TSA AFSP Compliance for Flight Schools: What's Required and How to Track It

If your flight school trains non-U.S. citizen student pilots, federal law requires you to participate in the TSA Alien Flight Student Program. That's true whether you're Part 61 or Part 141, and regardless of the student's visa status or country of origin.

The penalties are real. Training a non-citizen before TSA approval is received carries civil penalties up to $10,000 per violation, and the TSA has pursued enforcement against schools where the breach was inadvertent. The deciding factor isn't intent. It's whether you have a system that prevents the breach from happening in the first place.

This walks through what AFSP actually requires, the approval and renewal process, and the records every school needs to maintain.

What AFSP requires

AFSP lives in 49 CFR Part 1552. It's administered by TSA and applies to flight training providers — which means you, as the school. The three requirements are simple to state and harder to enforce in practice:

1. Verify that any non-U.S. citizen seeking flight training has received TSA approval before training begins.
2. Submit the student's information to TSA for a security threat assessment (STA).
3. Maintain records of the approval and make them available for inspection.

The regulation splits training into two categories:

• Category 1. Aircraft over 12,500 lbs MTOW, or any turbine. Requires a full background check before training.
• Category 2. Everything else (most general aviation instruction). Requires an expedited check, but approval must still be in hand before training begins.

Most flight schools live in Category 2. The check is faster, but "training before approval" is exactly as illegal in Category 2 as in Category 1.

Who counts as non-U.S. citizen

The regulation applies to any non-U.S. citizen seeking flight training. U.S. citizens and U.S. nationals are exempt. Everyone else is in scope:

• Foreign nationals on student visas (F-1, M-1).
• Permanent residents (green card holders). They are not exempt.
• Any other lawfully admitted non-citizen.

The green card surprise catches a lot of schools. A student with a green card has been a U.S. resident for years, has a U.S. address, has a U.S. medical, and feels like a citizen for every other purpose. Under AFSP, they're not. Approval is required.

The approval process

The student applies through TSAFlightStudent.com:

1. Student creates an account and submits personal information plus the training request.
2. TSA conducts the security threat assessment.
3. Approval (or denial) is issued with an expiration date.
4. The school receives confirmation through their own AFSP account.

The critical detail: the school's confirmation is separate from the student's. The student showing you their copy is not sufficient. You need the school-side confirmation visible in your AFSP account before training begins.

What you have to track

Per non-citizen student:

• Citizenship status. The basis for determining whether AFSP applies at all.
• TSA case number. Assigned when the application is submitted.
• Approval date. When TSA issued the green light.
• Approval expiration date. Approvals expire. This is the field that compliance failures hinge on.
• Training category (Category 1 or 2).

Records have to be retained for five years after training completes.

Where compliance actually fails: renewal

Initial approval is the obvious checkpoint. Renewal is where schools quietly drift out of compliance. The student finishes their initial program, takes a break, comes back six months later for an instrument rating, and nobody catches that the original approval has expired.

A spreadsheet doesn't reliably catch this. The expiry date sits in column F and nobody looks at column F until something goes wrong. Real compliance means three things:

1. Expiry dates recorded in the system at the moment approval is received.
2. Alerts firing automatically 30–60 days before expiry.
3. Scheduling blocked for the student if approval has lapsed.

If you can't see all three working in your current process, you're one staff change away from a compliance incident.

Aloft360's TSA/AFSP tracking covers each of these — citizenship status, case number, approval status, approval date, and expiry are first-class fields with admin alerts ahead of expiration. The states where this is most critical (FL, AZ, OK, ND) have dedicated breakdowns in our per-state guides for context.

What "training before approval" actually means

The regulation is unambiguous. You may not provide flight training to a non-U.S. citizen before TSA approval is received. Civil penalty: up to $10,000 per violation.

A few clarifications schools sometimes get wrong:

• Ground instruction counts as flight training under AFSP. The exemption is narrow.
• Discovery flights for someone considering enrolling do not count, but the moment they're a student you need approval.
• Recurrent training for someone you've trained before still requires the approval to be current.

"We didn't realize" is not a defense. The TSA has prosecuted inadvertent cases.

Practical steps if you're starting from zero

Audit:

1. Pull your current non-citizen student list.
2. Confirm school-side AFSP approval is on file for each.
3. Identify any approvals with expirations in the next 90 days.

Process forward:

• Make citizenship status a required field at student enrollment.
• Capture TSA case number, approval date, and expiry per student before scheduling any training.
• Set alerts 60 days before expiry so you have time to prompt the student to renew.
• Block the student from booking lessons if their approval has lapsed (front-desk soft-block at minimum, system-enforced at best).

Adjacent compliance you should know about

A few things AFSP doesn't cover but tend to matter for the same population of students:

• SEVIS reporting for schools enrolling F-1 / M-1 visa students. Administered by DHS, separate from AFSP.
• State flight school licensing in some states, with its own renewal cycle.
• Insurance carrier requirements for non-citizen pilots — sometimes stricter than the FAA / TSA minimums.

AFSP is a federal floor. Your insurance and your state may add additional checks on top.

The short version

Verify approval before training begins. Track the approval and its expiration. Maintain records for five years. Doing those three things consistently across every non-citizen student is the entire compliance story. Doing them with a system that alerts on expiry instead of relying on someone remembering is the difference between "compliant" and "lucky so far."

For related reading: FAA Part 61 record-keeping requirements, the best flight school management software, and the Florida flight school landing page for the state with the highest concentration of AFSP students.