How Aircraft Are Certified: FAA and EASA Type Certification

Type Certification: The Foundation of Aircraft Safety

Before any commercial aircraft type can carry a single paying passenger, it must receive a type certificate from its national aviation authority. A type certificate is an official government document that declares a specific aircraft design — including its structures, engines, avionics, systems, and operating limitations — to be airworthy in accordance with applicable airworthiness standards. It is the most rigorous safety approval process in any industry, typically requiring five to ten years of engineering work and testing, hundreds of millions to billions of dollars, and thousands of hours of ground and flight testing.

The type certification process is governed in the United States by the Federal Aviation Administration (FAA) under 14 CFR Part 21, and in the European Union by the European Union Aviation Safety Agency (EASA) under Regulation (EU) 748/2012. Similar processes exist under Transport Canada Civil Aviation (TCCA), the Civil Aviation Administration of China (CAAC), Brazil's ANAC, and other national authorities. While these frameworks share common heritage in the original Chicago Convention's Annex 8 airworthiness standards, they differ in specific requirements, and aircraft must separately certified in each jurisdiction where they will operate — though bilateral airworthiness agreements allow mutual recognition in many cases.

The type certification process begins with a certification basis — the specific set of airworthiness standards against which the aircraft will be evaluated. For a new transport category aircraft, this is typically the current version of FAR Part 25 (FAA) or CS-25 (EASA), supplemented by Special Conditions that address novel features not covered by existing standards. The certification basis is agreed between the manufacturer and the authority at the outset and does not change during the certification program, even if standards are updated — an arrangement that has generated significant controversy in cases where standards evolved significantly during a long certification program.

With the certification basis established, the manufacturer submits a Type Design — the complete engineering definition of the aircraft, including tens of thousands of drawings, specifications, analyses, and test reports. The authority reviews this package to verify that the design complies with each applicable standard. Some compliance demonstrations are by analysis (mathematical proof that a structure can withstand specified loads), some by inspection (physical examination of manufactured parts), and some by test (controlled experiments designed to demonstrate compliance under defined conditions).

Supplemental Type Certificates and Major Modifications

A Supplemental Type Certificate (STC) authorizes a modification to an already-certificated aircraft that is beyond the scope of the original design. STCs are used to certify everything from a new engine variant to an upgraded avionics package to an entirely new interior configuration. The STC holder — typically a third-party engineering firm or the original equipment manufacturer — takes responsibility for demonstrating that the modification complies with applicable airworthiness standards and does not negatively affect the original aircraft's airworthiness.

The STC process mirrors the type certification process in many respects, but is typically shorter and less resource-intensive because it builds on the already-demonstrated safety case of the base aircraft. The complexity of an STC project varies enormously: a simple avionics replacement STC might take months; a complete engine replacement or major structural modification might take years. STC projects have become an important business in their own right, with companies like Raytheon Technologies (through Collins Aerospace), Safran, and specialized MRO firms holding hundreds of STCs covering a wide range of modifications to major aircraft types.

The relationship between STCs and the original type certificate is carefully managed. Modifications that change the aircraft's basic performance, structural limits, systems architecture, or operating envelope require the most rigorous scrutiny, as they may affect compliance with the certification basis in ways that are not immediately obvious. The FAA and EASA maintain extensive guidance on what constitutes a "major change" requiring a new STC versus a "minor change" that can be approved through a simpler process. The judgment of major versus minor has significant commercial implications — major changes require more testing and analysis — and there have been cases where manufacturers sought to classify significant changes as minor to expedite approval.

FAA vs. EASA: Similarities, Differences, and Bilateral Agreements

The FAA and EASA are the world's two most influential aviation safety regulators, and their type certification processes are closely aligned in most respects. Both use technical standards derived from the same international framework, employ highly qualified engineers as certification specialists, and require extensive testing before approving a new aircraft type. Aircraft certified by one authority are generally accepted by the other through a bilateral airworthiness safety agreement — the current FAA-EASA Bilateral Aviation Safety Agreement (BASA) allows mutual recognition of most type certificates, meaning that a Boeing aircraft certified by the FAA is accepted by EASA without a full independent re-review (and vice versa for Airbus).

Despite this mutual recognition framework, differences between the two authorities exist in specific technical standards, organizational philosophy, and resource levels. EASA has sometimes maintained stricter requirements than the FAA in areas including lightning protection, bird strike resistance, and certain fuel system safety standards. The FAA has historically moved faster on some technology approvals, reflecting both resource levels and a somewhat different regulatory culture. Both agencies have processes for resolving differences on specific standards, but these processes can take years.

The most consequential difference in the post-2019 period has been in certification oversight philosophy. The FAA's Organization Designation Authorization (ODA) program, which delegates certain certification activities to the manufacturer under FAA oversight, was criticized heavily in congressional investigations following the 737 MAX accidents. The investigations found that ODA employees working for Boeing felt pressure to avoid escalating safety concerns to the FAA, effectively blurring the line between manufacturer and regulator. EASA's equivalent delegation program, while structurally similar, operates with more direct agency involvement in individual findings, and EASA independently reviewed the 737 MAX before accepting the FAA's return-to-service authorization.

The 737 MAX saga resulted in significant changes to both agencies. The FAA enacted the Aircraft Certification, Safety, and Accountability Act of 2020, which requires independent review of certain safety-critical functions, mandates direct FAA approval of flight control system safety assessments, and strengthens whistleblower protections for ODA employees. EASA announced that it would no longer automatically accept FAA certification of future narrow-body or wide-body aircraft without independent validation — a significant departure from decades of mutual recognition practice.

Lessons from the 737 MAX: Certification Reform in Practice

The Boeing 737 MAX accidents — Lion Air Flight 610 in October 2018 (189 fatalities) and Ethiopian Airlines Flight 302 in March 2019 (157 fatalities) — both resulted from a single cause: the Maneuvering Characteristics Augmentation System (MCAS) activated based on erroneous angle-of-attack sensor data and drove the aircraft into an unrecoverable nose-down attitude. The accidents killed 346 people and triggered a 20-month worldwide grounding, the longest grounding of a commercial aircraft type in history.

The certification failures identified by subsequent investigations were multiple and interrelated. Boeing had initially designed MCAS to activate modestly and had not disclosed its full authority to the FAA ODA employees who evaluated the flight control system. As the aircraft's development progressed, Boeing expanded MCAS's authority significantly — but because the system had already been reviewed and found acceptable in its limited form, this expansion received inadequate independent scrutiny. The FAA's oversight of the ODA process was found to be insufficient, with FAA engineers who raised concerns about the flight control system overruled or reassigned.

The failure to require pilot training on MCAS was equally significant. Boeing's commercial motivation to certify the MAX as a derivative of the classic 737 — allowing airlines to train current 737 pilots on the MAX with minimal simulator time, a significant cost saving — influenced the decision not to highlight MCAS in pilot training materials. If pilots had been trained on MCAS, they might have recognized the pattern of nose-down trim inputs as MCAS activation and responded correctly. Instead, crews who had never heard of MCAS struggled to diagnose the problem before it became irrecoverable.

Post-MAX certification reforms have been substantial. The FAA now requires independent assessment of novel and unusual design features, including flight control augmentation systems. MCAS itself was redesigned to use two angle-of-attack sensors (requiring both to agree before activation) rather than one, to be limited to a single activation per event, and to be covered explicitly in pilot training. Boeing's ODA structure was reformed with stronger separation between Boeing employees performing ODA functions and Boeing management responsible for commercial outcomes. These reforms represent the most significant changes to the US aircraft certification system in decades.

Certification Timeline: How Long Does It Take?

The certification timeline for a new commercial aircraft type has grown substantially over the past three decades, reflecting both the increasing complexity of modern aircraft systems and the more rigorous oversight applied post-737 MAX. The Boeing 777, certified in 1995, completed type certification in approximately four years from first flight. The Airbus A380, which entered service in 2007, took about six years from launch to certification. The Boeing 787, which entered service in 2011, took over eight years from launch and experienced significant delays related to its novel composite fuselage structure and electrical systems. The Airbus A350, entering service in 2014, followed a similar approximately eight-year arc.

The 737 MAX, originally anticipated to be certified quickly as a derivative of an established type, ultimately required approximately six years from the derivative authorization to full return-to-service certification following the grounding — and that timeline was for a derivative, not an entirely new type. Future clean-sheet designs are now expected to require eight to twelve years from concept to certification, reflecting both technical complexity and the reformed oversight environment.

The rising timeline and cost of certification have significant strategic implications for the industry. Higher certification costs favor incumbents with established aircraft families and certification relationships. New entrants — whether established aerospace companies entering the commercial jet market or startups developing novel propulsion systems — face a barrier to entry that has increased substantially. This dynamic is visible in the electric and hybrid-electric aircraft sector, where companies like Heart Aerospace, ZeroAvia, and Eviation are discovering that their optimistic original certification timelines were substantially underestimated. The path from a technically functional prototype to a certified commercial product now routinely takes five to eight years even for relatively simple regional aircraft.

There is active regulatory debate about whether current certification timelines are necessary or whether they could be shortened without compromising safety. Proponents of acceleration argue that modern simulation, digital twin technology, and data analytics allow compliance to be demonstrated more efficiently than traditional physical testing. Critics counter that the testing phase is precisely where unexpected failure modes are discovered, and that compressing the timeline risks missing problems that only emerge under real-world conditions. The FAA's advanced aviation advisory committee has proposed streamlined pathways for certain novel technologies, particularly in the urban air mobility sector, while maintaining full rigor for transport category aircraft. The balance between regulatory efficiency and safety rigor will define aviation certification policy for the next decade.