How Long Does It Take for CAA to Issue a Licence?

The UK CAA Authorisation Landscape

The UK operates a three-tier framework — Open, Specific, and Certified — inherited from EU Regulation 2019/947 but now administered independently by the Civil Aviation Authority following Brexit. Most commercial operators fall into the Specific category, which requires either a General VLOS Certificate (GVC) issued through a CAA-approved National Qualified Entity (NQE), or an Operational Authorisation (OA) granted directly by the CAA for higher-risk operations. The primary CAA guidance document governing UAS operations across all three tiers is CAP 722, which sets out the regulatory framework, acceptable means of compliance, and the basis on which OA applications are assessed.

The Open category is divided into three subcategories with distinct weight and proximity-to-people thresholds. A1 permits flight over uninvolved people with drones under 250 g (or CE/UKCA class C0 equivalent); A2 permits flight close to — but not over — uninvolved people with drones under 900 g, subject to the operator holding an A2 Certificate of Competency (A2 CofC); and A3 requires flight well away from people and is limited to drones under 25 kg. Commercial use within the Open category does not require an OA, but operators must still register and obtain a Flyer ID and Operator ID. Even a sub-250 g drone used commercially can trigger insurance requirements depending on the nature of the operation.

Certified category operations — flying over crowds or carrying passengers — require full CAA certification and are outside the scope of most commercial drone programmes today. Brokers placing cover for Certified-category clients should expect bespoke underwriting and extended regulatory timelines on both the CAA and insurer sides.

Flyer ID, Operator ID, and the CAA Registration Portal

Flyer ID and Operator ID are issued through the CAA's Drone Registration Service, accessible via the DroneCode portal at dronesafe.uk. For straightforward individual applications with no anomalies, registration is typically confirmed within minutes to a few hours of submission. These credentials are prerequisites for any commercial operation and should be obtained before a broker begins binding cover — insurers will ask for the Operator ID as part of the proposal form.

Delays at this stage are rare but do occur when identity verification flags an issue or when a corporate entity rather than an individual is registering. Corporate Operator ID applications can take several working days if supporting documentation needs manual review. Brokers should build this into their pre-inception checklist rather than assuming same-day issuance.

GVC Processing: NQE Assessment to CAA Endorsement

The General VLOS Certificate is the standard qualification for Specific category commercial operations. The practical and theoretical assessments are conducted by a CAA-approved NQE, not by the CAA directly. Once an operator passes, the NQE submits the record to the CAA, which then issues the GVC. The NQE-to-CAA endorsement step typically takes a small number of working days under normal processing loads, though this can extend during peak periods.

The total elapsed time from starting a GVC course to holding the certificate in hand depends heavily on the operator's chosen NQE, their availability for assessments, and how quickly they pass. Operators should not assume the GVC will arrive before a scheduled job date without confirming the NQE's current submission-to-endorsement turnaround. Insurers writing Specific category liability will require sight of the GVC before confirming cover for OA-required operations.

The GVC must be revalidated every two years through a CAA-approved NQE. This recurrency cycle is operationally significant: if a GVC lapses, the operator's Specific category authorisation is no longer valid, which can affect the standing of any OA linked to that qualification. Brokers should align policy renewal reminders with the GVC revalidation date and confirm with clients that their NQE accreditation remains current — some underwriters require proof of NQE accreditation for the GVC-issuing body as part of the proposal documentation.

Operators holding a pre-2021 Permission for Commercial Operations (PfCO) should note that the A2 Certificate of Competency (A2 CofC) is a current, standalone qualification — not a transitional document. Transition pathways from legacy PfCO holders to the GVC framework are published by the CAA, but these do not automatically accelerate GVC issuance; each case is assessed on its own documentation.

Standard Scenarios and Operational Authorisations: Timelines and Routes

Not every Specific category operation requires a full bespoke OA. The CAA recognises Standard Scenarios (STS) — predefined operational envelopes for which a simplified authorisation route is available without a full SORA. STS-01 covers VLOS operations over controlled ground areas, and STS-02 covers BVLOS operations with an observer network in place. Operators who can demonstrate compliance with the relevant STS conditions can self-declare or submit a lighter-touch application, significantly reducing processing time compared to a bespoke OA. Brokers should establish at proposal stage whether a client's operations fit an STS route, as this affects both the CAA timeline and the underwriting information required.

Where an operation falls outside any STS — for example, unrestricted BVLOS flights, operations over or near uninvolved people beyond standard mitigations, or novel payload types — a bespoke OA is required. The OA application is submitted directly to the CAA and involves a formal safety case structured around the SORA methodology. Post-Brexit, the CAA applies its own adapted version of the JARUS SORA 2.0 framework; operators should refer to CAP 722 and the CAA's OA application guidance for the current UK-specific requirements rather than relying on EASA or JARUS documentation directly.

The CAA does not publish a fixed statutory processing time for bespoke OA applications. CAA published guidance recommends that operators allow a minimum of several weeks for straightforward applications and significantly longer for complex or novel cases — operators planning time-sensitive commercial contracts should treat this as a floor, not a target. Incomplete applications are returned for revision, resetting the clock. The CAA's own OA guidance, available through CAP 722 and the CAA website, advises applicants to engage early and to use the pre-application consultation service for novel operations.

Insurance placement for OA-required operations should be treated as provisional until the OA is granted. Underwriters will want to see the OA — or at minimum a conditional OA — before confirming final terms for BVLOS or over-people liability. Premiums scale with hull value and BVLOS exposure, so the OA scope directly shapes the risk presented to the market. Operators planning time-sensitive commercial contracts should apply for the OA well in advance and engage their broker simultaneously so that insurance terms can be negotiated in parallel.

Insurance Sequencing: The Broker Workflow

The practical workflow for a commercial operator placing a new programme should run in parallel tracks, not sequentially. While the CAA processes the GVC or OA, the broker should be gathering proposal information — aircraft schedule, hull values, intended operational categories, pilot qualifications, and claims history — so that underwriters can provide indicative terms.

The documents listed below are typically required before a policy can be bound. Brokers should collect these proactively rather than waiting for the client to volunteer them, as missing items are the most common cause of binding delays.

Final policy wording should reference the specific authorisation type. A policy written for Open category operations will not automatically extend to Specific category BVLOS work if an OA is subsequently granted. Brokers must notify underwriters when an operator's CAA authorisation status changes mid-term, as this is a material change to the risk. Similarly, when a GVC revalidation falls due, brokers should confirm the updated certificate has been issued before the existing one lapses.

• CAA Operator ID and Flyer ID confirmation (from dronesafe.uk)
• GVC certificate and NQE accreditation evidence (for Specific category operations)
• A2 CofC (for A2 subcategory Open operations where relevant)
• Operational Authorisation reference number or STS self-declaration (for OA/STS operations)
• Completed aircraft schedule with hull values
• Pilot logbook summary or training records
• Details of any BVLOS, over-people, or payload-specific operations

Regulatory Triggers That Affect Cover

Certain CAA authorisation events create direct insurance obligations. The Air Navigation Order 2016 (as amended) mandates that operators of unmanned aircraft used for commercial purposes hold third-party liability insurance. The ANO sets out the applicable requirements by reference to aircraft mass and operational context; operators should confirm the specific article and current minimum limit with their broker or legal adviser, as the precise threshold is a matter of law rather than market convention.

BVLOS authorisations introduce additional underwriting scrutiny because they extend the operational envelope beyond the pilot's direct line of sight, increasing both the probability and potential severity of a third-party incident. Some underwriters apply sub-limits for specific payload categories or impose additional conditions for autonomous operations — these terms are negotiated at placement and should be reviewed each time an OA scope changes.

Operators who allow their GVC or OA to lapse — for example, by missing the two-year GVC revalidation window — may inadvertently void their insurance cover if the policy conditions require maintained CAA authorisation. Brokers should include an authorisation-lapse notification clause in their client service agreements and flag GVC revalidation dates alongside policy renewal dates.

Frequently asked questions

What is the difference between an STS operation and a bespoke OA, and does it affect how quickly I can get insured?

A Standard Scenario (STS-01 or STS-02) is a predefined operational envelope where the CAA has pre-assessed the risk, allowing operators to self-declare or submit a lighter-touch application rather than a full SORA-based safety case. Because the regulatory route is simpler and faster, insurers can also assess the risk more quickly — the underwriting information required for an STS operation is less extensive than for a bespoke OA. If your operations fit an STS, establishing that early in the broker conversation can materially shorten the time to binding.

If the CAA amends or expands an operator's OA mid-policy, what should the broker do?

An OA amendment that changes the operational scope — for example, adding BVLOS corridors or increasing the maximum operating altitude — is a material change to the insured risk. The broker must notify the lead underwriter promptly and obtain a mid-term endorsement confirming the revised terms. Failure to notify can give the insurer grounds to decline a claim arising from the newly authorised activity.

Can cover be bound before the CAA issues the OA, and if so, on what basis?

Some underwriters will issue a conditional binder — cover that attaches on the date the OA is granted rather than the date of the binder itself. This allows operators to have insurance documentation ready for contract purposes without the policy being live for unauthorised operations. The specific conditions and any premium adjustment are agreed at the time of the binder, not retrospectively. Brokers should confirm with the underwriter whether the binder requires the OA to be granted within a defined window.