1. Purpose

Endless Sky FZE is committed to maintaining a reliable, compliant and traceable supply chain for aircraft parts, components, materials, repair services and related aviation services.

This Policy establishes the principles and procedures used by Endless Sky FZE for the selection, due diligence, approval, monitoring and, where necessary, suspension or removal of suppliers, distributors, repair vendors and subcontractors.

Supplier approval by Endless Sky FZE is based on a combination of information supplied by the vendor and independent verification and risk assessment performed by Endless Sky FZE.

2. Scope

This Policy applies, as appropriate, to:

• aircraft parts and materials distributors;

• OEMs and authorised distributors;

• repair and overhaul organisations;

• maintenance and specialist process providers;

• subcontractors;

• brokers and non-stocking distributors; and

• other suppliers whose products or services may affect product quality, traceability, airworthiness or contractual compliance.

The nature and extent of the approval process may vary according to the supplier category, scope of supply, regulatory status, transaction value and assessed risk.

3. Supplier Approval Principles

Endless Sky FZE shall purchase aviation products and services only from suppliers that have been evaluated and accepted for the applicable scope of supply.

Approval shall not be based solely on a supplier's self-declaration or commercial relationship. Information submitted by a supplier is subject to review and, where appropriate, independent verification by Endless Sky FZE.

Approval of a supplier does not constitute unrestricted approval for all products or services. A supplier may be approved only for a defined scope, product category, regulatory approval, facility or service.

Approved suppliers shall be maintained on the Endless Sky FZE Approved Repair Vendor / Distributor List or equivalent approved supplier register.

4. Initial Supplier Evaluation

Before initial approval, Endless Sky FZE may require the prospective supplier to complete the applicable Supplier Self-Evaluation Questionnaire and provide supporting documentation.

Depending on supplier type, information requested may include:

• legal company name and operating locations;

• company profile and organisation structure;

• scope of products or services offered;

• relevant regulatory approvals and certificates;

• quality-system certifications;

• details of warehouses and additional facilities;

• quality and operational personnel;

• recent regulatory, customer and internal audits;

• material control and inspection procedures;

• traceability and certification controls;

• shelf-life and storage controls;

• counterfeit and Suspected Unapproved Parts controls;

• subcontractor controls;

• information-security arrangements; and

• other information considered relevant to the intended scope of supply.

  The supplier is responsible for providing complete and accurate information and for notifying Endless Sky FZE of material changes affecting the information provided.

5. Independent Due Diligence

Endless Sky FZE shall perform its own due diligence appropriate to the nature and risk of the proposed relationship.

Due diligence may include, as applicable:

Corporate verification. Confirmation of company existence, registration, trading status, registered address and relevant business activities using independent and reasonably reliable sources.

Regulatory and certification verification. Validation of aviation authority approvals, repair station certificates, distributor accreditations, quality certifications and their scope and validity.

Ownership and compliance screening. Review of available information concerning ownership, controlling parties and relevant compliance risks, including applicable sanctions or restricted-party considerations.

Reputation and operating history. Review of available market information, industry references, adverse information, previous performance and known quality concerns.

Technical and quality review. Assessment of the supplier's capabilities, facilities, quality system, traceability arrangements, inspection processes, storage controls and other factors relevant to the intended products or services.

Documentation review. Examination of sample certifications, release documentation, Certificates of Conformity, trace records or other supporting documents where considered necessary.

Completion of a supplier questionnaire does not by itself constitute supplier approval.

6. Risk-Based Approval

Endless Sky FZE may apply different levels of review according to supplier risk.

Factors considered may include:

• supplier type;

• OEM or authorised-distributor status;

• regulatory approval status;

• type and criticality of product or service;

• new, used, repaired, overhauled or surplus material;

• traceability available;

• geographic location;

• use of subcontractors;

• previous performance;

• transaction value and frequency;

• quality or compliance concerns identified during due diligence.

Where necessary, additional documentation, references, samples, inspection or an on-site/remote audit may be required before approval.

Approval may be:

Approved – acceptable for the specified scope;

Conditionally Approved – subject to defined restrictions or additional controls;

Pending – further information or verification required; or

Rejected – supplier does not meet Endless Sky FZE requirements.

7. Product Traceability and Certification

Suppliers shall provide documentation appropriate to the condition and nature of the supplied material.

Endless Sky FZE requires complete and satisfactory traceability for aviation parts and materials in accordance with the applicable purchase requirements.

Where applicable, suppliers shall provide appropriate:

• Certificate of Conformance;

• authorised release certificate;

• OEM/manufacturer documentation;

• repair or overhaul release documentation;

• historical trace records;

• batch or lot documentation;

• shelf-life information; and

• other supporting documentation requested by Endless Sky FZE.

Documentation shall be reviewed for consistency and acceptability before material is released for use or onward supply, as applicable.

8. Counterfeit and Suspected Unapproved Parts

Endless Sky FZE does not knowingly purchase, accept or distribute counterfeit parts or Suspected Unapproved Parts ("SUP").

Suppliers are expected to maintain appropriate procedures to prevent the introduction of counterfeit, fraudulent or otherwise unapproved material into the aviation supply chain.

Where the authenticity, origin, condition or traceability of a part cannot be satisfactorily established, Endless Sky FZE may quarantine or reject the material and request additional evidence.

Where appropriate, suspected material may be reported or handled in accordance with applicable regulatory and contractual requirements.

9. Storage, Handling and Preservation

Where relevant to the scope of supply, suppliers shall maintain suitable controls for:

• incoming inspection;

• segregation of serviceable and non-conforming material;

• secure storage;

• environmental and temperature controls;

• shelf-life management;

• electrostatic-sensitive devices;

• dangerous goods;

• freezer, adhesive and composite materials;

• packaging and transportation; and

• protection from contamination, deterioration or damage.

10. Repair Vendors and Subcontractors

Repair and overhaul services shall be placed only with organisations determined by Endless Sky FZE to possess the appropriate capability and, where required, regulatory approval for the applicable work scope.

Endless Sky FZE may verify:

• authority approvals and ratings;

• technical capability;

• qualified and authorised personnel;

• tooling and calibration systems;

• approved technical data;

• inspection and quality controls;

• record retention;

• release certification;

• subcontractor controls; and

• corrective-action systems.

Where work is subcontracted further, the original supplier remains responsible for ensuring that applicable quality, regulatory, contractual and traceability requirements are properly flowed down and satisfied.

11. Supplier Monitoring

Approved suppliers remain subject to ongoing monitoring.

Monitoring may include:

• delivery and quality performance;

• documentation and traceability deficiencies;

• rejected or non-conforming products;

• warranty or customer issues;

• certification or regulatory changes;

• audit results;

• corrective-action effectiveness;

• information obtained through independent due diligence; and

• any event that may materially affect the supplier's capability or compliance status.

Supplier approval may be periodically reviewed on a risk-based basis.

Endless Sky FZE may also require an updated questionnaire, renewed certificates or additional documentation when considered necessary.

12. Changes Requiring Notification

Approved suppliers should promptly notify Endless Sky FZE of material changes relevant to their approved status, including, where applicable:

• change of legal entity or ownership;

• change of operating or warehouse location;

• loss, suspension, limitation or expiry of regulatory approval;

• material change to quality-system certification;

• material change in approved capabilities;

• significant regulatory or quality findings;

• significant cybersecurity incidents affecting Endless Sky FZE data or systems;

• changes to subcontracting arrangements relevant to Endless Sky FZE work; or

• any circumstance that could affect the conformity, traceability or airworthiness status of supplied material.
  
  

13. Audit and Right of Access

Endless Sky FZE reserves the right, when reasonably necessary, to conduct or arrange supplier surveys, documentation reviews, remote assessments or on-site audits.

Suppliers shall provide reasonable access to relevant facilities, records and personnel for the purpose of verifying compliance with applicable purchase, quality and regulatory requirements.

14. Non-Conformance and Corrective Action

Where a supplier-related deficiency is identified, Endless Sky FZE may require:

• clarification or additional documentation;

• containment of affected material;

• replacement or return of affected product;

• root-cause investigation;

• corrective and preventive action;

• additional inspection or verification; or

• other measures considered appropriate.

Significant, repeated or unresolved deficiencies may result in restriction, suspension or removal from the Approved Supplier List.

15. Suspension or Removal of Supplier Approval

Endless Sky FZE may suspend, restrict or withdraw supplier approval where, among other circumstances:

• required approvals expire or are suspended;

• information supplied during evaluation is materially inaccurate;

• required traceability cannot be demonstrated;

• counterfeit or suspected unapproved material is identified;

• significant quality deficiencies remain unresolved;

• the supplier fails to cooperate with reasonable verification or audit requirements;

• compliance or reputational risks become unacceptable; or

• continued approval is otherwise considered inconsistent with Endless Sky FZE's quality, regulatory or commercial requirements.

Suspended suppliers shall not be used for new procurement within the affected scope unless specifically authorised following review.

16. Information Security

Where suppliers receive, process, store or transmit technical, maintenance or other non-public information relating to Endless Sky FZE or its customers, they are expected to maintain reasonable measures to protect its confidentiality, integrity and availability.

Relevant suppliers should have procedures for identifying and managing information-security incidents and for notifying Endless Sky FZE where an incident may affect Endless Sky FZE information or aviation-related systems.

17. Records

Endless Sky FZE shall maintain appropriate records of supplier evaluation and approval, which may include:

• completed questionnaires;

• supporting certificates and approvals;

• due-diligence records;

• approval decisions;

• scope of approval;

• audit or assessment records;

• corrective actions; and

• relevant supplier-performance records.

Records should be retained for a period appropriate to applicable regulatory, contractual and company requirements.

18. Responsibility

Responsibility for supplier approval shall rest with personnel designated by Endless Sky FZE.

Commercial considerations may form part of supplier selection but shall not override identified regulatory, quality, traceability or compliance requirements.

No employee or representative may knowingly approve or continue to use a supplier where material unresolved concerns could compromise product conformity, traceability, regulatory compliance or the interests of Endless Sky FZE or its customers.