EASA SORA 2.5: What Changed for Europe’s Specific-Category Drone Approvals

A SORA package spends money across concept definition, ground and air risk analysis, mitigations, flight and containment tests, documentation, authority dialogue, and change control. Filling a template is a small part of that value chain.

DJI Matrice 30T displayed by a German water-rescue organization
This is a real industrial drone used in Europe, not a specific operation approved under EASA SORA 2.5. The image cannot establish category, risk class, or authorization. Image source: Wikimedia Commons · License: CC BY 4.0 · Credit: Own work

EASA’s June 2026 Easy Access Rules update integrates SORA 2.5-related AMC and GM from ED Decision 2025/018/R. The methodology supports an application in the specific category; it does not itself grant permission, set one transition deadline for every operator, or replace the competent authority’s decision.

Identify the authority, operator, and operation before the method

The operator owns the concept of operations and application. The competent authority evaluates it. EASA supplies the regulatory framework and acceptable means and guidance; manufacturers, test organizations, consultants, airspace stakeholders, and local landowners may provide inputs. Name the jurisdiction and operating context first because forms, transition practice, and required dialogue are not automatically identical across authorities. Roles matter because the method and the approval decision are owned by different parties.

Place SORA 2.5 inside the authorization value chain

SORA classifies ground and air risk, applies mitigations, derives assurance needs, and connects operational safety objectives to evidence. The chain includes operational description, initial and final ground-risk class, air-risk class, containment, mitigations, OSOs, robustness, test results, manuals, and authority questions. One claim changing upstream can alter several downstream documents. Every risk result should link backward to assumptions and forward to evidence.

Value-chain partyWhat it suppliesWhat it does not supply
EASARules, AMC, GM, and SORA frameworkOperation-specific approval
OperatorConOps, organization, manuals, and applicationAuthority decision
ManufacturerAircraft and system evidenceComplete route and population case
Consultant or test bodyAnalysis, test, and traceability supportTransfer of operator responsibility
Competent authorityAssessment and authorization decisionOngoing operational compliance for the operator

The product is an evidence package for one operational context

The deliverable is not ‘SORA 2.5 compliance’ in the abstract. It is a traceable case for a named aircraft, payload, route or volume, population and airspace environment, command-and-control architecture, personnel, weather limits, maintenance, emergency response, and change state. A reused paragraph from another route has little value if its assumptions cannot be linked to local evidence. A good package is operation-specific and change-aware.

Consulting revenue does not change the approval owner

Operators may buy analysis, testing, documentation, mapping, parachute or containment evidence, and application support. Payment does not transfer legal or operational responsibility. A consultant should state assumptions, evidence owner, validity period, and change triggers. Early discussion with the competent authority, which EASA recommends as good practice, can prevent expensive analysis along an inapplicable path. Consulting can improve quality without guaranteeing the authority’s outcome.

Dependencies link risk claims to physical tests

Mitigations must bind to physical and procedural proof: population or ground-area controls, strategic and tactical air-risk measures, containment, aircraft reliability, command-and-control behavior, maintenance, competence, and emergency response. The outdoor robotics test guide is relevant because a mitigation written in a manual needs a repeatable test result and an owner who maintains it. Paper mitigations fail when physical evidence is not maintained.

Watch transition, change, and certified-category boundaries

A final GRC above 7 falls outside SORA and may require a certified-category path. Existing SORA 2.0 assessments should not be declared automatically invalid or automatically accepted; review the ED Decision applicability language and the competent authority’s transition guidance. Reassess after aircraft, payload, route, population, airspace, organization, software, mitigation, or evidence changes—not simply because a document date changed.

Transition and scope boundaries require current authority guidance rather than blanket statements.

  • OSO evidence
  • robustness
  • test result
  • emergency plan
  • change trigger

Questions readers ask next

Which parts of a SORA 2.5 package address ground risk, air risk, containment and assurance rather than granting permission by themselves?

The market offers analysis, mapping, testing, documentation, application support, and mitigation evidence; EASA itself supplies the regulatory framework rather than a commercial approval product. The operator remains responsible for the operation-specific case and ongoing compliance.

Official source trail: