The flying warehouse

The flying warehouse is a simple idea with significant implications: treat pharmaceutical cargo aircraft the same way you treat a GDP-qualified warehouse.

In a qualified warehouse, you have mapped the thermal environment, installed permanent monitoring sensors, and maintain continuous data that proves conditions stay within specification. You do not attach individual data loggers to every pallet sitting on your warehouse shelves. The environment is qualified. The products inside it are, by extension, under documented control.

Aircraft have historically never had this.

They have been an undocumented gap between two qualified environments – your origin warehouse and your destination warehouse. No baseline thermal data. No ongoing environmental verification. The compliance evidence comes from data loggers (or smart labels) attached to individual shipments, typically reviewed days after delivery.

The flying warehouse concept changes that. By mapping the aircraft environment and then installing permanent sensors that monitor every flight, the aircraft becomes a continuously validated environment. The compliance logic shifts from "prove each shipment was okay" to "prove the environment is continuously under control."

This is now happening in practice. Eupry has implemented the world's first continuous aircraft environment monitoring installation with permanently installed, FAA-approved sensors connected to a cloud-based compliance platform.

Also read: Continuous temperature mapping: A framework to eliminate re-mapping

The pharmaceutical cold chain industry loses an estimated $35 billion annually due to temperature-controlled logistics failures, including temperature excursions that compromise product integrity.

A portion of this cost traces back to a fundamental problem: The way air freight (and other transit) compliance works today is reactive and fragmented - plus expensive and complicated to scale.

Here is how shipment-level monitoring typically works for air freight:

• Before shipment: A USB data logger (or Smart Label) is attached to each package or pallet.
• During transport: The logger records temperature, but no one can access that data in transit. If you are using a live-monitoring device, typically, only the package owner gets alerts – not the aircraft or facility operator.
• After delivery: At arrival, the logger is removed, data is downloaded, and a quality professional reviews the temperature profile.
• If there is a problem: The product has already been delivered. Corrective action is limited to recalls or disposal.

Three weaknesses of the traditional approach

This process has three structural weaknesses that grow worse with volume.

1. Intervention is impossible. USB-based monitoring is entirely retrospective. Even live-monitoring devices typically only alert the shipper, not the logistics operator who could do something about it. By the time anyone reviews the data, the window for corrective action has closed.

2. No environmental context. If a shipment-level logger shows a temperature excursion, you cannot tell whether the product was compromised or the environment was compromised. Was it a faulty container? A cargo hold issue? Tarmac exposure? You do not have the data to answer that question.

3. Cost and complexity scales linearly with shipments. Every package needs its own monitoring device, its own data download, its own review. An operator shipping 100,000+ temperature-sensitive packages per year faces enormous monitoring costs and operational strain before the first product is even released.

For operators with growing volumes and high-value products, this model creates a compounding problem: More shipments mean more cost, more complexity, and more risk with no improvement in actual environmental control.

Also read: Guidelines for temperature monitoring of pharmaceutical air freight

Here is an example of what continuous mapping and monitoring implementations have demonstrated.

The setup: Pharmaceutical air routes between Europe and the US equipped with Eupry's continuous monitoring infrastructure.

Thermal performance

Among other findings, the mapping studies showed significant differences between cargo compartments. Some zones showed active thermal control once the environmental system stabilized (2-3 hours into the flight), while others exhibited higher variability, suggesting passive or limited climate control in those areas.

Why is this relevant? Without compartment-level data, every zone is treated the same. With it, cargo placement becomes a data-driven decision: High-value, temperature-critical products go in zones with documented stability, while higher-variability zones are reserved for products with wider tolerance ranges.

Temperature variations were also detected near cargo doors and structural boundaries during loading and unloading phases. The industry has historically operated aircraft cargo holds as a thermal black box, but these studies replaced assumptions with data.

Also see: Aircraft temperature mapping: What is it all about - and why do it?

Why aircraft data needs to be live

Several aircraft mapping studies have exposed a critical limitation of point-in-time studies: issues are not detected until after the fact. Data has for instance shown that the environmental control system was likely misconfigured or inactive – which was only discovered during post-flight data review.

With continuous aircraft monitoring and real-time data upload at landing, that deviation will be flagged within minutes. Quality teams can hold affected product, adjust ground transport conditions, or escalate.

This is the core reason for the "flying warehouse" case and the difference between simply mapping and implementing continuous mapping and monitoring. Mapping tells you what your aircraft's thermal environment looks like under known conditions. Continuous monitoring catches the flights where conditions are not what they should be – which, as the data shows, happens.

One of the most concrete outcomes of continuous aircraft monitoring is the ability to evaluate whether active Unit Load Devices (ULDs) are actually necessary on a given route.

Active ULDs, temperature-controlled containers with built-in cooling systems, are the default for high-value pharmaceutical air freight because, without environmental data on the aircraft itself, there is no way to prove that cheaper passive containers would maintain temperature.

As a result, the industry often over-invests.

Cost difference

Active ULDs – with onboard compressors, battery systems, and mechanical heating and cooling – carry significantly higher per-unit costs than passive alternatives, which rely on insulation and phase-change materials instead of electrical systems. Replacement of active containers with passive alternatives therefore represents a major capital cost reduction.

Weight and emissions impact

Similarly, active ULDs add significant weight, and each active container weighs several hundred kilos more than its passive equivalent.

As a thought experiment, replacing all active containers with passive alternatives would reduce payload weight by approximately 19 tonnes per flight.

That weight reduction translates to estimated savings of 3,600 litres of jet fuel per transatlantic crossing, roughly $2,500 in reduced operating costs and approximately 9.5 tonnes of avoided CO₂ emissions per flight.

On a daily flight schedule, these reductions amount to nearly $1 million in annual savings and approximately 3,500 tonnes of CO₂ avoided per year – on a single route.

Although this is only theoretical, it does illustrate the scale of what continuous aircraft monitoring makes possible over time.

How CMM can build the evidence base for reducing active ULDs

Of course, you cannot switch from active to passive ULDs on assumption. The transition requires proof.

Continuous aircraft monitoring can provide this statistical evidence base: When flights or compartments show consistent temperature stability under real operating conditions, across seasons, load configurations, and weather patterns, you can make informed, risk-based decisions about reducing reliance on active ULD. That evidence base is what transforms a "we think it works" conversation into a validated, audit-defensible decision.

Also read: Understanding unit load devices in pharma air freight

The compliance shift is the most significant long-term implication of the flying warehouse concept. When an aircraft operates as a continuously monitored environment, the control point moves from individual shipments to the environment itself - and products can be monitored live throughout the cold chain journey.

Here is how:

Act and prevent: Real-time data enables intervention before product release

With continuous mapping and monitoring and data upload at landing, quality teams have access to the full thermal profile of a flight within minutes of landing. If a deviation occurred – whether from ECS misconfiguration, unexpected external conditions, or ground handling delays – the data is available before product is released into the supply chain.

Teams can hold affected shipments, adjust ground transport conditions, or escalate rather than discovering issues days later during post-flight review and working backwards to find the cause.

Two independent data sources also mean faster root cause analysis. By comparing environmental data with shipment-level data, teams can pinpoint whether an excursion originated in the aircraft environment, the packaging, or the ground handling phase, instead of working backwards from a single data point.

Double insurance: Two independent data sources for high-value products

The recommended approach during transition is dual monitoring: facility-level environmental data (CMM across aircraft and warehouses) alongside shipment-level data (Smart Labels on packages or pallets) simultaneously.

For the highest-value products, such as biologics, cell and gene therapies, high-value APIs, this is a risk reduction exercise. When both datasets confirm that an aircraft maintained the required conditions while a pallet Smart Label confirmed the same range for the same period, your compliance position is stronger than either dataset could provide alone. When they disagree, you know exactly where to investigate.

For the remaining products, costs can be reduced by relying on environmental monitoring. See the business case section.

100% compliance coverage with reduced complexity

Once dual verification builds a statistical evidence base across enough flights, shipment-level monitoring can shift from universal deployment to selective, risk-based deployment. Environmental monitoring covers every flight, every compartment, every time. Individual shipment tracking is reserved for the highest-value products, new routes undergoing qualification, or shipments with unique risk factors.

The result is full compliance coverage for all shipments – because the environment is always monitored – while individual tracking focuses where it adds the most value. This means stronger compliance documentation with less operational complexity.

Shipment-level monitoring becomes a targeted compliance tool rather than a blanket requirement applied regardless of environmental control quality.