+Security & trust

Electronic signatures and maintenance records

Advisory Circular 120-78A describes what the FAA expects of an electronic signature and an electronic recordkeeping system. FAR 43.12 makes a falsified, altered or fraudulent maintenance record a violation. Resyrv signs and keeps aircraft maintenance records to meet both, for Part 145 repair stations, Part 135 operators, and any shop that signs for its work.

All standards

How Resyrv meets it

01

Who is signing

A signature is entered with a personal signature PIN, separate from the login password, held only as a bcrypt hash. Five wrong attempts lock signing for fifteen minutes, and every failed attempt is recorded in the audit log. The signer's full name and, for mechanics, their certificate number are recorded with the signature.

02

What is being agreed to

Each signature stores the exact certification wording the signer agreed to. A logbook entry says what book, which aircraft, what date and who did the work; a return to service says the work was performed as recorded and the aircraft is approved for return to service. That wording prints with the record.

03

What the signature binds

At signing, Resyrv computes a SHA-256 fingerprint of the record's content: aircraft, logbook, date, meter readings, entry text and who performed the work. The fingerprint is stored with the signature and printed on the logbook PDF. Any later change to a signed field no longer matches it.

04

Immutability with amendment

A signed record is refused any edit. Corrections are a new entry that points back at the one it amends. Voiding requires a reason and strikes the record through; it never deletes it. The audit log records the signer, the time and the fingerprint of every signing and voiding.

05

Retention, backup and access

Records are kept for the life of the organization's account, on a managed PostgreSQL cluster with daily automated backups and point-in-time recovery, and can be exported at any time. Access is limited by the database's own row-level security to the organization that owns the aircraft, and inside the organization by permissions: reading a logbook, drafting an entry and signing one are three separate grants.

06

Legible copy on demand

Any logbook, or all of them, exports as a PDF with every entry, its signature block, the certification wording and the fingerprint. Work orders print a cover sheet, and the reporting module exports every report as CSV, Excel or PDF.