What Is Aviation Safety Intelligence? A Working Definition for Safety Leaders
01A working definition
Aviation safety intelligence is the practice of turning an operator's safety data into an understanding of the operation's current and emerging risk, by connecting records that are usually held apart, interpreting them in context, and surfacing what is forming before it becomes an event.
That is a deliberately plain sentence, because the term has been used loosely. It is worth separating the three claims inside it. Connecting means the occurrence, the hazard, the barrier, the corrective action, the safety performance indicator and the training record are treated as one related structure rather than separate filing systems. Interpreting means the connected structure is read for meaning, not “here are 41 reports this month” but “these eight reports, this audit finding and this expiring qualification are all touching the same barrier.” Anticipating means the reading is forward-looking: the point is to see the pattern that precedes the next occurrence, not only to count the last one.
None of this is new as an ambition. ICAO Doc 9859 has always described safety management as a data-driven, predictive discipline. What is new is that the connecting and interpreting can now be done continuously and consistently, rather than once a quarter by whoever has time to read across the registers. Aviation safety intelligence is the name for that capability when it becomes a standing part of the operation.
02The three shifts it makes
The clearest way to define safety intelligence is by what it changes about how safety data behaves. There are three shifts.
From record to connect. A traditional safety system is organized as registers: an occurrence log, a hazard register, an audit module, a CAPA tracker, an SPI dashboard. Each is internally tidy and externally isolated. Safety intelligence treats them as linked records. When an occurrence is classified, the hazard it relates to is not a cross-reference in a spreadsheet, it is a linked record that updates. The structural value is that a change in one place is visible everywhere it matters, automatically.
From report to interpret. Reporting tells you what was submitted. Interpretation tells you what it means in context. A single unstabilised approach is a report. The same event read against three similar approaches at the same airfield, a recent change to the arrival procedure, and a cluster of fatigue reports on that route is an interpretation, and a far more useful one. Safety intelligence is built to hold that context and apply it.
From react to anticipate. Most safety systems are excellent at reacting: an event happens, it is investigated, an action is raised, the action is closed. That loop is necessary and it is not enough, because it only ever starts after the event. Anticipation means reading the faint, scattered indicators, the weak signals , that tend to precede events, and acting while the cost of acting is still small. This is the shift the whole discipline is moving toward, and the reason the word “intelligence” is doing work in the term.
03What it is built on
Safety intelligence is not a feeling or a dashboard skin. It rests on a few concrete foundations, and an operator can check for each of them.
- A connected operational picture. Occurrences, hazards, barriers, indicators, actions, findings, training and document changes have to be genuinely linked, not exported nightly into a separate reporting tool, but related at the source.
- A consistent taxonomy. Interpretation across records only works if the records speak the same language. Classification against a stable, enumerated taxonomy, ICAO occurrence categories, a defined risk matrix, named barrier types, is what lets the same event mean the same thing in March and in November.
- Living indicators. A useful set of leading and lagging indicators that move as the operation moves, not a quarterly chart assembled by hand.
- Traceability. Every interpretation has to be walkable back to its evidence. An intelligence layer that cannot show its working is an opinion, not intelligence, and it will not survive a regulator's question.
Where AI enters, it enters here: as a way to do the connecting, classifying and pattern-surfacing continuously, under human review. The controls that make that defensible are their own subject, covered in AI in aviation safety management. The foundations above hold whether or not AI is involved.
04What it is not
Because the term is fashionable, it is worth being precise about what safety intelligence is not.
It is not a replacement for your SMS. The Safety Management System remains the regulated obligation and the system of record. Safety intelligence depends on it for raw material. Any positioning that pits one against the other has misunderstood both.
It is not a dashboard. A dashboard displays numbers a human has already decided to track. Intelligence is the work of deciding what is worth looking at and connecting it, the dashboard is at most an output. A wall of charts over disconnected data is not safety intelligence; it is decoration.
It is not prediction in the fortune-telling sense. No system tells you the date of the next event. Anticipation here means surfacing the conditions and patterns that historically precede events, early enough to act, not issuing a forecast. The honest claim is earlier sight, not certainty.
It is not unaccountable automation. Safety intelligence that cannot show why it flagged something, or that takes decisions a human never reviewed, is a liability. The discipline is defined as much by its traceability as by its reach.
05What changes for the safety leader
For an accountable manager or head of safety, the practical change is the question you can answer in a board meeting. With a records-based system, the honest answer to “are we getting safer?” is usually “we closed most of our actions and our occurrence count is broadly flat”, a statement about activity, not about risk.
With safety intelligence, the answer becomes a statement about the operation: which hazards have weakening barriers, which indicators are trending the wrong way before any threshold has been crossed, where two unrelated-looking signals are converging on the same part of the operation, and what is being done about each. That is a different conversation, and it is the one that accountable managers are increasingly being asked to have, by their boards and, under risk-based oversight, by their regulators.
This article is the definition. The rest of the cluster goes deeper: how the discipline is shifting, why compliance alone is not enough, why even mature programs miss emerging risk, and the maturity model for getting from where you are to anticipatory safety.
Questions
Aviation safety intelligence is the discipline and the layer that connects, interprets and anticipates across an operator's safety data. Where a Safety Management System records occurrences, hazards, audits and corrective actions, safety intelligence reasons across those records as one connected picture: an occurrence is rated against the barriers of its risk family's bow-tie, the ratings and the occurrence count toward the safety performance indicators, and the indicators shift the operator's risk picture. It is the move from a system that stores what happened to a system that reads what is forming.
No. SMS is the regulated management system defined by ICAO Annex 19, policy, risk management, assurance and promotion. Safety intelligence is the interpretive layer on top of it. SMS answers "is the system in place and are we conforming." Safety intelligence answers "what is the operation actually telling us, and what is forming next." They are complementary: safety intelligence extends an SMS, it does not replace it.
No, and a vendor claiming it does should be treated with caution. The SMS remains the system of record and the regulatory obligation. Safety intelligence depends on the SMS for its raw material, occurrences, hazards, findings, indicators, and adds connection and interpretation across them. Remove the SMS and there is nothing for the intelligence layer to read.
The same operational data an airline already produces: occurrence and hazard reports, audit findings, corrective and preventive actions, safety performance indicators, training and competency records, document and procedure changes, and regulatory updates. The difference is that safety intelligence treats them as one connected operation rather than separate registers, so a signal in one becomes visible everywhere it is relevant.
Accountable managers, heads of safety, quality managers and oversight leaders who need to understand the state of the operation, not just file the paperwork that proves a system exists. It serves the people who have to answer "are we getting safer, and what is forming that we have not seen yet", a question a register of past events cannot answer on its own.