Developair
Developair builds AI-based Verification & Validation tooling for safety-critical embedded software. It carries requirements through generated tests to audit evidence for rail, automotive, aviation, space and medical teams, and is TÜV SÜD-qualified as a T2 support tool.
What is Developair?
Developair Technologies, S.L, founded in San Sebastián in 2018, publishes what its site calls AI enablers for safety-critical software development, with the stated aim of converting AI speed into demonstrable trust. The argument: generating artefacts is no longer the hard part, proving they are safe, traceable and auditable is. The site describes three states, manual and slow before AI, fast but uncontrolled with AI, and a new bottleneck of showing that an AI-produced result deserves trust.
Naming is unsettled. The home and Solution pages call the platform NOVA; the product page, the sector pages and the use cases call it Rely; the TÜV SÜD certificate carries “Model(s): Developair”. The news archive establishes that Rely is first of all a restricted natural language, a DSL created by Developair for low-level requirements and inspired by Rolls-Royce's EARS methodology, rather than the platform name.
The platform claims a combination of symbolic AI, generative AI and mathematical models. The Smart Editor is a requirements editor built on Rely, with a generative assistant that turns natural language or existing documentation into Rely-conformant requirements. The Automatic Test Generator produces test cases and scripts with Statement, Decision, Decision/Condition and MC/DC coverage plus boundary-value analysis. Six capabilities are announced: requirements engineering with automatic verification; test case and script generation; AI-assisted architecture; end-to-end traceability; human-in-the-loop governance; and evidence packs with audit readiness. Governance means formal roles, review gates, approval states and an immutable audit log: AI proposes and gives structure, but the expert decides.
Five regulated sectors are covered: rail (EN 50128 / EN 50716), automotive (ISO 26262), aviation (DO-178C / DO-330), space (ECSS-E-ST-40C / ECSS-Q-ST-80C) and medical (IEC 62304). TÜV SÜD qualified the tool as a T2 support tool under IEC 61508-3 and EN 50128. Logos shown include CAF Power & Automation, CAF Signalling, ESA and Orbital Critical Systems, next to claimed gains of 60% less development time and 40% less development cost. The product is a web application and adds to the existing toolchain instead of replacing it.
What it does
- Convert natural-language requirements into SMART specifications that are verified automatically
- Generate test cases and test scripts using the techniques the standards require
- Maintain bidirectional traceability between requirement, test, code and evidence
- Produce exportable evidence packs per delivery: traceability matrix, coverage reports, approval logs
- Analyse the impact of a change on every affected artefact
- Plug into the existing ALM instead of replacing it
When to use Developair / When not to
A quick filter to help you decide if Developair is the right fit.
When to use Developair
- V&V teams working on embedded software governed by functional safety standards such as EN 50128, ISO 26262, DO-178C or IEC 62304
- Organisations that must hand certification evidence to an assessor or a notified body and want traceability matrices, coverage reports and approval logs produced as a by-product of the work
- Projects where requirements sit in natural language inside IBM DOORS or Polarion while unit tests are still written by hand
- Teams recertifying legacy embedded software or managing product variants, where re-proving the same artefacts absorbs most of the effort
- Engineering groups that want AI speed without losing determinism and traceability: CAF Power & Automation reports 80% less effort on unit tests
When not to use Developair
- General-purpose software teams with no normative constraint: the platform is built around EN 50128, ISO 26262, DO-178C, IEC 62304, ECSS and IEC 61508
- Buyers who need a published price or a self-service sign-up: the route is a demo, then a pilot of about three months, then a negotiated annual licence
- Anyone looking for a free plan or a free trial, since neither is offered
- Mobile-first users: there is no iOS or Android application, the product is a web application
- Developers expecting an assistant that writes application code: the tool works on requirements, tests and evidence, not on the product source
How to use Developair
A typical end-to-end flow, from setup to results.
- Book a 30-minute live demo from the site: introduce yourself, pick a slot, then meet the technical team with no slide deck
- Hold the initial meeting, where the platform is demonstrated
- Receive a complete pilot project proposal
- Give your feedback and scope the pilot with Developair
- Run the pilot over roughly three months: toolchain and workflow analysis (weeks 1-3), implementation and integration (weeks 2-6), an internal use case (weeks 5-12) and evaluation (weeks 10-12), with training and support in weeks 5-6
- Review the pilot deliverables: an integration proposal after detailed analysis, a demonstration on one of your own real examples, and an evaluation report with an ROI estimate
- Acquire the annual licence to move into production
- In daily use, import your requirements from IBM DOORS into the Smart Editor
- Let the AI assistant structure and standardise them while the V&V engineer validates at every gate
- Generate traced test cases matching your SIL, export the scripts (C++ for CxxTest, for instance), run them and capture the evidence and the traceability matrix
Pros & Cons
Pros
- A nominative and verifiable TÜV SÜD qualification: certificate Z10 127191 0001 Rev. 00, T2 support tool, valid until 12 September 2029
- Broad normative coverage in a single tool: IEC 61508, EN 50128, EN 50716, ISO 26262, DO-178C and DO-330, IEC 62304, ECSS
- Quantified, published customer results at CAF Power & Automation: 52% less effort on requirements definition, 80% less on unit tests, 42% lower overall cost
- ISO 9001:2015 certification of the quality management system by AENOR, ER-1079/2024
- Non-intrusive approach: the platform is added to the toolchain instead of replacing it
- Determinism claimed through symbolic AI and formal methods, where a standalone LLM is not reproducible
- The expert stays the decision-maker, through formal gates and an audit log, with six years of collaboration with the CAF group on display
Cons
- No public pricing of any kind: no pricing page, no amount, no grid, and an annual licence negotiated case by case
- No free plan and no free trial announced
- A long adoption cycle: demo, proposal, a pilot of about three months, then an annual licence
- No product contract published: no product terms of service, no data processing agreement, no security policy, and a privacy policy that covers only the marketing website, not the project data entrusted to the platform
- Nothing stated about training models on customer data, in either direction, and no hosting country or region declared for the platform
- No information security certification, neither ISO 27001 nor SOC 2: the certificates held cover quality management and functional safety
- A single named customer case, CAF Power & Automation, alongside an anonymous one; product naming that shifts between NOVA, Rely and Developair from page to page; and a site that itself states its text and images were AI-generated before review
Pricing & Plans
No price is published. The sitemap, which lists 78 URLs, contains no pricing page, and no amount appears anywhere in the site's code. No free plan and no free trial are announced. The commercial model is a single tailored annual licence, described on the site as follows: “The annual license is adapted to the validated integration path, expected ROI, and the customer's specific operational needs.” That licence covers tooling assessed and configured to fit the customer's workflow, a flexible approach so that the licence matches the customer's needs and ROI opportunity, and priority access to new features and R&D work. It is preceded by a pilot project of roughly three months whose cost is not indicated either. The only figures on the site are customer gains, such as 42% lower development cost and 60% less development time, not prices. No starting amount, currency or billing unit can therefore be recorded.
- no named tier
- no plan table and no published amount
- it is adapted to the validated integration path
- the expected ROI and the customer's operational needs
- and includes priority access to new features and R&D work
- Pilot project preceding the licence
- lasting about three months
- whose price is not published
- pilot programme
- ALM integration
- engineer training and certification support
Data, GDPR & hosting
A consolidated view of how Developair handles your data.
GDPR overview
The publisher is established in the EU (Spain), so no Article 27 representative is required and none is named. The privacy policy sets out legal bases (consent, pre-contractual measures, legitimate interest, legal obligation) and lists the rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent, exercised by email to info@developair.es. It names the supervisory authority: “You may also lodge a complaint with the Spanish Data Protection Agency.” AWS is presented as adhering to the EU-US Data Privacy Framework recognised by the European Commission. Two gaps matter. The site never uses the words “GDPR compliant”, so compliance is applied rather than claimed. And no data protection officer is named, no data processing agreement is published, and all of the above covers website visitors only, not the project data handled by the platform.
Who owns the data?
No product contract is published: there are no product terms of service and no data processing agreement, only a privacy policy and a legal notice that cover the marketing website. The legal notice states that the content, trademarks, logos, designs, text, images and software on the site belong to Developair or its licensors unless otherwise stated. Developair Technologies, S.L (CIF ESB75207951) is named as the controller for website data. Nothing published says who owns the requirements, tests and evidence a customer entrusts to the platform, so ownership of project data has to be settled in the licence contract rather than read off the site.
Reuse rights
Only website data is documented. The privacy policy lists what the forms collect, including name, email, company, role, sector, tool or toolchain, message, technical challenge, availability for a demo, acceptance of the policy, active language and cookie preferences. It is used to answer requests, prepare demos, hold the technical or commercial conversation the visitor started, operate the site, protect it from abuse and remember preferences, on the legal bases of consent, pre-contractual measures, legitimate interest and legal obligation. The policy states: “We do not sell data. Necessary technical providers may access data, including hosting, AWS, email, website maintenance or security providers.” Forms are sent to an AWS backend that relays them by email through SES, with a honeypot against spam and the acceptance of the policy recorded. Reuse of the site's own material is restricted by the legal notice, which reserves it to Developair or its licensors. No document anywhere states whether project data is used to train models: the subject is never raised, in either direction.
Data retention & training
Hosting summary
No hosting country and no hosting region is declared for the platform. The only published element concerns the marketing website: forms are sent to a backend deployed on AWS, which uses SES to relay the request by email, and AWS is presented as adhering to the EU-US Data Privacy Framework recognised by the European Commission. That clause is a transfer safeguard for website enquiries, not a hosting commitment for customer project data. Two technical observations were made during collection, and they are observations rather than statements by the publisher: the site is served by Amazon CloudFront, and the application subdomains resolve to the AWS eu-west-3 region in Paris. Neither is a declared hosting location. Because nothing is declared for the platform, the hosting country and region fields are left empty rather than inferred. The controller named for website data is Developair Technologies, S.L, established in Donostia-San Sebastián, Spain, under Spanish law and San Sebastián jurisdiction. A hosting commitment for project data has to be obtained contractually.
Things to keep in mind
Risks and trade-offs to weigh before adopting Developair.
- Product naming is unstable. The home page and the Solution page say NOVA, the product page, the sector pages, the services and the use cases say Rely, and the TÜV SÜD certificate says “Model(s): Developair”. The news archive shows that Rely is first of all the restricted natural language, the DSL, and not the platform. This entry is filed under Developair, the name carried by the page title, og:site_name, the web manifest, the JSON-LD and the certificate; no hierarchy between the three names is established anywhere on the site. The tracking slug “developair-platform” is very probably an artefact of the TÜV certificate PDF filename originally hosted on developair.es, not a product name.
- The privacy policy covers website visitors only. No published document describes how the requirements, tests and source material entrusted to the platform are processed. The AWS hosting mentioned concerns the marketing site's form backend, not the product platform, and must not be read as a statement about customer data hosting.
- The certificates do not cover what they may appear to cover. The TÜV SÜD certificate concerns functional safety and the AENOR ISO 9001 concerns the quality management system; neither guarantees data security. There is no information security certification at all, no ISO 27001 and no SOC 2.
- The company start date, 08/11/2018, comes from an off-site source, the official BORME. The site publishes only the founding year, 2018 in San Sebastián, which cannot be turned into a full date. The same BORME announcement carries three competing dates: start of operations 18/10/2018, registry entry 08/11/2018 and publication 19/11/2018. The registry entry was retained, since legal personality is acquired there. Spanish aggregators datoscif.es and infoempresa.com publish 18/10/2018 under the misleading label “Fecha de constitución”, 21 days before the actual entry.
- The beneficial owner needs revalidation. Mikel Perez Sarasola was declared sole shareholder and sole director on 08/11/2018, but a capital increase on 15/11/2019 may have changed the shareholding, and the public source stops at 11/02/2020.
- The site itself declares that its text and images were generated by AI tools and then reviewed by the team, so its wording should be treated as marketing material, not as specification.
- Evidence limits. The site is entirely JavaScript-rendered and no path returns a 404: any non-existent path serves the home shell byte for byte, so the facts recorded here come from the JavaScript bundle, the sitemap, the two certificate PDFs and the news markdown, not from rendered HTML pages. The “APIs” advertised are an integration capability of the platform; the live API observed at api.developair.tech, a Django REST endpoint answering 403 without credentials, is the product application's backend and has no public documentation.
Setup & Integrations
Technical difficulty
Setup is guided, never self-service, and Developair carries most of it: “We deploy Rely inside your toolchain, train your team and stay on call until your V&V pipeline ships”, with the promise “We do the integration; you keep your toolchain. No lock-in, no rip-and-replace.” Integration runs through connectors to Polarion, DOORS, Simulink Test, Scade and CxxTest. Expect a pilot of twelve weeks covering workflow analysis, integration, training of your V&V engineers in weeks five and six on examples drawn from your own requirement set, and evaluation. The implicit prerequisite is fluency in functional safety standards and in an ALM.
Deployment
Integrations
Behind Developair
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What does Developair actually do?
Which standards does it cover?
Is the tool certified?
What is Rely?
Do I have to replace my toolchain?
Which tools does it integrate with?
How much does it cost?
Is there a free trial?
Does the AI decide instead of the engineer?
Is my data used to train models?
Should you pick Developair?
Developair is a niche, highly specialised tool that carries a rare external proof: a nominative TÜV SÜD qualification as a T2 support tool, certificate Z10 127191 0001 Rev. 00, valid until 12 September 2029, held by Developair Technologies, S.L itself, not a third party. That matters, because in functional safety a qualified tool removes work an assessor would otherwise demand. The proposition is coherent: keep the speed of AI, but wrap it in a restricted requirements language, formal review gates, an immutable audit log and evidence packs an auditor can read.
It is worth considering when the constraint is normative and the audit evidence is expensive to produce, in rail, automotive, aviation, space or medical software. Outside that setting, it solves a problem you probably do not have.
The real points of attention are commercial and documentary rather than technical. There is no public price of any kind, and the entry route is a demo, then a pilot of roughly three months, then a negotiated annual licence, so budget and time must be committed before the value is proven. More importantly, no product contract is published, meaning no product terms, no data processing agreement and no security policy, and the privacy policy covers website visitors only, never the requirements, tests and source material a customer would entrust to the platform. Nothing is said about where the platform hosts data, and nothing about whether customer data feeds model training. The TÜV SÜD and AENOR ISO 9001 certificates are genuine and verifiable, but they cover functional safety and quality management, not information security.
The publisher is young, founded in San Sebastián in 2018, yet its industrial references are verifiable: CAF Power & Automation, CAF Signalling and ESA. Ask for the contractual and data-handling documents in writing before the pilot, not after.
- Choosing a selection results in a full page refresh.
- Opens in a new window.