Veronte Autopilot 4x

  • Description
  • Specification
  • Price
  • Media
  • Faq
  • Autopiloto-4x

    Veronte Autopilot 4x

    Veronte Autopilot 4x is a redundant control system for critical operations such as UAM, eVTOL or MALE, HALE and Tactical drones. Fail-operational redundant autopilot  architecture has been designed for avoiding single point of failure, all this included in a miniaturized autopilot managed by a dissimilar arbiter board.

    Configurable control software makes Veronte Autopilot 4x compatible with all kinds of vehicle or aircraft layout. DO178C / ED-12 and DO254 aviation standards compliance is maintained in all configurations, enabling UAV, RPAS and UAM certification. Environmental DO160 / MIL-STD-810 test compliance data pack and MTBCF is also available for entering a certification process.

    Veronte 4x redundancy

    4x Redundancy

    Veronte 4x -Certification datapack

    Certification Datapack

    Veronte 4x - dissimilar arbiter

    Dissimilar Arbiter

    Veronte 4x - No SPOF

    No SPOF

    Veronte 4x - eVTOL UAV and others

    eVTOL, UAV and Others

    Control Strategy

    User defined using block diagram flow

    Automatic Routines

    Events and actions for FTS, operation, payload…

    Payload Interface

    Custom messages definition


    Veronte Autopilot 4x includes a series of tools for the customization of the control and navigation strategy. The Programs module permits to generate block diagram flows for defining the control laws and other programs in the system. Block libraries like PIDs, Adaptive Control, Energy Control, maths and logical operations are available.

    With the automations module it is possible to define automatic routines in the system. It permits to associate system events (WP reach, variable, battery…) with automatic actions (landing, go home, payload…) enabling fully autonomous mission and payload control. Custom Messages, Comms Manager, Phases… tools are also available for enhanced customization.

    eVTOL & UAM

    Redundancy and high-reliability assurance is a must when doing manned flight operations or flying over populated areas. For this, Veronte Autopilot 4x is the first drone and eVTOL autopilot including 4x redundancy and compliance with the DO178C and DO254 aviation standards up to DAL-B (DAL-A Ongoing). 

    For eVTOL operations, Veronte Autopilot 4x can be directly connected to an onboard stick and a mission computer running the user interface.  Buttons and sticks can also be connected, configuring a custom aircraft cabin. Flight modes can easily be configured according to pilot skills and aircraft capabilities.

    eVTOL Features

    Onboard sticks and user interface

    Cloud Connectivity

    Fleet management and database connectivity

    High Reliability

    Redundancy and certification data pack

    Proven Reliability

    MALE, HALE & Tactical UAV installation

    Companion Computer

    Interface with onboard mission computer


    Compliance with DO178C, DO254, DO160

    MALE & Critical UAV

    Veronte Autopilot 4x has been successfully installed in a wide range of Tactical, MALE and HALE UAVs. This redundant control system includes advanced tools for these scenarios, such as, fly-by-camera or communications silence. Fully autonomous operation from vessels or moving vehicles is possible thanks to the Rendezvous and Relative Mission algorithms. 

    In configurations where onboard computer vision or extended data processing capacity is needed, it is possible to interface a Mission Computer with the Veronte Autopilot 4x. It permits to exchange telemetry data between both computers and send commands and routes to the autopilot from the external source.

    Embedded 3x Redundancy

    Three complete autopilot cores inside

    External 4x Core

    Third party autopilot connection as main core or FTS

    High Reliability

    No Single Point Of Failure, robust even on arbiter failure


    Veronte Autopilot 4x is the redundant version of the Veronte Autopilot 1x. It embeds three complete autopilot cores plus one dissimilar arbiter board managing the redundancy. This redundant flight controller has been designed so there is no single point of failure and custom voting strategies can be configured.

    An external autopilot core can be installed by connecting it to the multiplexing stage and entering to the voting strategy. The 4th core can be configured as the main flight computer so the Veronte Autopilot 4x acts as a FTS solution or it can be a dissimilar backup unit.

    Design Reliability

    DO178C / ED-12 and DO254 DAL-B compliance

    Environmental Test

    Test according to DO160 and MIL-STD-810

    Certification Documents

    Design, testing and manufacturing reliability evidences


    DO178C / ED-12 and DO254 aviation design standards are followed during the Veronte Autopilot 4x development (DAL-B). It permits to ensure the hardware and software reliability in the redundant autopilot for eVTOL and UAV certification. In addition, DO160 and MIL-STD-810  test permits to ensure robustness to adverse environmental conditions. 

    A robust Acceptance Test Procedure (ATP) is followed during the manufacturing process. Environmental Stress Screening (ESS) phase subjects the autopilot to temperature and vibration cycles for the detection of latent failures. This documentation, together with the DO Certification Data packs provides the evidence needed for UAV or eVTOL certification.

    Data Logger

    Onboard and on ground data logging

    Worldwide Operation

    Embedded worldwide DEM model

    Advanced Control

    Flight control optimization for aircraft layout

    Advanced Functions

    In these applications where failure is not an option, Veronte Autopilot 4x includes extended reliability and fail-operational functions. The automations module in Veronte permits to customize the aircraft performance upon a system failure or a risk to the operation (Low battery, datalink loss, GNSS loss, obstacle detection, flight envelope…).

    Onboard and control station data loggers are available within the autopilot and in the control station for post flight analysis. In addition, the eVTOL and UAV flight controller includes: worldwide DEM, curve based navigation, GNSS-attitude estimation, relative missions, RTK, adaptive control, sensor fusion, situational awareness, fly-by-camera…

    Long Range Operations

    A wide variety of communication channels can be used for interfacing the Veronte Autopilot 4x with the GCS (Ground Control Station). Veronte Tracker is the prefered solution for long range communication but  third party LOS, 4G/LTE and Satcom datalink modules can be used for communications with no range limitations. 

    The use of Veronte Cloud and the embedded 4G module in the UAV / eVTOL control system enables UTM integration by interfacing with online databases for air traffic and weather information. Sense & Avoid functions are also possible by installing an obstacle data source, such an, ADS-B, a radar or a LIDAR sensor.


    LOS Datalink

    BLOS Communications

    Sense & Avoid


    Extended I/O

    RS232, RS485, PWM, GPIO… ports

    4th Autopilot

    Dedicated connector for external module

    CAN Expander

    Extended I/O and long cables

    Extended I/O

    Veronte Autopilot 4x includes a wide variety of inputs and outputs. RS232, RS485, CAN Bus, I2C, PWM, Analog, Digital I/O… are available and can be easily configured for interfacing with all kinds of devices. A dedicated connector is available for the connection of an external 4th autopilot core. 

    The Veronte CEX module is designed for large vehicles so the number of I/O available can be easily expanded and complex system architectures can be defined. The redundant CAN Bus provides a robust communications channel for long cables, converting the signals to PWM, I2C… once near the device requiring it.

    EnclosureAnodized aluminium | IP67 Waterproof | EMI Shielding
    Weight 650g (Including 3x radio module)
    MountingM4 screws
    Temperature range (No convection)-40 to 65ºC
    Pressure port diameter2.4mm
    RF connectors SSMA jack female | 1x LOS Radio / 2x GNSS / 1x 4G)


    Advanced Vehicle Control 
    eVTOL operationsFully autonomous | Fly-by-wire | Remote control
    Critical systemsMALE, HALE & tactical | Populated areas | Critical facilities
    Any vehicle layoutAircraft: Fixed-wing, VTOL, multicopter, autogiro, helicopter, parafoil, or hybrid | USV (Surface Vehicles ) | UGV (Ground Vehicles)  | Other
    Control surfacesAileron, flap, elevator, rudder, gas, v-tail, x-tail, elevon, flaperon, ruddervator, cyclic, collective, throttle, custom servo mixing… |  Up to 32 actuators | Custom servo mixing
    EngineElectric, combustion or turbine | Multiple engine support
    Control modesAutonomous  | Manual  | Assisted manual  | Fly-By-Camera  |  Custom
    AutomationsCustom automatic routines | Actions (go home, go to, output trigger…) | Events (variable range, WP reach, Control phase…)
    ProgramsCustom control algorithms | Configurable execution flow
    Control blocksPID |  Energy control |  Gain scheduling |  Autotuning | Stall protection
    Control phasesCustomizable | Takeoff, landing, cruise, hold, autorotation, gliding, taxi, tumble, sea skimming…
    GNSS deniedInertial navigation |  Sensors + wind estimation
    Custom messagesCAN bus | Serial |  User defined protocols
    Embedded DEMWorldwide Digital Elevation Model (DEM) onboard
    Mission computerVeronte VCP | Onboard telemetry and telecommand | Inflight mission edit | NVIDIA, Linux or Windows
    Control station softwareVeronte Pipe included | Support for custom CS software integration
    Simulation environmentHIL (Hardware In the Loop) | SIL (Software In the Loop) |  Custom integrations


    Safety & Reliability 
    No SPOFNo single point of failure | Robust to arbiter failure
    3x RedundancyEmbedded triple redundancy
    4x RedundancyExternal autopilot core | Main controller or fail-operational unit
    Redundant power inputUp to 4 independent inputs
    FTS (Flight Termination System)Dissimilar microprocessors & regulation stages | Automatic or manual activation 
    Internal redundancyRedundant communication bus | Kill me function on each core
    Custom voting logicsConfigurable voting logics and strategies 
    Reliability documents

    DDP: Declaration of Design & Performance

    ATR: Acceptance Test Results

    COC: Certificate Of Compliance

    Manufacturing processStrict Acceptance Test Procedure (ATP) |  Conformal coat
    ESS (Environment Stress Screening)Temperature and vibration circles for early failure detection
    DO160 & MIL-STD-810 Environmental testTemperature, temperature variation, altitude, shock, vibration
    DO178C Software reliabilityDAL-B
    DO254 Hardware reliabilityDAL-B
    Certification supportDedicated engineering support
    Software testing24/7 testing environment | Custom test for specific PDIs | Iron bird setup
    MTBF4×10^7 MTBF | Project-based MTBCF calculation
    Configurable failsafeCustom events and actions | Multiple safety levels
    WarningsVisual & sound alarms | Customizable
    User access levelUnlimited users | Custom permissions


    RedundancyRedundant sensors on each autopilot core
    9x Barometer3x 0 to 103 kPa | 3x 1 to 120kPa | 3x 3 to 110 kPa
    3x Pitot3x 0.003kPa (5kt 8km/h sea level) to 6.9kPa (206kt 382km/h sea level) | Up to 1570kt 2900km/h with external sensor
    6x Accelerometers (3 axes)3x ±16G | 3x ±24G | Sustained manoeuvre 
    6x Gyroscopes (3 axes)6x 125 to 2000 deg/sec 
    6x Magnetometers (3 axes)3x  16 gauss | 3x  8 gauss
    6x GPSGPS, BeiDou, GLONASS | RTK | GNSS-based Attitude
    4x Voltage4x Input voltage sensor
    3x Temperature3x Internal temperature sensor
    External sensorsEnhanced compatibility | Navigation fusion


    I / O (Critical Ports) 
    Vin4x (6.5-36V)
    Power17 / 29 (without data link / 3G data)
    PWM / GPIOUp to 16 (multiplexed)
    RS2321x (multiplexed)
    RS4851x (multiplexed)
    VOut5 & 3.3V (multiplexed)
    CAN Bus2x (redundant)
    ADC5x (0-3V) (independent)
    EQUEP (Encuadrature encoder)1x (multiplexed)
    I2C1x (multiplexed)
    UART1x (multiplexed)
    USB3x (one per module)
    I/O ExtendersVeronte CAN expander | Redundant CAN bus communications


    • Multiplexed: Arbiter controls which module signal is in the I/O
    • Redundant: Communications bus
    • Independent: All modules receive the same signal


    I / O (Auxiliary Ports – Arbiter Microprocessor) 
    Vin1x (6.5-36V) DC
    PWM / GPIO8x
    ADC10x (0-36V)
    ARINC1x Tx / 1x Rx


    I / O (Auxiliary Ports – External FCU Interface) 
    PWM / GPIO12x
    CAN Bus2x
    ADC (Output)4x
    FTS (Input)1x Watchdog


    Data Link 
    LOS Datalink3x Embedded datalink | Custom combinations
    LOS Datalink options410-480MHz | 902-928MHz | 2400-2483MHz | None
    BLOS Datalink3x Embedded datalink | 4G | eSIM or nano-SIM
    External modulesRS232 connection | SATCOM | 4G | LOS
    OtherExternal radio module via RS232, Satcom, 4G
    Tracking antennaVeronte Tracker or third party


    GeofencingHard & soft |  No go areas
    Sense & avoidLidar, radar, ADS-B 
    Selectable unitsSelectable units or custom unit creation
    WorkspaceDrag & drop telemetry displays (LCD, text, gauge, LED…) | Configurable colors & sizes
    Map viewMap sources (Google Maps, Bing Maps, Open Maps…) | Custom map layers
    Multiple platformsSimultaneous platform control from the same control station
    Multiple control stationsMultiple control stations available for controlling or monitoring
    RouteIntuitive user interface for waypoint & route creation | Inflight mission edit
    PayloadCamera gimbal, tracking antenna, transponder, camera shooter, GNSS receiver…
    Post-flightPost-flight analysis tool | CSV data export
    Safety pitotManual control at any time during the operation Joystick connection on ground or onboard
    ExportNo export restrictions, ITAR free | Advanced functionalities may require an export permit. Please contact our team for further details

    Veronte Autopilot 4X Datasheet

    download icon