The EHang EH Two Sixteen-S: The World's First Type-Certificated eVTOL and the Cockpit That Has No Controls

In October 2023, China’s Civil Aviation Administration (CAAC) issued the world’s first type certificate for an electric vertical takeoff and landing aircraft. That aircraft is the EHang EH216-S, built in Guangzhou, and it has no flight controls. No stick, no rudder pedals, no throttle, no yoke. The person seated inside cannot fly it - they are a passenger, and the aircraft decides everything from liftoff to touchdown.

What Is the EHang EH216-S?

EHang is a Chinese aerospace company founded in 2013 in Guangzhou. It started in consumer drones but was building toward passenger-carrying platforms from early on. The EH216-S is the commercially certified version of that decade-long development effort.

The “S” designation stands for Special - indicating a special type certificate issued while the CAAC simultaneously developed its eVTOL-specific regulatory standard. That distinction matters for understanding what the certificate actually validates.

The aircraft seats two passengers side by side. It has 16 rotors arranged in 8 pairs, each pair mounted coaxially on the same arm, with one rotor spinning clockwise and one counterclockwise. Eight arms radiate symmetrically around the airframe. Each rotor has its own dedicated brushless electric motor - 16 motors, all independent.

EH216-S Performance Specifications

Maximum takeoff weight: approximately 600 kg
Maximum payload: approximately 220 kg (about 485 lbs) - two adults with personal luggage
Maximum cruise speed: approximately 130 km/h (roughly 70 knots)
Service ceiling: approximately 3,000 meters
Range: approximately 35 km (19 nautical miles)

The 19-nautical-mile range is the honest constraint of this aircraft. It is sufficient for intra-urban air taxi runs between dedicated landing pads or sightseeing circuits over a city. It does not connect cities, and EHang has never claimed otherwise. The declared use case is intra-urban, and current battery energy density sets the ceiling.

Propulsion is purely battery electric with no hybrid backup. Aircraft charge at ground stations between flights. Certified operators in China maintain the pads and battery infrastructure as part of their air operator certificates. Turnaround time between flights is longer than a helicopter - you are waiting on a battery charge, not a fuel truck.

What Is It Like Inside an Aircraft With No Controls?

The cabin contains a small touchscreen showing the planned route, estimated flight time, and battery state. There is an emergency call button. That button does not transfer control to the passenger. Pressing it alerts the ground control center and triggers a predefined safety response from the flight management system - which may initiate an immediate landing at the nearest approved pad. The passenger is not flying anything by pressing it. They are asking the system to execute a safety protocol.

A licensed operator monitors the aircraft from a ground control station. Under EHang’s current operational standard, one operator can monitor multiple aircraft simultaneously. The operator watches system health dashboards, approves or flags route segments, and can intervene if the flight management system encounters something outside its parameters. Moment-to-moment flight execution is handled entirely by onboard computers and the sensor suite. The operator provides supervision, not stick input.

How the Redundancy System Works

The 16-motor configuration is built around redundancy through distribution. Losing one motor means losing one rotor. The other 15 keep turning. Flight control algorithms redistribute torque in real time to compensate for asymmetric thrust.

EHang has published testing data showing the aircraft can maintain controlled flight with four motors failed simultaneously, provided those failures are distributed around the airframe rather than clustered on one side. That redundancy is the central design philosophy, not a byproduct of it.

What the CAAC Type Certificate Actually Means - and What It Doesn’t

The CAAC did not have a pre-existing eVTOL certification standard before EHang came along. The standard was developed alongside the aircraft through a multi-year collaborative regulatory engineering process. It was built specifically around EHang’s operational concept: fully autonomous, two-seat, urban, geofenced, low-altitude, with a ground control station in the loop.

That is a different certification basis than what the FAA is applying to Joby’s S4. The FAA is certifying a piloted tilt-rotor powered-lift aircraft under an amended type certificate pathway that adapts existing fixed-wing and rotorcraft standards for a new vehicle category. It is a harder certification path in certain respects, and it produces a certificate that integrates more directly with the FAA’s existing airspace management infrastructure.

The European Union Aviation Safety Agency (EASA) has developed its own eVTOL-specific standards under the Special Condition VTOL framework. As of this writing, neither EASA nor the FAA has issued a type certificate to EHang for the EH216-S. The aircraft operates in the United States and Europe only under experimental or demonstration-flight permits - not as a certificated commercial passenger operation.

The CAAC is a serious aviation regulator overseeing one of the largest and fastest-growing civil aviation markets in the world. The EH216-S was not rubber-stamped. What the CAAC certificate validates is the aircraft for the specific operational concepts the CAAC defined. Whether that translates to FAA-recognized operations in American airspace is a separate question, and currently the answer is no - not because the CAAC certificate is illegitimate, but because the FAA’s regulatory framework for fully autonomous commercial passenger aircraft in complex shared airspace does not yet have a complete pathway. EHang has applied for FAA certification; as of this writing, that process is ongoing.

The Core Philosophical Divide in eVTOL Development

American eVTOL companies have largely committed to a transition model: fly with a pilot first, prove the aircraft, build public trust, accumulate operational data, then petition for progressive automation toward pilotless operations. Joby’s S4 has a pilot seat. Archer’s Midnight has a pilot seat. The strategy enters the market under existing certification frameworks and evolves from there.

EHang inverted that logic from the first prototype. Their stated argument in engineering publications is that a vehicle designed for automation is simpler and more reliable than one engineered around a human pilot. Removing the cockpit eliminates a complex man-machine interface, the weight and volume of controls and instruments, and the accident modes associated with human error. For a short, defined, low-altitude route between two known points within a geofence, EHang’s position is that a well-designed autonomous system is already safer than a human pilot.

That argument has a serious version worth taking on its merits. Decades of aviation evidence show that automation reduces accident rates when designed and implemented correctly. Autoland systems execute instrument approaches with more precision than most hand-flying pilots. TCAS makes avoidance decisions under time pressure that humans typically cannot match.

The counterargument is equally serious. There is not yet sufficient data on fully autonomous passenger aircraft operating at scale in complex urban environments to understand how they fail at the tail of the distribution. A century of accident investigation has characterized pilot failure modes in detail, and aviation training, regulation, and surveillance are built around those known failure modes. For autonomous systems, that mapping is still in its early chapters. The FAA’s conservatism reflects the reasonable position that poorly characterized failure modes in a pilotless aircraft are not absorbed by the person at the controls - they land on whoever trusted the system enough to get in. That changes both the liability and the moral calculus, and it is why regulators move deliberately on this category.

EHang’s Current Commercial Operations

[As of July 2026] EHang has active revenue operations in China, primarily tourism and sightseeing: scenic flights in Guangzhou, Shenzhen, and a growing number of resort and scenic areas. Demonstration flights have been conducted in Dubai, Norway, Japan, Germany, and other countries under local permits.

The company has been listed on the NASDAQ since 2019 and reports quarterly on deliveries and orders. Operators in China are taking delivery of CAAC-certificated EH216-S aircraft and charging for passenger flights - placing EHang in a distinct category from most of the eVTOL field, which remains in prototype and certification phases.

EHang has logged tens of thousands of total flight hours across their platforms since 2017, spanning demonstrations, test programs, and early commercial operations. No passenger fatalities in commercial service have been publicly reported, though reporting on Chinese aviation incidents is not uniformly as transparent as FAA incident data, and absence of reported incidents is not identical to absence of incidents.

The company has extended the platform intelligently. The EH216-F is a firefighting variant that replaces the passenger cabin with a suppressant tank, generating flight hours and municipal revenue while sidestepping passenger certification complexity. A higher-payload variant, the EH216-S Plus, is in development with extended range. The VT-30, a lift-plus-cruise aircraft with fixed wings for the cruise phase, represents EHang’s probable path toward addressing the current range limitation in a serious way.

Why This Matters for Pilots and the Industry

The EH216-S is not a theoretical concept. It is a type-certificated aircraft carrying paying passengers in commercial service. Every flight generates engineering data and regulatory precedent that shapes what comes next.

The philosophical question the aircraft forces - what role, if any, should a human being play in an air taxi - is no longer a future debate. That debate started when the CAAC signed the certificate in October 2023. The American path to eVTOL is more rigorous in certain respects, applies to more capable aircraft doing more complex operations, and certificates issued at the end of that process will open a significantly broader operational scope. That work matters and it is moving.

But EHang currently has more type-certificated eVTOL aircraft flying commercial passengers than any other company in the world. The argument that full autonomy cannot be trusted until it is proven, and cannot be proven until it is trusted, is being worked through in China one passenger flight at a time.

Key Takeaways

The EHang EH216-S received the world’s first eVTOL type certificate from the CAAC in October 2023 - before any U.S. or European competitor crossed that line.
The aircraft has no flight controls; passengers cannot intervene in flight, and the ground-based licensed operator supervises system health rather than flying the aircraft moment to moment.
Sixteen independent motors provide deep redundancy; EHang’s published testing data shows controlled flight is achievable with four motors failed simultaneously.
The 19-nautical-mile range limits the EH216-S to intra-urban operations - the aircraft is sized for sightseeing and crosstown air taxi, not regional routes, and EHang has never positioned it otherwise.
The CAAC type certificate is not recognized by the FAA or EASA for commercial passenger operations; flights in the United States and Europe operate only under experimental or demonstration permits.