
Retention status and the full audit trail sit at the foot of the record.
Every entry links to the session, sitting or logbook it came from.

Rules enforced here

Records are retained for an unlimited period and cannot be altered — MCAR-147.A.125. Corrections supersede.
The pack states when it was produced and by whom.

Leads to

INS-VIEW CER-ISSUE EXM-RES

Actors: AdminQuality ManagerCAA inspector
Regions: Identity and enrolments · Attendance · Examination records and analysis · Practical assessments · Certificates · Produce pack · Retention and audit trail
States: Complete · Incomplete · Under legal hold · Read-only inspector view
Requirements: REC-01REC-02REC-04REC-06REC-08REC-10REC-11RPT-11INT-01

DOC-REG

Document control register

Staff · Records

The replacement for the Documents Numbering Record workbook: every controlled document, its series, issue, revision, owner, review date and status, with number allocation built in.

ZDocument registerAllocate numberNew document

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Series: All

Review overdue: 3

NumberTitleIssue / RevOwnerStatus

ZAMN-001Maintenance Training Organisation ExpositionIss 1 Rev 0A. MasnoonCurrent

ZACP-002Safety Management and Human FactorsIss 1 Rev 1A. MasnoonCurrent

ZASP-001Zikura Academy Portal specificationIss 1 Rev 1A. MasnoonDraft

ZAFC-006Invigilator ChecklistIss 1 Rev 0Examination MgrReview overdue

Walkthrough

The register is filtered by series — ZAMN, ZATN, ZACP, ZAWI, ZAFC, ZASP and the rest.
Each row shows number, title, current issue and revision, owner, effective date and review due date.
Allocate next number reserves the next free number in a series against a title and an owner, so two people cannot take the same number.
Review due surfaces documents approaching their review date.
Export produces the register in the shape of the existing Documents Numbering Record workbook.

Rules enforced here

Numbers are allocated by the system. The workbook becomes a report of the register rather than the register itself.
A number, once allocated, is never reused even if the document is withdrawn.

Leads to

DOC-REV CHG-CAA

Actors: Quality ManagerDocument controller
Regions: Series filter · Register table · Allocate next number · Review due · Export in the workbook shape
States: Current · Draft revision in progress · Review overdue · Superseded · Withdrawn · Number reserved
Requirements: DOC-01DOC-02DOC-03DOC-07DOC-08DOC-10DOC-11

DOC-REV

Document revision workflow

Staff · Records

Draft, review, approve, issue, distribute, acknowledge. Includes the MTOE amendment request path and the minor / major assessment that decides whether the CAA must approve it first.

ZZAMN-001 — revision 1Submit to CAAIssue

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

1. Draft2. Review3. Approve4. Issue5. Distribute

ChangeSection 2.1 — DSL statement clarified

AssessmentMinor — indirect approval

Effective01 Nov 2026

Distribution

HolderFormatAcknowledged

Accountable ManagerPDF✓

Quality ManagerPDF✓

Training ManagerPortal—

MCAAPDF—

Walkthrough

Draft, review, approve, issue, distribute — the state strip shows where the revision is and who it waits on.
Revision highlights and the effective date are captured with the draft, not written afterwards.
The minor or major assessment decides the route: a major change requires CAA approval before issue, a minor one is issued under indirect approval.
On issue, the document is distributed to its holder list and acknowledgements are tracked until every holder has read it.
A CAA submission is raised from here and tracked on the CAA interface screen.

Rules enforced here

A major change cannot be issued before the CAA approval is recorded. The Issue action is absent until then.
Distribution is complete only when every holder has acknowledged; an outstanding acknowledgement is visible, not assumed.

Leads to

CHG-CAA DOC-REG CRS-SCOPE

Actors: Quality ManagerDocument owner
Regions: State strip · Revision highlights and effective date · Reviewers and approvers · Minor / major assessment · Distribution and acknowledgement · CAA submission
States: Draft · In review · Approved · Issued · Awaiting CAA approval · Distributed — acknowledgements outstanding
Requirements: DOC-04DOC-05DOC-06DOC-09CHG-01CHG-02EXT-11

FAC-REG

Facilities and equipment

Staff · Records

Approved addresses, rooms, workshops, training aircraft, tools and instructional equipment, with checklists, calibration and the alternate-location procedure.

ZFacilities and equipmentRequest alternate location

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

AddressesFacilitiesEquipmentAlternate locations

ItemLocationCalibration dueStatus

Torque wrench set AHangar12 Mar 2027Serviceable

DHC-6 8Q-IAE (training)Fuvahmulah—Available

Multimeter M-04Workshop02 Aug 2026Overdue

Multimeter M-04 is out of calibration and cannot be booked to a session.

Walkthrough

Approved addresses are listed as they appear in the approval; anything else is an alternate location.
Each facility carries its checklist results — ZAFC-002 for practical training facilities — with dates and who completed them.
Equipment carries calibration dates and status; an out-of-calibration item is flagged wherever it is scheduled.
An alternate location request runs the ZAFC-008 checklist and must be approved before a session there can be scheduled.
Secure storage for papers and records is recorded as a facility with its own controls.

Rules enforced here

A session cannot be scheduled at an unapproved location without a completed and approved alternate location assessment — EXM-21, FAC-08.
Out-of-calibration equipment cannot be assigned to a session.

Leads to

DEL-CAL FAC-LIB QLT-PROG

Actors: Quality ManagerAdmin
Regions: Approved addresses · Facility records with checklists · Equipment with calibration · Alternate location requests · Secure storage
States: Approved address · Alternate location — review pending · Equipment out of calibration · Checklist overdue
Requirements: FAC-01FAC-02FAC-03FAC-04FAC-05FAC-06FAC-08FAC-09SUB-01SUB-05

FAC-LIB

Technical library

Staff · Records

The reference material MCAR-147 expects a training organisation to hold and keep current — manuals, AMM extracts, regulatory texts — with currency dates and who checked them.

ZTechnical libraryRecord currency check

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ReferenceTitleIssueCheckedState

DHC6-AMMDHC-6 Series 300 maintenance manualRev 6202 Sep 2026Current

MCAR-145Approved maintenance organisationsIssue 414 Aug 2026Current

MCAR-66Certifying staffIssue 311 Feb 2026Check due

ZAA-HF-REFHuman factors reference packRev 220 Jul 2026Current

Each entry names the courses that depend on it. A superseded reference raises an action against those courses.

Walkthrough

The library index is organised by course and by type — manuals, regulatory texts, reference packs.
Each entry shows issue or revision, the date its currency was last checked, and by whom.
Recording a currency check is one action and updates the next check date.
Each entry names the courses that depend on it; a superseded reference raises an action against those courses.
Access is controlled by role where the licence terms require it.

Rules enforced here

A course whose reference material is superseded is flagged for review — the material register on the course version reads from here.

Leads to

CRS-VER FAC-REG

Actors: Training ManagerInstructorStudent
Regions: Library index by course and type · Currency status · Access by role · Check history · Linked courses
States: Current · Check due · Superseded · Restricted
Requirements: FAC-07FAC-08CRS-10DOC-03EXT-10

Staff · Quality6 screens

QLT-PROG

Audit programme

Staff · Quality

The annual audit plan in the ZAFC-003 shape, covering every area of the approval, with auditor independence checked and completion tracked.

ZAudit programme 2026–27New audit

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

14planned

9complete

2overdue

86%on plan

AreaScheduledAuditorStatus

Training and examination proceduresSep 2026External — R. AhmedComplete

Records and retentionOct 2026A. MasnoonIn progress

Examination securityAug 2026A. MasnoonOverdue

Host facility — IASL hangarNov 2026ExternalPlanned

A. Masnoon is Examination Manager and cannot audit examination security. Assign an independent auditor.

Walkthrough

The annual plan covers every area of the approval, in the ZAFC-003 shape, with planned dates.
Assigning an auditor runs the independence check — an auditor cannot audit an area they are responsible for.
Completion is tracked against plan; an overdue audit is visible on the Quality Manager's home tiles.
Witness audits of instruction and examination are planned here alongside document audits.
Each audit records the checklist version used.

Rules enforced here

An auditor cannot audit their own area of responsibility. The assignment is refused with the conflict named.
Every area of the approval must appear in the annual plan; a gap is reported, not silently allowed.

Leads to

QLT-FIND QLT-REV FAC-REG

Actors: Quality ManagerAuditor
Regions: Annual plan by area · Auditor assignment with independence check · Completion status · Witness audits · Checklist versions
States: Planned · In progress · Complete · Overdue · Independence conflict
Requirements: QLT-01QLT-02QLT-03QLT-04SUB-03

QLT-FIND

Finding

Staff · Quality

A finding from raising to closure, with root cause analysis required before a corrective action is accepted, and closure available only through a recorded effectiveness check.

ZFinding 2026-014Request extensionVerify effectiveness

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Implemented

Raised › Accepted › Planned › IMPLEMENTED › Verified › Closed

RequirementMTOE 2.10.3 — question bank security

SourceInternal audit

OwnerExamination Manager

Due31 Oct 2026

Root cause

Systemic and contributing factors, not only the individual — GM1 145.A.95

Direct: shared login used for bank access

Contributing: no individual accounts provisioned

Systemic: access review never scheduled

Closure requires a separate, later effectiveness check. It cannot be recorded on the same day as implementation without a reason.

Walkthrough

A finding records the requirement breached and the evidence, not just an observation.
Root cause analysis is a required step before corrective action can be proposed — the interface will not skip it.
Corrective and preventive actions are separate, each with an owner, a due date and the evidence expected to close it.
Closure requires the expected evidence to be attached and an effectiveness verification at a later date.
Extensions are recorded with reasons and are visible in the finding's history.

Rules enforced here

A finding cannot be closed without its evidence attached and its effectiveness verified — QLT-06.
A repeat finding against the same requirement is flagged as recurrent, which changes how it is reviewed.

Leads to

QLT-REV SAF-HAZ QLT-PROG

Actors: Quality ManagerAction owner
Regions: State strip · Requirement breached and evidence · Root cause analysis · Corrective and preventive action · Effectiveness verification · Extension history
States: Raised · Accepted · Action planned · Overdue · Implemented · Effectiveness verified · Closed · Rejected
Requirements: QLT-05QLT-06QLT-07QLT-08QLT-09QLT-10QLT-11QLT-13

QLT-REV

Annual review pack

Staff · Quality

The MTOE 3.5 Accountable Manager annual review, with all twelve agenda items populated from live data rather than assembled by hand, and action items tracked afterwards.

ZAnnual review — 2026Export packRecord minutes

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

#Agenda itemPopulated from

1Audit plan completion and effectivenessAudit programme — 9 of 14

2Open findings, overdue, recurrentFindings — 5 open, 2 overdue

3MCAA audits, correspondence, regulatory changeCAA interface — 1 audit, 3 notices

4Course performance and feedbackSessions — 11 delivered, mean 4.4 / 5

5Examination performance and question bankAnalysis — mean 79%, 6 questions flagged

6Practical training and assessmentLogbooks — 3 reassessments

…Items 7 to 12Facilities, personnel, sub-contractors, changes, records, resources

Every item is populated from system data. Nothing on this agenda is typed in.

Walkthrough

All twelve MTOE 3.5 agenda items are populated from live data before the meeting, not assembled by hand the night before.
Attendance and minutes are captured in the pack.
Action items carry owner, due date and the evidence expected — the same shape as a finding.
Carry-over from the previous review is shown first, so nothing quietly disappears between years.
Export produces the complete pack for the Accountable Manager's signature.

Rules enforced here

Every agenda item is populated from system data. Nothing on this agenda is typed in.
An action item from a previous review cannot be dropped without being closed or explicitly carried forward.

Leads to

QLT-FIND SAF-HAZ RPT-EFF

Actors: Accountable ManagerQuality Manager
Regions: Twelve agenda items, each populated · Attendance · Minutes · Action items with owner, due date and expected evidence · Previous review carry-over
States: Draft pack · Meeting held · Actions open · Closed
Requirements: QLT-12QLT-14RPT-05SUB-06CHG-08

SAF-REP

Internal reporting

Staff · Quality

A short route for reporting an error, a near miss, a hazard or a procedure that cannot be worked as written — including from the screen where the procedure is displayed.

ZReport a safety issue

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Error

Near miss

Hazard

Procedure problem

What happened

Where

When

What made it possible

Report confidentially

Submit

Feedback to the reporter is tracked. An unanswered report ends a reporting culture faster than a punished one.

Walkthrough

Any member of staff or any student can raise a report, from any shell.
The reporter chooses confidential or named; confidential reports show the handler a reference, not an identity.
Category and routing are set on submission, so the report reaches the right person immediately.
The reporter receives feedback on what happened to their report — which is what keeps reporting alive.
A report that warrants it is converted to a finding or a hazard, carrying its evidence across.

Rules enforced here

A confidential report's reporter identity is not visible to the handler and not recoverable from the interface.
Every report receives feedback. An unclosed report with no feedback is an exception the Quality Manager sees.

Leads to

SAF-HAZ QLT-FIND

Actors: All staffStudents
Regions: Report form · Confidentiality choice · Category · Routing · Feedback to the reporter · Convert to a finding
States: Open · Under review · Converted to a finding · Closed with feedback · Confidential
Requirements: SAF-01SAF-02SAF-03SAF-04SAF-06SAF-07

SAF-HAZ

Hazard log and risk register

Staff · Quality

Hazards identified from reports, audits and events, each with a risk assessment before and after mitigation, an owner, and a review date. This is the register the annual review reads from.

ZHazard logAdd hazard

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Risk matrix — 5 × 5, hazards plotted

14open hazards

2high residual

3reviews overdue

Residual risk, not initial risk, drives the sort order.

RefHazardInitialResidualOwnerReview

HAZ-007Practical assessment without current assessor authorisationHighLowQuality Manager12 Jan 2027

HAZ-011Question bank exposure through repeated papersMediumMediumExamination ManagerOverdue

HAZ-013Single-instructor dependency on DHC-6 type courseHighMediumTraining Manager04 Mar 2027

Walkthrough

Hazards arrive from reports, audits, events and the annual review.
Each carries an initial risk assessment, the mitigations applied, and a residual risk — the register sorts on residual, not initial.
An owner and a review date are mandatory; an overdue review is flagged.
The matrix plots the register so a concentration of risk in one area is visible at a glance.
Linked reports and findings are shown against each hazard.

Rules enforced here

A hazard cannot be closed while its residual risk is above the acceptance threshold without a recorded acceptance by the Accountable Manager.

Leads to

QLT-FIND QLT-REV SAF-REP

Actors: Safety ManagerQuality ManagerAccountable Manager
Regions: Register table with risk index · Risk matrix · Hazard detail with mitigations · Linked reports and findings · Review schedule
States: Open — unmitigated · Open — mitigated · Monitoring · Closed · Review overdue
Requirements: SAF-04SAF-05SAF-06QLT-12CHG-07

CHG-CAA

Regulatory change and CAA interface

Staff · Quality

Every exchange with the MCAA in one place — correspondence, submissions, approvals, findings — alongside the regulatory change watch list and the impact assessment that turns a change into internal actions.

ZCAA interfaceLog correspondenceNew submission

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

CorrespondenceSubmissionsRegulatory changeCompliance checklistAudit access

ReferenceChangeEffectiveImpact assessedActions

MCAR-147 Iss 5Examination independence wording tightened01 Jan 2027Yes2 open

MCAR-66 App IIPass mark unchanged, penalty marking reaffirmed—Yes0

AN 147-03Distance learning approval criteria01 Apr 2027Outstanding—

Compliance checklist — Appendix 07

142 of 156 items evidenced. Each unevidenced item links to the document or record that would close it.

Audit access

A named inspector is granted a read-only, time-boxed account. Every record they open is logged.

Walkthrough

Correspondence with the MCAA is logged in one place with direction, date, subject and the document it concerns.
Submissions show what was sent, when, and what state it is in — awaiting ZAA action, awaiting CAA response, approved, closed.
The regulatory change watch list carries each known change, its effective date, and whether its impact has been assessed.
An impact assessment turns a change into named internal actions against documents, courses and procedures.
The compliance checklist — Appendix 07 — shows evidenced and unevidenced items, each unevidenced item linking to what would close it.
Audit access grants create a time-boxed, read-only inspector account and log every record opened.

Rules enforced here

A regulatory change with no impact assessment is an open item on the Accountable Manager's review — it cannot be left unassessed silently.
An inspector grant expires on its own date; it is never open-ended.

Leads to

DOC-REV INS-VIEW CRS-SCOPE

Actors: Quality ManagerAccountable Manager
Regions: Correspondence log · Open submissions and their state · Regulatory change watch list · Impact assessment · Compliance checklist status · Audit access grants
States: Awaiting ZAA action · Awaiting CAA response · Approved · Closed · Impact assessment outstanding
Requirements: CHG-01CHG-05CHG-06CHG-07CHG-08SUB-04QLT-13

Staff · Reports3 screens

RPT-BLD

Report builder

Staff · Reports

Ad-hoc questions answered without a developer. Pick a subject area, filter it, choose columns, save the result as a named report and put it on a schedule. The same engine produces the standard reports.

ZReport builderSave as reportSchedule

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

SubjectAuthorisations

FilterState = Active · Review due < 90 days

Group byHolder

Columns

Holder

Course

Type

Walkthrough

Choose a subject area — people, authorisations, training, sessions, examinations, certificates, orders.
Build a filter from that area's fields; the row count updates as the filter narrows.
Choose columns; the preview shows the first rows so the shape is obvious before the report is saved.
Save as a named report, then optionally schedule it to named recipients or roles.
Export in CSV, XLSX or PDF, honouring the same filter.

Rules enforced here

Row-level permissions apply to the result, not just to the screen. A user only ever sees rows they could open directly.
A scheduled report is generated under the recipient's permissions, not the author's.

Leads to

RPT-EFF TRN-BOARD RPT-SALES

Actors: Quality ManagerTraining ManagerAccountable Manager
Regions: Subject area picker · Filter builder · Column chooser · Result preview with row count · Save, schedule and share · Export formats
States: New · Preview — 0 rows · Preview — truncated at 500 · Saved · Scheduled · Shared with role
Requirements: RPT-01RPT-02RPT-03RPT-04RPT-06SEC-04DAT-05

RPT-EFF

Course effectiveness

Staff · Reports

Whether the training is working, in the terms MCAR-147 and the annual review ask for: pass rates, first-time pass, feedback scores, reassessment rates, and what changed after the last course review.

ZCourse effectiveness — ZACP-002

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

79%mean score

84%first-time pass

4.4feedback / 5

3reassessments

Pass rate by sitting — 8 sittings

Feedback by module

InstructorSessionsHoursMean feedbackUtilisation

M. Sana6484.672%

A. Latheef4314.248%

I. Rasheed184.412%

Two feedback items are open as improvement actions. Both link to the finding that raised them.

Walkthrough

Select a course; the view covers every sitting of it.
Pass rate and first-time pass rate are trended by sitting so a drift is visible before it becomes a finding.
Feedback scores are trended by module, which is where a weak module shows itself.
Reassessment rate on practical training is shown alongside.
Instructor utilisation and mean feedback per instructor complete the picture.
Feedback that has been turned into an improvement action is linked, so the loop is visible.

Rules enforced here

Fewer than three sittings shows insufficient data rather than a misleading trend line.
Performance below tolerance raises a course review action automatically.

Leads to

QLT-FIND CRS-VER EXM-RES

Actors: Training ManagerQuality Manager
Regions: Course selector · Pass and first-time-pass trend · Feedback score trend · Reassessment rate · Instructor utilisation · Actions raised from feedback
States: Insufficient data — fewer than 3 sittings · Within tolerance · Below tolerance — review required
Requirements: RPT-07RPT-10QLT-09EXT-15EXT-18TRN-14

RPT-SALES

Sales and funnel analytics

Staff · Reports

Where revenue comes from and where prospective students drop out. Kept deliberately separate from the approved-training reporting so commercial experimentation never touches regulated data.

ZSales and funnelExportCompare period

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

MVR 412kinvoiced this quarter

61%organisation share

23%cart abandonment

9%recovered

Funnel — view, detail, cart, pay, enrol

Revenue by product

ProductOrdersSeatsChannelRecovered carts

ZACP-002 e-learning148148Direct6

ZACP-002 classroom2244Organisation—

DHC-6 type bundle1138Reseller2

No learner-identifiable record leaves this screen. Funnel figures are aggregate.

Walkthrough

Revenue by product and channel, with the period comparison alongside.
The funnel runs from catalogue view through course detail, cart, payment and enrolment, so the drop-off point is identifiable.
Abandoned carts and the recovery rate are tracked as a pair.
Discount and voucher use shows what the promotions actually cost.
The organisation pipeline shows quotations by stage and value.

Rules enforced here

No learner-identifiable record appears on this screen. Funnel figures are aggregate.
Commercial analytics are kept separate from approved-training reporting so commercial experimentation never touches regulated data.

Leads to

COM-ORG COM-QUOTE RPT-BLD

Actors: Commercial leadAccountable Manager
Regions: Revenue by product and channel · Funnel from view to enrolment · Abandoned cart and recovery · Discount and voucher use · Organisation pipeline
States: This month · Quarter · Year · Compared with prior period
Requirements: RPT-08RPT-09B2C-11CAT-07PRD-08EXT-12EXT-14

Staff · Commerce6 screens

COM-PROD

Products, pricing and bundles

Staff · Commerce

What is sold, as distinct from what is taught. One course can be sold in several forms; one product can grant several courses.

ZProductsNew bundleNew product

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ProductTypeGrantsMVRUSDStatus

Safety & HF Part 1E-learning1 course1,850120Published

Safety & HF — both partsBundle2 courses2,900188Published

DHC-6 type B1.1 seatScheduled seat1 session place42,0002,725Published

Safety & HF seat pool ×40Seat pool40 allocations62,0004,020Draft

Prices are versioned. An order records the price in force when it was placed.

Walkthrough

A product is created against a course but is not the course — the same course can be sold several ways.
Price lists carry currency, tax treatment and effective dates; a price change creates a new version rather than overwriting.
The bundle builder assembles products into a bundle with its own price and its own access period.
An organisation price list overrides the standard list for that account only.
Access period and refund policy are set per product and appear verbatim at checkout.

Rules enforced here

Changing a price never changes an existing order or an open quotation.
A product for an approved course cannot offer an e-learning delivery while that restriction stands.

Leads to

COM-QUOTE COM-ORG PUB-COURSE

Actors: Business developmentFinance
Regions: Product list by type · Price list with currency and tax · Bundle builder · Organisation price lists · Access period and refund policy · Price version history
States: Draft · Published · Withdrawn · Organisation-specific price active
Requirements: PRD-01PRD-02PRD-03PRD-04PRD-05PRD-06PRD-07PRD-08PRD-09PRD-11PRD-12PRD-13

COM-ORG

Organisation account

Staff · Commerce

A corporate customer: their people, their seat pools, their negotiated prices, their agreement, their credit position and their compliance reporting.

ZIsland Aviation Services LimitedNew quotationClosed cohort

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Credit limitMVR 250,000

Outstanding18,500

AgreementZACO-25/001 — expires 30 Apr 2027

OverviewPeopleSeat poolsPricesOrdersAgreement

ProductListNegotiatedFrom

Safety & HF bundle2,9002,32001 Jan 2026

DHC-6 type B1.1 seat42,00038,00001 Jan 2026

Agreement ZACO-25/001 expires in 7 months. Renewal reminder scheduled.

Walkthrough

The account header carries credit limit, current exposure and ageing.
Administrators are listed with their last sign-in and multi-factor status.
The negotiated price list and the agreement are maintained here and are read-only to the client.
Seat pools show what the client holds and what is about to expire, which is the renewal conversation.
Renewal prompts fire on the agreement date and on pool expiry.

Rules enforced here

An order beyond the credit limit is held for a commercial decision rather than refused outright.

Leads to

COM-QUOTE ORG-SEATS ACC-INV

Actors: Business developmentFinance
Regions: Account header with credit position · Administrators · Negotiated price list · Seat pools · Agreement and renewal · Activity
States: Active · Credit limit reached — ordering blocked · Agreement expiring · Dormant
Requirements: B2B-01B2B-02B2B-08B2B-09B2B-10B2B-12B2B-16PRD-09SUB-02

COM-QUOTE

Quotation builder

Staff · Commerce

Build a quotation from the pricing already in the system, issue it in the ZAOF numbering and ZAA house style, and convert it to an order on acceptance — so the document and the order cannot disagree.

ZQuotation ZAOF-26/014Generate documentIssue

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

CustomerIsland Aviation Services Limited

Valid until30 Sep 2026

ItemQtyUnitTotal

Safety & HF bundle — negotiated402,32092,800

Volume tier — 40+ seats−15%−13,920

Total MVR78,880

Preview ZAOF document

Walkthrough

Start from an enquiry or from an existing account.
Line items are drawn from the applicable price list — standard or negotiated — with quantities and group breaks applied.
A validity date is set; the quotation expires on it.
Generate produces the ZAOF document in ZAA house style, numbered from the document register.
Acceptance is tracked; on acceptance the quotation converts to an order at the quoted price.

Rules enforced here

A quotation past its validity cannot be accepted. It is reissued, with a new number, not silently extended.
The quoted price is held even if the price list changes before acceptance.

Leads to

ORG-ORD COM-ORG DOC-REG

Actors: Business development
Regions: Customer and requirement · Line items from the price list · Validity · Generate ZAOF document · Acceptance tracking
States: Draft · Issued · Accepted — converted to order · Expired · Declined
Requirements: B2B-09B2B-10PRD-09PRD-10EXT-05EXT-06EXT-16

SUP-DESK

Support desk

Staff · Commerce

Where a learner's problem is handled with their record already on screen: transfers, cancellations, access faults, exam incidents. The agent sees what the learner sees, without becoming them.

ZSupport

Search tickets, learners, orders

New ticket

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Queue

#1184 · Transfer to Nov cohort · 2 h

#1181 · Cannot resume module 4 · 6 h

#1177 · Refund request · 1 d

#1160 · Exam interrupted · escalated

#1181 — Cannot resume module 4

LearnerA. Nazim

OrderZAA-2026-0431

CourseZACP-002 Part 1

Thread

Reset attemptTransfer cohortRefundEscalate

An agent can act on a learner's behalf but never signs in as them. Every action is recorded against the agent's own account.

Walkthrough

The queue is ordered by age and priority, with escalated tickets visible.
Opening a ticket brings the learner's order, enrolment and progress onto the same screen as the thread.
Permitted actions are the small set support can actually take: reset an attempt, transfer a cohort, refund, escalate.
Each action is recorded against the agent's own account with the learner named.
Escalation routes to the Training Manager or the Examination Manager depending on the category.

Rules enforced here

An agent acts on a learner's behalf but never signs in as them — SEC-06.
A refund or transfer on an approved course that has already started requires a recorded reason.

Leads to

ORG-ORD LRN-PROG ACC-INV

Actors: Support agentLearnerOrganisation administrator
Regions: Ticket queue with age and priority · Ticket thread · Learner context panel · Permitted actions · Action audit
States: New · Open · Waiting on learner · Escalated to Training Manager · Resolved · Reopened
Requirements: EXT-17B2C-08B2C-11SEC-06UIX-06

COM-BUNDLE

Bundles and learning paths

Staff · Commerce

Four ways of selling more than one course as one thing: a fixed bundle, a choice bundle, an ordered learning path, and a subscription to a defined catalogue. Each behaves differently at purchase, at enrolment and at completion, so each is built explicitly rather than by convention.

ZDHC-6 type bundlePreview as buyerPublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

TypeLearning path — ordered

Access period18 months from purchase

PriceMVR 24,500

Sum of partsMVR 29,800

#ComponentUnlocks onOwn certificateVisibility

1ZACP-002 Safety and human factorsPurchaseYesPublic

2DHC-6-300 type theoryCompletion of 1YesPublic

3DHC-6-300 practical assessmentCompletion of 2YesPublic

4Villa Air fuel system differencesCompletion of 2NoVilla Air only

This bundle contains an organisation-only component. Its visibility is therefore Villa Air only — adding a private course to a public bundle restricts the bundle, it does not publish the course.

On completion

Component certificates issued individually

Bundle certificate — not configured

Path completion recorded on the training record

If a component is retired

Bundles already sold keep access to what was bought. The bundle is withdrawn from sale and a replacement component may be substituted for future purchases only.

Walkthrough

Choose the type first, because the other four decisions follow from it: a fixed bundle sells everything in it, a choice bundle sells any N of M, a learning path sells an ordered sequence, and a subscription sells access to a defined set for a period.
Components are added with their order and, for a path, the condition that unlocks each one.
The bundle price is set against the visible sum of the parts, so the discount being offered is explicit rather than arithmetic done in someone's head.
Completion behaviour is decided: whether components issue their own certificates, whether the bundle issues one of its own, and what is written to the training record.
Seat pool behaviour is set — whether a seat consumes the whole bundle or one component at a time.
Visibility is not set here. It is computed from the components and shown, with the restricting component named.

Rules enforced here

A bundle's visibility is the most restrictive of its components. Adding an organisation-only course to a public bundle restricts the bundle; it never publishes the course.
Retiring a component does not break bundles already sold — existing holders keep access to what they bought. The bundle is withdrawn from sale and a substitute applies to future purchases only.
A learning path does not waive prerequisites. Unlocking by completion and satisfying a prerequisite are separate checks and both apply.
A bundle certificate, where one is configured, is additional to the component certificates and never replaces them.

Leads to

COM-VIS COM-PROD CRS-PREQ

Actors: Commercial leadTraining Manager
Regions: Bundle type selector · Component list with order and unlock rule · Pricing against the sum of parts · Completion and certificate behaviour · Seat pool behaviour · Component retirement handling · Visibility inherited from components
States: Draft · Published · Component retired — sold bundles unaffected · Visibility restricted by a component · Withdrawn from sale
Requirements: PRD-03PRD-04PRD-05PRD-12B2B-04CRS-08CER-01

COM-VIS

Catalogue visibility and audience

Staff · Commerce

Who can see a course, and the firm separation between commercial visibility and regulatory visibility. A course hidden from the public catalogue is not hidden from the CAA, from its own students, or from the MTOE course list — and the screen says so rather than leaving it to be assumed.

ZVilla Air fuel system differences — visibilityAccess historyPublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

VisibilityOrganisation-only

AudienceVilla Air Pvt Ltd

Since14 Aug 2026

Approved scopeInside — MV.147.0003

Appears inPublicUnlistedOrganisation-onlyClosed cohort

Public catalogue and searchYesNoNoNo

The named organisation's catalogueYesYesYesNo

A student's own training recordYesYesYesYes

Certificate verification pageYesYesYesYes

MTOE 1.9 course list extractYesYesYesYes

CAA inspector viewYesYesYesYes

Audit programme and course reviewYesYesYesYes

Visibility is a commercial setting. It never removes a course from the approval, the MTOE course list, the inspector view or the audit programme.

Removing an organisation's audience stops new purchases and new enrolments. It does not revoke issued certificates, remove completed records, or interrupt a student mid-course.

Walkthrough

Pick the visibility level: public, unlisted and reachable only by direct link, organisation-only, or closed-cohort-only.
For organisation-only, name the organisations. The audience is a list of accounts, not a flag.
The appearance matrix is the substance of the screen: it states, for each level, where the course does and does not appear. Nothing is left to be inferred.
The regulatory row is fixed and cannot be switched off — the MTOE course list, the inspector view and the audit programme always include the course.
Removing an organisation from the audience takes effect on new purchases and new enrolments only; the screen says so before the change is made.
Access history records who was given and removed access, and when.

Rules enforced here

Visibility is a commercial setting and never a regulatory one. A course hidden from the public catalogue still appears in the MTOE 1.9 extract, the CAA inspector view and the audit programme — SUB-04.
A certificate from a private course verifies publicly like any other. A certificate nobody can verify is worthless to its holder — CER-07.
Removing access does not revoke issued certificates, remove completed records, or interrupt a student mid-course.
A student always sees a course they are enrolled on, whatever its visibility.

Leads to

COM-BUNDLE ORG-CAT CRS-LIST

Actors: Commercial leadQuality Manager
Regions: Visibility level · Audience — named organisations · Regulatory visibility statement · Effect on certificate verification · Where it appears and where it does not · Access history
States: Public · Unlisted — direct link only · Organisation-only · Closed cohort only · Retired from sale
Requirements: CAT-01CAT-02CAT-03B2B-12PRD-09CER-07SUB-04SEC-04

Staff · Admin6 screens

SYS-USERS

Users, roles and permissions

Staff · Admin

Who can do what. Roles are configurable, a person may hold several, and the effective permissions of any named user can be shown — including for a periodic access review.

ZUsers and rolesAccess reviewAdd user

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

UsersRolesPermission matrixAccess review

AreaAMQMTMEMAdminFinance

Staff recordsRCRUARURRU—

AuthorisationsACRUACCR—

Question bank—R—CRUA——

CertificatesRRARCRU—

Orders and invoicesR—R—RCRUA

Question content is invisible to the Accountable Manager and Training Manager by default — SEC-11.

Walkthrough

Users are listed with their roles, last sign-in and multi-factor status.
The role editor composes a role from individual permissions; the permission matrix shows the whole picture at once.
Effective permissions for a named user answers the question that actually gets asked in an audit: what can this person do?
The access review cycle presents every user's access for periodic confirmation and records the outcome.

Rules enforced here

Permissions are granted to roles; roles are granted to people. A permission is never granted directly to a person.
Multi-factor is mandatory for every staff account and cannot be waived per user.
A user who loses a permission loses it from the rail immediately, not at next sign-in.

Leads to

SYS-CONF STA-PERSON SYS-INT

Actors: System administrator
Regions: User list with roles · Role editor · Permission matrix · Effective permissions for a user · Access review cycle · MFA status
States: Active · MFA not enrolled · Access review due · Suspended · Inspector account with expiry
Requirements: SEC-01SEC-02SEC-03SEC-04SEC-09REC-05REC-08INT-06INT-08

SYS-CONF

Configuration

Staff · Admin

Everything a regulatory or business change can alter, held as versioned, auditable configuration rather than code: intervals, quotas, pass marks, eligibility criteria, templates, prices, tax, numbering.

ZConfiguration

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

SettingValueVersionChanged

Examination pass mark — basic75% no penaltyv101 Jul 2026

Authorisation review interval24 monthsv101 Jul 2026

Re-sit waiting period30 daysv212 Aug 2026

Certificate number formatZAA/COR/{yyyy}/{seq4}v101 Jul 2026

Tax rate8% GSTv101 Jul 2026

Changing a value does not rewrite history. Records keep the value in force when they were created.

Walkthrough

Configuration is grouped by subject: intervals, quotas, pass marks, eligibility criteria, notification templates, retention.
Each item shows its current value, its version and its effective date.
A change is made with an effective date and, where the item is regulatory, an approval before it takes effect.
Change history shows every previous value and who set it.

Rules enforced here

Intervals, quotas, pass marks, criteria and templates are versioned configuration, not code — OPS-06.
Changing a value never rewrites history. Past evaluations stand against the value in force at the time.
A regulatory configuration item requires an approval by a second person before it takes effect.

Leads to

TRN-REQ SYS-USERS NTF-CTR

Actors: System administratorQuality Manager
Regions: Configuration groups · Current value and version · Change history · Effective date · Approval where required
States: Current · Change pending approval · Scheduled — effective from a future date · Superseded
Requirements: OPS-06EXM-14EXM-17TRN-01QUA-08CER-05DOC-03PRD-07INT-01

SYS-INT

Integration health

Staff · Admin

The Moodle, payment and notification integrations: queue depth, failures, replay, and the daily reconciliation that reports divergence rather than silently correcting it.

ZIntegrations

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

OKMoodle

OKPayments

3queued

1divergence

IntegrationItemFailedAction

Moodle — grade passbackA. Nazim, Safety & HF Part 12 attemptsReplay

Moodle — enrolment syncI. Latheef1 attemptReplay

EmailExpiry reminder batchbounced ×1View

Daily reconciliation: 1 learner enrolled in Moodle but not in the portal. Reported, not auto-corrected.

Walkthrough

Status tiles show each integration's health and last successful exchange.
The failure queue lists what did not go through, with the error and a replay action.
The reconciliation report compares what the portal believes with what the learning engine and the payment gateway believe, and names the differences.
Webhook and API logs are searchable by correlation reference.
Alert routing decides who is told when an integration degrades.

Rules enforced here

Nothing is lost on a failed exchange. It queues, it is visible, and it replays.
A reconciliation difference is surfaced, never auto-corrected.

Leads to

SYS-API NTF-CTR SYS-CONF

Actors: System administrator
Regions: Integration status tiles · Failure queue with replay · Reconciliation report · Webhook and API logs · Alert routing
States: Healthy · Degraded · Failed — items queued · Divergence detected · Replaying
Requirements: LRN-02LRN-03LRN-05LRN-07OPS-04OPS-05NTF-04

NTF-CTR

Notifications and communications

Staff · Admin

Every message the system sends, in one editable place: templates, the events that fire them, the digest schedule, and the bulk communication path with its consent and audit trail.

ZNotificationsNew templateBulk send

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

EventTemplateAudienceChannelState

Authorisation review due — 90 daysAUT-REVIEW-90Holder + Quality ManagerEmail + in-appLive

Certificate issuedCER-ISSUEStudent + organisationEmailLive

Payment failedPAY-RETRYPurchaserEmailLive

Session reminder — 24 hoursDEL-REMINDAttendeesEmail + SMSPaused

Weekly digest

SendsMonday 07:00 MVT

ContainsDue, overdue, open findings, new orders

Bulk send

Bulk communication records who sent it, to whom, and on what basis. Regulatory notices cannot be opted out of; marketing can.

Walkthrough

The template library holds every message the system sends, versioned, in each supported language.
The trigger map shows event, template and audience together, so it is obvious who hears about what.
The digest configuration sets what the weekly summary contains and when it sends.
The bulk send composer records who sent it, to whom and on what basis.
The delivery log shows sends, opens and bounces; a persistent bounce flags the contact record.

Rules enforced here

Regulatory notices cannot be opted out of. Commercial messages can, and the distinction is enforced at send time.
A template change is versioned; messages already sent are unaffected.

Leads to

SYS-CONF SYS-INT ACC-PROF

Actors: System administratorTraining Manager
Regions: Template library with versions · Trigger map — event to template to audience · Digest configuration · Bulk send composer · Delivery log and bounces
States: Draft template · Live · Paused · Send queued · Send complete — bounces
Requirements: NTF-01NTF-02NTF-03NTF-04NTF-05NTF-06NTF-07NTF-08

SYS-API

API, integrations and partners

Staff · Admin

The outward-facing edge: API credentials, the client HR feed, the learning engine connection, reseller accounts and the tenancy boundary. Configured here, exercised everywhere else.

ZIntegrationsNew API client

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

IntegrationDirectionScopeLast exchangeState

Learning engine — LTI 1.3OutLaunch, grade return2 min agoHealthy

Learning engine — web servicesOutCourse shell, enrolment, completion2 min agoHealthy

Villa Air — HR feedInJoiners, leavers, role changesToday 04:00Healthy

Manta Air — records APIOutCompletion, certificate17 min agoCredential expires 30 d

Payment gatewayOutAuthorise, capture, refund8 min agoHealthy

Engine independence

Completion, results and certificates are written to portal tables. The learning engine can be replaced without touching the record of training.

Tenancy

Data is partitioned by organisation from the first release, whether or not a second academy is ever hosted.

Walkthrough

API clients are created with named scopes and expiring credentials; an expiring credential is flagged ahead of time.
The client HR integration takes joiners, leavers and role changes from a client's own system into their roster.
The learning engine connection shows both the LTI launch and the web services link, with health for each.
Reseller and partner accounts are configured with their own price lists and their own reporting.
Tenancy and data residency are shown as configured, not assumed.

Rules enforced here

Completion, results and certificates are written to portal tables. The learning engine can be replaced without touching the record of training — LRN-14.
Data is partitioned by organisation from the first release, whether or not a second academy is ever hosted — EXT-13.

Leads to

SYS-INT COM-ORG SYS-USERS

Actors: System administratorClient ITReseller
Regions: API clients and scopes · Client HR integration · Learning engine connection and health · Reseller and partner accounts · Tenancy and data residency · Webhook log
States: Healthy · Degraded — retrying · Credential expiring · Revoked · Sandbox
Requirements: COR-08EXT-08EXT-12EXT-13LRN-08LRN-14INT-01INT-02INT-03INT-04INT-05SEC-08

SYS-HOME

Administration home

Staff · Admin

The map of everything that can be configured, who may change it, and whether the change needs a second person. Without this screen the configuration is discoverable only by someone who already knows it exists.

ZAdministrationChange logExport configuration

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

3 configuration changes are awaiting a second approval. None take effect until approved.

Organisation

Approval record

Facilities and locations

Branding

Regulated parameters

Operational parameters

Eligibility criteria

Checklist templates

Retention policy

Reference and schemes

Reference data

Numbering schemes

Document templates

Business calendar

System

Users and roles

Notifications

Integrations

API and partners

Finance and tax

ChangedItemFromToByState

Today 09:14Human factors continuation interval24 months12 monthsA. LatheefAwaiting approval

11 SepExamination pass mark75%75%—Unchanged since 2024

08 SepCertificate template ZAFC-011Rev 2Rev 3M. SanaEffective 01 Oct

Every configuration item has a named owner and a change history. An item with no owner appears on this screen until one is assigned.

Walkthrough

Configuration is grouped by what it governs — the organisation, regulated parameters, reference and schemes, the system — not by which developer built it.
Anything awaiting a second approval is stated at the top with the count, because a change nobody approves quietly never takes effect.
Recent changes across every group are shown together, which is the view an auditor asks for and the view that catches a change nobody remembers making.
An item with no named owner appears here until someone is assigned to it.
Export configuration produces the complete current state as a dated file — useful for a change record and for comparing environments.

Rules enforced here

Every configuration item has a named owner. An unowned item is an exception, visible on this screen.
A change with a regulatory citation does not take effect until a second person approves it — INT-08.
Configuration is exportable and comparable. Drift between environments is detectable rather than discovered.

Leads to

CFG-PARAM CFG-APPR SYS-USERS SYS-CONF

Actors: System administratorQuality ManagerAccountable Manager
Regions: Configuration groups with item counts · Pending approvals · Recent changes across every group · Items with no owner · Environment and version
States: Normal · Changes awaiting approval · Drift detected between environments
Requirements: OPS-06SEC-04INT-08CHG-03

Staff · Configuration11 screens

CFG-APPR

Approval record

Staff · Configuration

ZAA's own MCAR-147 approval, held as structured data rather than as a PDF in a folder. Every scope selector, every public approval statement and every consistency check reads from here, so this is the single most load-bearing configuration screen in the system.

ZMCAR-147 approval — MV.147.0003Request amendmentUpload certificate

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Approval valid to 30 Jun 2027. Daily consistency check at 02:00 today found 0 exceptions.

ReferenceMV.147.0003

Issued01 Jul 2025

Expires30 Jun 2027

Accountable ManagerS. Waheed

Approved scope

CategoryScopeDelivery permitted

Basic knowledgeB1.1, B2Classroom, practical

Type trainingDHC-6-300Classroom, practical

Distance learningNot approvedNot permitted

Approved locations

Malé — Hangar 2, Rooms 1 and 2

Fuvahmulah — Training room

Alternate — by assessment only

Postholders

Accountable Manager

Quality Manager

Training Manager

Examination Manager

Distance learning being absent here is what makes CRS-03 enforceable. It is not a checkbox an administrator can tick — it changes only when an amended approval is recorded.

Walkthrough

The approval is held as structured data — reference, issue date, expiry, scope, locations, delivery methods, postholders, limitations — not as a scanned certificate someone has to read.
The scope table is what every scope selector in the system draws from, so an authorisation or a course outside the approval cannot be expressed anywhere.
Approved delivery methods are set per scope line. Distance learning appears as not approved, which is what makes the restriction on approved courses enforceable rather than advisory.
Expiry drives the banner on the staff home screen and the approval statement on the public site.
An amendment is requested from here and tracked on the CAA interface screen; the approval record changes only when the amended approval is recorded.
The certificate of approval itself is attached as evidence alongside the structured data.

Rules enforced here

Nothing in this record is edited casually. Every change requires the Accountable Manager and is recorded with the amendment it came from.
A delivery method cannot be enabled here to work around a restriction — it changes only when an amended approval is recorded — CRS-03, CHG-01.
The daily consistency check reads this record and reports any course, session or authorisation that has drifted outside it — CHG-04.

Leads to

CRS-SCOPE CHG-CAA FAC-REG

Actors: Accountable ManagerQuality Manager
Regions: Approval reference, issue and expiry · Approved scope — courses, types, categories · Approved locations · Approved delivery methods · Accountable Manager and postholders · Limitations and conditions · Certificate of approval document · Amendment history
States: Valid · Expiring within 90 days · Amendment submitted · Suspended · Expired
Requirements: SUB-01SUB-02SUB-03CRS-03CHG-01CHG-04CAT-02

CFG-BRAND

Branding and co-branding

Staff · Configuration

The marks, letterheads and colours used on every generated document and every page, plus the controlled co-branding an organisation client may apply to their own portal view.

ZBrandingPreview certificatePublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ZAA identity

Logo variants — full, mark, mono

Primary8D0007

SecondaryFF8181

Heading facePoppins

Preview

Certificate ZAFC-011 rendered with current livery

OrganisationCo-brandingApplies toApproved by

Villa AirLogo in portal headerTheir portal view onlyCommercial lead

Manta AirNone——

Co-branding never appears on a certificate, an examination paper or any record that forms part of the approved training record.

Walkthrough

ZAA's marks, colours and typefaces are held once and used by every generated document and every page.
Letterhead, footer and certificate livery are previewed against a real record rather than against a placeholder, so a change is judged on what it will actually produce.
An organisation client's co-branding is configured per account and limited to what it may appear on.
Publishing a change takes effect on documents produced from that point; documents already produced are untouched.

Rules enforced here

Co-branding never appears on a certificate, an examination paper, or any record forming part of the approved training record — B2B-16.
A document already produced is stored as produced and is never re-rendered under new livery.

Leads to

CFG-TPL COM-ORG

Actors: System administratorCommercial lead
Regions: ZAA identity — logo variants, colours, typefaces · Letterhead and footer · Certificate livery · Per-organisation co-branding · Preview against a real document · Version history
States: Current · Draft — not yet applied · Organisation override active
Requirements: B2B-16CER-05DOC-10UIX-01

CFG-PARAM

Operational parameters

Staff · Configuration

The numbers the regulation and the MTOE fix: pass marks, intervals, quotas, thresholds, warning periods, grace periods. Held as versioned configuration so a regulatory change is an approved edit rather than a development project.

ZOperational parametersChange historyPropose change

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ExaminationsAuthorisationsTrainingQualityCertificates

ParameterValueBasisOwnerLast changed

Pass mark75%MCAR-66 App. IIExamination ManagerNever

Penalty markingNoneMCAR-66 App. IIExamination ManagerNever

Re-sit interval, minimum30 daysMTOE Part 2Examination Manager14 Mar 2026

Re-sits permitted before re-training2MTOE Part 2Examination Manager14 Mar 2026

Question reuse window3 sittingsZAA policyExamination Manager02 Jun 2026

Facility index — flag below0.30ZAA policyExamination Manager02 Jun 2026

Changing the pass mark would affect 0 released results. Past results are always evaluated against the value in force at the time.

A parameter with a regulatory citation requires a second approval before it takes effect. One with a ZAA policy basis does not.

Walkthrough

Parameters are grouped by the area they govern and each carries its basis — a regulation, the MTOE, or ZAA policy.
Proposing a change shows the impact before it is made: how many records move, how many people change status, how many due dates shift.
A parameter with a regulatory citation goes to a second person for approval; one with a ZAA policy basis takes effect on its effective date.
An effective date in the future leaves the change visible and scheduled rather than applied silently.
Change history shows every previous value, who set it and when — which is what lets a past evaluation be defended.

Rules enforced here

Intervals, quotas, pass marks, thresholds and warning periods are versioned configuration, not code — OPS-06.
Changing a value never rewrites history. A past result or a past currency evaluation stands against the value in force at the time.
A regulatory parameter requires a second approval. The approver cannot be the proposer.

Leads to

CFG-CRIT TRN-REQ SYS-HOME

Actors: Quality ManagerExamination ManagerTraining Manager
Regions: Parameter groups · Current value with effective date · Impact preview — how many records move · Second approval · Change history with previous values · Regulatory citation per parameter
States: Current · Change drafted · Awaiting second approval · Scheduled — effective date in future · Superseded
Requirements: OPS-06EXM-14EXM-17AUT-12TRN-11QLT-10FAC-09CER-02

CFG-CRIT

Eligibility and competence criteria

Staff · Configuration

What AUT-FLOW evaluates when it says a person is eligible, and what CMP-ASSESS scores them against. Criteria are defined here per authorisation type and per role, each naming the evidence that satisfies it.

ZCriteria — theoretical knowledge instructorNew versionPublish

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

#CriterionEvidence that satisfies itThreshold

1Holds a relevant aircraft maintenance licenceVerified licence on the person recordCurrent

2Type training on the aircraft taughtType course certificateCompleted

3Instructional technique trainingCertificate or in-house courseCompleted

4Human factors trainingZACP-002 or equivalentWithin 24 months

5Practical experience in the subjectRecorded experience by element3 years

6Competence assessmentCMP-ASSESS against this roleSatisfactory

Assessment template

Scale1 Not demonstrated to 4 Exemplary

Minimum per criterion3

Where used

6 active authorisations were issued against version 2 of these criteria. They are not re-evaluated when a new version is published; the new version applies to the next issue or review.

Each criterion names the evidence that satisfies it. A criterion that cannot be evidenced from a stored record cannot be defined here.

Walkthrough

Criteria are defined per authorisation type: what must be true, and what stored evidence proves it.
Each criterion names an evidence type and a threshold, so the eligibility check on a nomination is an evaluation rather than a judgement.
The competence assessment template for each role is defined alongside, with its scale and its minimum acceptable score per criterion.
Publishing creates a new version; where used shows how many live authorisations were issued under each previous version.
Existing authorisations are not re-evaluated on publication — the new version applies at the next issue or review.

Rules enforced here

A criterion that cannot be evidenced from a stored record cannot be defined. There is no free-text 'confirmed by manager' criterion.
Publishing a new version never invalidates an authorisation already issued; it applies at next issue or review — which is what keeps a regulatory tightening orderly.

Leads to

AUT-FLOW CMP-ASSESS CFG-PARAM

Actors: Quality ManagerTraining Manager
Regions: Authorisation type selector · Criteria list with evidence type and threshold · Competence assessment template per role · Scale definition · Versioning and effective date · Where used
States: Draft · Active · Superseded · Retired
Requirements: QUA-05AUT-03CMP-01CMP-02CMP-06OPS-06

CFG-CHK

Checklist templates

Staff · Configuration

Every in-system checklist — invigilator, room preparation, session closure, facility, alternate location, audit — defined once, versioned, and stamped onto each use so a completed checklist always says which version was completed.

ZChecklist templatesNew checklist

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

ChecklistReplacesVersionItemsBlockingUses

InvigilatorZAFC-006Rev 218647

Room preparation—Rev 111447

Practical training facilityZAFC-002Rev 12493

Alternate locationZAFC-008T / 008PRev 131122

Session closure—Rev 39931

Audit — examinationsZAFC-003 annexRev 12204

Item types

Yes / No / Not applicable

Value with tolerance

Evidence required

Signature

Blocking

A blocking item that is not satisfied prevents the action it guards — a sitting cannot open, a session cannot close, a location cannot be scheduled.

A completed checklist records the template version used. Publishing a new version never alters a completed one.

Walkthrough

Every in-system checklist is defined here: invigilator, room preparation, session closure, facility, alternate location, audit.
Items carry a response type — yes/no/not applicable, a value with a tolerance, evidence required, or a signature.
An item marked blocking prevents the action the checklist guards until it is satisfied.
Publishing creates a version; each completed instance records which version it was completed against.
Where a checklist replaces an existing ZAA form, the form reference is carried so the lineage is obvious to an auditor.

Rules enforced here

A blocking item that is not satisfied prevents the action — a sitting cannot open, a session cannot close, a location cannot be scheduled.
A completed checklist is immutable and names its template version. Publishing a new version never alters a completed one.

Leads to

EXM-SIT FAC-REG QLT-PROG

Actors: Quality ManagerExamination Manager
Regions: Checklist library by purpose · Item editor with response type · Blocking items · Version and effective date · Completed instances count · Source form reference
States: Draft · Active · Superseded · Retired
Requirements: QLT-03EXM-10EXM-21FAC-03DEL-11DOC-10

CFG-RET

Retention and legal hold

Staff · Configuration

Retention period by record class, the legal holds in force, and the deliberate absence of any purge route for records MCAR-147.A.125 requires to be kept for an unlimited period.

ZRetention policyDisposal logPlace legal hold

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Record classRetentionBasisDisposal route

Student training recordsUnlimitedMCAR-147.A.125None — no purge path exists

Examination recordsUnlimitedMCAR-147.A.125None — no purge path exists

Staff authorisation recordsUnlimitedMTOE 3.7None

Marketing consent and analytics3 yearsZAA policyAutomatic

Support tickets5 yearsZAA policyApproval required

Application logs18 monthsZAA policyAutomatic

Legal holdsNone active

Last verified restore01 Sep 2026

Off-island copyHeld, encrypted

The unlimited classes have no disposal route in the interface and no purge job behind it. The absence is the control.

Walkthrough

Retention is stated per record class with the basis that sets it and the disposal route, if any.
The classes MCAR-147.A.125 governs show a retention of unlimited and a disposal route of none — and there is no purge job behind them.
Legal holds are placed and lifted here, and a hold overrides every retention period beneath it.
Records approaching a retention decision, in the classes that have one, are listed for a person to decide rather than disposed of automatically.
Backup status and the date of the last verified restore sit alongside, because retention with no verified restore is a claim rather than a control.

Rules enforced here

Training and examination records are retained for an unlimited period with alteration prevented — MCAR-147.A.125. The absence of a disposal route is the control, not an oversight.
A legal hold suspends every disposal in its scope until it is lifted, and the hold and its lifting are both recorded.
Disposal of any class that has a route is logged with what was disposed of, when, and on whose approval.

Leads to

REC-STUD EXM-OFF SYS-HOME

Actors: Quality ManagerAccountable ManagerSystem administrator
Regions: Record class with retention period and basis · Legal holds in force · Records approaching a retention decision · Export before disposal · Disposal log · Backup and restore evidence
States: Normal · Legal hold active · Disposal proposed — awaiting approval
Requirements: REC-03REC-09DAT-06DAT-07EXM-20SEC-12

CFG-REF

Reference data

Staff · Configuration

The lists everything else is built from: ATA chapters, aircraft types, licence categories, knowledge levels, qualification and evidence types, departments, locations. Maintained once here so no screen offers a free-text box where a controlled value belongs.

ZReference dataExportAdd value

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Taxonomies

ATA chapters — 94

Aircraft types — 6

Licence categories — 7

Knowledge levels — 3

Qualification types — 11

Evidence types — 9

Departments — 5

Languages — 2

Licence categories

CodeLabelStatusUsed by

ALine maintenance certifying mechanicActive14

B1.1Aeroplanes turbineActive31

B1.2Aeroplanes pistonActive4

B2AvionicsActive9

B3Piston non-pressurised, 2000 kg and belowRetired2

A retired value cannot be chosen on a new record but remains readable on every record that already carries it. Nothing is deleted.

Every controlled list in the system resolves here. A screen that needs a value not on a list is a request to add the value, not to type one.

Walkthrough

Each taxonomy is a controlled list — ATA chapters, aircraft types, licence categories, knowledge levels, qualification and evidence types, departments, languages.
A value carries a code, a label, a status and a count of what uses it.
A value that is no longer offered is retired, not deleted: it disappears from new records and remains readable on every record that already carries it.
Import and export make a bulk change — a new aircraft type with its ATA structure — a single operation rather than fifty.

Rules enforced here

A value is never deleted while anything references it. Retirement is the only removal.
Every controlled list in the system resolves here. A screen that needs a value not on a list is a request to add the value, not a reason to allow free text.

Leads to

CRS-VER STA-QUAL CFG-NUM

Actors: Training ManagerSystem administrator
Regions: Taxonomy list · Values with code, label and status · Where used count · Retirement rather than deletion · Import and export · Change history
States: Active · Retired — still referenced by history · Draft
Requirements: CRS-06PRA-01QUA-01STF-02OPS-06

CFG-NUM

Numbering schemes

Staff · Configuration

How every identifier in the system is formed — certificates, authorisations, documents, sittings, orders, invoices — with the allocation counters and the guarantee that a number is never reused.

ZNumbering schemesGap reportNew scheme

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

RecordPatternLast allocatedNextReuse

CertificateZAA/CERT/{year}/{seq:5}ZAA/CERT/2026/0041200413Never

AuthorisationZAA/AUTH/{year}/{seq:4}ZAA/AUTH/2026/00310032Never

SittingSIT-{year}-{seq:4}SIT-2026-01170118Never

OrderZAA-{year}-{seq:4}ZAA-2026-04310432Never

Document{series}-{seq:3}ZASP-001ZASP-002Never

Document series

ZAMN manuals

ZATN needs analyses

ZACP course plans

ZAWI work instructions

ZAFC forms

ZASP software specifications

ZAOF offers

ZACO contracts

Allocation

A number is allocated by the system against a title and an owner, so two people cannot take the same one. A reserved number that is never used shows in the gap report and is not recycled.

Certificate numbers are non-sequential in their public form so the register cannot be enumerated through the verification page.

Walkthrough

Each record type has a pattern, a counter and a statement of whether numbers may ever be reused. They may not.
The next number is visible so an allocation is predictable, and the last allocated is visible so a gap is obvious.
Document series are listed with their meaning, which is what turns the existing numbering workbook into a report of the register rather than the register itself.
The gap report lists reserved numbers that were never used — they stay reserved and are not recycled.
Changing a pattern applies to future allocations only; existing identifiers are never reformatted.

Rules enforced here

A number, once allocated, is never reused — including after a revocation or a withdrawal.
Certificate numbers are non-sequential in their public form so the register cannot be enumerated through the verification page.
Allocation is atomic. Two people requesting a number at the same moment receive different numbers.

Leads to

DOC-REG CER-ISSUE CFG-TPL

Actors: Quality ManagerSystem administrator
Regions: Scheme per record type with pattern · Next number and last allocated · Reservation and gap report · Reuse prohibition · Series for document control · Change history
States: Active · Sequence approaching limit · Gap detected
Requirements: DOC-01DOC-02DOC-03CER-04AUT-06REC-05

CFG-TPL

Document templates

Staff · Configuration

The generated outputs — certificates, authorisation certificates, course plans, inspector packs, quotations, invoices — each a versioned template with its data bindings and a live preview against a real record.

ZDocument templatesPreviewNew version

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

TemplateReplacesVersionEffectiveProduced

Certificate of recognitionZAFC-011 / 012Rev 301 Oct 2026412

Staff authorisationZAFC-005Rev 214 Feb 202631

Course planZAFC-007Rev 101 Jul 202531

Examination review and analysisZAFC-004Rev 202 Jun 202647

Inspector pack—Rev 101 Jul 20256

QuotationZAOFRev 211 Aug 202623

Bindings

Holder name

Course and version

Issue date

Certificate number

Approval reference

Signatory and role

Preview

Rendered against certificate ZAA/CERT/2026/00412

A document already produced is stored as produced. Publishing a new template version never re-renders it.

Walkthrough

Each generated output is a versioned template with its data bindings listed explicitly.
Preview renders the template against a chosen real record, so a change is judged on a real certificate rather than on sample text.
Publishing sets an effective date; the count of instances produced under each version is retained.
Where a template replaces a ZAA form, the form reference is carried through.
A template cannot be published without every binding resolving — a missing binding is named before publication, not discovered on a certificate.

Rules enforced here

A document already produced is stored as produced. Publishing a new version never re-renders it — CER-05.
The signatory on a generated document is taken from the record, not typed into the template.

Leads to

CER-ISSUE CFG-BRAND DOC-REG

Actors: Quality ManagerSystem administrator
Regions: Template library by output · Data bindings · Preview against a chosen record · Version and effective date · Instances produced under each version · Replaced ZAA form reference
States: Draft · Active · Superseded · Retired
Requirements: DOC-10CER-05AUT-06DEL-05REC-06B2B-09

CFG-CAL

Business calendar

Staff · Configuration

Working days, public holidays and opening hours. It looks trivial until a computed due date lands on Eid, a reminder fires into a closed week, or a grace period is counted in calendar days when the MTOE meant working days.

ZBusiness calendar — 2026Import 2027Add holiday

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

2027 is not yet configured. Due dates falling after 31 Dec 2026 are currently computed on calendar days.

Year grid — non-working days marked

Counted in working days

Finding corrective action due dates

Document acknowledgement deadlines

Quotation validity

Support response targets

Counted in calendar days

Authorisation review interval

Training currency intervals

Certificate access periods

DateHolidayLocationsEffect

16 Mar 2026Ramadan beginsAllReduced hours

15 Apr 2026Eid al-FitrAllClosed

26 Jul 2026Independence DayAllClosed

Intervals fixed by the regulation are counted in calendar days and are not adjustable here. Only ZAA's own operational deadlines follow the working calendar.

Walkthrough

The year is configured once with public holidays, closures and reduced-hours days, per location where they differ.
The screen states plainly which rules count working days and which count calendar days, because getting that wrong is a quiet and repeatable error.
Adding a holiday recomputes every affected operational deadline and shows how many move before the change is committed.
A year that has not been configured is flagged, because the failure mode is silent — deadlines simply start landing on closed days.

Rules enforced here

Intervals fixed by the regulation or the MTOE are counted in calendar days and are not adjustable here.
Only ZAA's own operational deadlines — finding due dates, acknowledgement deadlines, quotation validity, support targets — follow the working calendar.

Leads to

DEL-CAL CFG-PARAM QLT-FIND

Actors: Training ManagerSystem administrator
Regions: Year view with non-working days · Public holiday list by year · Working hours per location · Which rules count working days · Effect preview on due dates · Import for the coming year
States: Current year configured · Next year not yet configured · Holiday added — dates recomputing
Requirements: DEL-14TRN-11AUT-12QLT-10OPS-06

CFG-FIN

Finance and tax

Staff · Configuration

Currencies, exchange rate handling, tax treatment and the accounting references that invoices carry. Separated from product pricing so a tax change does not mean editing every price.

ZFinance and taxRate historyAdd tax rule

Home

People

Courses

Delivery

Examinations

Records

Quality

Reports

Commerce

Admin

Base currencyMVR

Also quoted inUSD

Rate sourceMMA daily

Rounding2 decimal places, half up

RuleApplies toRateEffectiveBasis

GST — domestic trainingMaldivian customers8%01 Jan 2026Statutory

Zero rated — export of servicesNon-resident organisations0%01 Jan 2026Statutory

Reverse chargeNot applicable———

Accounting codes

Approved training revenue

Commercial training revenue

Examination fees

Certificate reissue

Invoicing

Payment terms, on account30 days

Credit noteRequired for any correction

An invoice is never edited. A correction is a credit note plus a new invoice, which is why the credit note setting is not optional.

Walkthrough

Base currency, additional quoted currencies, the exchange rate source and the rounding rule are set once.
Tax rules are defined by customer type and place of supply, each with an effective date and a basis.
Accounting codes map product categories to the finance system so an invoice carries the right reference without anyone typing it.
Invoice and credit note settings — payment terms, the requirement for a credit note on any correction — sit alongside.
A tax change is scheduled with an effective date; orders placed before it are unaffected.

Rules enforced here

An invoice is never edited. A correction is a credit note plus a new invoice, so the credit note requirement is not an option.
A failed exchange rate refresh holds the last known rate and raises an alert rather than silently pricing at zero or stale.
Tax treatment is decided by rule at the point of sale and stored with the order, so a later rule change never alters a past invoice.

Leads to

COM-PROD ACC-INV SYS-INT

Actors: FinanceCommercial lead
Regions: Currencies and rounding · Exchange rate source and refresh · Tax rules by customer type and place of supply · Accounting codes per product category · Invoice and credit note settings · Effective dates
States: Current · Rate refresh failed · Tax change scheduled
Requirements: PRD-06PRD-07B2C-04B2B-07DAT-04

Regulator1 screen

INS-VIEW

CAA inspector view

Regulator

A scoped, time-limited, read-only account so an audit can be supported inside the system rather than by emailing extracts. Every action is logged.

ZMCAA inspector — read only

Staff

Students

Courses

Examinations

Documents

Findings

Read-only access. Scope: MCAR-147 records. Expires 31 Oct 2026. All activity is logged.

Search staff and student records

NameRoleAuthorisationsRecord

Ali Masnoon ZubairQuality ManagerExaminer · AssessorOpen

Ibrahim WaheedInstructorInstructor (theory)Open

Ahmed NazimStudent—Open

No create, edit or delete control appears anywhere in this view.

Walkthrough

The inspector signs in to a named, time-boxed account; the banner states the scope of access and its expiry.
Search covers staff records, student records, sessions, sittings and certificates.
Records open in the same shape ZAA sees them, minus every control that would change anything.
Produce pack generates the student file, the staff file or the session record as a dated PDF.
Every record opened is written to the access log, which the Quality Manager can read.

Rules enforced here

No create, edit or delete control appears anywhere in this view — they are absent, not disabled.
The grant expires on its own date. There is no indefinite inspector account.
The inspector sees the approved-training record. Commercial and financial data is outside the grant.

Leads to

REC-STUD STA-PERSON CHG-CAA

Actors: CAA inspector
Regions: Scope and expiry banner · Search across staff and student records · Read-only record views · Produce packs · No edit controls anywhere
States: Active — expires on a set date · Expired · Scope limited to named areas
Requirements: REC-08REC-06RPT-11EXT-07SEC-01INT-01

No workflow or screen matches that.