ECM certification and compliance
An Entity in Charge of Maintenance (ECM) is the organisation responsible for keeping a specific railway vehicle safe to operate, registered as such in the European Vehicle Register (EVR).
The framework turns maintenance responsibility from a contractual matter into a regulatory one — and it underpins the entire market for maintenance and workshop equipment.
Legal basis and scope
The ECM framework is established by Commission Implementing Regulation (EU) 2019/779, adopted under Directive (EU) 2016/798 on railway safety. It applies to all vehicles on public infrastructure — freight wagons, passenger coaches, multiple units, and locomotives — after 2019/779 replaced the freight-wagon-only scope of Regulation 445/2011 with effect from June 2020.
Every vehicle must have an ECM registered in its EVR entry before it can enter service. Member states moved to this centralised registration function from 16 June 2024, replacing the earlier national vehicle registers.
For freight wagons, the ECM must hold a valid certificate issued by an accredited body. For other categories, compliance with Annex II of the regulation can be demonstrated through ECM certification or — for railway undertakings and infrastructure managers — through existing safety certification or safety authorisation processes.
The four ECM functions
Regulation 2019/779 defines four maintenance functions that together constitute the ECM system. The management function provides overall governance: policy, risk management, competence management, and communication with other parties in the railway system, including vehicle keepers, operators, and manufacturers.
The maintenance development function translates the vehicle’s technical file and operational data into a maintenance plan — which tasks are required, at what intervals, and to what standards. The fleet maintenance management function coordinates planning, scheduling, and documentation, ensuring the correct tasks reach the correct vehicles at the correct time with complete records.
The maintenance delivery function covers the actual execution of maintenance work, whether by the ECM organisation itself or by third-party workshops under contract. Outsourced delivery functions can be separately certified under the same regulation, giving operators and independent workshops a defined pathway to demonstrate compliance.
Certification and audit
ECM certification is issued for a maximum of five years following an initial audit by an accredited certification body, with surveillance audits at least every 12 months verifying continued compliance. The scope of the certificate specifies the vehicle categories and maintenance functions covered.
Certification bodies must themselves be accredited under Regulation (EC) 765/2008 and cooperate within the European network of bodies, enabling mutual recognition of certificates across member states.
Safety-critical components
A specific requirement introduced by 2019/779 is the management of safety-critical components. The ECM must maintain a catalogue of these components, derived from the vehicle manufacturer’s technical file, and ensure that their maintenance instructions are followed and documented.
Observations of abnormal wear or defects outside normal wear patterns must be reported through the Safety Alerts IT tool (SAIT), mandatory for ECMs since 16 June 2021 under Article 4(6) of Regulation 2019/779.

