All work

Incident management · Safety reporting · Proof of concept

Helicopter operators investigate every safety report by hand across a spreadsheet, Word files and a legacy system. I designed a single flow where the AI does the first pass and the safety manager makes the decisions.

Role

Sole product designer

Team

Me, with a BA on research

Timeline

2 months

Research

12 safety managers

Status

Proof of concept, not yet built

Screen 12: the ECCAIRS step for SR-2026-0142 with every matched value decided: 0 need a decision, 9 not in report, 83 matched, 5 corrected. A green banner confirms every value has a decision, above the corrections listed by entity.

Screen 12 · ECCAIRS, all decided

Problem

A safety report was rebuilt by hand three times, across a spreadsheet, Word files and a legacy system, so the same facts were typed again at every step.

My role

Sole product designer, with a BA on research. Two months, and twelve safety managers.

What changed

One guided flow: the first pass is done for you, and the safety manager still makes every decision.

Result

Proof of concept, not yet built.

01

Every report is rebuilt by hand, three times

A safety report arrives as free text. The safety manager then reads it, rates the risk, keeps a record in Excel and Word, and re-enters it field by field into a legacy system to produce the ECCAIRS record the authority needs.

Nothing connects those steps, so the same facts are typed again at every one.

“A normal report takes about two days.”
Safety manager, during research

Re-typed into ECCAIRS

Dozens of attributes entered one by one, from a report that already contains most of the answers.

Risk rated differently

Each manager applies the matrix their own way, so the same hazard gets different ratings.

No view of what is open

Nothing shows which reports are overdue, who owns them, or which carry an intolerable risk.

02

Twelve operators, watched as well as asked

12

Safety managers interviewed

A BA visited twelve operators and interviewed the safety manager at each one.

12

Procedures observed

The BA also observed each procedure closely, which shows the steps people skip when they describe their work.

1

Legacy system, first-hand

I had access to the old system and a recording of a manager using it, which showed exactly where time goes.

The same three pains came up across the operators. They set the brief: remove the re-typing, make risk consistent, and show what is open.

03

Five decisions that carry the flow

Decision 1

Start with what’s urgent

The inbox puts what needs the safety manager first. Every row shows the risk level, days open, owner and due date.

Counts for overdue reports and intolerable risks sit on top, so the riskiest report is never buried.

Safety reports inbox: counts for Need you, Overdue, Intolerable risk open and Closed this month on top, then a table of open reports with stage, risk level, owner and days open.
01 — Inbox

Decision 2

The AI does the first pass. The manager decides.

Analysis starts when the report opens. It writes a synopsis linked to the source sentences and suggests hazards from the taxonomy.

Nothing is accepted without the manager. Every suggestion can be kept, corrected or removed.

Review step: a synopsis where every line links to its source in the narrative or flight data, one value flagged as only in the flight data, and two suggested hazards from the taxonomy with a duplicate merged.
06 — Review · synopsis and hazards

Decision 3

Review ECCAIRS by exception

The system matches every ECCAIRS attribute from the report. The manager only sees the values it is unsure of, with its reason.

Keep or correct it, with a one-tap reason for the audit trail. This replaces the re-typing that research named as the biggest pain.

ECCAIRS step: 97 attributes matched, 7 need a decision. Each uncertain value shows its confidence and the reason, such as a narrative that contradicts the database, with Keep it and Correct.
09 — ECCAIRS · review by exception

Decision 4

One screen for risk, one rule for everyone

Severity and probability sit side by side with the ICAO 5×5 matrix, so every manager reaches a rating the same way.

Similar risks from the register appear alongside. A recurring hazard is linked instead of assessed again from scratch.

Risk step: severity and probability beside the ICAO 5×5 matrix with 3A marked intolerable, AI suggestions under each field, and similar risks from the register to link or use as a template.
13 — Risk · assessing a hazard

Decision 5

A real finish line

Closing shows what was decided, what is still open and one final action. It stays blocked until an intolerable risk has an accepted mitigation.

A closed report locks, with every change and correction in its audit trail.

Close step: hazards with their risk and treatment, the ECCAIRS record summary, a Ready to close checklist at 6 of 6, and what happens on closing, with one Close report action.
17 — Close · ready to close

Every state designed, not only the happy path

19 states across six steps, including the ones that usually get left to engineering.

  1. Analysing the report: a checklist of reading the narrative, extracting flight facts, identifying hazards and writing the synopsis, with a note that the manager can leave and will be notified.

    AI analysis running

  2. The analysis finished without the flight data: the file could not be read at row 212, everything else was analysed, with Upload a new file, Retry and Continue without it.

    Analysis partly failed

  3. Re-run matching dialog: the manager has already decided 3 values, and chooses between keeping their decisions (recommended) or starting over.

    Re-run would overwrite decisions

  4. Close report dialog: closing is final and reopening needs a reason; it lists the ECCAIRS submission, the recorded hazards, the tracked mitigation and the outcome sent to the reporter.

    Irreversible close, confirmed

04

Leadership first, then the people
who do the work

I presented the concept to leadership, then to the safety managers it was designed for.

The reaction was immediate, from safety managers and leadership alike.

Safety manager, at the concept review (paraphrased)

05

Proving it against the two-day baseline

This is a proof of concept. Nothing is built or measured yet, so the next step is to test it on real reports with the same operators.

Time to close
From report received to closed, against the “about two days” reported today.
ECCAIRS corrections
How many matched values a manager changes per report. This is the AI’s real accuracy.
Rating agreement
Two managers rate the same report. The matrix should make them agree.

Screens use invented data. Names, registrations and reference numbers are not real.

Building B2B SaaS with complex workflows or AI features?

Send me the screen, or the idea. I’ll reply with what I’d do first.

Get in touch

Next case study From finished job to first post B2B quoting · Q2 2025