Operator shutdown: recovering aircraft and records

When an operator stops, recovering the aircraft starts with recovering its records. European regulation already requires it: continuing airworthiness records follow the aircraft on transfer, and a management organisation that ceases must hand them over to the owner. What the rule cannot do is make those records retrievable once systems are switched off and teams have left. That part is prepared before the failure, in the contracts.

Four stops, four different mechanisms

Within a few days in September 2026, four situations showed that “the operator stops” covers very different realities.

Four distinct situations, four distinct sources: an official order, a certificate status, a court proceeding, a commercial suspension.

airBaltic filed a voluntary petition under Chapter 11 of the US Bankruptcy Code with the New York court on 14 September 2026. The procedure allows debt restructuring under court supervision while flights continue: the airline announces maintained operations, a €350 million financing commitment and an expected exit around June 2027. Court filings are public on the case docket site.

AirAiles, a small French business charter carrier, had its air operator certificate recorded as inactive on 8 September 2026, after its last jet was phased out, according to ch-aviation. Without that certificate, a carrier cannot operate. The official status can be checked in the list of valid certificates published by the ministry, which states it is updated continuously.

OMNI Aviação, a Portuguese operator based in Cascais founded in 1988, has entered insolvency proceedings, reports ch-aviation. The verifiable fact on the authority side: OMNI appears on ANAC's list of suspended air transport licences, through an order published in the Diário da República on 18 March 2026. The licence suspension therefore precedes the insolvency news by six months.

OneFlight International is a separate case: this US private jet broker paused its flights for thirty days “or until further notice”, according to Private Jet Card Comparisons, which estimates that more than $150 million in prepaid customer flights could be at stake. A broker does not operate the aircraft it sells: its suspension primarily hits customer claims, not airworthiness records. We come back to this below.

None of these cases implies any documentary fault: they merely illustrate the moment when an aircraft owner discovers where its records actually live.

What the regulation already requires

European law does not wait for the crisis to organise records continuity. Three provisions of Regulation (EU) 1321/2014, in its consolidated version in force since 7 August 2026, structure the subject.

Point M.A.305 defines the continuing airworthiness record system: the current status of airworthiness directives, modifications and repairs, compliance with the maintenance programme, mass and balance, the in-service history of life-limited parts, plus certificates of release to service and detailed maintenance records. Point M.A.305(f) adds that the person or organisation responsible for continuing airworthiness management must present these records to the competent authority on request.

Point M.A.307 covers transfer. Its paragraph (a): when an aircraft is permanently transferred from one owner or operator to another, the transferring party must ensure the M.A.305 records, and the technical log system where applicable, are transferred as well. Paragraph (b): when the owner contracts continuing airworthiness management to a CAMO or CAO, it must ensure the records are transferred to that organisation. Paragraph (c) states that the retention periods continue to apply to the new holder.

Point CAMO.A.220(a)(8) answers our exact subject: “When the organisation ceases operations, all retained records shall be transferred to the owner of the aircraft.” The obligation exists, in writing, in the Part-CAMO annex of the regulation.

What the rule cannot do

The rule describes a destination, not a route. In practice, an aircraft's records are spread across several holders and several systems.

The complete records exist nowhere in one place: they are reassembled by gathering pieces held by different organisations.

Three details make the difference on shutdown day:

• Records live in systems. Airworthiness tracking often sits in online software whose subscription is paid by the CAMO or the operator. A payment stop cuts access, including to data the owner should have received.
• Copies do not file themselves. A Part-145 maintenance organisation hands a copy of each certificate of release to service to the operator or customer, with the associated detailed maintenance records, as point 145.A.55(a)(2) provides; for a workshop under Part-M Subpart F, point M.A.614(b) imposes the same handover to the owner or operator. The symmetry with the CAMO also exists: a Part-145 organisation that ceases operations must transfer its last three years of records to the last customer or owner (145.A.55(a)(4)), as must a Subpart F workshop (M.A.614(c)). Someone still has to archive and index them, and know where to ask for them later.
• The insolvency administrator is not an archivist. In bankruptcy or safeguard proceedings, assets and data come under the procedure's control. An owner who has not prepared its request must convince a busy counterparty with other priorities.

In other words: the law orders the transfer, but the ability to obtain it quickly is decided in the contract, not in court.

Before the failure: what an owner requires

For a lessor or an owner entrusting its aircraft to an operator, documentary protection is built at signature, not when the failure is found.

• Name the holder of the M.A.305 records. The CAMO contract states where the records live, in which system, and in what format they are returned. If the operator imposes its own CAMO, require a right of inspection or read access.
• Provide for periodic exports. A complete, readable export of the records at regular intervals turns an abstract obligation into actual stock held by the owner or its adviser. An export dated before the crisis is worth more than a promise during it.
• Write the records return before redelivery. The lease defines the documentary return condition: list of documents, format, media, deadline. That clause is what serves the day the operator stops answering.
• Distinguish the aircraft from its records in the security package. For aircraft covered by the Cape Town Convention, the IDERA, the irrevocable de-registration and export request authorisation under Article XIII of the Aircraft Protocol, lets the authorised party procure de-registration and export without the debtor's cooperation. It is a powerful tool to take the aircraft back; it does not produce the records, which are claimed separately.
• Check the ARC regime. The airworthiness review certificate is valid for one year and may be extended for another year, at most twice in a row, and only by the organisation managing the aircraft's continuing airworthiness (point M.A.902). The extension requires that this organisation has managed the aircraft without interruption since the ARC was issued, and that maintenance was performed by a Part-145 or Part-CAO organisation. A mid-year CAMO change therefore closes the extension and sends the aircraft back to a full review.

These clauses do not prevent the operator's failure. They determine whether, on that day, the owner already holds an up-to-date copy, knows where to claim the rest, and can prove the aircraft is still what its records say.

The day the operator stops

Picture a fictional case: a lessor learns on a Monday morning that the carrier operating its two Phenoms has stopped paying, suspended flights and closed its offices.

The first actions are not legal, they are documentary:

1. Locate each piece of the records. The technical log sits with the operator, the M.A.305 system with the CAMO, the certificates of release to service with the workshops. The contract and the periodic exports say who holds what.
2. Request the transfer in writing, citing the basis. M.A.307(a) for the transferring operator, CAMO.A.220(a)(8) if it is the CAMO terminating its operation. A request quoting the exact rule point lands better with an administrator than a general request.
3. Reach the insolvency administrator early. In Chapter 11 as in European insolvency, records are part of the assets to be inventoried. The earlier the request arrives, the more it precedes system shutdowns and staff departures.
4. Inform the competent authority. The responsible manager must present the records to the authority on request (M.A.305(f)); conversely, the registry authority can guide the process, notably for de-registration.
5. Map the gaps without concluding. A missing document leaves a verification open: it proves neither unairworthiness nor absence of value. Some documents can be reconstituted from the issuer (workshop, authority, manufacturer); others are confirmed by cross-checking, as in preparing a pre-owned aircraft sale.

In our fictional case, the lessor had required a quarterly export and knew the CAMO under a direct contract: the records are reassembled in weeks, not months. It is that preparation, invisible while everything runs, that makes the difference.

Broker, operator, CAMO: three stoppages, three risks

The OneFlight pause recalls a useful distinction. A broker sells flights performed by third-party operators: its suspension threatens customers' prepaid funds, which become unsecured claims in a bankruptcy, but it holds neither aircraft nor airworthiness records. An operator that stops holds the technical log and the working relationship with the record holders. A CAMO that ceases must transfer the records to the owner, under the CAMO.A.220(a)(8) rule quoted above.

The lesson reads in reverse: an owner who entrusted its aircraft to an operator structured with an independent CAMO, under a separate contract, recovers its records more easily than if the same group held everything. Separating functions also means separating failure points.

What the owner retains

European regulation has provided for the transfer of records on a change of operator and for their return to the owner when the CAMO ceases. What the rule does not write is the practical ability to obtain those records when the counterparty has stopped paying invoices and answering mail. That ability is bought upstream: a contract naming the record holder, dated periodic exports, documentary return clauses, and security tools like the IDERA for the aircraft itself.

Records continuity when teams change raises the same problem at a smaller scale: an unprepared departure leaves the same kind of gap. And when the recovered records must serve a transaction, the discipline remains the same as for an airworthiness review: every piece verifiable, every absence explicitly open.