Corporate Aviation Duty of Care: Route Risk Assessment

Global business travel spending reached an estimated $1.57 trillion in 2025, according to Expensify's corporate travel risk guide. Behind that figure lies a question every corporate aviation department must answer: what systematic processes are in place to ensure that each flight route meets the organization's duty of care obligations? FlySafe analysis shows that the gap between travel expenditure growth and risk management maturity remains a significant concern across the industry.

The convergence of dynamic airspace restrictions, NOTAM-driven route changes, and evolving regulatory expectations has made route assessment an operational necessity rather than a compliance afterthought. This bulletin examines how corporate aviation departments can build defensible, data-driven frameworks for route risk evaluation and duty of care fulfillment.

Duty of Care: The Legal and Operational Foundation

Duty of care in the context of corporate aviation is defined as the legal and ethical responsibility organizations hold to protect their employees during business travel. As noted by Everbridge, duty of care and travel risk management are closely related concepts, but they are not interchangeable. Duty of care establishes the obligation; travel risk management provides the execution framework that enables organizations to meet that obligation in a consistent and scalable manner.

The legal grounding for this obligation is well established across multiple jurisdictions. According to a best practices paper published by DRJ, duty of care requires organizations to do everything "reasonably practical" to protect employee health and safety during travel. This includes providing safe transportation arrangements, delivering information on known hazards, and employing qualified safety advisors. The standard is enforced globally — the UK's Corporate Manslaughter and Corporate Homicide Act of 2007 has been used to successfully prosecute a company following an employee fatality, and similar litigation has occurred in the United States.

Ryan Schaffer, CFO at Expensify, has stated that duty of care "isn't just emergencies. It's knowing where your people are before, during, and after travel." For corporate aviation operations, this translates into a requirement that extends well beyond departure and arrival — it encompasses route selection, alternate airport planning, en-route airspace status, and ground transportation at destination.

Organizations that fail to meet these obligations face potential legal liability, regulatory penalties, and reputational damage. The U.S. Bureau of Labor Statistics reported that workplace transportation incidents accounted for over 2,000 worker losses in 2023 — a figure that underscores the material risk associated with inadequate travel risk frameworks.

From Reactive Evacuation to Proactive Route Assessment

The traditional approach to corporate travel risk — maintaining an emergency evacuation plan and a crisis hotline — is no longer sufficient. As Training Magazine reports, this model is considered outdated and far too reactive. The publication notes that less than one percent of organizations will ever require an evacuation, which means that a program built exclusively around crisis response addresses only a fraction of the risk landscape.

The current environment is described as a confluence of rising extreme weather events, geopolitical developments, health considerations, and shifting operational patterns. Modern duty of care requires proactive management — organizations can no longer wait until something goes wrong on a trip and merely react to emergencies as they occur.

For corporate aviation departments, proactive route assessment means evaluating each planned flight against a structured set of criteria before departure approval is granted. This includes:

• Airspace status: Review of active NOTAMs, temporary flight restrictions, and any FIR-level advisories that affect the planned route or alternates.
• Affected routes: Identification of route segments that transit restricted or advisory airspace, with documented justification for route selection.
• Weather and environmental factors: Assessment of seasonal weather patterns, volcanic ash advisories, and known turbulence corridors along the planned route.
• Ground risk at destination: Evaluation of destination airport operational status, available ground handling, and local transportation security.

Based on publicly available NOTAMs and EASA Safety Information Bulletins, multiple FIRs have carried persistent restrictions or advisories in recent years. Corporate flight departments that do not maintain a current picture of airspace availability expose their organizations to both operational disruption and duty of care liability.

Route Evaluation Methodology: Borrowing from Airline Network Planning

Corporate aviation can draw valuable lessons from the structured route evaluation processes used by commercial airlines. According to Aerotime, airline route evaluation involves running thousands of simulations with variables including fuel prices, exchange rates, and competitive responses to understand not just the expected outcome, but the range of possible outcomes and associated risks.

While corporate aviation does not operate on airline-scale networks, the analytical rigor is directly transferable. Key elements include:

Airspace and Routing Analysis

Every planned route should be evaluated against current airspace restrictions. Airlines have rerouted extensively in response to NOTAM-driven closures across several FIRs, and corporate operators should maintain equivalent awareness. Route planning should document primary routing, filed alternates, and contingency options should airspace status change during flight.

BQP's analysis of route optimization highlights the value of integrated simulation and optimization — testing route changes and disruptions in digital twin environments before operational commitment. While full simulation platforms may exceed the needs of most corporate flight departments, the principle of pre-testing route viability against multiple disruption scenarios applies directly.

Multi-Factor Risk Scoring

Effective route assessment requires structured consideration of multiple risk dimensions simultaneously. As Air52 notes, successful network planning requires viewing route evaluation as an ongoing process of strategic optimization, not a periodic exercise.

For corporate aviation, this translates into a route risk assessment that integrates:

• NOTAM status for all FIRs along the planned route and alternates
• Weather impact modeling — academic research published in Applied Sciences demonstrates mathematical frameworks for quantifying weather impact on routes, incorporating temperature, wind, and traffic density variables
• Airport operational risk — including Class B airspace interactions at smaller airports, which NBAA's Business Aviation Insider identifies as a significant concern
• Ground transportation risk at origin and destination
• Communication coverage along the route for real-time traveler location tracking

Corporate Aviation-Specific Risk Factors

The NBAA publication provides a particularly relevant insight for corporate operators. Solairus Aviation, a corporate aviation company, conducts risk analysis for every flight, focusing on the top five of its top-25 airports and areas. The company's pilots and flight crews identified landing below Class B airspace at smaller airports as their number one risk assessment item. Most near-miss event reports coincide with operations at these smaller airports below Class B airspace.

This finding is significant because corporate aviation frequently operates into airports that commercial carriers do not serve — smaller fields with less controlled airspace, fewer ground-based safety nets, and different traffic density profiles. A route assessment framework for corporate aviation must account for these destination-specific risk factors that airline-focused models may not capture.

Building a Defensible Travel Risk Management Program

A comprehensive travel risk management program for corporate aviation integrates duty of care obligations with operational route assessment into a documented, repeatable process. Corporate Traveler's guide specifies that a risk management program should include guidelines on selecting travel services to reduce risk in a specific country and a plan for who to contact for emergency travel support.

Recommendation: Corporate aviation departments should implement the following program elements:

Pre-Flight Risk Assessment Protocol

Every flight should undergo a documented risk assessment before dispatch approval. This assessment should cover airspace status along the entire route, destination airport risk profile, weather and environmental factors, and ground risk at both origin and destination. The assessment should be completed by qualified personnel and retained as part of the flight record.

The DRJ best practices paper emphasizes that specific elements of duty of care include providing a safe environment — including airline and transportation selection — information on hazards, supervision, health monitoring, and employing qualified safety advisors. For corporate aviation, the flight department itself serves as the safety advisor, making the quality and documentation of its risk assessment process a direct measure of duty of care compliance.

Real-Time Monitoring and Communication

FlySafe analysis shows that static, pre-departure risk assessments are necessary but not sufficient. Airspace status can change during flight due to new NOTAM publications, and conditions at destination airports can deteriorate. Corporate aviation programs should maintain real-time monitoring capabilities that allow:

• Immediate awareness of new NOTAMs affecting planned routes
• Weather update integration during flight planning and en-route phases
• Two-way communication with flight crews regarding emerging risk factors
• Traveler location tracking from departure to final destination, including ground transportation segments

Training Magazine's analysis reinforces this point, recommending that organizations partner with a trusted travel risk management provider who can support travel approval programs that balance risks, costs, and traveler well-being without being cost-prohibitive.

Policy Documentation and Review Cycle

The risk management program must be documented in a corporate travel policy that is reviewed and updated on a defined cycle. Triggers for immediate policy review should include:

• New or expanded airspace restrictions affecting frequently used routes
• EASA Safety Information Bulletins or equivalent regulatory advisories
• Significant changes in destination risk profiles
• Incidents or near-misses within the organization's flight operations
• Changes in regulatory requirements or legal precedent regarding duty of care

Commodity Market and Operational Cost Integration

Route assessment cannot operate in isolation from operational economics. As Aerotime reports, airlines evaluate routes using metrics including CASK (Cost per Available Seat Kilometer), contribution margin, and breakeven load factor, with environmental factors increasingly influencing viability. Commodity market volatility correlates with operational disruptions — fuel cost fluctuations can affect the viability of longer routing options required to avoid restricted airspace, creating tension between safety and budget considerations.

Corporate aviation programs should establish clear policy that safety-driven routing decisions take precedence over cost optimization. Where longer routes are required due to airspace restrictions, the additional cost should be documented and accepted as a duty of care expenditure.

The Data Infrastructure Behind Effective Route Assessment

Effective route risk assessment depends on timely access to authoritative data sources. The minimum data infrastructure for a corporate aviation risk program includes:

• NOTAM feeds with automated alerting for FIRs relevant to planned operations
• EASA Safety Information Bulletins and equivalent publications from other regional authorities
• ICAO State Letters and airspace status updates
• Global event monitoring through open-source intelligence platforms that track developments which may affect airspace or destination safety
• Weather data integration from aviation-specific meteorological services
• Machine learning ensemble models that correlate multiple data streams to identify elevated risk levels before they manifest in formal advisories

FlySafe maintains continuous monitoring of these data sources, providing corporate aviation departments with consolidated risk assessments that support both pre-flight planning and real-time operational decisions. Analysis is based exclusively on publicly available, independently verifiable data sources published by international aviation authorities, academic institutions, and open-data projects.

Key Takeaway

Corporate aviation duty of care is not satisfied by having an emergency response plan on file. It requires a documented, data-driven route assessment process that evaluates every flight against current airspace restrictions, destination risk profiles, weather factors, and operational considerations. The legal and regulatory environment continues to reinforce this standard — organizations that cannot demonstrate a systematic approach to travel risk management face material liability exposure.

The distinction between reactive and proactive programs is not academic. It determines whether an organization can demonstrate, if challenged, that it took all reasonably practical steps to protect its personnel. For corporate aviation departments, this means every route assessment, every NOTAM review, and every risk-based routing decision should be documented and defensible.

FlySafe provides continuous airspace risk monitoring and route assessment intelligence to support corporate aviation programs in meeting these obligations. All analysis is based on publicly available data only.

---

Analysis based on publicly available data only. FlySafe Research does not possess, access, or utilize any classified or non-public information.

Frequently Asked Questions

What is the difference between reactive evacuation-focused duty of care and modern proactive risk prevention?

Traditional duty of care programs centered on emergency evacuation and crisis response address less than one percent of actual travel risk scenarios, according to Training Magazine's analysis. Modern proactive approaches require pre-trip risk assessment, real-time monitoring during travel, and documented route evaluation processes that demonstrate an organization took all reasonably practical steps before an incident occurs — not after.

What pre-travel approval and vetting processes should be in place to assess destination and transportation risks?

Every corporate flight should undergo a documented risk assessment covering airspace status along the full route, NOTAM review for all transited FIRs, destination airport risk profile (including Class B airspace interactions at smaller fields), weather and environmental factors, and ground transportation security. This assessment should be completed by qualified personnel, retained in flight records, and subject to defined approval authority based on assessed risk level.

How often should companies review and update their travel risk policies?

Travel risk policies should be reviewed on a fixed cycle — typically quarterly at minimum — with defined triggers for immediate review. These triggers include new or expanded airspace restrictions on frequently used routes, EASA Safety Information Bulletins, significant destination risk profile changes, internal incidents or near-misses, and changes in duty of care legal precedent or regulatory requirements.

How can organizations use monitoring tools to identify emerging risks before they appear in formal advisories?

Corporate aviation programs should integrate open-source intelligence monitoring, global event tracking, and machine learning ensemble analysis alongside official NOTAM and regulatory feeds. This layered approach enables identification of elevated risk levels in specific FIRs or along planned routes before formal restrictions are published, providing additional lead time for route adjustment or operational decision-making.