EASA drone categories explained: Open, Specific, and Certified

Anyone flying a drone in the European Union runs into the same three-way split early: the EASA drone categories, known as Open, Specific, and Certified. They are the backbone of the EU system, and they work on a logic that surprises people coming from other countries. EASA does not sort flights into hobby and commercial; it sorts them by risk. What matters is the weight of the drone, where it flies, and how dangerous the operation is to people on the ground and other aircraft. Once that logic clicks, the rest of the European framework follows from it.

This guide covers how EASA sorts operations by risk rather than purpose, what the Open category and its subcategories allow, when an operation moves into the Specific category and what that requires, and what the Certified category demands for the highest-risk flights. The goal is to help an operator place their intended flying into the right tier, because the category decides everything downstream: the training, the authorizations, the aircraft, and the records that flying legally in Europe depends on.

How EASA sorts drone operations by risk

The European rules break from the older habit of dividing flying into recreational and professional. Instead, the framework asks how much risk an operation poses and assigns requirements to match. A light drone flown away from people is low risk and lightly regulated; a heavy drone flown over a crowd or beyond sight is high risk and heavily regulated, whoever is flying it and for whatever reason. This risk-based approach is why a hobbyist and a commercial operator flying the same drone in the same way face the same rules, which can catch newcomers off guard.

The framework rests on two regulations working together, and the agency explains the structure directly. The EASA background on the drone regulatory framework sets out the three categories and the risk logic behind them, built on Regulation 2019/947 for how drones are operated and Regulation 2019/945 for the drones themselves. Reading it clears up a lot, because the categories are not arbitrary tiers but points on a scale of risk, each with proportionate requirements. Placing an operation correctly starts with honestly assessing where on that scale it falls.

The Open category and its subcategories

The Open category covers the majority of low-risk flying, and its defining feature is that it needs no prior authorization, as long as the operation stays inside fixed limits. The drone must remain within visual line of sight, below a height of one hundred twenty meters, and away from uninvolved people to a degree that depends on the aircraft. Most drones sold in the EU now carry a class label from C0 to C4 that signals what they are permitted to do, and legacy or privately built aircraft fit under transitional rules.

Within Open sit three subcategories that tune the distance-from-people rule to the aircraft. A1 allows flying closer to people with the lightest drones, A3 requires flying well away from people and built-up areas with heavier ones, and A2 sits in between, allowing flight near people at a set distance with an added competency certificate. The pilot's required training scales with the subcategory, from a basic online test to an additional theory exam. Identifying the right subcategory is the practical first step for anyone flying in the Open category.

The Specific category and its authorizations

When an operation exceeds the Open category limits, flying beyond visual line of sight, over people, or with a heavier or unlabeled drone, it moves into the Specific category. Here the operator generally needs an operational authorization from the national aviation authority, granted on the basis of a risk assessment that identifies the hazards and the measures that mitigate them. This is the medium-risk tier, where flexibility is available but only in exchange for demonstrating that the operation has been thought through and made acceptably safe.

There are lighter routes within Specific for operations that fit predefined patterns. Standard scenarios let an operator declare compliance rather than seek a full authorization for certain common operations, and a Light UAS Operator Certificate, a LUC, allows a mature organization to authorize some of its own operations once the authority has assessed its ability to manage risk. The recurring theme is that Specific-category flying trades the simplicity of Open for capability, and it demands documented risk assessment and authorization in return, which is a real administrative commitment.

The Certified category and what it demands

The Certified category sits at the top of the risk scale and is reserved for operations that resemble traditional manned aviation, such as carrying passengers, transporting dangerous goods, or flying large aircraft over crowds. At this level the requirements mirror the ones for crewed aircraft: the drone itself needs a type certificate and a certificate of airworthiness, the operator needs approval from the authority, and the remote pilot needs a license. This is still the least common tier, and much of its regulatory detail continues to develop as the operations it covers mature.

Across all three categories, one thing holds constant: the operator has to be able to show which tier an operation falls under and prove it met that tier's requirements. Open, Specific, or Certified, an authority can ask for the evidence, the class of the drone, the pilot's competency, the authorization or declaration, and the records behind the flight. Keeping each operation matched to its category and its supporting documents in order is what turns knowing the rules into being able to demonstrate compliance, which is the part that matters when someone official asks.

Common mistakes with EASA drone categories

Assuming hobby flying escapes the rules. EASA sorts operations by risk, not purpose, so a recreational flight faces the same requirements as a commercial one flown the same way. Treating leisure flying as unregulated leads to operating outside the category the flight really belongs to.

Misreading the Open category limits. Open flying only stays authorization-free while it respects the height, distance, and visual line of sight limits. Drifting beyond one hundred twenty meters, over people, or out of sight quietly pushes the operation into the Specific category without the authorization it now needs.

Ignoring the drone's class label. The C0 to C4 class marking determines which subcategory a drone can fly in, and a mismatch between the aircraft and the intended operation makes the flight non-compliant. Check the label against the subcategory before assuming a drone qualifies.

Underestimating the Specific category workload. Moving beyond Open usually means a risk assessment and an operational authorization, not just a bigger drone. Operators who expect Specific-category flying to be a formality are surprised by the documentation and approval it demands.

Failing to keep proof of category and compliance. Whatever tier an operation falls under, an authority can ask for the class, competency, authorization, and records behind it. An operator who cannot produce that evidence is exposed even when the flying itself was within the rules.

FAQ

How many EASA drone categories are there?

Three: Open, Specific, and Certified. They are defined by risk rather than whether flying is recreational or commercial. Open covers low-risk operations, Specific covers medium-risk operations needing authorization, and Certified covers high-risk operations resembling manned aviation.

Which category will most drone pilots fly in?

Most fly in the Open category, which covers low-risk operations within fixed limits on height, distance from people, and visual line of sight. It requires no prior authorization, and its three subcategories, A1, A2, and A3, set how close to people you may fly.

What triggers the Specific category?

Exceeding Open category limits does, such as flying beyond visual line of sight, over people, or with a heavier or unlabeled drone. Specific operations generally need an operational authorization from the national authority based on a risk assessment, with lighter routes for standard scenarios.

Do commercial and recreational pilots follow different EASA rules?

Not by default. The framework is risk-based, so the same operation flown the same way faces the same rules regardless of purpose. What changes the requirements is the drone, where it flies, and the risk involved, not whether the pilot is paid.

Closing thought

The EASA categories reward operators who assess risk honestly and place each operation in the right tier. Open, Specific, and Certified each carry their own training, authorizations, aircraft, and records, and knowing where a flight belongs is only useful if you can also prove you met that tier's requirements.

If you are placing your operation into the right EASA category, FlybyOps was built for the operational record problem at the center of regulated drone work. A risk register, a document vault that tracks authorizations and their expirations, a pilot registry with certification and currency tracking, and an append-only audit log are all part of how the platform keeps each operation's category, authorization, and evidence filed against the rule set it falls under.