WorkflowCrew Management & Training

Fatigue Risk Management System

A fatigue risk management system that ties every fatigue report to its roster and the science the same day

Every fatigue report tied to its roster and the science the same day, fixed by the board.

See one case, screen by screen ↓
demo11reportson one red-eye pairing in 60 days, found by the agents at 18 times the fleet rate
demo58alertnessat landing with the sleep the first officer reported, against 66 with the sleep the model assumed
target100%of fatigue reports linked to the roster, the alertness curve and similar reports the same day
target−50%fatigue calls on the pairings the review board changes
In short

What is Fatigue Risk Management System?

A fatigue risk management system (FRMS) is the data-driven way an airline finds and fixes the causes of crew fatigue, as ICAO Doc 9966 and, in the US, 14 CFR 117.7 describe it: collecting fatigue reports, linking them to the duties that caused them, assessing the risk, changing schedules and proving the change worked. The Fatigue Risk Management System is FRMS software that puts each crew fatigue report, the roster actually flown and a biomathematical fatigue model on one time axis, with eight agents that link, model, find patterns, draft cases and test legal pairing fixes, while the fatigue risk manager and the FRMS review board decide.

How to choose AI for airlines: a buyer's guide to agentic AI solutions →

Updated

The problem

Why fatigue reports get counted, not worked, without a real fatigue risk management system

Part 117 says a pilot too fatigued to fly may not fly, and every Part 121 airline must keep a Fatigue Risk Management Plan, train crews on fatigue every 12 months and update the plan every 24 months. Flying beyond the Part 117 limits — an ultra-long-haul route, say — needs an FAA-approved FRMS under 14 CFR 117.7. At the heart of both is the same job: a crew member says “I was too tired”, and the fatigue safety team has to find out why and fix the cause.

Today the fatigue report sits in a safety form, the roster in crew scheduling, the actual out, off, on and in times in operations, and the fatigue model in a separate modeling tool that scores the planned roster, not the one flown — with an assumed layover sleep, not the sleep the crew member wrote down. Linking them takes an afternoon per report, so most reports are acknowledged, filed and counted. Eleven reports on one red-eye show up as eleven separate lines, and the pattern surfaces months later at the quarterly review.

typical24monthsthe longest a Part 121 Fatigue Risk Management Plan may go without an update (Public Law 111-216 §212)
typical12monthsbetween fatigue education and awareness training for pilots, dispatchers and schedulers
typical8hoursof sleep opportunity in a legal 10-hour rest under 117.25 — whether or not the body can sleep then
Where the hours on one fatigue case goestimated
By hand28 days
With the solution4.5 days
  • Pulling the 7 days of roster and the actual times for each report6 → 0.5 d
  • Re-entering duties and sleep into the fatigue model3 → 0.5 d
  • Finding the other reports on the same pairing, flight or hotel4 → 0.5 d
  • Drafting the hazard, risk rating and mitigation options6 → 1 d
  • Testing pairing changes for legality, the contract and cost5 → 1 d
  • Building the review board pack and the minutes4 → 1 d

Estimated split of a fatigue safety team's working hours for one case, from the first report to a board decision pack, by hand and with the solution.

How it works

How a fatigue report becomes a fix

Eight agents read, link, model, cluster and draft every fatigue case; the fatigue risk manager decides and the review board signs.

What comes in
Fatigue reports in2,316 a year · crew app, rosters, actual times, model
Agents at work
Report readeridentity sealed
Then
Roster linker
Fatigue model
Then
Pattern finder
Case writer
Then
Case checkerevery source
Pairing plannerlegal or refused
A person decides
Fatigue risk managerdecides; the board votes
What comes out
FRMS case
Pairing change
FAA evidence
One case, step by step

One red-eye, eleven fatigue reports, two days before the review board

Corvane Airways' red-eye CV 2290 LAS–DEN, day two of pairing D4417 on the A320neo out of the Denver base. On Sunday 18 October a first officer filed fatigue report R-26-1187: how tired 6 of 7 at top of descent, about 3 h 40 of broken sleep, a missed frequency change on the arrival. It is Tuesday 20 October, 07:40 Mountain time. Here is what happens next, screen by screen, in the working solution.

  1. 01Tuesday, 07:40 MT

    What the agents did overnight, and what needs her

    Megan Ashford · Fatigue Risk Manager

    Megan's Today screen opens on four numbers: 12 new reports, 23 open cases, the review board on Thu 22 Oct and the FRMP update due 3 Nov. The lead item is the one that needs a decision before Thursday: red-eye CV 2290 LAS–DEN, 11 fatigue reports in 60 days on one pairing, a case already drafted and four pairing changes tested. Beside it, the agents brief her as a conversation, each line cited.

    Report reader: “Four need a person: an illness that may not be fatigue, a duplicate, a deadhead that is not in the roster, and one also filed as a safety report.”

  2. 02One click

    The report, the roster flown and the alertness curve on one time axis

    Megan Ashford · Fatigue Risk Manager

    The FRMS case opens on Sat 17 – Sun 18 Oct in three lanes that share one axis. In her words: “could not sleep in the afternoon”, “fighting to keep my eyes open”, pinned at the times they describe. The roster actually flown: CV 1187, a rest of 11 h 00 — legal — and CV 2290 inside the body-clock low. And alertness, two curves: the model with the sleep it assumes, and the model with the sleep she reported.

    Fatigue model: “With the layover sleep the model assumes (6 h 10), alertness at landing is 66. With the 3 h 40 she reported, 58. The duty is inside the model’s validated range.”

  3. 03The report itself

    Read, extracted with confidence, and the reporter sealed

    Report reader

    The report as filed sits beside what the Report reader took from it, each field with its confidence and source: CV 2290 on Sun 18 Oct, pairing D4417 day 2, how tired 6 of 7, sleep 3 h 40 broken, an afternoon layover in a pool-deck room, the third time this month. The reporter appears only as R-7731. Only the gatekeeper can reveal a name, with a reason code, and the reveal is logged and reported to the board chair and the fatigue committee.

    “Only the gatekeeper (Megan Ashford) can reveal it, with a reason code. The board sees codes only.”

  4. 04The pattern

    Eleven reports on one pairing, eighteen times the fleet rate

    Pattern finder

    The Pattern finder groups every report by pairing, flight, hotel, report time and aircraft, and raised this cluster on Sun 18 Oct at 07:04: 11 reports in 60 days, 9 pilots and 2 flight attendants. Nine pilot reports in 120 pilot duties is 75 per 1,000 against 4.1 for the fleet. Asked what else could explain it, it rules out the same few crew (11 reporters), delays (CV 2290 was on time on 52 of 60 nights) and the aircraft (9 tails).

    Pattern finder: “What the reports share is the afternoon release and the pool-deck rooms.”

  5. 05Drafted and challenged

    A draft that a second agent has re-opened

    Case writer · Case checker

    The Case writer drafted the hazard — an afternoon layover in LAS before a red-eye that lands in the body-clock low — rated the risk 4C, high, and recommended option A. Then the Case checker re-opened all 23 sources behind the draft: 22 confirmed, and one claim softened because two reports give no sleep figure. Every step read only; nothing was changed on a roster or pairing.

    Case checker: “‘crews report 3–5 h of sleep’ now reads ‘9 of 11 reports give 3 h 40 to 4 h 55’.”

  6. 06Four fixes tested

    Pairing changes scored for alertness, Part 117, the contract and cost

    Pairing planner

    The Pairing planner built four options for D4417 with the pairing optimizer and scored each on the crews' reported sleep. A: arrive LAS the evening before, a 28 h 40 layover — alertness at landing 58 → 74, $214 per operation, $78,110 a year. B: the red-eye as its own pairing — 72, $124,465 a year and 62 more pilot days a month. C: retime CV 2290 to 23:05 — 77, but it moves a revenue flight, so it goes to Network Planning as a note. D: a later DEN–LAS with a nap window — refused.

    Option D: “117.25(e): 10 consecutive hours of rest before a flight duty period” — its rest would be 6 h 45.

  7. 07Before she signs

    She asks the agents why

    Megan Ashford · Fatigue Risk Manager

    Beside the similar-reports table, Megan asks the case agents: “Why option A over option B?” The Pairing planner answers with its sources: both lift alertness above 70, A to 74 and B to 72; A costs $214 per operation and B $341 with 62 more pilot days a month; C scores best but is not crew planning's call; D breaks the 10-hour rest rule.

  8. 08Signed

    Sent to the FRMS review board with a reason and a signature

    Megan Ashford · Fatigue Risk Manager

    Megan sends FC-26-0418 to the board for Thu 22 Oct, 10:00, with reason C2 — pattern confirmed, schedule change needed — and her electronic signature. The decision pack carries the 11 reports de-identified, the time axis, the model runs, options A–D and their cost. The Case writer adds it to the agenda as item 4 and tells the five voting members.

    “The board decides; Crew Planning publishes only what the board approves.”

  9. 09Thursday, 10:00 MT

    One decision pack, votes with reasons, a quorum

    Capt. Victor Ruiz · Chair, FRMS Review Board

    The board sees one page for the red-eye: 11 reports de-identified, alertness at the low 58 → 74, about $78,000 a year, the recommended option and links to the time axis and all four options. Members vote as themselves with a reason code; quorum is 3 of 5 voting members with at least one crew representative. When it is approved, Jordan Pike publishes option A for the 1 Dec 2026 bid period — and only he can.

  10. 10The next 90 days

    Did the fix work?

    Assurance monitor

    Every change is measured for 90 days: reports per 1,000 duties, the alertness low on the duty and fatigue calls. On the assurance screen, six changes are working, one is too early to tell, one is still collecting data and one is not working: ending 737 four-leg days before 23:00 at LAX left reports at 5, so the Assurance monitor suggests re-opening the case. A case closes only when a person says the change worked.

    “A sudden drop in reports can mean crews stopped reporting, so the monitor also tracks fatigue calls.”

Who it’s for

Built for everyone who works a fatigue report.

The same red-eye, seen by five of the people who answer for it — what fatigue work looked like, and what it looks like now.

MA
Megan AshfordFatigue Risk Manager, Flight Operations Safety · the FRMS gatekeeper
Fatigue Risk Manager
Before
Reads every report, then spends an afternoon pulling the roster, the actual times and a model run for each one — and still needs to know which pairing is making people tired.
Now
Opens each case with the report, the roster flown and both alertness curves already on one axis, asks the agents why, and signs it to the board with a reason code.
HR
Hannah ReyesSafety Analyst, Flight Operations Safety · patterns, assurance and FAA evidence
Safety Analyst
Before
Counts reports by month and fleet, so a pattern on one red-eye or one layover hotel turns up in the quarterly review, not before it.
Now
Sees patterns by pairing, flight, hotel and hour the day they cross the rule, drafts or dismisses each with a reason, and builds the evidence for the FAA from traced lines.
CV
Capt. Victor RuizChair, FRMS Review Board · Director of Flight Operations Safety
Chair, FRMS Review Board
Before
Wants the evidence, the options and the cost on one page, and gets them spread across slides, spreadsheets and email before the monthly board.
Now
Opens one de-identified decision pack per case, sees the votes against the quorum, and signs minutes the agents drafted from the votes and notes.
CL
Capt. Lena OstrowBoard member · pilots’ fatigue committee representative
Board member · pilots’ fatigue committee
Before
Knows that if a pilot thinks a report can come back to them, the reports stop — and with them, the whole system.
Now
Sees reporters only as codes in every pack and export; any reveal needs the gatekeeper's reason code and shows up in the access report to her committee.
JP
Jordan PikeSenior Crew Pairing Planner, Crew Planning · implements board-approved changes
Senior Crew Pairing Planner
Before
Gets asked to fix a pairing without knowing what to change or by when, and has to check by hand that the fix doesn't break Part 117 or the contract.
Now
Gets options already scored for alertness, legality, the contract and cost — illegal ones shown as refused — and publishes only what the board approved, for the next bid period.
Built on the engine

8 agents. Each with one job, and hard limits.

Eight agents read, link, model, cluster and draft every fatigue case; the fatigue risk manager decides and the review board signs.

Report reader

Reads every fatigue report from the crew app, email and paper forms; extracts flight, duty, sleep, how tired and contributing factors; seals the reporter's identity and flags edge cases — illness, duplicates, no roster match, a cross-filed safety report.

  • Never shows identity to anyone but the gatekeeper
  • Below 90% confidence on a field, asks the reporter through the confidential channel
Roster linker

Pulls the 7 days of roster actually flown before each report and the actual out, off, on and in times; computes duty, rest and body-clock-low exposure against the Part 117 fatigue rules and 121.467.

  • Reads only; never changes a roster
Fatigue model

Runs the biomathematical fatigue model on the actual roster twice — with planned sleep and with the sleep the crew member reported — and explains the difference.

  • Says when a duty is outside the validated range
  • A score is evidence, not a verdict
Pattern finder

Clusters reports by pairing, flight, hotel, report time and aircraft, compares each cluster with the fleet rate and raises it when it reaches the rule — 5 reports in 60 days.

  • Raises patterns; never opens a case by itself
Case writer

Drafts each FRMS case — hazard, evidence, risk rating on the FRMP matrix and mitigation options with their predicted effect — and builds the board's decision packs and minutes.

  • Drafts only; cannot send to the board
  • Every statement cites a source
Case checker

Re-opens every source behind a draft or a pack and refuses claims it cannot find, softening or marking anything it could not verify.

  • Cannot approve
  • Marks what it could not verify
Pairing planner

Builds pairing change options with the crew pairing optimizer and scores each for alertness, Part 117 legality, the labor contract and cost per year; options that break a rule are shown refused, with the rule.

  • Never publishes a pairing
  • Revenue-flight changes go to Network Planning as a note
Assurance monitor

Measures every change for 90 days, tracks the FRMP 24-month and fatigue training 12-month clocks, drafts the FRMP update and builds FAA evidence packs.

  • Cannot close a case
  • Packs need a person’s approval
Fatigue risk manager

Decides; the review board approves schedule changes. The agents propose; a named person decides.

Ask in plain words

Ask the fatigue agents

Ask about any report, case, pairing or clock — on the Today screen, inside a case or on a pairing. Every answer cites the report, roster, model run or rule it came from.

Why is CV 2290 a fatigue risk if the rest is legal?

The rest is 11 h 00, legal under 117.25(e), but it starts at 13:45 in Las Vegas, when the body does not want to sleep. The first officer slept 3 h 40. With that sleep, alertness at landing is 58, below the high-risk line of 62.

Which reports need me today?

Four: R-26-1192 may be illness, not fatigue; R-26-1199 duplicates R-26-1190; R-26-1193 deadheaded on another airline, which the roster does not show; R-26-1190 was also filed as a safety report, so I keep the two apart. I proposed a path for each; you decide.

Why option A over option B?

Both lift alertness at landing above 70: A to 74, B to 72. A costs $214 per operation, B $341, and B adds 62 pilot days a month. Option C scores best (77) but moves a revenue flight, so I sent it to Network Planning as a note. D breaks the 10-hour rest rule.

Who is due fatigue training in the next 30 days?

362 people: 119 pilots, 214 flight attendants, 14 dispatchers, 9 crew schedulers and 6 managers. 14 have lapsed and are off the roster until trained.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

Today and the agents' briefingThe fatigue risk manager's morning: new fatigue reports, open FRMS cases, the review board date and the FRMP clock, the red-eye that needs a decision, and the fatigue agents briefing her in a conversation.
The FRMS case on one time axisA crew fatigue report, the roster actually flown and two alertness curves from the biomathematical fatigue model — planned sleep and reported sleep — on one axis, with the body-clock low marked.
Similar reports and the case conversationThe 11 fatigue reports on the same pairing with how tired, sleep and alertness low, and the case agents answering “Why option A over option B?” with their sources.
A confidential fatigue reportA pilot fatigue report in the confidential fatigue reporting system: the report as filed, the fields the Report reader extracted with their confidence, the reporter sealed behind a code, and the confidential channel for a follow-up question.
Reporting fatigue from the crew appWhat a pilot or flight attendant sees after filing: the report received, one follow-up question from the Report reader, and the report linked to its FRMS case.
Fatigue patterns across reportsPatterns by pairing, flight, hotel, report time and aircraft, each with an hour-of-day strip and its rate against the fleet, and the Pattern finder explaining why it is not chance.
How the agents built the caseEach agent's step behind the FRMS case — report read, roster linked, two model runs, similar reports, pairing options, the draft — and the Case checker's 22 of 23 sources confirmed, every step read-only.
Pairing change optionsOptions for pairing D4417 scored for alertness at landing, Part 117 legality, the labor contract and cost per year; one moves a revenue flight and one breaks 117.25(e).
Send to the FRMS review boardThe fatigue risk manager sends the case with a reason code and an electronic signature; the decision pack carries the reports de-identified.
The FRMS review boardThe agenda, one decision pack per case with alertness, cost and the recommended option, and the votes against a quorum of 3 of 5 with a crew representative.
Is the mitigation working?Each change measured for 90 days — reports per 1,000 duties, the alertness low and fatigue calls — with the one change that is not working flagged to re-open.
FRMS records for the FAAThe fatigue risk management plan update with its 24-month clock and drafted changes, fatigue education and awareness training on the 12-month clock (14 CFR 117.9), and the 117.7 exceedance approval data for an ultra-long-haul route.
Thresholds and rulesAlertness thresholds, the pattern rule and the monitoring window, each changed only with a reason and logged.
Governance

A fatigue risk management system that keeps the evidence: confidential, cited, decided by people.

The reporter's identity stays sealedIn the confidential fatigue reporting system, reporters appear as codes on every screen, pack and export. Only the gatekeeper can reveal one, with a reason code; the reveal is logged and reported to the board chair and the fatigue committee. The identity key is held separately.
Agents draft and propose; people decideThe agents read, link, model, cluster, draft and test options. The fatigue risk manager approves drafts, the review board approves schedule changes, and only the crew planner publishes a pairing. No agent can reveal an identity, send to the board, vote or publish.
Schedule changes need the review boardA change to a pairing goes to the FRMS review board: quorum 3 of 5 voting members, at least one crew representative. Members vote as themselves with a reason code, and the chair signs the minutes.
Every value cites its sourceEvery number on a case — report text, roster, actual times, model run, rule — and every agent statement carries its source. The Case checker re-opens every source behind a draft or an evidence pack and refuses what it cannot find.
Legal or refusedEvery pairing option is checked against Part 117, the labor contract and cost before anyone proposes it. An option that breaks a rule is shown as refused with the rule, as option D was under 117.25(e).
Every action on a chained audit trailEvery action by people and agents is on a hash-chained audit trail that can be filtered, exported and verified. Decisions carry a reason code and an electronic signature, and threshold changes need a reason.
Configuration

Your thresholds, rules and clocks

How the fatigue risk management system scores, raises and watches — set by the FRMS administrator, logged, and changed only with a reason.

SettingDefaultChoose from
Elevated alertness below7060 to 80
High alertness below6250 to 70; below it the case is rated high and goes to the board
Pattern: reports53 to 10 on one pairing, flight or hotel
Pattern: window60 days30 to 120 days, in steps of 15
Also raise a pattern at3 reports2 to 6 reports rated 6–7 on one duty
Monitor every change for90 days60 to 180 days, in steps of 30
Acknowledge a report24 hoursThank the reporter through the channel
First draft · board decision72 hours · 35 daysFrom the pattern being raised · from the draft being sent
Connections

Works with the systems your fatigue data already lives in

Crew schedulingrosters actually flown, 7 days before each report
Operations dataout, off, on and in times for every flight
Crew appfatigue reports and the confidential follow-up channel
Fatigue modelalertness runs on actual and planned rosters
Crew pairing optimizer and contractspairings, options, pilot and flight attendant contracts, hotel bookings
Voluntary safety reporting and trainingcross-filed reports, kept apart; fatigue education completions
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
100%
of fatigue reports linked to the roster, the alertness curve and similar reports the same day
412 of 412
reports in 60 days, each linked
target
−50%
fatigue calls on the pairings the review board changes
2 calls in 60 days
on the red-eye in the demo
typical
24months
the FAA's clock for every Fatigue Risk Management Plan update; fatigue training every 12

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published rules (14 CFR 117.3, 117.5, 117.7, 117.9 and 117.25; Public Law 111-216 §212 — FRMP updated every 24 months, fatigue training every 12; FAA InFO 15001 and AC 117-2 on fatigue education and awareness training; 14 CFR 121.467; FAA AC 120-103A; ICAO Doc 9966). Corvane Airways, Larkspur Air, and the people, reports, pairings and hotels named on this page are fictional — characters and sample data in the working solution.

Questions

Airline fatigue risk management: what safety and crew teams ask us.

What is a fatigue risk management system?

A fatigue risk management system (FRMS) is the data-driven way an airline finds and fixes the causes of crew fatigue, as ICAO Doc 9966 and, in the US, 14 CFR 117.7 describe it: collecting fatigue reports, linking them to the duties that caused them, assessing the risk, changing schedules and proving the change worked. The Fatigue Risk Management System is FRMS software that puts each crew fatigue report, the roster actually flown and a biomathematical fatigue model on one time axis, with eight agents that link, model, find patterns, draft cases and test legal pairing fixes, while the fatigue risk manager and the FRMS review board decide.

What is the difference between an FRMS and a fatigue risk management plan (FRMP)?

Every Part 121 carrier must keep an FAA-accepted Fatigue Risk Management Plan (FRMP), update it every 24 months and train on fatigue every 12 months. An FAA-approved FRMS under 14 CFR 117.7 is what an airline needs to fly beyond a Part 117 limit, such as an ultra-long-haul route. The solution supports both: it drafts the FRMP update and tracks the training clock, and it keeps the validation data for a 117.7 approval — in the demo, JFK–SIN at month 7 of 12.

How does a biomathematical fatigue model work with crew fatigue reports?

The Fatigue model agent runs the model on the roster actually flown twice: once with the sleep the model assumes and once with the sleep the crew member reported. In the demo, a legal 11-hour rest that began mid-afternoon gave 3 h 40 of sleep, so alertness at landing is 58 instead of 66. The agent says when a duty is outside the model's validated range, and a score is evidence, not a verdict.

Are crew fatigue reports confidential?

Yes. Reporters appear as codes on every screen, decision pack and export. Only the gatekeeper — the fatigue risk manager — can reveal a reporter, with a reason code, and the reveal is logged and reported to the board chair and the fatigue committee. Follow-up questions go through the crew app's confidential channel.

How does it find fatigue patterns?

The Pattern finder groups every report by pairing, flight, hotel, report time and aircraft, compares each cluster with the fleet rate and raises it when it reaches the rule — 5 reports in 60 days, or 3 rated 6–7 on one duty. It raises patterns but never opens a case by itself; a person drafts, watches or dismisses each one with a reason.

Can it change a pairing or a roster?

No. The Pairing planner builds and scores options for alertness, Part 117 legality, the labor contract and cost, and shows any option that breaks a rule as refused. Schedule changes need the FRMS review board's vote, and only the crew planner publishes the approved change for the next bid period.

Do people stay in control?

Yes. The agents read, link, model, draft and propose; they never reveal an identity, send a case to the board, vote, publish a pairing or close a case. The fatigue risk manager signs each decision with a reason code, the board votes with a quorum of 3 of 5 including a crew representative, and every action is on a chained audit trail.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your FRMP, risk matrix, reason codes, contracts and a history of past reports — and it goes live once every quality gate has passed. In the demo, first-time setup connected crew scheduling and operations data and turned on confidential reporting in the crew app, set the fatigue model thresholds at 70 and 62 against 1,240 past reports, and re-read and linked two years of past reports — 4,488 — finding 17 patterns.

See it on
your fatigue reports.

We'll run the Fatigue Risk Management System on a past quarter of your own fatigue reports, rosters and actual times.