Trust Center

How PartsPerk operates — published, versioned, and reviewable.

PartsPerk LLC runs an aviation sourcing platform with people, paperwork, and software working together. This is the single place to verify our quality, compliance, privacy, security, and AI posture before you trust us with a request.

AS9100 / AS9120 / ISO 9001FAA AC 0056BANSI/ESD S20.20ITAR registrationNIST SP 800-171AS5553 / AS6081

Browse all documents Send a compliance question

Last published policy update · May 1, 2026

Documents, organized by what you came to verify.

Every document below carries an explicit version and effective date. Material changes are reflected in the version pill at the top of the page; superseded versions are retained internally for audit.

Quality & sourcing

How we choose, test, and inspect parts

Aviation-grade vetting, paperwork that travels with every line, an AS5553 / AS6081 counterfeit program, AS6171 testing methods, and a published quality-escape / GIDEP notification process.

Federal procurement

Cleared for U.S. federal and DoD work

CMMC 2.0 / NIST 800-171 cybersecurity posture, Section 889 telecom prohibition, TAA / Buy American country-of-origin discipline, OFAC sanctions screening, CUI handling per 32 CFR 2002, and the FAR / DFARS clauses we flow down at every tier.

Supply-chain ethics

Conflict minerals, trafficking, and supplier ethics

Conflict-minerals diligence, multi-jurisdiction modern-slavery statement, anti-trafficking flow-downs, and a written supplier code of conduct with a confidential speak-up channel.

Privacy & data

Privacy, data processing, and your rights

Plain-language privacy policy, a customer-grade Data Processing Addendum, the live sub-processor list, and a cookie policy that reflects what we actually use.

Legal terms

Terms for customers, suppliers, and platform users

Customer and supplier terms, an Acceptable Use Policy for the platform, an availability SLA, the OEM-affiliation disclaimer, IP and DMCA contacts, and the master Terms of Service.

Security

Security, secure-by-design, and vulnerability disclosure

Encryption, access control, CISA Secure by Design pledge alignment, NIST 800-171 controls, and a coordinated vulnerability disclosure program with safe-harbor for researchers.

Responsible AI

What our AI does — and doesn't

PartsPerk is AI-assisted, not AI-autonomous. Our AI cleans up RFQ intake; a real aviation sales team reviews and replies. This is the policy that draws the line.

Services

Programs you can buy in to

Consignment & surplus inventory recovery, lot management, and the operating commitments that come with each.

Consignment & Surplus Inventory ProgramPartsPerk LLC onsite excess-inventory management — warehouse, market, and sell aviation surplus with traceable handling and weekly status re…

Verifiable by humans and machines.

Procurement systems and AI agents can verify our compliance posture without scraping HTML. We publish a signed, hashed JSON manifest and an RSS feed for material policy changes — fetch once, store the aggregate hash, and re-check on a schedule.

JSON Manifest

/.well-known/trust.json

Every policy with SHA-256 content hash, version, and effective date — plus an aggregate hash so you detect change with one string compare.

RSS 2.0 Feed

/trust/feed.xml

Subscribe in any feed reader or pipeline. One item per document, ordered by effective date — a clean audit log of what changed and when.

RFC 9116

/.well-known/security.txt

Standard security-contact advisory with safe-harbor reference. Ready for vulnerability scanners and bug bounty platforms.

Five commitments we make in writing.

Short enough to remember, real enough to hold us to.

No auto-quote, no OEM claim

AI never quotes a buyer automatically. A named sales executive reviews every RFQ, and we never claim OEM authority we do not have.

Documents travel with the part

Every quote includes the document plan. Trace is confirmed before award, not after the PO is cut.

We hold the line on suspect parts

Counterfeit and Suspect Unapproved Parts are quarantined, reported, and never returned to commerce — full stop.

Privacy beats convenience

We do not sell personal data, do not run cross-site ad pixels, and honor Global Privacy Control signals.

Security is welcome to challenge us

Coordinated disclosure with safe-harbor for researchers. We acknowledge in two business days, fix in good faith, and credit on request.

Versioned, dated, audit-ready

Every policy on this page carries a version and effective date. Superseded versions are kept internally for audit.

Need a security questionnaire, DPA, or certificate?

Customer security teams, prime contractors, and procurement reviewers can request our DPA, sub-processor list, NIST 800-171 self-assessment summary, and current insurance certificates through a single channel.

Open a compliance request Email the security team

PartsPerk LLC · Delaware, United States

Call Sal Request Quote