Veronte Autopilot 4x

Veronte Autopilot 4x is a redundant control system for critical operations such as UAM, eVTOL or MALE, HALE and Tactical drones. Fail-operational redundant autopilot  architecture has been designed for avoiding single point of failure, all this included in a miniaturized autopilot managed by a dissimilar arbiter board.

Configurable control software makes Veronte Autopilot 4x compatible with all kinds of vehicle or aircraft layout. DO178C / ED-12 and DO254 aviation standards compliance is maintained in all configurations, enabling UAV, RPAS and UAM certification. Environmental DO160 / MIL-STD-810 test compliance data pack and MTBCF is also available for entering a certification process.


4x Redundancy


Certification Datapack


Dissimilar Arbiter




eVTOL, UAV and Others


Control Strategy

User defined using block diagram flow

Automatic Routines

Events and actions for FTS, operation, payload…

Payload Interface

Custom messages definition



Veronte Autopilot 4x includes a series of tools for the customization of the control and navigation strategy. The Programs module permits to generate block diagram flows for defining the control laws and other programs in the system. Block libraries like PIDs, Adaptive Control, Energy Control, maths and logical operations are available.

In configurations where onboard computer vision or extended data processing capacity is needed, it is possible to interface a Mission Computer with the Veronte Autopilot 4x. It permits to exchange telemetry data between both computers and send commands and routes to the autopilot from the external source.




Redundancy and high-reliability assurance is a must when doing manned flight operations or flying over populated areas. For this, Veronte Autopilot 4x is the first drone and eVTOL autopilot including 4x redundancy and compliance with the DO178C and DO254 aviation standards up to DAL-B (DAL-A Ongoing).

For eVTOL operations, Veronte Autopilot 4x can be directly connected to an onboard stick and a mission computer running the user interface. Buttons and sticks can also be connected, configuring a custom aircraft cabin. Flight modes can easily be configured according to pilot skills and aircraft capabilities.

eVTOL Features

Onboard sticks and user interface

Cloud Connectivity

Fleet management and database connectivity

High Reliability

Redundancy and certification data pack


Proven Reliability

MALE, HALE & Tactical UAV installation

Companion Computer

Interface with onboard mission computer


Compliance with DO178C, DO254, DO160

MALE & Critical UAV

MALE & Critical UAV

Veronte Autopilot 4x has been successfully installed in a wide range of Tactical, MALE and HALE UAVs. This redundant control system includes advanced tools for these scenarios, such as, fly-by-camera or communications silence. Fully autonomous operation from vessels or moving vehicles is possible thanks to the Rendezvous and Relative Mission algorithms.

In configurations where onboard computer vision or extended data processing capacity is needed, it is possible to interface a Mission Computer with the Veronte Autopilot 4x. It permits to exchange telemetry data between both computers and send commands and routes to the autopilot from the external source.


Embedded 3x Redundancy

Three complete autopilot cores inside

External 4x Core

Third party autopilot connection as main core or FTS

High Reliability

No Single Point Of Failure, robust even on arbiter failure



Veronte Autopilot 4x is the redundant version of the Veronte Autopilot 1x. It embeds three complete autopilot cores plus one dissimilar arbiter board managing the redundancy. This redundant flight controller has been designed so there is no single point of failure and custom voting strategies can be configured.

An external autopilot core can be installed by connecting it to the multiplexing stage and entering to the voting strategy. The 4th core can be configured as the main flight computer so the Veronte Autopilot 4x acts as a FTS solution or it can be a dissimilar backup unit.


Design Reliability

DO178C / ED-12 and DO254 DAL-B compliance

Environmental Test

Test according to DO160 and MIL-STD-810

Certification Documents

Design, testing and manufacturing reliability evidences



DO178C / ED-12 and DO254 aviation design standards are followed during the Veronte Autopilot 4x development (DAL-B). It permits to ensure the hardware and software reliability in the redundant autopilot for eVTOL and UAV certification. In addition, DO160 and MIL-STD-810 test permits to ensure robustness to adverse environmental conditions.

A robust Acceptance Test Procedure (ATP) is followed during the manufacturing process. Environmental Stress Screening (ESS) phase subjects the autopilot to temperature and vibration cycles for the detection of latent failures. This documentation, together with the DO Certification Data packs provides the evidence needed for UAV or eVTOL certification.


Data Logger

Onboard and on ground data logging

Worldwide Operation

Embedded worldwide DEM model

Advanced Control

Flight control optimization for aircraft layout

Advanced Functions

Advanced Functions

In these applications where failure is not an option, Veronte Autopilot 4x includes extended reliability and fail-operational functions. The automations module in Veronte permits to customize the aircraft performance upon a system failure or a risk to the operation (Low battery, datalink loss, GNSS loss, obstacle detection, flight envelope…).

Onboard and control station data loggers are available within the autopilot and in the control station for post flight analysis. In addition, the eVTOL and UAV flight controller includes: worldwide DEM, curve based navigation, GNSS-attitude estimation, relative missions, RTK, adaptive control, sensor fusion, situational awareness, fly-by-camera…


Long Range Operations

Long Range Operations

A wide variety of communication channels can be used for interfacing the Veronte Autopilot 4x with the GCS (Ground Control Station). Veronte Tracker is the prefered solution for long range communication but third party LOS, 4G/LTE and Satcom datalink modules can be used for communications with no range limitations.

The use of Veronte Cloud and the embedded 4G module in the UAV / eVTOL control system enables UTM integration by interfacing with online databases for air traffic and weather information. Sense & Avoid functions are also possible by installing an obstacle data source, such an, ADS-B, a radar or a LIDAR sensor.

LOS Datalink

BLOS Communications

Sense & Avoid



Extended I/O

RS232, RS485, PWM, GPIO… ports

4th Autopilot

Dedicated connector for external module

CAN Expander

Extended I/O and long cables

Extended I/O

Extended I/O

Veronte Autopilot 4x includes a wide variety of inputs and outputs. RS232, RS485, CAN Bus, I2C, PWM, Analog, Digital I/O… are available and can be easily configured for interfacing with all kinds of devices. A dedicated connector is available for the connection of an external 4th autopilot core.

The Veronte CEX module is designed for large vehicles so the number of I/O available can be easily expanded and complex system architectures can be defined. The redundant CAN Bus provides a robust communications channel for long cables, converting the signals to PWM, I2C… once near the device requiring it.

EnclosureAnodized aluminium | IP67 Waterproof | EMI Shielding
Weight 750g (Including 3x radio module)
MountingM4 screws
Temperature range (No convection)-40 to 65ºC
Pressure port diameter2.4mm
RF connectors SSMA jack female | 1x LOS Radio / 2x GNSS / 1x 4G)


Advanced Vehicle Control
eVTOL operationsFully autonomous | Fly-by-wire | Remote control
Critical systemsMALE, HALE & tactical | Populated areas | Critical facilities
Any vehicle layoutAircraft: Fixed-wing, VTOL, multicopter, autogiro, helicopter, parafoil, or hybrid | USV (Surface Vehicles ) | UGV (Ground Vehicles)  | Other
Control surfacesAileron, flap, elevator, rudder, gas, v-tail, x-tail, elevon, flaperon, ruddervator, cyclic, collective, throttle, custom servo mixing… |  Up to 32 actuators | Custom servo mixing
EngineElectric, combustion or turbine | Multiple engine support
Control modesAutonomous  | Manual  | Assisted manual  | Fly-By-Camera  |  Custom
AutomationsCustom automatic routines | Actions (go home, go to, output trigger…) | Events (variable range, WP reach, Control phase…)
ProgramsCustom control algorithms | Configurable execution flow
Control blocksPID |  Energy control |  Gain scheduling |  Autotuning | Stall protection
Control phasesCustomizable | Takeoff, landing, cruise, hold, autorotation, gliding, taxi, tumble, sea skimming…
GNSS deniedInertial navigation |  Sensors + wind estimation
Custom messagesCAN bus | Serial |  User defined protocols
Embedded DEMWorldwide Digital Elevation Model (DEM) onboard
Mission computerVeronte VCP | Onboard telemetry and telecommand | Inflight mission edit | NVIDIA, Linux or Windows
Control station softwareVeronte Pipe included | Support for custom CS software integration
Simulation environmentHIL (Hardware In the Loop) | SIL (Software In the Loop) |  Custom integrations


Safety & Reliability
No SPOFNo single point of failure | Robust to arbiter failure
3x RedundancyEmbedded triple redundancy
4x RedundancyExternal autopilot core | Main controller or fail-operational unit
Redundant power inputUp to 4 independent inputs
FTS (Flight Termination System)Dissimilar microprocessors & regulation stages | Automatic or manual activation 
Internal redundancyRedundant communication bus | Kill me function on each core
Custom voting logicsConfigurable voting logics and strategies 
Reliability documentsDDP: Declaration of Design & Performance

ATR: Acceptance Test Results

COC: Certificate Of Compliance

Manufacturing processStrict Acceptance Test Procedure (ATP) |  Conformal coat
ESS (Environment Stress Screening)Temperature and vibration circles for early failure detection
DO160 & MIL-STD-810 Environmental testTemperature, temperature variation, altitude, shock, vibration
DO178C Software reliabilityDAL-B
DO254 Hardware reliabilityDAL-B
Certification supportDedicated engineering support
Software testing24/7 testing environment | Custom test for specific PDIs | Iron bird setup
MTBF4×10^7 MTBF | Project-based MTBCF calculation
Configurable failsafeCustom events and actions | Multiple safety levels
WarningsVisual & sound alarms | Customizable
User access levelUnlimited users | Custom permissions


RedundancyRedundant sensors on each autopilot core
9x Barometer3x 0 to 103 kPa | 3x 1 to 120kPa | 3x 30 to 110 kPa
3x Pitot3x 0.003kPa (5kt 8km/h sea level) to 6.9kPa (206kt 382km/h sea level) | Up to 1570kt 2900km/h with optional external sensor
6x Accelerometers (3 axes)6x ±16G | 3x ±24G | Sustained manoeuvre (peaks up to ±32g)
6x Gyroscopes (3 axes)9x 125 to 2000 deg/sec (compensated)
6x Magnetometers (3 axes)6x  16 gauss | 3x  8 gauss
6x GPSGPS, BeiDou, GLONASS | RTK | GNSS-based Attitude
4x Voltage4x Input voltage sensor
3x Temperature3x Internal temperature sensor
External sensorsEnhanced compatibility | Navigation fusion


I / O (Critical Ports)
Vin4x (6.5-36V)
Power17 / 29 (without data link / 3G data)
PWM / GPIOUp to 16 (multiplexed)
RS2321x (multiplexed)
RS4851x (multiplexed)
VOut5 & 3.3V (multiplexed)
CAN Bus2x (redundant)
ADC5x (0-3V) (independent)
EQUEP (Encuadrature encoder)1x (multiplexed)
I2C1x (multiplexed)
UART1x (multiplexed)
USB3x (one per module)
I/O ExtendersVeronte CAN expander | Redundant CAN bus communications
  • Multiplexed: Arbiter controls which module signal is in the I/O
  • Redundant: Communications bus
  • Independent: All modules receive the same signal


I / O (Auxiliary Ports – Arbiter Microprocessor)
Vin1x (6.5-36V) DC
ADC10x (0-36V)
ARINC1x Tx / 1x Rx


I / O (Auxiliary Ports – External FCU Interface)
CAN Bus2x
ADC (Output)4x
FTS (Input)1x Watchdog


Data Link
LOS Datalink3x Embedded datalink | Custom combinations
LOS Datalink options410-480MHz | 902-928MHz | 2400-2483MHz | None
BLOS Datalink3x Embedded datalink | 4G | eSIM or nano-SIM
External modulesRS232 connection | SATCOM | 4G | LOS
OtherExternal radio module via RS232, Satcom, 4G
Tracking antennaVeronte Tracker or third party


GeofencingHard & soft |  No go areas
Sense & avoidLidar, radar, ADS-B 
Selectable unitsSelectable units or custom unit creation
WorkspaceDrag & drop telemetry displays (LCD, text, gauge, LED…) | Configurable colors & sizes
Map viewMap sources (Google Maps, Bing Maps, Open Maps…) | Custom map layers
Multiple platformsSimultaneous platform control from the same control station
Multiple control stationsMultiple control stations available for controlling or monitoring
RouteIntuitive user interface for waypoint & route creation | Inflight mission edit
PayloadCamera gimbal, tracking antenna, transponder, camera shooter, GNSS receiver…
Post-flightPost-flight analysis tool | CSV data export
Safety pitotManual control at any time during the operation  Joystick connection on ground or onboard
ExportNo export restrictions, ITAR free | Advanced functionalities may require an export permit. Please contact our team for further details

Veronte Autopilot 4x

Veronte Autopilot 4x - w/o DAA v1.8


Veronte Autopilot 4x - ADS-B v1.8


Veronte Autopilot 4x - Remote ID v1.8



Contact Us


I accept the LOPD*