Your Guide to an FAA Certificate of Authorization
- Paul Simmons

- Jul 9
- 12 min read
Updated: Jul 10
An FAA Certificate of Authorization (COA) is an essential operating permit for public agencies—think police departments, fire crews, and state universities. It’s what allows them to fly drones for critical missions that bend or break the standard rules, acting as a special permission slip for advanced, public-good operations.
What Is an FAA Certificate of Authorization

Here’s a good way to think about it. A standard drone license, the Part 107 certificate, is like your everyday driver's license. It proves you understand the basic rules of the road for flying. A COA, on the other hand, is more like the special permit an ambulance driver has to use sirens and move quickly through traffic. It's the FAA’s way of acknowledging that the mission is vital and needs its own unique set of operating rules.
This authorization isn't for your typical commercial drone pilot. It's designed exclusively for public aircraft operations (PAOs). These are governmental bodies using drones for functions that serve the public, such as:
Search and rescue missions in hard-to-reach areas
Assessing damage after natural disasters like hurricanes or wildfires
Law enforcement surveillance and accident reconstruction
State-funded agricultural or environmental research projects
More Than Just a Piece of Paper
A COA isn't just a document; it's a complete operational framework. It’s how the FAA allows agencies to run specific unmanned aircraft system (UAS) missions under tightly controlled conditions. The approval process is rigorous, involving a detailed risk assessment and operational limits customized to what your agency needs to do, ensuring every flight is safe.
A COA provides a specific set of rules, limitations, and safety protocols that an entire agency must follow. It’s a formal agreement with the FAA that demonstrates an organization’s commitment to safe, responsible, and professional drone operations.
This is where it differs fundamentally from a Part 107 waiver, which gives a single pilot an exception for a single rule. A COA governs an entire agency's drone program. If you're just starting your journey into professional drone work, getting this distinction right is absolutely crucial. To really get into the weeds, check out our complete guide on the FAA Certificate of Authorization. It has all the details you’ll need to figure out the best path for your organization's drone program.
Who Actually Needs a COA

While most commercial drone pilots operate comfortably under their Part 107 license, a different set of rules applies to a very specific group. This is where the FAA Certificate of Authorization (COA) comes in. It's almost exclusively reserved for Public Aircraft Operations (PAO)—think governmental agencies flying for the public good, not for profit.
Imagine your local fire department needs to get a drone with a thermal camera in the air over a wildfire—fast. Their mission might demand flying at night, well above the usual altitude limits, or directly over an active emergency scene. The standard drone rules simply weren't built for these kinds of high-stakes, time-sensitive scenarios. This is the exact gap a COA is designed to fill.
Primary COA Holders
So, who are the most common applicants? Typically, they're public agencies whose duties require them to operate outside the box of standard regulations.
This group includes:
Law Enforcement Agencies using drones for everything from accident reconstruction and suspect tracking to monitoring large public events.
Fire Departments deploying UAS for critical situational awareness during fires, hazmat spills, or search and rescue missions.
Government Research Bodies, like state universities or environmental agencies, conducting aerial surveys for land management or scientific data collection.
These organizations aren't flying for business; they're flying to protect lives, property, and natural resources. The COA gives them a customized rulebook tailored to their specific missions, letting them do their jobs safely and effectively.
What About Private Companies?
It's rare, but sometimes a private company—a civil operator—can get a COA. This usually only happens when the company is under a direct contract with a public agency and the mission absolutely requires it. For example, a specialized engineering firm hired by a state's Department of Transportation to inspect a bridge damaged by an earthquake might operate under a COA for that specific project.
For the vast majority of commercial pilots, however, the path is clear: the Part 107 certificate is your ticket to fly. Making sure you understand the different **drone license requirements** is the first and most important step to staying compliant.
A COA is an organizational authorization for public operations, not an individual license for commercial work. If you're a commercial pilot, your focus should be on Part 107 and any specific waivers you might need for your flights.
COA vs Part 107 Waiver: Which Path Is Right for You?
To make the distinction even sharper, let's break down the key differences. This table should help you quickly figure out whether your organization and mission point toward a COA or a more common Part 107 waiver.
Ultimately, choosing the right authorization comes down to who you are and what you're trying to accomplish. For public agencies, the COA provides a comprehensive framework, while for commercial pilots, the Part 107 waiver offers a targeted solution for specific operational needs.
Navigating Your COA Application Step by Step
Kicking off an application for an FAA Certificate of Authorization can feel a lot like mapping out a major expedition. The process is incredibly detailed and demands meticulous preparation, but if you break it down into a logical sequence, it goes from being an intimidating mountain to a series of manageable hills. Let's walk through that journey together, step by step.
Think of it this way: you're essentially building a legal and operational case for why your public agency deserves special permission to operate drones in the National Airspace. The absolute foundation of this case is your pre-application homework, which is, without a doubt, the most critical part of the entire process.
Laying the Groundwork for Your Application
Before you even think about logging into the FAA's application portal, you've got some serious legwork to do. This isn't just about filling out forms; it's about clearly defining the entire scope of your drone program and proving you've thought through every safety angle.
Your first major task is to draft a solid Concept of Operations (ConOps). This document is the story of your mission. It needs to explain—clearly and concisely—who you are, what you plan to do with your drones, and where these operations will take place. Get specific. Mention the exact types of missions you'll be flying, whether it's for accident reconstruction, search and rescue, or inspecting public infrastructure.
Next up is the risk assessment. This is where you need to put on your safety manager hat and imagine everything that could possibly go wrong. You have to identify potential hazards—from a simple equipment failure or lost communication link to flying in tricky weather—and then lay out credible, practical ways to mitigate each one.
The FAA’s number one priority is the safety of the National Airspace System. A thorough, honest, and incredibly detailed risk assessment shows that your agency not only shares this priority but has a rock-solid plan to manage any potential dangers.
Once your ConOps and risk assessment are buttoned up, you'll need to gather all the supporting documents. This includes details on your specific aircraft, the qualifications and training of your pilots, and your maintenance procedures. Remember, every single drone you plan to use has to be properly registered and accounted for. If you need a refresher, our quick guide on FAA drone registration covers the essentials to make sure your fleet is compliant.
The image below gives you a bird's-eye view of the application flow, from gathering your initial documents all the way to hitting "submit."

This really simplifies the journey into three main stages and drives home just how important that preparation phase is before you even start the formal submission.
Submitting Through the FAA Portal
With all your documentation prepared and organized, you're finally ready to tackle the formal application. This is done through the FAA's online portal, known as the COA Application Processing System (CAPS). This is where all that hard work you just did comes together.
The CAPS system will walk you through entering the specific details of your proposed operations. You’ll upload your ConOps, risk assessments, and all the other supporting files you gathered. Pay extremely close attention to how you word your safety protocols and emergency procedures. Use clear, direct language that leaves absolutely no room for interpretation. You want to build confidence and show the FAA reviewer that you have a mature, responsible safety culture.
Ultimately, the key to success is giving them a complete and well-organized package. Double-check every single entry for accuracy and make sure every required document is attached before you click submit. A thoughtfully prepared application is your best bet for smoothing out the review process and getting a timely approval.
What Goes Into a Successful COA Application?
Submitting a COA application to the FAA is far more than just a paper-pushing exercise. The folks at the FAA aren't just ticking off boxes on a checklist; they're digging deep into your organization's entire approach to safety. A winning application tells a compelling story—one of responsibility, readiness, and genuine professionalism.
To put together an application that gets the green light, you need to build it on three solid pillars. Think of it like a three-legged stool: if one leg is wobbly or missing, the whole thing comes crashing down. A strong application shows you've thought through your safety and operational plans well beyond the bare minimums.
The Bulletproof Safety Case
This is the absolute heart of your application. Your safety case is where you prove to the FAA that you can think like a seasoned risk manager. It's not about claiming accidents are impossible. It's about demonstrating you have a solid, workable plan for when things inevitably go wrong.
You need to identify every hazard you can think of—from a simple equipment malfunction or signal loss to sudden weather changes and, yes, even human error. For every potential problem, you must lay out a credible, practical solution. What's your emergency procedure if a drone loses its link back to the pilot? How will your team react to a sudden, un-forecasted storm? A detailed, honest breakdown shows you’re being proactive, not just reactive.
A strong safety case isn't just a list of rules; it showcases a true culture of safety. It proves your organization is genuinely committed to protecting the National Airspace System and everyone on the ground.
The Detailed Operational Plan
Next up is your operational plan, often called a Concept of Operations (ConOps). This is where you spell out the "what, where, and how" of your flights. Vague descriptions just won't fly here. The FAA needs to see precise details that paint a crystal-clear picture of what you plan to do.
This section absolutely must include:
Precise Flight Boundaries: You have to define your operational areas with exact geographic coordinates or clearly marked-up maps.
Altitude and Airspace: Specify the maximum altitudes you'll fly at and what class of airspace you'll be operating in.
Emergency Protocols: Detail your step-by-step procedures for every kind of in-flight emergency you can imagine.
Getting this granular assures the FAA reviewers that your flights will be predictable and contained, which is key to avoiding conflicts with other aircraft.
Clear Air Traffic Coordination
Finally, you have to show exactly how you'll talk and coordinate with Air Traffic Control (ATC) when your mission requires it. This is non-negotiable, especially if you're flying anywhere near an airport or in controlled airspace.
Your plan needs to specify who is responsible for making contact, the exact points in the mission when they will do so, and what information they will provide. This shows you get it—you’re a guest operating in a shared, complex environment and you know the rules of the road.
The FAA handles thousands of these applications every year, and the high approval rate for well-prepared submissions shows they want to see safe drone operations succeed. COAs are typically granted with specific conditions, like altitude limits or mandatory check-ins with ATC, which helps keep the skies safe as more drones take flight. You can dig into the numbers yourself by exploring the FAA's official civil airmen information.
By mastering these three pillars, your application will stand out as a model of professionalism and care, seriously boosting your chances of getting a quick approval.
Managing Your COA Post-Approval

Getting your FAA Certificate of Authorization is a huge accomplishment, but it's really just the beginning of your journey, not the end of the road. I've seen many agencies get so laser-focused on the application itself that they forget about the constant commitment needed once it's approved.
Think of your COA less like a static permit you file away and more like a living, breathing agreement with the FAA. This agreement is founded on trust and your demonstrated ability to operate responsibly. Your approved COA will include specific rules and limitations made just for your operation—and these aren't merely suggestions. They are the hard-and-fast rules you have to live by for every single flight.
Maintaining Your Authorization
Compliance isn't a one-and-done task; it's an ongoing action. To keep your authorization in good standing and build a solid track record for future renewals, your agency has to adopt a culture of detailed record-keeping. This is simply non-negotiable when you hold a COA.
Your key duties boil down to a few core responsibilities:
Rigorous Flight Logging: Every single flight needs to be documented. This includes who was flying, how long they were in the air, the location, and the purpose of the mission. This data is your proof that you're staying within your approved limits.
Ongoing Pilot Training: Your pilots need more than just a Part 107 certificate. They must get continuous training on the specific aircraft you use and the emergency procedures spelled out in your COA.
Meticulous Aircraft Maintenance: You absolutely need a systematic maintenance schedule and detailed logs for every drone in your fleet. It shows you're being proactive about the safety and reliability of your equipment.
Fulfilling Reporting Requirements: Your COA will spell out exactly what incidents or data you have to report to the FAA and by when. Missing these deadlines can put your entire authorization at risk.
A COA is a privilege that hinges on consistent performance and adherence to safety protocols. Diligent management and detailed documentation are the best ways to ensure a smooth, successful, and long-term drone program for your agency.
The Path to Renewal
Most COAs are good for a two-year period. When it's time to renew, you can bet the FAA will be looking closely at your operational history. A clean record, backed up by thorough documentation of your flights, training schedules, and maintenance logs, will make the renewal process incredibly smooth.
Understanding and carrying out these post-approval duties is vital. It doesn't just keep your operations legal and safe—it builds a foundation of trust with the FAA, paving the way for even more operational capabilities down the line.
Common Questions About the COA Process
Diving into the world of FAA Certificates of Authorization can feel like learning a new language. You’re bound to have questions, especially when trying to figure out how a COA fits in with other, more familiar FAA rules.
Getting it wrong can mean serious delays and wasted time for your agency. So, let's clear up some of the most common points of confusion and give you the confidence to move your public aircraft operations forward the right way.
Distinguishing COAs from Other Authorizations
One of the first questions we always get is how a COA is different from the approvals commercial pilots use. It's a great question. Can a private company even get an FAA Certificate of Authorization? The short answer is usually no. COAs are specifically for public agencies conducting governmental functions.
Now, there's a small exception. A private company could operate under a COA, but only if they are directly contracted by a public agency for a specific governmental mission. For pretty much all other commercial drone work, the path is a Part 107 certificate, sometimes paired with specific waivers. This distinction is the foundation of the whole process.
So, what’s the real difference between a COA and a Part 107 waiver?
Think of a COA as a comprehensive, customized rulebook for an entire government agency's drone program. In contrast, a Part 107 waiver is like a hall pass, giving a single certified pilot permission to break one specific rule, like flying at night or beyond visual line of sight.
The scope is fundamentally different, which is why it's so critical to know which regulations apply to your flights. If you want to dive deeper, we break all of this down in our detailed guide on [understanding drone waivers and regulations](https://www.jabdrone.com/post/understanding-drone-waivers-and-regulations).
Pilot and COA Validity Requirements
Another big question revolves around the pilots themselves. If my agency has a COA, do our pilots still need a Part 107 license? The answer is a firm yes.
A COA authorizes the organization to fly, but the FAA still requires the person at the controls—the Remote Pilot in Command—to hold a valid Remote Pilot Certificate. It’s non-negotiable.
Your COA document will spell this out clearly, stating that every pilot must be certified under Part 107. It will also require them to get ongoing training based on your agency's own approved standards. This two-part system ensures both your program and your individual pilots meet federal safety requirements. There are no shortcuts here.
Finally, how long is an FAA Certificate of Authorization valid for?
Most COAs are issued for a standard period of two years. The expiration date will be printed right on your authorization document. It's on your agency to keep track of that date and start the renewal process with plenty of time to spare, so you don't have a gap in your authority to fly. Renewing usually involves a close look at your safety record, compliance history, and flight logs, which is why keeping meticulous records from day one is so important.
At JAB Drone, we're committed to providing the expert insights you need to navigate the world of drones safely and successfully. From regulatory guides to hands-on reviews, we have the resources to support every step of your aerial journey. https://www.jabdrone.com




Comments