Start a free trial
Menu

STANAG 4858

STANAG 4858 resilient file delivery protocol over degraded networks

Defence suppliers integrating air-to-ground file transfer capability into air vehicles or ground systems under a contract that invokes STANAG 4858 or the AEDP-4858 publication it covers

STANAG 4858 is NATO's ratification agreement committing member nations to implement AEDP-4858 Edition A, the protocol for delivering files between air and ground systems over degraded networks.

Edition
1
Published
2024-01-26
THIS DOCUMENT Agreement Holds requirements Organisation certificate Product or design assessed STANDARDIZATION AGREEMENT · EDITION 1 · 2024-01-26 STANAG 4858 Resilient file delivery protocol over degraded networks STANAG 4858 is NATO's ratification agreement committing member nations to implement AEDP-4858 Edition A, the protocol for delivering files between air and ground systems over degra. AGREEMENT STANAG 4858 The NATO agreement. The specification is not in this cover. WHERE THE REQUIREMENTS LIVE AEDP-4858 AEDP-4858 is NATO's technical specification for a resilient file delivery protocol used in air-to-ground transfers over degraded networks, agreed by nations through STANAG 4858. The requirements live in AEDP-4858, not in STANAG 4858. Addressed to national authority. Puts AEDP-4858 into force. The document describes nations ratifying the agreement and reporting implementation through NATO's electronic reporting tool, recorded in the NSDD; it names no . Binds a nation once ratified. Reaches a supplier when a contract or national instruction names it or the publication it covers. Nobody is certified against this document. Nations report ratification; they do not issue a company certificate.

What it is

STANAG 4858 is the NATO Standardization Agreement covering the resilient file delivery protocol for air-to-ground transfers over degraded networks, specified in AEDP-4858, Edition A. This is Edition 1, promulgated 26 January 2024. The document states plainly that it "does not supersede any document".

A STANAG is not the specification

A STANAG is the agreement by which NATO nations commit to implement a standard, not the technical specification itself. STANAG 4858's own text is short and administrative: an aim, a short set of interoperability requirements, and the ratification and reporting machinery. The protocol detail itself is specified in a separate publication, AEDP-4858 Edition A, which the STANAG names as the standard participating nations "agree to implement". Anyone actually designing, specifying or testing the protocol needs AEDP-4858's own text, not this cover agreement.

What it commits nations to

The stated aim is to "respond to the following interoperability requirements". An air-to-ground file-delivery protocol "will ensure interoperability of fielded systems", and it "must be able to transfer files over degraded networks including breaks in connectivity". It also "must facilitate the simultaneous reception of files by multiple receivers", and "must be able to operate over various network topologies ranging from direct ground link to multi-node path satellite link" - from a direct ground link up to a multi-node satellite path. The document lists two other related documents: STANAG 4586, covering standard interfaces of the UA control system for NATO UA interoperability, and AEP-84, which corresponds to the Consultative Committee for Space Data Systems' File Delivery Protocol (CFDP), CCSDS 727.0-B-5.

Who it binds, and how

STANAG 4858 binds nations, not suppliers. It is effective "upon receipt for use by the participating nations and NATO bodies", and it becomes binding on a given nation through ratification, which NATO records in the NATO Standardization Document Database (NSDD). Implementation is a separate, further step: the standard "is considered to be implemented when this protocol has been incorporated into an air vehicle or a ground system". Allied nations and NATO bodies are then obliged to report implementation details through NATO's electronic reporting tool; partner nations are only invited to do the same. A supplier meets STANAG 4858, or the AEDP-4858 protocol it covers, only where a contract or tender says so - the document itself sets no obligation reaching a supplier directly, and it names no NATO-wide effective date (its own "NATO Effective Date (NED)" field reads "Not applicable").

How it's evaluated

STANAG 4858 describes no certification scheme and no audit. What it describes is nations reporting their ratification and implementation status to NATO for the record; the document never uses the word "certified" or "certification" anywhere in its own text. Where a supplier's protocol implementation does get checked against AEDP-4858 in practice - conformance testing, interoperability demonstrations, integration verification - the assessor and the evidence required are set by the contract's own quality clause, not by this STANAG.

Standards it references

STANAG 4858 covers AEDP-4858, the Allied Engineering Data Publication that specifies the protocol itself. Its "Other Related Documents" also list STANAG 4586, covering standard interfaces of the UA control system for NATO UA interoperability, and AEP-84, which corresponds to the Consultative Committee for Space Data Systems' File Delivery Protocol (CFDP), CCSDS 727.0-B-5 - a standard that sits outside our catalogue. Reviews of STANAG 4858 itself run under AAP-03.

Put STANAG 4858 on a system that keeps the evidence

Documents, training, risks and evidence in one place, with the trail an auditor asks for.

How we help

STANAG 4858 and the AEDP-4858 protocol it covers are followed in systems engineering work, not in a compliance platform: an engineer builds or integrates the file delivery protocol into an air vehicle's or a ground system's software, and a quality team retains the conformance and interoperability test records that prove the delivered system implements the protocol as specified and as the contract's quality clause demands.

What ComplyTrain does for that kind of work generally is give a defence supplier one auditable place to hold the design and integration procedures, the training records for the people doing that work, and the evidence trail - non-conformances, corrective actions, document control - that a customer's quality representative or a government surveillance visit will ask to see.

ComplyTrain does not build, test, or verify a file delivery protocol's interoperability. That is systems and software engineering work, carried out against AEDP-4858's own specification and the contract's technical requirements.

Which STANAGs and Allied Publications actually apply to a given air or ground systems programme is set by the contract and the customer's quality clause, not by us. Browse the explorer to see what sits alongside STANAG 4858 and AEDP-4858, and talk to us about the evidence trail once you know which ones are in your contract.

Standards it references

Request access to this standard

Tell us how you need to work with STANAG 4858 and what you need from it. We will come back to you about what ComplyTrain can do.

Questions

Is STANAG 4858 mandatory?

Only where a nation has ratified and implemented it, and it reaches a supplier only where a contract or tender invokes it. The STANAG's own "NATO Effective Date (NED)" field reads "Not applicable", so there is no blanket start date to point to.

What is the difference between STANAG 4858 and AEDP-4858?

STANAG 4858 is the NATO ratification agreement; AEDP-4858 Edition A is the publication that actually specifies the file delivery protocol. Ratifying STANAG 4858 is how a nation commits to implement AEDP-4858.

Can a company be certified to STANAG 4858?

No. STANAG 4858 describes nations ratifying and reporting implementation to NATO, recorded in the NATO Standardization Document Database. It describes no certification or audit scheme for a supplier or a product.

When is STANAG 4858 considered implemented?

The document states it is "considered to be implemented when this protocol has been incorporated into an air vehicle or a ground system" - a platform-level test, not a date.

Does STANAG 4858 specify the protocol itself?

No. It names AEDP-4858, Edition A as "the following standard" nations agree to implement; the protocol specification lives there, not in this agreement.

What ComplyTrain does

One system for the whole compliance programme. Start with the module you need most.

  • Forms & Follow-up

    Collect information the same way every time, and decide in advance what happens next.

  • Controls & Assurance

    Know whether your controls are operating, not just whether a policy says they exist.

  • Project Planner

    Turn the compliance work you already know about into a plan with owners, dependencies and dates.

  • Product Compliance

    Know what you can offer, and hold the evidence behind every configuration you offer it in.

  • Reporting & Analytics

    Eight built-in reports across every module, scheduled, delivered, and filed where the evidence lives.

  • Media Monitoring

    The sector news that matters to your organisation - read and rated by AI, and delivered as a scheduled digest in your own language.

  • Grants & Tenders

    AI reads the tender pack and pulls out the requirements, deadlines and rules - then helps you draft the response from your own approved content, with you reviewing every step.

  • Stakeholder/Vendor Management

    One current register of the suppliers and partners you depend on - each risk-assessed, re-assessing itself on schedule, and wired straight into your risk register.

  • Requirements Management

    See every requirement you face - across every standard, plus your own contracts and policies - traced to the documents, evidence and processes that satisfy it.

  • Risk Management

    Identify, score, treat and review your risks in one place - with AI to help anyone run a proper assessment, and a defensible trail behind every decision.

  • Training Management

    Assign training, prove it was understood, and hold the competence records an auditor asks for.

  • Document Control

    Draft compliance documents with AI, keep every version under control, and export them beautifully branded - all in one place.

  • Quality Management

    Audits, corrective actions, processes and approvals in one quality system, organised around ISO 9001.

Latest from ComplyTrain

  • Compliance in medical device manufacturing: an overview

    Medical device manufacturers operate under more regulatory pressure than almost any other sector outside pharmaceuticals. The rules govern how you design a device, how you make it, how you track it after it ships, and how you respond when something goes wrong.

Other standards in Air armaments

  • AEDP-02AEDP-02 NATO ISR interoperability architecture
  • AEDP-03AEDP-03 sanitization guidance for advanced data storage memory
  • AEDP-05AEDP-05 implementation guide for the NATO ISR library interface
  • AEDP-06AEDP-06 NATO advanced data storage interface (NADSI)
  • AEDP-12AEDP-12 NATO ISR tracking data standard
  • AEDP-17AEDP-17 NATO standard ISR library interface

Compliance work does not have to live in documents and spreadsheets

See ComplyTrain on your own processes in a 30-minute demo, with your quality or compliance lead.