Most drone startups don’t really sell drones. They sell inspections, deliveries, surveys, security patrols — services whose unit economics only work when one operator can supervise many aircraft flying far beyond where anyone is standing. Which means the real product bottleneck isn’t hardware or software. It’s a stack of approvals from the Civil Aviation Safety Authority, and in particular the one that lets you fly beyond visual line of sight (BVLOS).
That bottleneck has been moving fast. In October 2025, CASA launched a trial of new broad-area BVLOS approval pathways that lets qualified operators self-assess new operational areas — collapsing a process that historically took months per site into days. That 12-month trial is now in its final weeks, and what CASA decides next will set the shape of permanent BVLOS rules. If your startup flies drones, or your fund is looking at one that does, the regulatory map is worth understanding properly. Here it is.
The Part 101 Ladder
Commercial drone operations in Australia are governed by Part 101 of the Civil Aviation Safety Regulations 1998 (Cth), administered by CASA. Rather than one licence, Part 101 builds a ladder — and where your operations sit on it determines your compliance load:
Registration. Every drone flown commercially must be registered with CASA, whatever it weighs. Registration is renewed annually, and a registration levy of $40 per aircraft per year applies to drones weighing more than 500 grams (registration is currently free for commercial drones of 500 grams or less).
Operator accreditation. The bottom rung of operating credentials. It’s free, done online, and valid for three years. Accreditation only carries you as far as the excluded category — chiefly, commercial operations with a drone of 2 kg or less, or flying a drone up to 25 kg over land you own or control provided no one is paying you for the flight — and only within the standard operating conditions below.
Remote Pilot Licence (RePL). The professional qualification, issued through CASA-certified training providers. You’ll need one to fly heavier aircraft commercially or to operate under a ReOC outside the excluded category.
Remotely Piloted Aircraft Operator’s Certificate (ReOC). This is the business’s certificate, not the pilot’s — the drone-world analogue of an airline’s operating certificate. A ReOC requires a nominated chief remote pilot responsible for operational safety, a CASA-accepted operations manual, and the record-keeping to prove you follow it. Critically, the ReOC is the ticket to asking CASA for permission to do the things the standard rules prohibit.
The Standard Operating Conditions — and Why They Cap Your Business Model
Every rung below a ReOC-with-approvals confines you to CASA’s standard operating conditions: fly only within visual line of sight; below 120 metres (400 feet) above ground level; in daylight; at least 30 metres from people not involved in the operation; one drone per pilot at a time; never over populous areas or emergency operations; and at least 5.5 km from a controlled aerodrome (certified operators can seek approval to come closer).
Read that list against any scaled drone business model — drone-in-a-box infrastructure inspection, agricultural survey across thousands of hectares, drone delivery, remote asset monitoring — and the problem is obvious. The requirement that a pilot personally keep eyes on the aircraft is the single rule that makes most drone startups’ economics impossible. A pilot per drone per site is a labour cost structure investors won’t fund.
So the entire commercial question compresses into one regulatory one: how do you get out of visual line of sight?
BVLOS: The Approval That Is the Moat
Flying BVLOS is prohibited by default. Getting permission means, in broad terms, three things stacked together:
- A ReOC — BVLOS approvals are only available to certified operators;
- Qualified pilots — historically the Instrument Rating Exam (IREX) borrowed from crewed aviation, though CASA now offers a dedicated remote pilot BVLOS exam (ReB1) as the purpose-built alternative for operations outside controlled airspace; and
- An operational approval from CASA for the specific BVLOS operation, granted on the strength of a documented safety case — since 11 May 2026, built under AusSORA, CASA’s Australian adaptation of the international Specific Operations Risk Assessment (SORA) methodology, mandatory for new applications under Advisory Circular AC 101-06 — covering the aircraft, the airspace, the ground environment and your procedures when the link drops or the aircraft goes rogue.
Until recently, that third element was assessed area by area. Every new mine site, pipeline corridor or council area meant a fresh application, and operators routinely waited three to six months per approval. For a startup, that meant every new customer deployment carried a multi-month regulatory tail — a sales cycle problem, a cash flow problem, and a scaling problem all at once.
It also meant the approvals themselves became the moat. A drone services company with a mature ReOC, BVLOS-qualified pilots and a portfolio of operational approvals holds something a competitor cannot buy and cannot quickly replicate. In our experience of drone-sector due diligence, sophisticated investors now weight the approval stack the way they weight patents.
The October 2025 Trial: Self-Assessment Arrives
On 13 October 2025, CASA began a 12-month trial of four new broad-area BVLOS approval pathways, issued under a Temporary Management Instruction (TMI 2025-03). The design shift is fundamental. Instead of CASA assessing each operational area, an approved ReOC holder can be authorised to self-assess and authorise its own operational areas within the conditions of its pathway — with the pathways graded by aircraft size and environment, so that smaller drones may be approved to operate over suburban areas while larger aircraft (the trial covers the small RPA category, up to 25 kg) are confined to lightly or sparsely populated ones.
The conditions attached are real: approvals run for 12 months, operators must nominate a responsible person, and documented practices and procedures have to be updated to carry the self-assessment burden the regulator has handed over. But the commercial effect is dramatic. RocketDNA, the first operator approved under the trial, describes new deployments going live within days — in parallel, across sites — where each previously queued behind a months-long sequential approval. Sphere Drones followed as one of the first operators authorised to independently evaluate operational areas for its remotely operated drone systems.
The trial runs to October 2026 — next month, as this is published — after which CASA’s post-implementation review will shape permanent BVLOS policy. Which cuts both ways: the operators who got in early have spent a year building the operational history that positions them for whatever the permanent regime looks like, and they’re also the test cases whose incidents, if any, will shape it. For startups that haven’t engaged yet, the window to influence — or even ride — the trial has largely closed; the game now is being ready for the settings that come out of the review.
What Founders and Their Boards Should Actually Do With This
Treat the approval stack as a company asset — and paper it that way. Your ReOC, approvals and exemptions attach to the certificated entity. In a share sale they travel with the company; in an asset sale they don’t follow the assets, and the buyer starts again with CASA. That asymmetry belongs in your exit thinking early, and your approvals, conditions and correspondence with CASA belong in the data room before an investor asks.
Manage chief remote pilot key-person risk. The ReOC depends on a CASA-accepted chief remote pilot. If that person resigns — or is the co-founder on the wrong side of a founder dispute — your operating certificate has a problem your shareholders’ agreement should have anticipated. Succession, notice periods and restraint terms for this role deserve more attention than startups usually give them.
Price compliance into the model, not around it. Part 101 breaches are largely strict liability offences, enforceable by infringement notice, and many carry maximum fines in the tens of thousands of dollars per offence — flying commercially unregistered, for instance, attracts a penalty of up to 50 penalty units — $18,200 since the Commonwealth penalty unit rose to $364 on 1 July 2026. More commercially damaging than any fine: a variation, suspension or cancellation of the approvals your revenue depends on. Contracts with customers should be drafted so that regulatory delay or an approval condition change is an allocated risk, not a silent breach.
Watch the reform pipeline. CASA’s RPAS and AAM Strategic Regulatory Roadmap maps the longer game, and the near-term items are concrete: CASA has consulted on Part 101 amendments to bring RePL and BVLOS examinations under nationally consistent CASA management, and has flagged consultation on category-specific approvals for medium drones. The regulatory settings your business plan assumes in 2026 will not be the settings of 2028 — usually, on current form, they’ll be better.
Remember CASA isn’t the whole map. Aviation safety law says nothing about the images your drones capture (state surveillance devices legislation and the Privacy Act do), the spectrum your links use (ACMA), where you can take off (councils, national parks, landowners), or whether your airframe or payload tech is export-controlled — a live issue for any UAV startup with defence-adjacent capability, as it is for space-tech ventures. And since no statute compulsorily insures your drone operations, your insurance stack is doing load-bearing work the moment anything falls out of the sky.
The strategic read: Australian drone regulation is moving, deliberately, from case-by-case permission toward operator-held capability — and every step of that shift converts regulatory maturity into competitive advantage. The startups that treat CASA approvals as a core product workstream, rather than a compliance afterthought, are the ones the self-assessment era is being built for.
This article is general information only, not legal advice — what your operation needs turns on exactly what you’re flying, where, and for whom. Viridian Lawyers advises Australian startups on regulatory strategy, capital raising and technology transactions, including in the drone and advanced aviation sector. If BVLOS is on your product roadmap, get in touch — ideally before you price the contract that depends on the approval.
