Annex 8 and the airworthiness system
Airworthiness means more than passing one inspection. It begins with an approved design, continues through controlled production and remains valid only while the individual aircraft is maintained, modified and operated within its approved limits.
Introduction
The Chicago Convention places aircraft safety under a system of State responsibility. A Certificate of Airworthiness declares that a particular aircraft is fit to fly when it conforms to its approved design and is in a condition for safe operation. The certificate does not remove the operator's duty to maintain the aircraft or the pilot-in-command's duty to decide whether a flight can be made safely.
Compatibility: Annex 8 and Annex 6 work together
Annex 8 approaches airworthiness from the engineering side. It addresses the design, construction, certification and continuing airworthiness of the aircraft. Annex 6 approaches safety from the operating side through performance limitations, operational procedures and the way the aircraft is used. An aircraft can therefore meet its approved design yet still be operated unsafely, or be well operated while no longer meeting the technical conditions that support its certificate.
International obligations
A Contracting State recognises or renders valid a Certificate of Airworthiness issued by another Contracting State when the basis used is equal to or above the minimum ICAO Standards. States should not impose additional airworthiness-related operating requirements on a visiting aeroplane beyond those of its State of Registry when that State's requirements are not lower than the Annex 6 minimum. ICAO Standards create the recognition framework, but they do not replace national airworthiness regulations. Each State needs a detailed national code, either developed by that State or adopted or accepted from another State.
| State role | Main airworthiness responsibility |
|---|---|
| State of Design | Approves the type design, supplies mandatory continuing-airworthiness information and supports structural integrity and corrosion-control programmes. |
| State of Manufacture | Ensures production conforms to the approved type design and that the manufactured product is eligible for certification. |
| State of Registry | Issues or validates the individual aircraft's Certificate of Airworthiness, determines continuing airworthiness and decides the effect of damage. |
| Operator and owner | Keep the aircraft compliant through an approved maintenance programme, defect control, records and observance of limitations and mandatory instructions. |
Applicability and minimum international basis
Bali states that the technical Standards considered in this part of Annex 8 apply to multi-engined aeroplanes with a maximum certificated take-off mass above 5,700 kg. They address performance and flying qualities, structural design and construction, powerplant design and installation, systems and equipment, and operating limitations. National codes may apply more widely.
The four-part structure described by Bali
| Annex 8 division | Subject |
|---|---|
| Part I | Definitions used by the Annex. |
| Part II | Procedures for certification and continuing airworthiness. |
| Part III | Technical requirements for new designs of large aeroplanes. |
| Part IV | Airworthiness requirements for helicopters. |
Type design, approval data and production
The approval of an aircraft type and the airworthiness of one serial-numbered aircraft are separate decisions. A Type Certificate approves the design. A Certificate of Airworthiness confirms that the individual aircraft conforms to that design and is safe to operate.
Type Certificate
When the State of Design is satisfied that an aircraft, engine or propeller type complies with the design aspects of the applicable airworthiness requirements, it issues a Type Certificate. The certificate identifies the approved type design and records that the design basis has been met after engineering assessment, ground testing and flight testing.
A change that alters the approved design must enter the approval system. A major change may require an approved change to the Type Certificate or a Supplemental Type Certificate. A minor change follows the approved classification and control process. A modification installed without the required approval can break conformity and may suspend the individual aircraft's airworthiness status.
Type Certificate Data Sheet
The Type Certificate Data Sheet, commonly called the TCDS, is the controlled technical summary attached to the design approval. It is not an operating manual and does not replace the aircraft flight manual.
| TCDS item | Why it matters |
|---|---|
| Approved models and serial applicability | Identifies exactly which products and production ranges the approval covers. |
| Certification basis | Names the airworthiness code and special conditions used to approve the design. |
| Engines, propellers and approved combinations | Prevents an unapproved powerplant or propeller combination being treated as conforming. |
| Masses, dimensions and datum information | Defines approved design data needed for configuration and loading control. |
| Operating limitations | Records limits such as speeds, power, centre-of-gravity range or other controlling data. |
| Required equipment and notes | Captures conditions that must be satisfied for the design approval to apply. |
Production conformity
Design approval alone does not prove that a manufactured aircraft matches the drawings and specifications. Production control establishes that the materials, parts, processes, inspections and completed product conform to the approved type design. The State of Manufacture oversees that production assurance, while the State of Registry acts on the eligibility of the individual aircraft for its certificate.
DGCA design and certification concepts
DGCA's CAR 21 framework addresses approval or acceptance of aircraft and product designs, changes and repairs, production oversight, airworthiness certification and permits. The practical chain is design approval, production conformity, individual-aircraft inspection and continuing control. Imported products may rely on a foreign design approval, but DGCA acceptance or validation and the Indian requirements remain necessary.
Special security features
Bali identifies design provisions intended to reduce the consequences of unlawful interference. These include a least-risk bomb location, protection of the flight crew compartment with a strengthened cockpit door, and attention to the ceilings and floors that separate crew and passenger areas. They are design safeguards, not substitutes for operational security procedures.
Certificate of Airworthiness and noise certification
The Certificate of Airworthiness is the State of Registry's formal statement that the individual aircraft complies with its applicable requirements. It has force only while the aircraft continues to conform and remains in a condition for safe operation.
National provisions: issue, validation and categories
The owner or operator applies to the Director General for a Certificate of Airworthiness, a special certificate, or validation of a certificate issued by another State. The applicant supplies the prescribed documents and evidence. The Director General may issue or validate the certificate only after being satisfied about conformity and safe operation.
| Certificate route | Meaning | Control shown on the document |
|---|---|---|
| Certificate of Airworthiness | The aircraft conforms to an approved type design and is in a condition for safe operation. | Nationality and registration marks, manufacturer and designation, serial number, certification basis, category or permitted operation and validity endorsement. |
| Special Certificate of Airworthiness | Used where the prescribed special class or purpose does not support an unrestricted standard certificate. | The approved purpose, limitations and conditions control every flight. |
| Validation of a foreign certificate | DGCA accepts the foreign certificate for an Indian regulatory purpose after the required evidence and assessment. | The validation period and conditions are read with the underlying foreign certificate. |
The category or permitted operation entered on the certificate defines the basis on which the aircraft was certified. Commercial air transport, aerial work, private use or another authorised category may be stated. The entry is not an operator permit and does not by itself authorise commercial service.
What the certificate says
The ICAO form includes the State of Registry and issuing authority, nationality and registration marks, manufacturer and aircraft designation, serial number, category or operation, the applicable airworthiness code, date of issue, signature and a periodic endorsement or statement of continuing validity. The approved flight manual contains the limitations and information required for safe operation.
Validity and Airworthiness Review Certificate
A certificate is renewed or remains valid only when continuing airworthiness is established by the periodic inspection or review prescribed by the State. In the DGCA continuing-airworthiness system, an Airworthiness Review Certificate or equivalent review evidence records the satisfactory review at the required interval. It supports continuing validity, but it cannot make an unsafe or nonconforming aircraft airworthy.
Noise Certificate
The Noise Certificate is a separate environmental-compliance document based on the applicable aircraft-noise Standards. It identifies the aircraft and the approved noise-certification configuration, including relevant engine or propeller data, maximum mass and certified noise levels where applicable. It does not certify structural or mechanical airworthiness and cannot replace the Certificate of Airworthiness.
| Document | Question it answers |
|---|---|
| Certificate of Registration | Which State has registered this aircraft, and what identity is on its register? |
| Certificate of Airworthiness | Does this individual aircraft meet the applicable airworthiness basis and remain safe to operate? |
| Airworthiness Review Certificate | Has the periodic continuing-airworthiness review been completed satisfactorily? |
| Noise Certificate | Does the aircraft configuration meet the applicable certified noise standard? |
Continuing airworthiness in service
Continuing airworthiness is the set of processes that keeps the aircraft compliant after manufacture. It controls maintenance, defects, mandatory instructions, records, modifications, repairs, inspections and release to service.
State of Registry responsibility
The State of Registry determines whether the aircraft continues to be airworthy. For aircraft above the stated 5,700 kg threshold, the State maintains a system for recording faults, malfunctions, defects and occurrences that may affect airworthiness.
Information to the State of Design
When a Contracting State first enters an aircraft on its register and issues or validates its Certificate of Airworthiness, it informs the State of Design. That link allows safety information, mandatory instructions and in-service defect experience to move between the responsible authorities.
CAR M concepts used by DGCA
| Continuing-airworthiness control | Practical requirement |
|---|---|
| Responsibility | The owner or operator ensures the aircraft is airworthy, required equipment is serviceable or properly controlled, and maintenance is completed by authorised persons or organisations. |
| Maintenance programme | Scheduled tasks and intervals reflect approved data, operating experience and mandatory requirements. |
| Airworthiness directives | Mandatory actions issued or adopted by the responsible authority are completed within their applicability and compliance time. |
| Defect control | Defects are rectified, deferred only under an approved basis, and recorded so their status remains visible. |
| Modifications and repairs | Approved design data is used. A safety-affecting modification or repair needs the approval required by DGCA. |
| Records | Aircraft, engine, propeller and component status, life limits, maintenance, defects and releases remain traceable. |
| Release to service | An authorised release records that ordered maintenance was performed satisfactorily before return to operation. |
| Airworthiness review | A periodic review verifies records, configuration and physical condition against the continuing-validity requirements. |
Structural integrity and corrosion control
The State of Design ensures that a structural-integrity programme exists for the applicable aircraft. The programme includes corrosion-control information. Fatigue, accidental damage and corrosion can reduce residual strength even when the surface appearance seems acceptable, so inspection tasks and repair limits must follow approved data.
Modification and repairs
No modification or repair affecting safety may be made to an aircraft holding a valid certificate unless the Rules require it or the Director General has approved it. A repair restores the product to an airworthy condition. A modification intentionally changes the approved configuration. Both must use acceptable design data, approved materials and processes, competent personnel, inspections and accurate records.
Flight Manual
Where a flight manual is required, the Director General endorses the Certificate of Airworthiness accordingly. The approved manual defines limitations and supplies information needed for safe operation.
Instruments and Equipment
The aircraft must carry and use the instruments, radio equipment and special equipment prescribed for its type of flight and operating circumstances. Installation approval, serviceability and operating limitations remain part of the airworthiness status.
Suspension, damage and restoration
Airworthiness can be lost by a regulatory decision or automatically by an event described in the Rules. The safe response is to stop normal operation, define the technical status and restore compliance under DGCA control.
When the certificate is deemed suspended
| Trigger stated by Bali | Why normal flight must stop |
|---|---|
| Failure to conform to the Rules for operation, maintenance, modification, repair, replacement, overhaul, process or inspection | The conditions supporting issue or continuing validity no longer exist. |
| A modification or repair not carried out in accordance with the Rules | The aircraft may no longer conform to its approved configuration or approved data. |
| Major damage | The structure, systems or performance may no longer provide the certified safety margin. |
| A major defect affecting the safety of the aircraft or occupants on a later flight | A known unsafe condition cannot be carried into routine operation. |
Suspension and cancellation: Director General's powers
If the Director General has reasonable doubt about the safety of an aircraft or its type, the Director General may suspend or cancel the Certificate of Airworthiness or special certificate. The Director General may also require an aircraft, component or item of equipment to undergo modification, repair, replacement, overhaul, inspection, examination or flight testing under approved supervision as a condition for the certificate remaining in force.
Effect of suspension
An aircraft must not be flown while its Certificate of Airworthiness or special certificate is suspended or deemed suspended. The prohibition applies even if the certificate paper shows an unexpired date. A special flight permit is a separate, limited authority and must be obtained before a necessary nonstandard flight.
Damage assessment
The State of Registry decides whether damage is so serious that the aircraft is no longer airworthy. It may use design support from the State of Design or the type-certificate holder. If repair is possible, the State of Registry specifies or accepts the necessary approved repair basis and determines that the work has been properly carried out before restoring or reissuing the certificate.
Restoration path
- Ground the aircraft and record the defect, damage or nonconformity.
- Establish the approved technical action and obtain any required design or DGCA approval.
- Perform the repair, modification, inspection or test through authorised personnel and organisations.
- Record the work and issue the applicable release to service.
- Complete any inspection or airworthiness review required by DGCA.
- Resume normal operation only when the suspension has been lifted or the valid status has been formally restored.
Special flight permits and documents carried
A non-airworthy aircraft is not automatically unsafe for every possible movement. DGCA may authorise one carefully limited flight when the aircraft can perform that flight safely and the purpose, route, crew and conditions are controlled.
Special flight permit or permit to fly
On application by the owner or operator, the Director General may issue a special flight permit when the normal Certificate of Airworthiness or special certificate is suspended or deemed suspended. Typical purposes include a ferry flight to a maintenance base, evacuation from danger, a required test flight, delivery or another specifically approved purpose. The permit does not restore the normal certificate.
| Permit question | Required answer before issue |
|---|---|
| Purpose | The flight has a defined reason that cannot be treated as ordinary operation. |
| Safe condition for this flight | Engineering evidence shows the aircraft can safely complete the proposed flight despite not meeting every normal certificate condition. |
| Limitations | Route, weather, mass, speed, altitude, crew, occupants, daylight, landing gear position or other conditions are stated as needed. |
| Inspection and release | The required inspection, maintenance statement and authorised sign-off are completed before departure. |
| Authority | The written permit is issued by DGCA and carried with the aircraft for the authorised flight. |
A prototype may fly during design testing under a permit issued by the responsible State before an ordinary Certificate of Airworthiness exists. A damaged in-service aircraft may receive a ferry permit only after its actual condition has been assessed. In both cases, the permit is purpose-specific and condition-specific.
Aircraft documents to be carried
| Core document | Function |
|---|---|
| Certificate of Registration | Proves the aircraft's registration and nationality identity. |
| Certificate of Airworthiness and review evidence | Shows the individual aircraft's airworthiness basis and continuing-validity status. |
| Flight manual or approved operating information | Provides limitations, performance and information required for safe operation. |
| Journey log or technical log as applicable | Records the flight and makes technical status, defects and releases available. |
| Aircraft radio station licence | Authorises the installed radio station where radio apparatus is carried. |
| Flight crew licences | Show that each required flight crew member holds the appropriate licence and ratings. |
| Noise Certificate where applicable | Shows compliance with the applicable certified aircraft-noise requirement. |
| Passenger list and cargo manifest where applicable | Identify persons and cargo carried for the flight and official handling. |
| Special flight permit when used | States the exact authority, purpose and limitations for the exceptional flight. |
Pre-flight document check
The crew and operator check that each required document belongs to the same aircraft, remains valid for the intended operation and reflects the current configuration and technical status. Registration does not prove airworthiness. Airworthiness does not grant commercial operating authority. A permit does not allow a different purpose or flight outside its limitations.