Master Terms of Service & Commercial Platform Agreement

These Master Terms of Service ("Agreement") constitute a legally binding commercial agreement between YBS Security Limited (trading as AeroParts Network, "we", "us", or "AeroParts Network") and your organisation ("Customer", "Buyer", or "Supplier") governing access to and use of the AeroParts Network aviation procurement platform, APIs, and rotable inventory matching services.

1Commercial Roles, Eligibility & Platform Status

AeroParts Network is strictly a Business-to-Business (B2B) aerospace software platform and rotable component exchange. Access is restricted exclusively to verified commercial airlines, air operators, Continuing Airworthiness Management Organisations (CAMO), UK CAA / EASA / FAA Part-145 approved maintenance organisations, and authorized aircraft teardown and component stockists.

By registering an account or initiating a component requisition, Customer represents and warrants that it is a duly incorporated commercial entity with full legal authority to enter into commercial aerospace transactions.

2Aerospace Regulatory Status & Mandatory Fitment Disclaimer

Any routing scores generated by the Aero Liquidity Decision Engine (ALDE), condition indicators, pricing analytics, or IPC Code-2 Two-Way Interchangeability suggestions presented on the platform are advisory decision-support signals only.

MANDATORY HUMAN-IN-THE-LOOP VERIFICATION: Under applicable international airworthiness regulations (including UK CAA CAP 553, EASA Part-M/Part-145, and FAA 14 CFR Part 43/145), the Buyer, installing organisation, and authorised Part-66 / Part-145 certifying engineer retain sole, absolute, and non-delegable legal responsibility for:

• Physically inspecting all received components, data plates, serial numbers, and physical condition before aircraft installation;
• Verifying that the accompanying Authorised Release Certificate (UK CAA Form 1, EASA Form 1, or FAA 8130-3) is authentic, valid, and appropriately dual-release certified where required;
• Confirming total time in service (TSN), total flight cycles (CSN), and complete historical back-to-birth documentation for all Life-Limited Parts (LLP);
• Validating applicable Airworthiness Directives (AD), Service Bulletins (SB), and Aircraft Maintenance Programme (AMP) effectivity for the specific aircraft tail registration.

3Zero-Tolerance Policy on Suspected Unapproved Parts (SUP)

Customer and Supplier mutually agree to uphold the highest standards of aviation safety and zero tolerance for Suspected Unapproved Parts (SUP) pursuant to UK CAA CAP 562 Leaflet 11-24 and FAA Advisory Circular AC 21-29.

Suppliers warrant that all listed rotables, avionics, and structural components originate from lawful, traceable aviation sources, have never been subjected to severe stress or heat outside normal operating limits (certified by a Non-Incident Statement / NIS), and are accompanied by genuine, unadulterated release certificates. Any attempt to upload forged certificates, counterfeit parts, or scraped/salvaged military material without civilian certification will result in immediate permanent account termination, escrow forfeiture, and formal reporting to the UK Civil Aviation Authority and FAA Office of Safety and Security.

4Listings, 0% Listing Fee & Pre-Staged Escrow Settlement

0% Listing Fee for Stockists: Verified UK and European Part-145 teardown stockists pay 0% upfront fees to list certified rotable components. AeroParts Network generates revenue through enterprise subscription tiers and buyer transaction processing fees agreed upon pilot enrollment.

Pre-Staged Escrow Protocol: To protect buyers and suppliers in high-value rotable exchanges, all agreed purchase orders are routed through our pre-staged escrow mechanism:

• Funds Staging: Buyer locks transaction funds prior to component dispatch by the supplier.
• Inspection Window: Buyer has 48 hours from physical courier delivery at the destination maintenance base or airport apron to physically inspect the component, verify serial numbers, and inspect accompanying Form 1 airworthiness documents.
• Release & Settlement: If conforming, escrow funds are automatically disbursed to the supplier. If rejected with cause (e.g. document mismatch, shipping damage, non-conforming part), funds remain held while return logistics are executed, followed by prompt refund.

5Export Control, Sanctions & Anti-Bribery Compliance

Customer and Supplier warrant strict compliance with all applicable export control regimes, including the UK Export Control Act 2002, the UK Strategic Export Control Lists administered by the Export Control Joint Unit (ECJU), the EU Dual-Use Regulation (EU) 2021/821, and US International Traffic in Arms Regulations (ITAR, 22 CFR 120-130) and Export Administration Regulations (EAR, 15 CFR 730-774).

Both parties warrant that neither they, nor their parent entities, subsidiaries, directors, or beneficial owners, appear on the UK Consolidated Sanctions List, the US Office of Foreign Assets Control (OFAC) Specially Designated Nationals (SDN) List, or the EU Consolidated Financial Sanctions List. Both parties agree to abide strictly by the UK Bribery Act 2010.

6Total Exclusion of Aircraft on Ground (AOG) and Consequential Damages

Aggregate Financial Cap: To the extent permitted by law, AeroParts Network's total aggregate liability arising out of or in connection with this Agreement or the use of the platform shall not exceed the total platform fees actually paid by Customer to AeroParts Network in connection with the specific transaction giving rise to the claim in the twelve (12) months preceding the event.

7Governing Law & Jurisdiction

This Agreement, its interpretation, and any dispute or claim arising out of or in connection with it or its subject matter shall be governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction to settle any dispute.

Aviation Regulatory & Airworthiness Compliance Charter

This charter sets forth the airworthiness release, traceability, and documentation verification standards required of all aircraft components traded or evaluated on AeroParts Network.

1Authorised Release Certificates (CAA Form 1 / EASA Form 1 / FAA 8130-3)

Every serviceable, overhauled, inspected, or modified rotable component listed on AeroParts Network must be accompanied by a genuine Authorised Release Certificate issued by an appropriately approved maintenance organisation:

• UK CAA Form 1: Issued by a maintenance organisation approved under UK Part-145 (UK Reg (EU) No 1321/2014);
• EASA Form 1: Issued by an EASA Part-145 approved maintenance organisation, eligible for UK CAA recognition under the UK-EU Trade and Cooperation Agreement (TCA) Annex on Aviation Safety;
• FAA Form 8130-3: Issued by an FAA 14 CFR Part 145 repair station, carrying appropriate dual-release statements where required for European and UK operations under the UK-US Bilateral Aviation Safety Agreement (BASA) and Maintenance Implementation Procedures (MIP).

2Block 14 Certifying Staff Signature Masking & Data Protection

Block 14 of an Authorised Release Certificate contains the personal signature, printed name, and individual certification authorization number of the certifying engineer. Under UK GDPR Article 5(1)(c) (Data Minimisation) and aerospace security protocols:

• Public Catalog Views: Raw signatures are programmatically masked. Public listings show only verified Part-145 organisation approval numbers (e.g. UK.145.00394), certificate reference numbers, and condition states;
• Authenticated Escrow Release: Full, unmasked certificate PDFs are accessible solely to authenticated buyers who have placed components under reservation or completed escrow staging for airworthiness record retention under UK Part-145.A.55.

3Life-Limited Parts (LLP) & Back-to-Birth (BtB) Traceability

For engine disks, landing gear shock struts, turbine rotors, and other Life-Limited Parts (LLP), suppliers must provide complete Back-to-Birth (BtB) trace documentation:

• Certified statement of Total Time Since New (TSN) and Total Cycles Since New (CSN);
• Full historical trail of every previous operator, installation tail number, and removal record;
• Non-Incident Statement (NIS) confirming the component was not subjected to extreme heat, stress, immersion, or aircraft accident conditions;
• ATA 106 Material Certification signed by the authorized quality manager.

4IPC Code-2 Two-Way Interchangeability (FFF)

AeroParts Network incorporates aircraft manufacturer Illustrated Parts Catalog (IPC) interchangeability rules:

Code 2 (Two-Way Interchangeable): Confirms Form, Fit, and Function (FFF) equivalency under ATA iSpec 2200. Alternate part numbers designated as Code-2 share identical aerodynamic envelopes, mounting lugs, electrical interfaces, and structural load ratings. However, operator CAMO pre-approval remains mandatory prior to installation to confirm specific aircraft modification status and Service Bulletin (SB) incorporation.

Privacy Notice (UK GDPR & PECR)

This notice explains what personal data YBS Security Limited (trading as AeroParts Network) collects when you visit this website, interact with our B2B aviation liquidity correspondence, or use the AeroParts Network workspace, why we collect it, and what rights you have under the UK GDPR and the Data Protection Act 2018.

1Who we are

YBS Security Limited (Company No. 16652382, trading as AeroParts Network) operates AeroParts Network, a B2B aviation software platform that helps UK and European CAA/EASA Part-145 maintenance organisations, teardown facilities, and operators source rotable components and verify airworthiness release documentation.

Given our scale as a B2B software provider processing corporate aviation contact data and statutory airworthiness records, a formal statutory Data Protection Officer is not required under Article 37 of the UK GDPR. All data protection enquiries are handled directly by our Data Protection Lead at founder@aeropartsnetwork.com.

2When we are the controller, and when we are not

We act as the Data Controller for personal data relating to website visitors, corporate B2B prospects verified via public UK Companies House records, and individual users who hold accounts on the platform. We act as a Data Processor for personal data that a customer or supplier organisation uploads to the platform, including the names, signatures, and Part-145 authorisation stamp references of certifying engineers appearing in Block 14 of uploaded UK CAA Form 1, EASA Form 1, or FAA 8130-3 release certificates.

3What we collect

When you visit this website

Nothing that identifies you personally by default. This site sets no third-party advertising cookies or cross-site tracking pixels. Our hosting infrastructure maintains standard encrypted server logs (IP address, request timestamp, user agent) for 90 days strictly for security and fault diagnosis.

When you contact us or engage in B2B aviation outreach

Your name, corporate email address, job role, company name, UK Companies House registration details, and correspondence history. Under PECR Regulation 22 (Corporate Subscribers) and UK GDPR Article 6(1)(f) (Legitimate Interests), we only initiate B2B outreach to corporate email domains (@company.co.uk / @company.com) of registered corporate aviation entities, and every communication includes an immediate one-click or reply opt-out.

When you use the platform

• Account data — name, corporate email, organisation, role, permissions, and authentication records.
• Activity records — component requisitions viewed, IPC Code-2 alternates matched, escrow reservations staged, and audit timestamps.
• Airworthiness release certificates (CAA Form 1 / EASA Form 1 / FAA 8130-3) — Block 14 of an Authorised Release Certificate contains the name, signature, and UK.145 / EASA.145 authorisation reference of the certifying engineer. Public marketplace views mask raw signatures and display only the verified approval badge; unredacted certificate PDFs are restricted to authenticated CAMO and Part-145 buyers for mandatory airworthiness traceability under UK Reg (EU) No 1321/2014.

4Why we process it, and our lawful basis

Where we rely on legitimate interests under Article 6(1)(f) of the UK GDPR, we have completed a Legitimate Interests Assessment (LIA) balancing operational aviation traceability and B2B liquidity discovery against individual privacy rights. You may request details of this assessment or object to processing at any time by emailing founder@aeropartsnetwork.com.

5Who we share it with

We do not sell personal data, share it with advertising networks, or disclose one customer's private requisitions to another customer. We use vetted infrastructure and B2B workflow sub-processors listed in Annex 3.

We may disclose records where legally required, for example to the UK Civil Aviation Authority (CAA), HMRC, a court, or a statutory regulator acting within its powers.

6Where your data is held

Platform data is hosted in the United Kingdom and European Economic Area (London / EU cloud regions). Where any sub-processor processes data outside the UK/EEA, we rely on the UK International Data Transfer Agreement (IDTA) or UK Addendum to the EU Standard Contractual Clauses.

7How long we keep it

8Automated decision-making

AeroParts Network ranks and routes candidate aircraft components using deterministic scoring (Aero Liquidity Decision Engine and IPC Code-2 interchangeability graphs) applied to aircraft parts and corporate facilities, not individuals. No decision producing legal or similarly significant effects concerning an individual is taken solely by automated means under Article 22 of the UK GDPR. Final technical acceptance of any aircraft component always remains with a human CAMO or Part-145 certifying engineer.

9Your rights

Under the UK GDPR you have the right to be informed; obtain a copy of your personal data; have inaccurate data rectified; request erasure; restrict processing; data portability; object to processing based on legitimate interests or B2B direct marketing; and withdraw consent where consent is the lawful basis.

To exercise any of these rights or add your corporate domain to our permanent suppression list, email founder@aeropartsnetwork.com. We respond to all requests within 30 days.

10Complaints

Please raise any concern with us first at founder@aeropartsnetwork.com. You also have the right to complain to the Information Commissioner's Office (ICO) at any time.

Cookie & Tracking Policy

AeroParts Network believes in privacy by default. We do not use third-party advertising cookies, analytics beacons, or behavioral profiling trackers.

1Cookies Used on this Platform

2Managing Cookies

Since all cookies used on AeroParts Network are strictly necessary for platform authentication, CSRF security, and basic user preferences, disabling cookies in your browser settings will prevent you from signing in to the workspace or completing purchase orders.

Security Policy & Coordinated Vulnerability Disclosure

At AeroParts Network, security is at the core of our aviation infrastructure. We safeguard airworthiness records, supplier commercial data, and transactional integrity through layered defense mechanisms.

1Security Architecture Highlights

• Zero Trust Access: Multi-factor authentication, row-level database security, and isolated tenant schemas;
• Edge Security Shield: Automated sliding-window rate limiting, origin verification for CSRF mitigation, and strict HTTP security headers (CSP, HSTS, X-Frame-Options);
• Signature Masking: Certifying staff signatures are cryptographically safeguarded and never exposed to unauthenticated web crawlers;
• Encrypted Redundancy: All platform databases and document repositories are backed up daily with automated point-in-time recovery.

2Coordinated Vulnerability Disclosure (CVD)

If you believe you have identified a security vulnerability in our platform, please report it promptly to security@aeropartsnetwork.com. We commit to:

• Acknowledging your report within 24 hours;
• Providing an initial assessment and mitigation plan within 72 hours;
• Not pursuing legal action against researchers who adhere to safe harbor principles (avoiding privacy violations, data destruction, and service disruption).

Acceptable Use Policy (AUP)

This policy governs the permitted conduct of all users, suppliers, and buyers accessing the AeroParts Network website and application services.

1Prohibited Activities

You may not under any circumstances:

• Upload falsified, forged, or altered Authorised Release Certificates (CAA Form 1 / EASA Form 1 / FAA 8130-3). Submitting fraudulent airworthiness records is a criminal offense under the UK Air Navigation Order 2016 and will be referred immediately to the police and aviation authorities;
• Attempt to sell Suspected Unapproved Parts (SUP), stolen materials, or scrap rotable assets;
• Engage in automated scraping, harvesting, or systematic extraction of pricing, inventory, or contact details without written consent;
• Probe, scan, or test the vulnerability of platform endpoints or attempt to circumvent rate limits or authentication tokens;
• Introduce viruses, trojans, worms, or other malicious computer code into the platform infrastructure.

Violations will result in immediate permanent account revocation, forfeiture of pending escrow balances, and legal prosecution.