The platform
One web application for everything qualification
cimoio.aero runs in the browser — no installation, no client rollout. Your teams manage qualifications, authorizations, trainings and evidence in one system, from any workplace, including the shop floor.
What the platform covers
cimoio.aero is modular — book what you need, extend when you grow.
Authorization Management
Define, grant, monitor and revoke authorizations — with full traceability.
Qualification Management
Model every path to a qualification: trainings, recognitions, assessments.
Training Management
Plan, procure and run trainings — invitations, changes and feedback included.
Certificates & Record Keeping
Capture, verify, file and retain certificates — retrievable in seconds.
Competence Assessment
Run and document competence assessments digitally.
Insights & Reporting
Dashboards and reports that show your qualification status at a glance.
Digital sovereignty
European software. German servers. Your data.
cimoio.aero is developed and operated in Germany and hosted in German data centers. Your data never leaves Europe, processing follows GDPR, and only European processors are involved. And if you ever leave: your data is exported in open, machine-readable formats (CSV/JSON) — exit capability is contractual, not a promise. For European aviation organisations that don't want to depend on US cloud stacks, cimoio.aero is the sovereign choice.
Your data never leaves Europe
Security, certified and verifiable
Developed and operated by ISO 27001-certified STL GmbH, hosted in ISO 27001-certified German data centers.
Encryption throughout
Data encrypted in transit and at rest.
Tenant separation
Strict multi-tenant isolation — your data is yours alone.
Roles & permissions
Fine-grained role-based access down to individual records.
Audit trail
Security-relevant access and changes are logged, revision-proof.
Tested continuously
Regular vulnerability assessments and hardening of the platform.
Backups that hold
Daily encrypted backups, retained 30 days, stored geographically separated.
cimoio.aero SaaS — operated for you in German data centers; hosting, updates and maintenance included, no IT effort on your side.
Custom — for organisations with special requirements, including operation in your own data center (on-premise); scoped individually.
The information hub in your system landscape
cimoio.aero feeds authorization data to the systems that depend on it — MRO software decides releases on it, planning tools staff checks with it — and receives staff data from your HR systems. Learning platforms connect for bookings, results and certificates.
Standard API
Excel/CSV and JSON import & export
Automated e-mail exchange with providers
AMOS · SAP · HR systems · LMS platforms
See all integrations →GDPR is the floor, not the ceiling
Processing follows GDPR with a data processing agreement (DPA) as part of the contract, and all subprocessors are European and disclosed. Built-in tools support data subject rights — information, correction, deletion. Retention periods are configurable per record type; when the contract ends, your data is handed over in open formats and deleted on schedule, documented.
Operated with the same discipline we ask of you
Foto: Support-Kollegin/-Kollege mit Headset
Support-Kolleg:in am Schreibtisch mit Headset, mitten im Gespräch, freundlich und konzentriert; ein zweiter Bildschirm zeigt die cimoio.aero-Oberfläche (unscharf). Echtes Büro, kein Callcenter-Stock.
BildvorschlagSupport that answers
Web-based ticket system with defined response times per severity level, business days — from people who know both the software and Part-145.
Predictable maintenance
Updates in announced maintenance windows outside working hours (Sundays, early morning), with advance notice for upgrades — no surprise downtime midweek.
Onboarding included
Structured onboarding, documentation for every user group, and role-based trainings with Compliance as a Service.
The questions your IT will ask
What are the client requirements?
A current browser — Chrome, Firefox, Safari or Edge. No installation, no plugins, no client management. The interface works on desktop and tablet, including shop-floor terminals.
Where is our data stored?
In German data centers, ISO 27001-certified environments. Data does not leave Europe; all processors are European.
How do backups and recovery work?
Daily encrypted backups, retained for 30 days, stored geographically separated from the primary systems. Recovery procedures are part of the contractual service description.
What availability is guaranteed?
High availability with contractual service levels — the exact figures are part of the service agreement, which we share in the technical documentation.
Does cimoio.aero support SSO and MFA?
Single sign-on and multi-factor authentication are handled per deployment; we align with your identity provider in the technical onboarding.
Is there an audit trail?
Yes. Qualification-relevant decisions — grants, revocations, assessments — and security-relevant access are logged revision-proof and reachable in drill-down.
What happens when we terminate?
Your data is exported in open, machine-readable formats (CSV/JSON), handed over, and deleted on a documented schedule. No lock-in by data hostage.
What technology does the platform run on?
The platform has been developed and continuously modernised for 25 years; architecture details are part of the technical documentation we share on request.
Can we get the security documentation?
Yes — ISO certificate, security concept, DPA template, system documentation and a pre-filled IT assessment questionnaire are available on request.
Talk to us — bring your IT
In a technical session we answer the assessment questions directly: architecture, security, integrations, data protection. With the people who run the platform, not a sales deck.