Application platform: eVTOL / Powered-Lift, type-certificated under 14 CFR 21.17(b) or EASA SC-VTOL Enhanced Category Last verified: July 24, 2026 Qualification posture: Layered. No single document closes the DVP.
For eVTOL propulsion-pack qualification, safety parameters are partially governed across multiple overlapping documents, the environmental and mechanical classes have test frameworks with no severity levels assigned, and the performance classes are void. Energy density. C-rate capability. Cycle life. Calendar life. No public standard sets a threshold for any of them. The DVP rows in those classes are closed by the applicant's own engineering analysis, reviewed and accepted by the certifying authority one program at a time.
A standard earns a place in a DVP row only after you can name the evidence question it answers. What follows maps each parameter class to the standard that governs it, the clause that defines the requirement, and the gap where neither exists. Where a gap is documented, it carries the same structural weight as a governed requirement. In a layered qualification posture, the voids are precisely where DVP risk concentrates.
Governing Standards
| Standard | Version | Scope |
|---|---|---|
| FAA AC 21.17-4 | July 18, 2025 | Aircraft-level airworthiness criteria for powered-lift ≤12,500 lb, ≤6 pax, battery-electric propulsion. Performance-based safety objectives; pack-level test definition deferred to applicant-proposed means of compliance. |
| EASA MOC VTOL.2440 | Current (SC-VTOL Issue 2) | Propulsion-battery thermal-runaway safety for small-category VCA. Layers over DO-311A with propulsion-specific test protocols, cell characterization, and non-propagation demonstration. |
| RTCA DO-311A | December 19, 2017 | MOPS for rechargeable lithium batteries permanently installed on aircraft. Baseline safety tests at §2.4.5. Does not require cell-level testing or aging characterization. EASA characterizes §2.4.5.5 as not written for propulsion batteries. |
| FAA AC 20-184 | October 15, 2015 | Guidance on testing and installation of rechargeable lithium batteries on aircraft. Routes large batteries through DO-311 and selected DO-347 sections. No propulsion-battery-specific protocol. |
| RTCA DO-160G | 2010 | Environmental conditions and test procedures for airborne equipment. 26 test sections; category selection is installation-specific. DO-160H was planned for March 2026 but DO-160G remains current. |
| ASTM F3830-26 | June 17, 2026 | Propulsion ESS for light-sport-category aircraft. Accepted by FAA under MOSAIC/Part 22 for light-sport special airworthiness certificates. Does not close type-certificated powered-lift qualification under AC 21.17-4. |
| UN 38.3 | Rev. 7 | Transport testing for lithium batteries. Universal. |
Requirements Matrix
Energy Density and Capacity
What the DVP needs: Minimum gravimetric (Wh/kg) and volumetric (Wh/L) energy density at pack level sufficient for mission range, payload, and reserve.
What governs it: Nothing. AC 21.17-4 PL.2430 requires the energy system to "provide necessary energy under all likely operating conditions" and "provide flightcrew awareness of usable energy" (Tier 1). That is an aircraft-level performance objective. No Wh/kg or Wh/L floor. EASA MOC VTOL.2440 is silent on energy density. DO-311A is silent on energy density.
Gap: Void. The DVP row closes entirely on the applicant's mission-energy analysis, accepted by the certifying authority as part of the means of compliance. There is no lookup value to find because none was written.
Power Capability
What the DVP needs: Discharge C-rate capability by mission phase (vertical climb, transition, cruise, descent, hover/landing, emergency reserve). Charge C-rate for turnaround operations.
What governs it: No standard specifies C-rate acceptance criteria for eVTOL propulsion batteries. Published engineering analyses provide architecture-dependent ranges, and the spread across them is structural, not noise. A lift+cruise airframe and a multirotor see materially different peak C-rates for the same mission phase because disc loading and motor count differ:
- Lift+cruise: ~1.9C takeoff hover (95% SOC), ~2.5C transition climb, 0.6–0.7C cruise, ~2.2C landing hover (~35% SOC) (per MDPI Aerospace, 2026; Tier 3).
- Multirotor/Vahana-class: 5C takeoff and landing, 1.48C cruise (per Bills et al., Scientific Data, 2023, reproduced in TandF, 2026; Tier 3).
- Hybrid tiltrotor: 4C–10C burst for 2.5 min vertical phases (per Ng, Patil, and Datta, VFS, 2019; Tier 3).
Dixit et al., ACS Energy Letters, 2024 report effective discharge rates of 10C–60C depending on architecture, mission profile, payload, and disc loading, though they frame these as research-protocol conditions rather than certification thresholds (Tier 3).
Gap: Void. C-rate requirements must be derived from the specific aircraft's mission-energy model. No standard provides a number to cite. Charge C-rate for turnaround is unaddressed in any public document. The DVP row is entirely program-defined.
Cycle Life and Calendar Life
What the DVP needs: Minimum cycle count at stated DOD, temperature, and C-rate profile. Minimum calendar life in years under stated storage conditions.
What governs it: No public minimum found. I searched AC 21.17-4 (no battery cycle-life language), MOC VTOL.2440 (uses aging as a test-conditioning input, not a life threshold), DO-311A (public scope explicitly states it does not require characterization of cell/battery aging), and AC 20-184 (requires ICAs to include capacity-measurement intervals and scheduled replacement per manufacturer recommendations but sets no minimum count or duration).
Gap: Void. Aging appears in the regulatory framework only as a conditioning requirement for safety testing, not as a life specification. MOC VTOL.2440 §7(a) requires non-propagation tests on batteries degraded by vibration, thermal cycling, and electrical cycling. That is a test-severity condition. The standard cares that a degraded battery does not propagate thermal runaway. It does not care how many cycles the battery is warranted to survive. The distinction matters: a DVP reviewer who reads MOC VTOL.2440's aging language as a cycle-life requirement has misread the document.
Operating Envelope
What the DVP needs: Temperature range (operating and storage), altitude, humidity, combined-environment conditions.
What governs it: DO-160G provides the environmental qualification framework. §4 (temperature and altitude), §5 (temperature variation), §6 (humidity) (Tier 1). AC 20-184 requires lithium battery systems to meet DO-160G environmental qualification and states that test scope should consider equipment configuration, installation-specific environment, duration of exposure, geographic locations, and frequency of environmental occurrences (Tier 1).
DO-160G §4 temperature/altitude categories are installation-defined: A1–A4 for controlled-temperature/pressurized or low-altitude installations (up to 15,000 ft), B1–B4 for non-pressurized up to 25,000 ft, C1–C4 for non-pressurized up to 35,000 ft (per D.L.S. Electronic Systems and ULMEKA; Tier 2). §6 humidity categories: A (standard), B (severe), C (external). Category assignment depends on where the pack sits on the aircraft and what operating environment the applicant declares.
Editorial: UAM operations typically stay below 5,000 ft AGL. Regional eVTOL corridors may push higher but remain well within the A-category altitude ceiling. For most propulsion-pack installations in unpressurized bays, the binding constraint is the temperature range and humidity category, not altitude.
Gap: The framework exists. What does not exist is a default DO-160G category assignment for an eVTOL propulsion battery pack. Category selection must be justified by the applicant based on installation location and declared environment. Revision watch: DO-160H was planned for March 2026; DO-160G remains current as of this date.
Mechanical
What the DVP needs: Vibration profile, operational shock, crash-safety loads (sustained acceleration, impulse, drop), crush resistance, post-crash containment.
What governs it: DO-160G §7 (operational shock and crash safety) and §8 (vibration) supply test methods, with severity levels selected by aircraft type and installation location. Vibration profiles include sinusoidal, random, sine-on-random, and helicopter-specific spectra (per public DO-160G summaries; Tier 2).
AC 21.17-4 PL.2430 requires the energy system to "retain energy under all likely operating conditions" and "minimize hazards after emergency landing or survivable impact" (Tier 1). These are aircraft-level performance objectives. Pack-level test parameters flow down from the aircraft's crashworthiness analysis.
EASA MOC VTOL.2325(a)(4) defines crash-resistance parameters for energy-storage systems with public clause-level specificity (directly from EASA Easy Access Rules for small-category VCA; Tier 1):
| Parameter | Requirement |
|---|---|
| Drop-test height | ≥15.2 m onto a non-deforming impact surface, ESS in most critical expected crash condition |
| Post-crash containment | Battery fire or harmful leakage contained for ≥15 minutes in non-occupied areas and outside the evacuation path, if structural damage leads to fire or leakage |
| Ultimate inertial load factors (cabin ESS) | 4 g upward, 16 g forward (18 g for CTOL), 8 g sideward, 20 g downward, 1.5 g rearward |
These are aircraft-installed ESS crash-resistance criteria, not standalone pack drop parameters. MOC VTOL.2440 explicitly states it does not address or supersede crashworthiness tests.
Gap: DO-160G provides vibration and shock test methods but not eVTOL-specific severity levels. Powered-lift aircraft with multiple rotors and transition flight regimes produce vibration spectra and shock environments that differ from conventional rotorcraft or fixed-wing profiles. The DVP must define or justify the vibration spectrum and shock pulse from the specific aircraft's structural dynamics analysis. Crash safety is governed by MOC VTOL.2325(a)(4) on the EASA side with public clause-level parameters; FAA AC 21.17-4 sets aircraft-level objectives without pack-level crash-test specifics. No standards body working group addressing eVTOL-specific vibration spectra has been identified.
Safety
Three documents layer here, and the layering itself is what you need to understand before populating any DVP row. DO-311A §2.4.5 provides baseline abuse tests. EASA MOC VTOL.2440 adds propulsion-specific thermal-runaway requirements on top, explicitly because DO-311A was not written for this use case. FAA AC 21.17-4 defers pack-level safety test definition to the applicant's means of compliance entirely. The following maps all three.
What the DVP needs: Thermal runaway propagation containment or management, abuse tolerance (overcharge, external short circuit, overdischarge), explosion containment, drop impact.
DO-311A Baseline Tests
Clause numbers per EarthX TSO manual mapping and public technical summaries (Tier 2/3):
| Test | DO-311A Clause | Reported Conditions |
|---|---|---|
| External short circuit without protection | §2.4.5.2 | 55°C stabilization, ~2 mΩ resistance (Tier 3) |
| Overdischarge without protection | §2.4.5.3 | — |
| Single-cell thermal runaway (overcharge) | §2.4.5.4 | ≥1.5× nominal voltage, ≥2× rated current (Tier 3) |
| Single-cell thermal runaway (overheating) | §2.4.5.4 | 5–10°C/min heating rate (Tier 3) |
| Battery thermal-runaway containment | §2.4.5.5 | — |
| Explosion containment | §2.4.5.6 | — |
| Drop impact | §2.4.5.7 | — |
Tier 3 conditions derive from a secondary legal/technical summary and should be verified against the RTCA standard before committing to a DVP. Entries without reported conditions require the full DO-311A text.
EASA MOC VTOL.2440 Propulsion-Battery Layer
Directly from EASA public text (Tier 1).
MOC VTOL.2440 states the scope limitation plainly:
"was developed for lithium batteries powering other aircraft systems or equipment" and "did not necessarily consider electric or hybrid propulsion batteries."
That sentence is the reason this entire layer exists. Two compliance approaches follow from it:
Approach #1 — Non-propagation via DO-311A §2.4.5.5 with enhanced severity:
- Run DO-311A §2.4.5.5 per DO-311A §2.2.2.4
- At least 20% of battery-system cells must achieve thermal runaway in the test
- MOC §4 prerequisites must be satisfied
Approach #2 — CSFL (Continued Safe Flight and Landing) containment:
- At least 20% of propulsion-battery-system cells driven into thermal runaway using worst-case combinations from cell characterization
- All targeted cells must enter thermal runaway within approximately 1 minute; if they do not, the test objective is not met
- Demonstrate that realistic worst cases involving more than one cell can be managed at battery-system and installation level while ensuring CSFL per MOC VTOL.2330
The 20% figure deserves a careful read. It is a minimum test-severity condition, not a propagation limit. The standard prescribes how hard you must hit the battery in the test. It does not prescribe how much of the battery is allowed to fail in service.
MOC §7(a) Non-Propagation Test Requirements
- Cell-level thermal-runaway characterization required as input: trigger method, SOC, internal-short position relative to venting, heating rates 5–20°C/min
- Cell characterization must record: initial SOC, trigger time, max temperature, average total thermal energy release (J), initiation temperature, temperature-rise rate, mass ejected
- Number of replicates coordinated with EASA; must cover cell variability across lots, manufacturing dates, and sites
- Triggered cell selected by assessing spacing, heat-transfer characteristics, battery configuration, and location (center, wide face, narrow face, corner, edge)
- Test article must represent type-design configuration including aircraft installation, venting provision, and orientation
- Different installations tested if they could affect outcome, or worst-case installation if justified
- Pre-trigger stabilization at 55°C or maximum operating high temperature, whichever is higher
- Minimum 8 hours post-event monitoring
- Pass criteria: no propagation, no rupture, no fragment release outside battery system or explosive fire zone, no flame/emission escape except through designed venting, no compromise of warning signals or safety functions
- Test articles must be degraded by vibration, thermal cycling, and electrical cycling (may use DO-160/ED-14 environmental samples, ED-289 aging-cycle samples, or equivalent accelerated-life samples if proper aging and degradation are demonstrated)
MOC §4 Prerequisites (Both Approaches)
- DO-311A §2.1 general requirements considered and implemented
- DO-311A §3 installation considerations evaluated
- Critical software functions designed and validated per EASA AMC 20-115 at appropriate DAL
- Critical hardware functions designed and validated per EASA AMC 20-152 at appropriate DAL
- Propulsion-battery safety assessment per SAE ARP 4761: FHA, SSA (qualitative and quantitative), FMEA, common-cause analysis
- Any catastrophic failure condition must be extremely improbable and must not result from a single failure
Scope boundary: MOC VTOL.2440 explicitly excludes external short circuit, available system capacity/energy, protection testing, crashworthiness tests, and HV signage from its scope. Those requirements live in other SC-VTOL clauses and in the applicant's means of compliance.
FAA Posture
AC 21.17-4 PL.2440 requires "means to isolate and mitigate hazards in the event of a lift/thrust system fire or overheat in operation" but contains no pack-level abuse-test protocol, no overcharge test, no thermal-runaway-specific requirement (Tier 1). Pack-level safety test definition falls entirely within the applicant's proposed means of compliance. AC 20-184 routes large batteries through DO-311 and DO-347 sections but predates the eVTOL propulsion context. It was written for a different aircraft and a different battery.
Environmental Protection
What the DVP needs: IP rating, salt fog resistance, fluid susceptibility, sand/dust resistance.
What governs it: DO-160G §10 (waterproofness), §11 (fluid susceptibility), §12 (sand/dust), §14 (salt spray). Category selection is installation-specific (Tier 1).
Gap: Framework exists, categories unassigned. No eVTOL-specific IP or environmental-protection requirement has been identified in any public document.
EMC
What the DVP needs: Conducted and radiated emissions limits, susceptibility to RF and lightning.
What governs it: DO-160G §§18–21 (EMC susceptibility and emissions), §§22–23 (lightning), §25 (electrostatic discharge). AC 20-184 includes environmental qualification under DO-160G as a requirement (Tier 1). Category selection depends on the aircraft's EMC environment and the pack's proximity to sensitive avionics.
Gap: Framework exists, categories unassigned. Severity levels are installation-defined, not standardized for eVTOL propulsion packs.
Transport
What the DVP needs: Compliance with transport regulations for lithium batteries.
What governs it: UN 38.3 Rev. 7 (Tier 1). Tests include altitude simulation, thermal cycling, vibration, shock, external short circuit, impact/crush, overcharge, and forced discharge at cell and battery level.
Gap: None. UN 38.3 is settled and universal. It is a transport-safety gate, and it tells you nothing about whether the pack qualifies for the application.
Gaps Summary
| Parameter Class | Gap Status | Standards Body Activity |
|---|---|---|
| Energy density and capacity | Void. No standard sets a threshold. | None identified. |
| Power capability (C-rates) | Void. Architecture-dependent; published analyses span 0.6C cruise to 10C+ vertical burst. | None identified. |
| Cycle life | Void. No minimum in AC 21.17-4, MOC VTOL.2440, DO-311A, or AC 20-184. | None identified. |
| Calendar life | Void. Same as cycle life. | None identified. |
| Operating envelope | Framework exists, categories unassigned. DO-160G provides test methods; category selection is installation-specific. | DO-160H revision watch. |
| Mechanical (vibration, shock) | Framework exists, severity unassigned. DO-160G profiles may not capture powered-lift structural dynamics. | None identified for eVTOL-specific vibration spectra. |
| Crash safety | Governed (EASA), aircraft-level objectives (FAA). EASA MOC VTOL.2325(a)(4) provides public clause-level crash-resistance parameters (15.2 m drop, 15-min containment, inertial load factors). FAA AC 21.17-4 sets aircraft-level objectives without pack-level crash-test specifics. | EASA MOC VTOL.2325(a)(4) is published. |
| Safety (thermal runaway) | Layered, not void. EASA MOC VTOL.2440 provides the strongest public clause-level path. FAA defers to applicant MOC. DO-311A §2.4.5.5 is baseline but EASA characterizes it as insufficient alone for propulsion batteries. | EASA MOC-5 consultation status: no final publication confirmed as of this date. |
| Environmental protection | Framework exists, categories unassigned. | None identified. |
| EMC | Framework exists, categories unassigned. | None identified. |
| Transport | Settled. UN 38.3. | N/A. |
Of eleven parameter classes mapped above, one is settled (transport). Four have test frameworks without assigned severity levels (operating envelope, mechanical, environmental protection, EMC). One is layered across multiple documents with a jurisdictional split between EASA and FAA (safety). One is governed on the EASA side with public clause-level parameters and aircraft-level only on the FAA side (crash safety). Four are void of any public threshold (energy density, C-rate, cycle life, calendar life).
The implication for any DVP that shows all rows populated with governing-standard citations: it has either borrowed from adjacent domains without disclosing the source or defined its own thresholds without documenting the basis. Both are defensible engineering decisions. Neither is a standard. For each void parameter class, the DVP should document not just the threshold selected but the basis for that selection: mission-energy model, manufacturer characterization data, engineering analysis, adjacent-domain borrowing with the source domain named. That basis is what the certifying authority evaluates during means-of-compliance acceptance. It is also what a future DVP reviewer will need when the aircraft changes, the cell changes, or the mission profile changes, and the question becomes whether the threshold still holds.
- EASA MOC-5 final publication: MOC-5 SC-VTOL Issue 1 remained consultation material after the October 2025 consultation close, with no final publication confirmed as of this date.
- DO-160H revision status: RTCA's DO-160 page indicated DO-160H was planned for March 2026, but DO-160G remains listed as current and any category-selection work should track whether the revision changes environmental test sections relevant to battery installations.
- ASTM F3830-26 scope boundary: FAA's July 2026 NOA accepted F3830-26 within the MOSAIC/Part 22 light-sport consensus-standard framework, and it is worth tracking whether any future rulemaking extends its applicability toward type-certificated powered-lift.
- FAA propulsion-battery guidance: AC 21.17-4 contains no pack-level abuse-test protocol or thermal-runaway requirement, leaving safety test definition entirely within the applicant's proposed means of compliance, and any FAA movement toward propulsion-battery-specific guidance would materially change the DVP landscape on the U.S. side.

