Honeywell Anthem, the Pilatus PC-12 NGX Debut, and the Connected Cockpit Architecture That Updates Like a Smartphone

Honeywell Anthem is the first production-certified avionics platform using a partitioned architecture that separates the safety-critical core from a cloud-updatable connected layer - and it's already flying.

Aviation Technology Analyst

Honeywell Anthem is a certified avionics platform built on a partitioned software architecture: a hard, FAA-certified safety core that never changes without full recertification, plus a connected layer that can receive updates, pull cloud data, and support third-party applications. It entered production service on the Pilatus PC-12 NGX, announced at EBACE 2019, and represents the most complete implementation of the connected cockpit concept from a major certified avionics manufacturer to date.

Why Avionics Updates Have Always Been Painfully Slow

The FAA’s DO-178C standard governs avionics software development with a level of rigor that few industries match. Every software version, every function, every data path on a certified system must be documented and proven to do exactly what it claims - and nothing else. Change the software on a certified avionics unit, even a minor update, and you potentially restart that certification process from scratch.

The result is that software driving flight management computers on major commercial widebody airliners was architected in the early 1990s. Not updated - architected. The glass may look modern. The engineering pipeline underneath often reflects a design philosophy drawn up before smartphones existed.

A software update a consumer technology company deploys in a week might take three years to certify for transport-category aircraft. That gap is not negligence. It is what rigorous, evidence-based safety certification looks like at scale.

What Makes Anthem’s Architecture Different

Traditional avionics are monolithic. The software driving your primary flight display is woven together with your navigation database, terrain warning system, weather overlay, and communication management unit. Change one component and you must prove nothing unexpected happened anywhere else in the system. The certification burden scales with integration complexity.

Anthem uses a partitioned architecture. The safety-critical core - flight instruments, navigation, terrain warning, everything the FAA and EASA have certified - runs on isolated hardware with isolated software. That layer is exactly as rigid as it needs to be and changes only through full recertification.

Above that certified foundation sits a second layer: the connected layer. Chart overlays, weather service integration, performance planning tools, cloud services connectivity, and eventually third-party application hooks all live here. Updates to the connected layer do not require re-certifying the flight instruments, because the two layers are structurally separated.

Your altimeter reading never comes from a cloud server. The radar return from the nose array never routes through an internet connection before hitting your display. But the chart overlay helping you visualize airspace? The climb performance optimizer? Those can be refreshed without a three-year certification cycle.

The Pilatus PC-12 NGX: Why This Launch Platform Matters

Pilatus Aircraft, headquartered in Stans, Switzerland, has been building military trainers and utility aircraft since the 1940s. The PC-12 entered service in 1994 and became one of the most capable single-engine turboprops ever certified. In executive configuration it carries eight to nine passengers. Operators fly it for medevac, charter, humanitarian airlift, and remote access missions off unprepared strips.

The Royal Flying Doctor Service in Australia operates a PC-12 fleet. Programs across sub-Saharan Africa use the type for medical access in areas with no road infrastructure. This aircraft does not get tested gently.

Pilatus announced the NGX variant at EBACE in 2019, with deliveries beginning approximately two years later. For the NGX, Pilatus chose Anthem as standard fit - a significant commercial commitment. You don’t put an unproven avionics platform in your flagship production aircraft without years of joint development work and high confidence in the engineering. Pilatus and Honeywell had both before the first NGX left the factory.

The NGX cockpit features large landscape touchscreen displays, a cleaner information hierarchy, and tighter integration across navigation, weather, systems data, and communications. Pilots transitioning from the previous Primus Epic suite describe the workflow as notably more intuitive. The more significant change, however, is under the glass.

What Honeywell GoDirect Adds to the Cockpit

Anthem connects natively to Honeywell GoDirect, the cloud services infrastructure the company has been building for business and commercial aviation for several years. GoDirect started as a maintenance analytics platform: connect the aircraft to the network and receive predictive maintenance flags and health monitoring data before a developing issue becomes a squawk or an AOG call at two in the morning in an unfamiliar city.

Anthem extends GoDirect into the cockpit. The avionics system receives updates from the cloud, pushes operational data for analysis, and pulls in third-party content. It enables real-time data sharing between the cockpit and ground operations in ways that traditional avionics cannot architecturally support.

Honeywell has also announced Anthem for the Cirrus Vision Jet G2 Plus, which moves the platform from pressurized turboprop territory down into certified single-engine jet general aviation. The Cirrus customer base has historically been on the leading edge of avionics adoption, and a Vision Jet deployment would accelerate real-world feedback from sophisticated non-airline operators quickly.

The Application Ecosystem: Vision vs. Current Reality

Honeywell has discussed an application ecosystem model for Anthem’s connected layer - a pathway for third-party developers to build certified performance tools, weather integrations, fuel efficiency analysis, logistics connectivity, and other applications on top of the stable certified core. The concept is the avionics equivalent of an App Store: a trusted, certified platform that gets more capable over time without requiring a hardware replacement cycle measured in decades.

As of now, that ecosystem is largely roadmap territory. The FAA certification pathway for third-party applications on connected avionics hardware is still being developed. Anything that influences pilot decision-making carries regulatory weight, and the agency does not yet have a fast-moving, well-established process for approving connected avionics application updates. The timeline from a manufacturer announcement about an open developer ecosystem to a certified third-party application available for deployment is measured in years, not months.

Anthem in the PC-12 NGX is flying today and performing as advertised for its certified capabilities. The broader application library vision is real - but its realization depends on regulatory framework development that remains actively in progress.

Four Engineering Concerns Worth Knowing

Cybersecurity. Connected cockpits introduce internet-connected attack surfaces that are not theoretical. Anthem’s partitioned architecture provides a structural defense - a compromised cloud layer cannot command safety-critical functions or falsify flight instrument data. But the security posture of a connected avionics system requires active, ongoing maintenance rather than a one-time certification stamp. Any pilot flying a connected cockpit should understand what attack surface exists and ask how the manufacturer manages it.

Connectivity degradation. When GoDirect connectivity is unavailable, the certified core functions normally under all conditions. Connected features degrade gracefully; the safety layer never depends on the cloud. That is the correct engineering answer - but in a connectivity-degraded environment, the capability advantage that differentiates the system partially disappears.

Service continuity. Software services get discontinued. EFB providers have come and gone. Weather service integrations have changed on short notice. Honeywell is one of the three largest avionics manufacturers in the world, with aerospace revenue in the billions annually - continuity risk is substantially lower than it would be with a startup. It is not zero. For an aircraft you plan to fly for twenty years, the long-term durability of the connected services layer is a legitimate pre-purchase question.

Market reach. Anthem on the PC-12 NGX is certificated turboprop avionics, priced accordingly. Whether the connected cockpit architecture reaches general aviation in meaningful form within the next decade is genuinely unresolved. The engineering is proven. The economics for lighter aircraft is a different and open problem.

Why This Architecture Matters Beyond One Product

Every major avionics manufacturer is moving toward greater integration, connectivity, and intelligent flight assistance. Garmin’s Autonomi platform drives Autoland and a broad autonomous capability suite. Collins Aerospace Pro Line Fusion has connectivity hooks. Universal Avionics is developing its own connected architecture. The question is not whether connected, software-updatable cockpit platforms are the destination. The question is how fast the industry gets there and whether the FAA certification ecosystem evolves fast enough to unlock the actual potential.

If the FAA develops a repeatable certification pathway for applications running on partitioned avionics architectures, the pace of cockpit capability development changes permanently. We may be looking at the last generation of avionics where the capabilities on delivery day are the capabilities you live with for the life of the airframe.

Anthem is not a trade show concept. It is flying now in pressurized turboprops accumulating serious hours in demanding operational environments - medevac routes, humanitarian missions, terrain-challenged approaches in places with no alternates. That is meaningful evidence. The architectural precedent it sets may ultimately matter more than the system itself.


Key Takeaways

  • Honeywell Anthem uses a partitioned architecture that isolates the certified safety-critical core from a cloud-connected updatable layer, enabling more frequent updates without re-certifying flight instruments.
  • The Pilatus PC-12 NGX, announced at EBACE 2019, was the first production aircraft to fly Anthem as standard fit, with deliveries beginning approximately two years later; the system is now accumulating hours in demanding operational environments globally.
  • Anthem connects natively to Honeywell GoDirect, putting predictive maintenance data, health monitoring, and cloud-based operational analytics directly in the cockpit.
  • A third-party application ecosystem is on Honeywell’s stated roadmap, but the FAA certification pathway for connected avionics applications is still being established - realistic timelines run to years, not months.
  • The structural precedent Anthem sets for the industry - separating certified safety functions from an updatable connected layer - may prove more significant than any single capability the system offers today.

Radio Hangar. Aviation talk, built by pilots. Listen live | More articles