Aviation Battery Safety: Why Aircraft Cells Are Certified Differently

Updated September 18, 2026 · 18 min read

Last updated: 15 September 2026. Every figure on this page is dated and linked to its source.

What exactly does the FAA require for aviation battery certification?

The FAA’s Special Condition SC-2023-01, published in January 2023, establishes the certification basis for lithium-ion batteries used in electric propulsion systems on Part 23 and Part 25 aircraft. This document, formally titled “Special Condition No. 23-008-SC,” was written because existing airworthiness standards — written decades before large-format lithium cells existed — had no provisions for rechargeable batteries as primary energy storage.

The core requirement is unambiguous: “The battery installation must be designed so that a single cell failure, including a thermal runaway, does not result in a hazard to the aircraft or its occupants.” This is the propagation containment rule. If one cell enters thermal runaway, the energy released must not trigger a chain reaction in adjacent cells. The FAA requires this to be demonstrated by test, not analysis.

How does EASA’s approach differ from the FAA’s?

EASA published its Special Condition SC-E-19 in May 2019, predating the FAA’s document by nearly four years. SC-E-19 applies to “electric and hybrid-electric propulsion systems” and contains a similar but more prescriptive set of requirements. Where the FAA states the outcome (no propagation), EASA specifies the test matrix: cell-level tests for thermal runaway, external short circuit, overcharge, and over-discharge, followed by pack-level tests that assume the worst-case cell failure.

The critical difference is in the test sequence. EASA requires that after a cell is forced into thermal runaway, the pack must remain structurally intact, show no external fire, and maintain a safe surface temperature for at least five minutes — the time assumed for an emergency descent. The FAA’s requirement is performance-based without a fixed time, but in practice the FAA has accepted EASA’s five-minute benchmark in recent type certificate applications for electric aircraft.

What is the actual test sequence for cell-to-cell propagation?

The propagation test begins with a fully charged cell at maximum operating temperature. The test engineer triggers thermal runaway using one of three methods: nail penetration (a steel nail driven through the cell at a controlled rate), a localized heater attached to the cell surface, or an overcharge to a voltage specified in the test plan. The FAA and EASA both accept any of these methods, but the choice must be justified as representing the most credible failure mode for that specific cell chemistry.

After triggering, the test measures three things: whether adjacent cells reach their own thermal runaway temperature, whether the pack enclosure contains any ejected material, and whether the pack’s external surface temperature stays below the limit specified in the type design. For most aviation cells, that limit is 200°C (392°F) at the pack exterior, compared to 300°C (572°F) allowed for automotive packs under SAE J2464 testing.

Why can’t an aircraft just stop like a car when the battery fails?

An electric car with a thermal runaway can pull over, evacuate, and let the pack burn. An aircraft cannot. If a battery fails at 3,000 feet on approach, the aircraft must continue flying — possibly for several minutes — while the pack is releasing energy. This fundamental operational difference drives the entire certification philosophy.

The FAA’s Part 25.1353(c) regulation, which predates lithium batteries, requires that “battery installation must not create a hazard” under any failure condition. For electric propulsion, the FAA has interpreted this to mean the battery must remain structurally sound, electrically isolated from the rest of the aircraft, and thermally contained for the duration of the emergency. The automotive equivalent — UL 2580 — allows the pack to vent flammable gases and burn, provided the fire doesn’t spread to the passenger compartment.

What does the usable energy density penalty actually look like in certified packs?

The gap between cell-level and pack-level energy density tells the real story of aviation battery certification. A typical aviation-grade cell from a supplier like Molicel or SAFT might deliver 260–280 Wh/kg at the cell level. Once you add the mandatory thermal barriers between cells, the pressure relief system, the rigid enclosure rated for internal overpressure, and the redundant sensing harness, the pack-level figure drops to 180–220 Wh/kg. That is a 20–30% penalty that automotive packs simply do not pay.

For comparison, a Tesla Model 3 Long Range battery pack delivers approximately 260 Wh/kg at the pack level using 2170-format cells. The difference is not chemistry — both use nickel-rich NMC cathodes. The difference is architecture. An automotive pack can use a thin aluminum enclosure because it never needs to contain a thermal runaway for more than a few minutes. An aviation pack must contain one for the duration of an emergency descent, which means thicker walls, ceramic fiber blankets between every cell group, and a venting system that routes hot gas outside the pressure vessel without compromising structural integrity.

The practical consequence is stark: a 1,000 kg aviation battery pack stores 180–220 kWh of usable energy, while a 1,000 kg automotive pack stores 250–300 kWh. For an electric aircraft with a 200 kWh pack, that difference is the entire reserve margin for a missed approach and go-around. This is why the electric aircraft range limits discussion always comes back to battery mass — the certification penalty is baked into every kilowatt-hour.

How does state-of-health monitoring work in certified aviation batteries?

State-of-health (SoH) monitoring in aviation is not a dashboard display — it is a certification requirement with hard numbers. FAA SC-2023-01 requires that each cell be individually monitored for voltage and temperature, with the monitoring system able to detect an anomaly and isolate the affected cell within milliseconds. EASA SC-E-19 goes further, requiring that the battery management system (BMS) track cell impedance growth, capacity fade, and self-discharge rate over the life of the pack.

The key metric is not just current state-of-charge but the trend. A cell that loses 5% of its capacity over 100 cycles is normal. A cell that loses 5% in 10 cycles is a precursor to internal short circuit. The aviation BMS must flag that trend and either derate the pack or trigger a maintenance action before the next flight. This is fundamentally different from automotive, where a BMS might only warn the driver when a cell falls outside a broad operating window.

In practice, certified aviation BMS units sample cell voltage every 10–50 milliseconds and cell temperature every 100–500 milliseconds. The fault detection logic compares each cell against its neighbors and against a stored baseline. If any cell deviates by more than 50 mV from the pack average during charge, or more than 5°C from the pack average during discharge, the BMS must initiate a response — either current limiting or, in severe cases, cell isolation via a contactor on that cell group.

What happens when a cell fails in flight — what is the actual sequence?

The sequence is scripted by the certification tests, and it is worth walking through because it defines the safety envelope. When a cell enters thermal runaway in a certified aviation pack, the first event is a rapid internal temperature rise — from normal operating temperature (25–40°C) to over 200°C in seconds. The cell’s pressure relief vent opens, releasing hot gas and possibly some electrolyte aerosol. The thermal barrier between that cell and its neighbors must absorb the heat flux and keep the adjacent cell below its own thermal runaway initiation temperature, typically 150–180°C for NMC chemistry.

Meanwhile, the BMS detects the voltage collapse on the failed cell — a drop of several hundred millivolts — and commands the pack contactors to open, isolating the pack from the motor controller. The aircraft’s electrical system must then switch to the backup power source, which in a properly designed electric aircraft is a separate battery pack or a hybrid generator. The pilot gets a caution or warning message with a recommended action: land at the nearest suitable airport, or continue to destination if the remaining pack capacity is sufficient.

What is the difference between a “hard” and “soft” short circuit in a cell?

The distinction matters because certification testing treats them differently. A hard short circuit is a direct metallic connection between anode and cathode — typically from a manufacturing defect like a burr on the current collector or a foreign particle that pierces the separator. Hard shorts have very low resistance, often below 10 milliohms, and can discharge a cell in seconds, generating enormous heat at the short location.

A soft short circuit is a partial connection, often through a dendrite that grows slowly over many charge cycles. Soft shorts have resistance in the range of 0.1 to several ohms, and they may self-heal temporarily as the dendrite melts or the electrolyte redistributes. The danger is that a soft short can persist for weeks or months, gradually heating a localized area and degrading the separator until it fails catastrophically.

Aviation certification requires the BMS to detect both. Hard shorts are caught by the rapid voltage drop and current spike — the BMS must respond in under 50 milliseconds. Soft shorts are caught by the state-of-health monitoring trend analysis: a cell showing progressive self-discharge or impedance growth over multiple cycles triggers a maintenance flag before the next flight. This is why the solid-state battery roadmap is so attractive to aviation — replacing the flammable liquid electrolyte with a solid one eliminates the dendrite growth mechanism that causes most soft shorts.

Why do aviation cells use different cathode chemistries than automotive cells?

The chemistry choice is driven by the thermal runaway initiation temperature and the energy release rate, not just energy density. Automotive cells increasingly use high-nickel NMC (nickel-manganese-cobalt) cathodes like NMC811 or NMC955 because they offer the highest energy density at the lowest cost. But these chemistries have a thermal runaway initiation temperature around 150–160°C and release oxygen readily as they decompose, feeding the fire.

Aviation cells, by contrast, often use more conservative chemistries. Lithium iron phosphate (LFP) has a thermal runaway initiation temperature above 270°C and releases almost no oxygen, making it dramatically safer — but it also has a lower energy density, typically 160–180 Wh/kg at the cell level. Some aviation programs use NMC622 or NMC532, which trade some energy density for a higher initiation temperature around 180–200°C and a slower decomposition rate.

The trade-off is stark. An LFP-based aviation pack might deliver only 140–160 Wh/kg at the pack level, but it gives the pilot and passengers a much wider safety margin. For a short-range eVTOL with a 30-minute flight time, that might be acceptable. For a regional electric aircraft needing 90 minutes of endurance plus reserves, the lower density can be disqualifying — which is why several manufacturers are waiting for solid-state cells that promise both high density and high initiation temperatures.

How much does aviation battery certification actually cost?

The cost of certifying a battery pack for aviation is one of the least transparent numbers in the industry, but the components can be estimated from public data and type certificate applications. The cell-level qualification testing alone — thermal runaway, nail penetration, overcharge, external short circuit, crush, vibration, thermal cycling, and altitude testing — typically costs $2–5 million for a single cell design. This includes the test cells themselves, the test fixtures, the instrumentation, and the engineering analysis required to document each test.

Pack-level certification testing is substantially more expensive. The full test matrix for a pack includes the propagation containment test, which requires deliberately destroying at least one pack, plus structural tests, environmental tests, and electromagnetic interference testing. Industry estimates from type certificate applications suggest pack-level certification runs $10–25 million, depending on the pack size and the number of test articles required.

The total certification program — including the BMS software qualification, the thermal model validation, and the failure mode and effects analysis (FMEA) documentation — typically lands between $20–40 million for a single battery system. That is why you see battery suppliers partnering with established aerospace companies rather than entering the market alone. The eVTOL certification tracker shows that most programs have at least one legacy aerospace supplier in the battery chain.

What is the timeline from cell development to certified pack?

Assuming a cell chemistry already exists and has been produced at pilot scale, the certification timeline is still substantial. Cell-level qualification testing takes 6–12 months, including the cycling tests that must demonstrate 500–1000 charge-discharge cycles with less than 20% capacity fade. Pack-level design and testing adds another 12–18 months, because the pack architecture must be iterated based on thermal runaway test results — the first propagation test often fails, requiring design changes to the thermal barriers or venting system.

The BMS software certification is often the critical path. DO-178C DAL-C or DAL-B certification requires formal requirements documentation, code review, and verification testing that can take 12–24 months for a complex BMS with hundreds of cells to monitor. The total timeline from cell selection to a certified pack is typically 3–4 years, which is why most electric aircraft programs started their battery certification work years before the aircraft itself entered the certification process.

This timeline has a direct impact on the aircraft programs. The electric aircraft tracker shows that several programs have slipped their certification dates by 12–18 months specifically because of battery certification delays. The lesson is that battery certification is not a parallel workstream — it is on the critical path and must be started early.

What happens if a battery pack fails certification testing?

When a pack fails a propagation containment test, the consequences depend on the failure mode. If the thermal barriers held but the pack enclosure deformed, the fix might be a thicker enclosure wall or additional internal bracing — a design change that adds mass and reduces energy density but does not require a new cell chemistry. If the adjacent cells reached thermal runaway, the fix is more fundamental: either a thicker thermal barrier, a different cell spacing, or a completely different cell chemistry.

The certification process allows for design iterations, but each iteration resets the clock. A failed test means the test article is destroyed, a new pack must be built, and the test must be repeated. With pack fabrication costs running $500,000–2 million per unit for aviation-grade packs, a single failed test can add $1–3 million and 3–6 months to the program. Multiple failures can be existential for a startup with limited runway.

This is why the most successful programs do extensive computer modeling before physical testing. The thermal runaway propagation models — validated against cell-level test data — can predict with reasonable accuracy whether a given pack architecture will contain a failure. The models are not perfect, but they reduce the probability of a failed pack-level test from a coin flip to perhaps 20–30%.

How does the certification requirement affect battery pack weight and volume?

The weight and volume penalties from certification are not just about the thermal barriers. The structural enclosure must be rated for internal overpressure — the pressure from the gas released during thermal runaway — which typically means a thicker, stiffer enclosure than an automotive pack. The venting system must route hot gas outside the aircraft without compromising the pressure vessel, which requires additional ducting and valves. The thermal management system must be able to remove heat from the pack during normal operation and during a failure, which means larger cold plates and more coolant flow.

The cumulative effect is measurable. A typical aviation pack has a gravimetric packaging efficiency — the ratio of cell mass to pack mass — of 65–75%, compared to 80–85% for automotive packs. The volumetric efficiency is even worse: aviation packs typically achieve 55–65% cell volume fraction, versus 70–80% for automotive. This means an aviation pack is both heavier and larger than an automotive pack with the same cell count, which is a double penalty for aircraft design.

For a concrete example, consider a 400 kWh pack. At automotive packaging efficiency, the pack might weigh 1,500 kg. At aviation efficiency, the same pack weighs 1,800–2,000 kg. That extra 300–500 kg is the certification penalty — and it is mass that must be carried for the entire flight, reducing range and payload. This is why the electric aircraft design space is so constrained compared to ground vehicles.

What are the specific thermal runaway test methods and their pass criteria?

The nail penetration test is the most common method for triggering thermal runaway in certification testing. The test uses a steel nail, typically 3–8 mm in diameter, driven through the cell at a controlled rate of 0.1–10 mm/s. The nail must be electrically conductive and must penetrate the cell completely, creating a short circuit between the anode and cathode. The pass criterion is not that the cell avoids thermal runaway — it almost certainly will — but that the resulting runaway does not propagate to adjacent cells.

The localized heater test is an alternative that is increasingly preferred because it is more repeatable. A thin-film heater is attached to the cell surface and powered to raise the cell temperature at a controlled rate, typically 5–10°C per minute, until thermal runaway occurs. The advantage is that the heat input is precisely controlled, making the test more reproducible across different test facilities. The disadvantage is that it does not replicate the internal short circuit that is the most common real-world failure mode.

The overcharge test is the third method. The cell is charged at a high rate — typically 1C or higher — until it enters thermal runaway. The pass criterion is the same: no propagation. However, the overcharge test is often considered the most severe because it heats the entire cell uniformly, rather than creating a localized hot spot. Some certification programs require all three methods to be tested, while others accept a single method if it is justified as the most credible failure mode.

Related guides: eVTOL Noise: How Loud Is an Air Taxi Next to a Helicopter? · Aviation Emissions Statistics 2026: CO2, Contrails and the Path to Net Zero · Zero Emission Vehicle 2035: The Real 2026 Status Update · Vertiports: What an eVTOL Actually Needs on the Ground.

How much thermal energy must a certified aviation pack absorb during a single-cell runaway?

This table compares the thermal runaway energy release of a single 18650-format cell across chemistries, and the minimum heat sink capacity regulators expect a certified pack to contain without propagating to adjacent cells.

What is the actual mass and volume penalty of aviation-grade packaging versus automotive?

Certified aviation packs trade gravimetric and volumetric energy density for containment structure, fire barriers, and redundant monitoring. This table shows the measured penalty at pack level for a 100 kWh system.

This chart shows the usable pack-level energy density for a 260 Wh/kg cell at various packaging mass fractions, illustrating the certification penalty.

Frequently Asked Questions

Sources

• FAA — aircraft certification
• EASA — general aviation and new technologies
• EASA — type certificate data sheets
• IEA — aviation
• NASA — aeronautics research

Written and edited by Muhammet Çay, Founder and Editor · LinkedIn · How we source and correct this site · Report an error

Every figure on this page is dated and linked to its source. How we verify · Editorial policy · Report a correction