Security Review and Distribution
Has SortieTrack been reviewed for security?
Yes. SortieTrack has passed a security review from NHQ and has been approved for distribution. A more detailed security overview document is available on request, and ezaero can also conduct a virtual walkthrough for squadrons, wings, or staff members who want to review the app architecture and workflow in more detail.
Is SortieTrack an official CAP system?
No. SortieTrack is independently developed by ezaero, Ltd. It is designed to support CAP-oriented aircrew workflows, but it is not a replacement for WMIRS, eServices, local procedures, command direction, or required CAP records.
Data Storage and Privacy
Are my CAPID and password stored locally only?
Yes. If you choose to save credentials, SortieTrack stores the CAPID and password in the iOS Keychain on your device. They are not sent to ezaero, stored on an ezaero server, or shared with third parties. You can also choose not to save credentials and log in manually.
Is FRO information stored locally?
FRO information entered or imported for your workflow is stored in the app's local data store using Apple's SwiftData framework. If iCloud sync is enabled for the app, that information may sync through the user's personal Apple iCloud account so it is available on that user's Apple devices.
Does ezaero have a backend database with my sortie or crew data?
No. SortieTrack does not use an ezaero backend database for sortie, FRO, crew, credential, or flight-log data. The app is designed around local device storage and optional user-controlled iCloud sync.
What data can the app store?
Depending on which features you use, SortieTrack can store mission and sortie details, crew roles, FRO information, flight-log entries, GPS track points, fuel receipt references, notes, weather references, and postflight reporting drafts. This information is kept for your own workflow and export needs.
Can I use SortieTrack without iCloud?
Yes. SortieTrack can be used as a local app. iCloud sync is useful when you want data available across your Apple devices, but it is not required for basic sortie support.
WMIRS, MFA, and Login Behavior
How does SortieTrack handle MFA?
SortieTrack does not bypass, replace, or weaken CAP's MFA process. If WMIRS or eServices prompts for MFA, the user completes the normal MFA flow in the in-app WebKit browser session, similar to using Safari.
Does SortieTrack use a CAP API or direct database connection?
No. SortieTrack does not use a CAP API, does not connect directly to CAP databases, and does not receive privileged access to CAP systems. WMIRS access occurs through normal user-authorized web pages.
How does SortieTrack interface with WMIRS?
SortieTrack opens WMIRS pages in Apple WebKit, the same underlying browser technology used by Safari on iOS. The app can read visible page content that the signed-in user is already authorized to view, organize that data locally, and pre-fill applicable WMIRS form fields as if the user typed the information manually.
Does the app submit WMIRS forms automatically?
The intended workflow keeps the user in control. SortieTrack can pre-fill fields and assist with navigation, but the user should review the page, make corrections as needed, and complete the final WMIRS submission according to normal procedures.
Can SortieTrack access information I cannot already see in WMIRS?
No. SortieTrack operates in the user's normal WMIRS session and does not grant additional permissions. If WMIRS does not allow the user to see or edit something, SortieTrack does not change that access.
Use by Aircrews
Can aircrews use SortieTrack during operational flying?
SortieTrack is designed as an aircrew support tool for organizing sortie information, briefing notes, flight logs, GPS tracks, fuel receipts, and postflight reporting references. Crews should continue to follow CAP regulations, local procedures, aircraft operating limitations, and mission staff direction.
How can SortieTrack help when flying multiple sorties, such as O-rides?
SortieTrack is especially useful when crews are repeating similar workflows across several sorties. It keeps sortie details, FRO information, timestamps, crew notes, and postflight reporting drafts organized so crews spend less time retyping the same information and more time managing the mission.
Does SortieTrack replace official records?
No. SortieTrack is a productivity and reference tool. WMIRS, eServices, aircraft logs, local mission documentation, and required CAP forms remain the official systems and records where applicable.
Can SortieTrack be used offline?
Many in-app records can be reviewed and updated offline after they have been created or imported. Features that require live web access, weather retrieval, or WMIRS interaction require network connectivity.
Who is responsible for verifying the data?
The user remains responsible for reviewing all imported, generated, or pre-filled information before using it for briefing, flight operations, reports, or WMIRS submission. SortieTrack is intended to reduce repetitive entry and improve organization, not remove aircrew judgment.
Support and Review Requests
Can my unit review the detailed security document?
Yes. ezaero can share the in-depth security overview document on request. A virtual meeting can also be arranged to discuss credential storage, local data storage, WMIRS behavior, MFA, iCloud sync, and practical use by aircrews.
How do I report an issue or ask a security question?
Use the contact information on the support page or email ezaero with the app name, device model, iOS version, and a description of the question or issue. For security or policy review questions, include the unit, role, and what level of detail would be helpful.
For reviewers: The short version is that SortieTrack has no CAP backend access, no CAP API integration, no ezaero-hosted sortie database, and no special WMIRS privileges. It works in the user's own iOS and WMIRS security context.