Low Robustness Containment Autopilot and FTS Options

Verified from official sources
AC 922-001 Section 4.6Version 1Effective -Verified 23 August 2026

In plain language

If the autopilot is not certified, the drone must either have a redundant autopilot system or an independent flight termination system that alerts you of failures and allows you to manually terminate the flight if a fly-away is imminent.

Requirement as structured

TCCA accepts either redesigning the autopilot with independent redundancy or adding an independent operator-activated flight termination system to demonstrate low robustness containment.

Original regulatory text

if the manufacturer wanted to show low robustness containment on this RPAS, their options are: (a) Replace, Redesign and Validate the Autopilot... (b) Add an independent flight termination system that can be activated by the operator in the event that a failure of the autopilot results in a fly-away.

Applies when

country
Canada
regulatory category
Specific