Platform
Modules
By sector
By sector
By standard
Blog
News
Events
STANAG 2490
National authorities implementing NATO operations doctrine, and defence suppliers whose contract or tender names AJP-3
STANAG 2490 is NATO's agreement committing member nations to implement AJP-3, the Allied joint doctrine for the conduct of operations; it binds nations rather than suppliers.
STANAG 2490 commits NATO nations to implement AJP-3, Edition D, the Allied joint doctrine for the conduct of operations. The agreement itself runs to four pages and holds no doctrine: it states an aim, names the publication, and sets out how a nation ratifies and implements it. Its aim is given as an interoperability requirement, "to provide guidance and direction on the strategic concept, underlying philosophy and fundamentals for Allied joint operations".
A STANAG is the instrument, not the content. Nations ratify it, implement it through their own orders and instructions, and a company encounters it only because a contract or a tender invokes the doctrine. Ratification and implementation are separate, a nation may ratify with reservations, and so the question "is STANAG 2490 mandatory" has a contractual answer and no general one.
The agreement defines its own test, and it has two limbs. It "is implemented when the necessary orders/instructions have been issued directing the forces concerned to put the content of the covered standard into effect", and when that content has been included "into national education, training and exercises programs. Proper implementation will provide interoperability during NATO operations." Orders alone do not satisfy it.
Nations report both ratification and implementation through NATO's electronic reporting tool, and responses are recorded in the NATO Standardization Document Database. Partner nations are invited to report rather than required to.
This one is not read alone. It names STANAG 2437 and AJP-01, the capstone doctrine above it, and STANAG 2526 with AJP-5 for the planning of operations. Three NATO policy documents are listed as related and are not in our catalogue: MC 0586, the Military Committee policy for Allied forces and their use for operations; MC 0668, the concept for the protection of civilians; and PO(2022)0200, the NATO strategic concept.
It describes no certification, no notified body, no government quality assurance and no audit of an organisation. Its only stated check is its own review under AAP-03, recorded in the database, and it sets no NATO effective date. Edition 5 was promulgated on 6 August 2025 and supersedes Edition 4 of 11 February 2019.
There is no compliance obligation in STANAG 2490 for a company, so there is nothing here to map onto a platform and we will not invent one. The honest connection is narrower: where a programme expects people to be familiar with the doctrine a contract names, what a customer can ask to see is the documented procedure a team works to and the record of who was trained on it.
ComplyTrain holds exactly that: controlled documents, training records against them, and the trail those produce over time. It does not write doctrine, plan operations, or decide what a nation implements.
Which documents a contract actually invokes, and what comes with them, is set by that contract and the customer's quality clause, never by us. The standards explorer shows what sits alongside this agreement, and we are glad to talk through what a specific tender asks for.
Tell us how you need to work with STANAG 2490 and what you need from it. We will come back to you about what ComplyTrain can do.
Thank you. Your list is on its way to your inbox, and we will come back to you on what working with these standards in ComplyTrain involves, usually within one business day.
No. It binds the nations that ratify it. It reaches a company only when a contract or tender invokes AJP-3 or the doctrine it carries.
Only the machinery: the aim, the agreement to implement, the ratification and implementation steps, the review clause. The doctrine is in AJP-3.
When orders or instructions have been issued to the forces concerned, and the content has been written into national education, training and exercise programmes.
No. The agreement names no certification, no assessment body and no audit of any organisation.
Edition 5, promulgated 6 August 2025, superseding Edition 4 of 11 February 2019.
One system for the whole compliance programme. Start with the module you need most.
Collect information the same way every time, and decide in advance what happens next.
Know whether your controls are operating, not just whether a policy says they exist.
Turn the compliance work you already know about into a plan with owners, dependencies and dates.
Know what you can offer, and hold the evidence behind every configuration you offer it in.
Eight built-in reports across every module, scheduled, delivered, and filed where the evidence lives.
The sector news that matters to your organisation - read and rated by AI, and delivered as a scheduled digest in your own language.
AI reads the tender pack and pulls out the requirements, deadlines and rules - then helps you draft the response from your own approved content, with you reviewing every step.
One current register of the suppliers and partners you depend on - each risk-assessed, re-assessing itself on schedule, and wired straight into your risk register.
See every requirement you face - across every standard, plus your own contracts and policies - traced to the documents, evidence and processes that satisfy it.
Identify, score, treat and review your risks in one place - with AI to help anyone run a proper assessment, and a defensible trail behind every decision.
Assign training, prove it was understood, and hold the competence records an auditor asks for.
Draft compliance documents with AI, keep every version under control, and export them beautifully branded - all in one place.
Audits, corrective actions, processes and approvals in one quality system, organised around ISO 9001.
Medical device manufacturers operate under more regulatory pressure than almost any other sector outside pharmaceuticals. The rules govern how you design a device, how you make it, how you track it after it ships, and how you respond when something goes wrong.
Learn how EU dual-use export controls apply to encryption, sensors, and software, how classification works under Annex I, and why sending source code by email can count as an export.
A practical way to turn in-your-head risk management into a register that survives staff turnover and answers the risk questions now showing up in tenders.