Aerospace and aviation

Frameworks

• FAA AI Safety Assurance Roadmap

  The FAA's statement of principles and priorities for assuring the safety of AI in aircraft. It is a roadmap, not a certification standard.

  Tools tagged FAA AI Safety Assurance Roadmap

• DO-178C / DO-330

  The core airborne software assurance standard and its tool-qualification companion, and why machine learning does not fit them cleanly.

  Tools tagged DO-178C / DO-330

• SAE G-34

  The joint SAE and EUROCAE committee writing aviation AI standards. Two information reports are issued; the ML development-assurance standard (ARP6983 / ED-324) is still a draft in the sources we checked.

  Tools tagged SAE G-34

• EASA AI Concept Paper

  EASA's preliminary guidance for Level 1 and 2 machine-learning applications in aviation, including the W-shaped learning assurance process. Included because the FAA and SAE work builds on and parallels it.

  Tools tagged EASA AI Concept Paper

• EU AI Act

  The EU's horizontal AI regulation. For aerospace and defense, the key points are its military exclusion, its treatment of civil aviation, and the dates moved by the 2026 Digital Omnibus.

  Tools tagged EU AI Act

• ISO/IEC 23894

  International guidance on managing AI-specific risk for organizations that develop, produce, deploy or use AI products, systems and services.

  Tools tagged ISO/IEC 23894

• ISO/IEC TR 5469

  A technical report on properties, risk factors, methods and processes when AI is used in, around, or to design safety-related functions.

  Tools tagged ISO/IEC TR 5469

• ARP4754B

  SAE guidelines for developing civil aircraft and systems. FAA AC 20-174 still recognizes the A revision as an acceptable development-assurance method; the FAA AI roadmap names SAE ARP4754.

  Tools tagged ARP4754B

• DO-330

  RTCA DO-330 / EUROCAE ED-215 is the tool-qualification companion to DO-178C. Qualification effort scales with tool qualification level (TQL-1 through TQL-5).

  Tools tagged DO-330

• DO-200B

  RTCA DO-200B is the standard for processing aeronautical data. FAA AC 20-153B treats it as an acceptable means for data-process approval and Letters of Acceptance.

  Tools tagged DO-200B

Listed tools

• Adelard ASCE

  Adelard (NCC Group) · Commercial · Safety engineering

  Assurance-case software with CAE (including ASCAD 2.0 for autonomous systems and AI-driven machine-learning behaviour) and GSN Version 3 plus a Modular GSN plugin. Node-locked and floating licences; both can operate with limited or no Internet. Customer stories name MoD DE&S QEC ATM and aerospace.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical

• AdvoCATE

  NASA Ames Research Center · Government-published · Safety engineering

  NASA Ames Assurance Case Automation Toolset for GSN arguments, hazard analysis, bow-tie risk models and verification artifacts. NTRS User Guide 1.4 covers safety risk management. DARPA Assured Autonomy acknowledgment.

  • Aerospace & aviation
  • Space systems

• Ansys medini analyze

  Ansys · Commercial · Safety engineering

  Model-based safety analysis (HAZOP, HARA, FTA, FMEA/FMEDA) for E/E and software. Named standards: ISO 26262, IEC 61508, ARP 4761, ISO 21448 (SOTIF) and MIL-STD-882E. SOTIF covers hazards from sensor and perception-algorithm limitations. Not a model verifier.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • DO-178C / DO-330
  • ISO 26262
  • IEC 61508

• Ansys SCADE Suite

  Ansys · Commercial · Safety engineering

  Model-based development environment for critical embedded software. KCG C/Ada code generator is qualified as a development tool for DO-178B up to Level A and DO-178C/DO-330 at TQL-1. Avionics and Flight Controls named. Not a neural-network verifier.

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • Industrial machinery and robotics
  • DO-178C / DO-330
  • DO-330
  • ISO 26262
  • IEC 61508

• Astah System Safety (GSN)

  Change Vision · Commercial · Safety engineering

  GSN modeling in Astah System Safety. Names GSN Community Standard version 1.0 and OMG SACM (ARM) import/export, plus SysML Requirement-to-Goal sync, STPA/STAMP, Auto-Layout and an in-app Script Editor. Marketing page lists automotive (ISO 26262), aerospace (DO-178B), rail, nuclear and defense.

  • Other safety-critical
  • Aerospace & aviation
  • Defense & national security
  • Automotive
  • Medical devices
  • Process industries
  • ISO 26262

• Astrée

  AbsInt · Commercial · Safety engineering

  Sound static analyzer for safety-critical C and C++. Names hazard identification against ISO 26262, DO-178C, IEC-61508 and EN-50128, plus Qualification Support Kits for those standards. Bosch Automotive Steering and Airbus are named users. Not a neural-network verifier.

  • Automotive
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• CAISAR

  CEA List · Open source · Safety engineering

  CEA List open-source platform (CAISAR 6.0, June 2026) for characterizing AI safety and robustness. WhyML specifications discharged by PyRAT, Marabou, nnenum, alpha-beta-CROWN and others. Examples include functional properties of ACAS Xu.

  • Aerospace & aviation
  • Other safety-critical

• CycloneDX (AI/ML-BOM)

  OWASP / Ecma TC54 · Open source · AI assurance & verification · Open source · Apache-2.0

  OWASP/Ecma TC54 BOM standard (CycloneDX 1.7, released 21 October 2025) published as ECMA-424 2nd edition (10 December 2025). Homepage names 260+ tools, the defense industrial base, satellite and space systems, and medical-device HBOM/SBOM. The ML-BOM guide names the EU AI Act and NIST AI RMF.

  • Aerospace & aviation
  • Defense & national security
  • Space systems
  • Medical devices
  • EU AI Act
  • NIST AI RMF

• ERAN

  SRI Lab, ETH Zurich · Open source · AI assurance & verification · Open source · Apache-2.0

  ETH SRI Lab Apache-2.0 analyzer (DeepZ, DeepPoly, GPUPoly) for complete and incomplete verification of feedforward, convolutional and residual networks, including ACAS Xu. Python 3.6+ and TensorFlow 1.11+. Uses ELINA; Gurobi for RefineZono/RefinePoly.

  • Aerospace & aviation

• EU AI Act Service Desk

  European Commission · Government-published · Government-published resource

  Official Commission Service Desk and Single Information Platform for the AI Act (in force 1 August 2024). Explorer and Compliance Checker. Annex I civil-aviation entry is unmanned-aircraft-limited. Consolidated text as at 27 July 2026.

  • Aerospace & aviation
  • Cross-industry
  • EU AI Act

• INTEGRITY RTOS

  Green Hills Software · Commercial · Safety-critical AI platform

  Separation-kernel RTOS with integrated platforms for automotive, industrial safety, medical devices and avionics. Certifications named: ISO 26262 ASIL D, IEC 61508 SIL 3, FDA Class II and Class III medical device approval, and DO-178B/C DAL A for INTEGRITY-178. Not an AI model verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • DO-178C / DO-330

• LDRA (AI and machine learning capability)

  LDRA · Commercial · Safety engineering

  LDRA AI/ML capability page covering test generation, change-impact analysis and AI/ML in safety-critical sectors. The aviation section names EASA guidance for Level 1 and 2 machine-learning applications. Not a neural-network verifier.

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • EASA AI Concept Paper

• LYNX MOSA.ic.AI

  Lynx Software Technologies · Commercial · Safety-critical AI platform

  Deterministic CPU and GPU runtime for AI at the mission-critical edge. Combines MOSA.ic with CoreSuite; not a training platform. The 8 April 2026 launch names a path to DO-178C, not a completed product certificate.

  • Aerospace & aviation
  • Defense & national security

• Marabou

  Neural Network Verification project (Stanford and collaborators) · Open source · AI assurance & verification · Open source · BSD-3-Clause

  SMT-based neural-network verifier (Marabou 2.0). ONNX main format; also .nnet, TensorFlow and VNNLIB. pip install maraboupy (Python 3.8–3.11). Default: DeepPoly bound tightening and DeepSoI. Optional Gurobi, parallelism and Split-and-Conquer. ACAS Xu example. Research product.

  • Aerospace & aviation

• MathWorks AI Verification Library for Deep Learning Toolbox

  MathWorks · Commercial · AI assurance & verification

  Formal robustness verification, output bounds, adversarial examples and out-of-distribution detection for MATLAB, ONNX and PyTorch networks, with airborne runway-sign and ACAS Xu worked examples.

  • Aerospace & aviation
  • Other safety-critical
  • DO-178C / DO-330
  • EASA AI Concept Paper
  • ARP4754B

• MathWorks DO Qualification Kit

  MathWorks · Commercial · AI assurance & verification

  Documentation, test cases and procedures to qualify supported Simulink and Polyspace tools for DO-178C, DO-278A, DO-254 and DO-330. The FAQ says the kit does not prequalify tools; qualification is project-specific.

  • Aerospace & aviation
  • DO-178C / DO-330
  • DO-330

• NASA ProgPy

  NASA Prognostics Center of Excellence · Open source · AI assurance & verification

  NASA ProgPy 1.8.0 (2024 NASA Software of the Year): pip install progpy; Python ≥3.9,<3.14. PHM and remaining-useful-life research with an optional LSTM datadriven extra and a prog_server SOA. Partners named: DLR, Northrop Grumman and Vanderbilt. NASA-1.3 — no OSI badge.

  • Aerospace & aviation
  • Space systems

• nnenum

  Stanley Bak · Open source · AI assurance & verification · Open source · GPL-3.0-or-later

  Python 3.9+ neural-network verifier (pip install .; nnenum 1.0.1, GPL-3.0-or-later) for ReLU networks. Combines zonotopes with star sets, uses the ImageStar trick through ONNX Runtime, and ships ACAS Xu ONNX/vnnlib examples. VNN-COMP 2020: only tool to verify all ACAS-Xu benchmarks.

  • Aerospace & aviation

• NNV (Neural Network Verification Toolbox)

  VeriVITAL, Vanderbilt University · Open source · AI assurance & verification

  MATLAB toolbox for set-based neural-network verification using Star sets and zonotopes. 10+ architectures and 48 layer types; ONNX and VNNLIB. Official aerospace domain and all 45 ACAS Xu networks. AFOSR, DARPA and NSF.

  • Aerospace & aviation

• Parasoft C/C++test

  Parasoft · Commercial · Safety engineering

  Unified C/C++ static analysis, unit testing, MC/DC coverage and requirements traceability. TÜV SÜD–certified C/C++test names automotive (ISO 26262), medical (IEC 62304), industrial (IEC 61508) and aerospace/defense (DO-178C DAL A). Badges also list ISO/PAS 8800.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

• Perforce QAC

  Perforce · Commercial · Safety engineering

  Static analyzer for C, C++ and Rust (formerly Helix QAC). TÜV SÜD certified for ISO 26262 (automotive) up to ASIL D, IEC 61508 (general industry) up to SIL 4, and IEC 62304 (medical devices) up to Software Safety Class C. Also names a DO-330 pack for DO-178C. Not a neural-network verifier.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • IEC 61508
  • IEC 62304
  • DO-178C / DO-330
  • DO-330

• PyRAT

  CEA List (AISER team) · Commercial · Safety engineering

  CEA List neural-network verifier (Python Reachability Assessment Tool) using abstract interpretation. Site: VNN-COMP 2024 second place, all 12 regular-track benchmarks, more than 1700 properties, ACAS-XU collision-avoidance example. CAISAR news ranks PyRAT third at VNN-Comp 2026.

  • Aerospace & aviation
  • Other safety-critical

• Rapita Verification Suite (RVS)

  Rapita Systems · Commercial · Safety engineering

  Rapita Verification Suite for requirements-based testing, MC/DC coverage, WCET timing and scheduling visualization. Qualification kits for DO-178C; kits have supported more than 20 DO-178B and C projects up to DAL A. Rapi Coupling is in development (expected H1 2027).

  • Aerospace & aviation
  • Other safety-critical
  • Automotive
  • DO-178C / DO-330
  • ISO 26262

• Re:In (Moasoftware)

  Moasoftware · Commercial · AI assurance & verification

  Data-quality platform the vendor maps to ARP6983/ED-324 §§6.2–6.5 (bias, diversity, sufficiency, balance, augmentation, reliability reports). W-Shape four stages. Dated 25 August 2026; updated 6 October 2026.

  • Aerospace & aviation
  • SAE G-34

• Saimple

  Numalis · Commercial · AI assurance & verification

  Static analyzer that uses abstract interpretation to assess neural-network robustness, citing ISO/IEC 24029. Sold as SaaS and on-premises. Numalis names Article 15 explainability reports and EASA MLEAP work.

  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • EU AI Act
  • EASA AI Concept Paper

• Stages Process Management Software

  UL Solutions · Commercial · Compliance automation

  Process-management software with bidirectional traceability between process models and standard objectives. Official table names ISO 26262, ISO/PAS 8800 and UL 4600 under Automotive; IEC 62304 under Medical devices; IEC 61508 and IEC 61511-1 under Industrial.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Process industries
  • Aerospace & aviation
  • Defense & national security
  • Other safety-critical
  • ISO 26262
  • ISO/PAS 8800
  • UL 4600
  • IEC 62304
  • IEC 61508
  • IEC 61511

• VectorCAST

  Vector · Commercial · Safety engineering

  Embedded unit, integration and coverage test automation for C, C++ and Ada. Used in aerospace, automotive, medical device, industrial and railway programs. Tool validation packages for IEC 61508, ISO 26262 and IEC 62304 include TÜV SÜD certificates. Reqs2x AI tests require engineer review.

  • Automotive
  • Medical devices
  • Industrial machinery and robotics
  • Aerospace & aviation
  • Other safety-critical
  • ISO 26262
  • IEC 62304
  • IEC 61508
  • DO-178C / DO-330

Industry tool filter

Articles

• EU AI Act Article 4 AI literacy: what the Commission Q&A and the amended text say

  What Article 4 asks of providers and deployers after the 2026 AI Omnibus, per the Commission's Q&A and the Service Desk text. No certificate or specific training is mandated.

• EU AI Act Article 6 high-risk classification: Annex I products, Annex III uses and the safety-component rule

  How Article 6 sorts AI systems into high-risk, including the 2026 Omnibus paragraphs on safety components and the Article 6(3) documented-assessment route for Annex III.

• EU AI Act Articles 14 and 26: human oversight, who builds it and who staffs it

  Article 14 makes providers design high-risk AI for human oversight, including a stop control; Article 26 makes deployers assign competent people and keep logs. Quoted from the Service Desk text.

• EU AI Act Articles 9 and 15: risk management, accuracy, robustness and cybersecurity for high-risk AI

  What Articles 9 and 15 of the AI Act require of high-risk systems, quoted from the Service Desk text: lifecycle risk management, declared accuracy, fail-safe robustness and poisoning defenses.

• Motor-vehicle AI under the AI Act — Annex I Section B and Article 2(2)

  What the Commission AI Act Service Desk pages say about motor-vehicle regulations in Annex I Section B and which AI Act provisions Article 2(2) applies to them.

• ARP4754B FDAL and IDAL when the function is machine learning

  How FAA AC 20-174 treats FDAL and IDAL, what EASA Issue 2 says about IDAL A/B ML constituents, and why ARP4754B is not an AI certificate.

• DO-200B aeronautical data versus ML training sets

  What FAA AC 20-153B treats as aeronautical data, why DO-200B is not EASA learning assurance, and what a program may still need both packages for.

• EASA AI Concept Paper Issue 2 explained for suppliers

  What Issue 2 asks a supplier to show for Level 1 and Level 2 ML: ODD, independent data sets, learning assurance, and why it is not an AMC.

• How to qualify an ML tool under DO-330

  A buyer-side walkthrough of the DO-178C 12.2 decision, TQL-5 versus TQL-1, and what no public table assigns to training or robustness tools.

• IEC 61508-3 software requirements and ISO/IEC TR 5469 — where learned components sit

  Official catalog scope statements for IEC 61508-3:2010 and ISO/IEC TR 5469:2024, with a labeled editorial reading for machinery and process buyers.

• Industrial machinery ML — what evidence will a notified body expect?

  What IEC and AI Act Service Desk pages say about software evidence and learned components in machinery safety functions, and where public text stops. Editorial judgment is labeled.

• Machinery Regulation 2023/1230 in AI Act Annex I Section B — what the official pages say

  The Commission AI Act Service Desk lists Regulation (EU) 2023/1230 in Annex I Section B; Article 2(2) limits which AI Act provisions apply to such products.

• NASA SWEHB Artificial Intelligence topics 7.25 and 8.25 for flight software

  What SWEHB 7.25 and 8.25 tell NASA AI/ML projects about NPR 7150.2 and safety-critical limits. Official titles stay Artificial Intelligence. Handbook topics, not a certificate.

• Process industries ML — what evidence will an assessor expect?

  What the IEC catalog says about IEC 61511-1, IEC 61508-3 and ISO/IEC TR 5469 for an ML component near a safety instrumented system. Editorial judgment is labeled.

• Prompt guardrails versus airborne runtime assurance

  Why cloud LLM input/output rails are not NASA/ASTM runtime assurance, using the cited NeMo, Bedrock, Azure and NASA TM pages.

• An AI assurance glossary for aerospace and defense

  Official meanings of the terms that show up in FAA, EASA, NIST, DoD and CMMC AI work, each tied to the source that uses it.

• An AI audit evidence checklist for regulated programs

  A checklist of evidence artifacts for AI audits, each tied to the ISO/IEC 42001, NIST AI RMF, EU AI Act, EASA, NIST SP 800-171 or DoD source that expects it.

• AI in MRO and predictive maintenance: regulatory considerations (FAA/EASA official material)

  FAA Roadmap maintenance and retirement sentences, AC 43-218 IAHM with no AI words found, and EASA-hosted ForMuLA research — not an MRO AI regulation.

• AI incident reporting: EU AI Act Article 73 vs DoD guidance

  Article 73 sets timed serious-incident reports for high-risk AI. Public DoD pages describe RAI repositories and existing processes, not an Article 73 equivalent.

• Building an AI assurance case (GSN/AMLAS) for certification

  What the GSN Community Standard and AMLAS actually specify, and why neither is a published FAA or EASA means of compliance.

• Data assurance for ML in avionics: EASA learning assurance

  What EASA Issue 2 and the MLEAP research project say about data quality, the ODD, and the three data sets in the W-shaped process.

• Data provenance and supply-chain security for ML models (SBOM/AIBOM)

  What CISA, NIST and NTIA actually say about SBOMs for AI software, and how CycloneDX ML-BOM and SPDX AI profiles relate, without inventing a mandate.

• DO-178C and machine learning: where the gaps are

  Where requirements-based airborne software assurance strains under data-driven machine learning, and what EASA, the FAA and SAE G-34 are doing about each gap.

• DO-330 tool qualification for ML development and verification toolchains

  When an ML training or verification program is a DO-330 tool. FTP1055 criteria, TQL-5 versus TQL-1, FAA Order 8110.49A, and what no public table assigns.

• Does the FAA certify AI today? Current status

  The FAA still has no published AI-specific certification standard. What Version I of the roadmap, the STEP discipline page, and the 2026 Small Airplane Issues List actually say.

• EASA AI Concept Paper levels explained

  What EASA Issue 2 says about Level 1 and Level 2 AI, and what proposed Issue 03 adds for Level 0 and Level 3.

• EU AI Act general-purpose AI model obligations

  Chapter V GPAI model duties apply from 2 August 2025. They are not the postponed high-risk system dates, and not an aviation AMC.

• EU AI Act obligations for aerospace suppliers outside the EU

  How Article 2 of the EU AI Act can apply to aerospace suppliers established outside the Union, and which aviation and defence exclusions the official text actually states.

• EU AI Act scope for defense and aviation: what is in, what is out, and the new dates

  How the AI Act's military exclusion, dual-use rule and civil aviation treatment work, and which compliance dates apply after the July 2026 Digital Omnibus.

• The FAA AI Safety Assurance Roadmap, explained

  A plain-language walk through the FAA's Roadmap for Artificial Intelligence Safety Assurance Version I - what it commits to, what it leaves open, and what it means for applicants.

• FAA and EASA AI certification timelines compared

  FAA AI Safety Assurance Roadmap milestones versus EASA AI Roadmap 2.0 and RMT.0742 dates: what is published and what is still scheduled.

• FAA proposed Part 108 BVLOS and DoD Directive 3000.09

  Two live autonomy regimes: the FAA/TSA NPRM that would create 14 CFR Part 108 for civil UAS BVLOS, versus DoD Directive 3000.09 on autonomy in weapon systems.

• Formal verification of neural networks: what's usable today

  What official neural-network verifier docs and papers actually claim, using ACAS Xu aviation examples, and what they do not make a certification path.

• Human-machine teaming in DoD and NATO guidance

  What official DoD, NATO, UK MOD and EASA pages actually say about human judgment, human control and human-AI teaming.

• ISO/IEC 23894 and 5338 for engineering teams

  What ISO catalog abstracts say ISO/IEC 23894:2023 risk guidance and ISO/IEC 5338:2023 life-cycle processes are, and that neither is a certifiable AIMS or aviation AMC.

• ISO/IEC 24029 neural-network robustness is not an aviation AMC

  ISO/IEC TR 24029-1 and 24029-2 assess neural-network robustness. Catalog text only: they are not an FAA or EASA AMC. Part 3 is still a draft.

• ISO/IEC 42005:2025 AI system impact assessment

  ISO/IEC 42005:2025 is guidance for AI system impact assessments. Catalog facts only: it complements 42001 and 23894 and is not a certifiable AIMS.

• ISO/IEC TR 5469 and IEC 61508 for ML components

  What official ISO and IEC catalog pages say about AI in safety-related functions, and what they do not say about SIL for machine learning.

• How to map an AI model to DO-178C / DO-330 tool qualification

  What DO-330 actually qualifies, why a trained model is usually the software item rather than a tool, and what the FAA has said about extending DO-330 to AI.

• Rotorcraft and eVTOL autonomy: FAA/EASA powered-lift and SC-VTOL AI-relevant guidance

  FAA powered-lift AC 21.17-4, the FAA Safety Framework for Aircraft Automation, and EASA SC-VTOL: what they say, and that a search of SC-VTOL-02 found no AI or ML words.

• Runtime assurance and simplex architectures for ML in flight

  What NASA, ASTM F3269-21 and the 1998 Simplex paper say about runtime assurance for ML in flight — and what they do not call a means of compliance.

• SAE G-34 / ARP6983 status: what is published versus still draft

  EUROCAE WG-114 still lists ED-324 / ARP6983 as Draft. Companion ER drafts, published AIR dates, and what EASA and the FAA have and have not accepted.

• UL 4600 is not an aviation or DoD 3000.09 means of compliance

  What UL 4600’s public catalog actually scopes (autonomous vehicles, no human driver) versus FAA, EASA and DoD 3000.09 pages. Not an aviation AMC we have found.