The Honeywell Anthem, the Software-Defined Cockpit Built for the eVTOL Era, and What Cloud-Connected Avionics Mean for Every Aircraft That Comes After

Honeywell Anthem is a certified avionics suite built on a fundamentally different architectural premise than any major platform that came before it: the software can evolve after the aircraft is delivered. For an industry where certification has always tied software inseparably to specific hardware, that is not an incremental improvement. It is a structural departure.

The platform is designed around large-format touchscreen displays, cloud data connectivity, and a partitioned software architecture that separates the application layer from the underlying hardware certification baseline. Its primary early adopter is Vertical Aerospace, which is integrating Anthem into the VX4 eVTOL air taxi currently pursuing type certification from both the FAA and the UK Civil Aviation Authority.

Why Aviation Has Never Had Updatable Avionics

Understanding what Anthem represents requires understanding why over-the-air avionics updates have never existed before.

Under Title 14 CFR Part 23 (general aviation) and Part 25 (transport category), avionics certification is bound to a specific hardware configuration. The software and the hardware are inseparable in the certification record. Change the chip, and you re-certify. Update the firmware at a sufficient criticality level, and you go through a formal software change approval process.

The governing standard is RTCA DO-178C, which defines five software criticality levels. Level E covers software whose failure has no safety effect. Level A covers software whose failure could cause or contribute to a catastrophic aircraft failure. Level A requirements include tracing every high-level function down to every line of object code, with structural coverage analysis demonstrating that every executable path in the program was exercised during formal testing.

That rigor is not a flaw. It is the deliberate philosophy: we know exactly what we approved, and anything that deviates goes back through the process. The result is that a glass cockpit installed in 2004 still runs the same fundamental architecture as the day it was certified.

What “Software-Defined” Actually Means Here

Anthem’s architecture attempts to separate the software application layer from the underlying hardware in a way that lets both maintain certification while allowing the application layer to evolve more quickly.

The hardware platform is designed as a stable, long-lived foundation. The display logic, data processing algorithms, and user interface can potentially be updated through a certificated software update path without requiring full re-certification of the entire platform. Features that exist in software can be added to an aircraft after delivery - not through modifications that break the approval, but through a controlled, documented update process built into the architecture from the beginning.

That is genuinely new for a major certified avionics platform.

Honeywell is not a startup making architectural promises. The company built the Primus Epic flight management systems, TCAS hardware, and the Enhanced Ground Proximity Warning System (EGPWS) - the system that says terrain, terrain, pull up in transport category cockpits. These are foundational systems in the certification and safety architecture of commercial aviation. When this manufacturer says it has rethought flight deck design from the ground up, the claim carries weight.

The Touchscreen Certification Challenge

Anthem uses a touchscreen-first interface on large-format, high-resolution displays. Its computing architecture is described by Honeywell as closer in processing power to modern consumer electronics platforms than to traditional embedded avionics processors.

Touchscreens in a cockpit have historically attracted regulatory caution for a specific reason: inadvertent input. Turbulence, startle response, reaching across the panel, a gloved hand on approach in December - the certification question is whether a touchscreen interface introduces a class of pilot errors that a traditional knob-and-button interface would not.

Garmin has phased in touchscreen interaction carefully across its product line, maintaining physical backup controls for flight-critical functions while expanding touch for navigation and systems management. Collins Aerospace has followed a similar incremental approach. Anthem goes further in the touchscreen direction than most certified competitors have been willing to go in a primary flight deck role.

Whether that decision is correct depends entirely on how the certification data supports it. The human factors testing is what settles the question - not intuition about touchscreens in either direction.

Who Is Building Aircraft Around Anthem

Vertical Aerospace is the most prominent early adopter. The British eVTOL company is developing the VX4, a fixed-wing electric vertical takeoff and landing aircraft designed to carry a pilot and four passengers on regional routes. The aircraft uses distributed electric propulsion with multiple rotors for vertical flight, transitioning to wing-borne flight in cruise. Honeywell is providing the core avionics architecture including flight management and vehicle systems integration.

The eVTOL market is a natural fit for this kind of platform for a structural reason: these are clean-sheet type designs. There is no legacy panel to retrofit, no existing certification basis that assumes a particular hardware stack. Manufacturers can adopt a software-defined approach from the beginning rather than integrating it into an architecture built around very different assumptions.

For traditional fixed-wing and rotary-wing aircraft, the adoption path is harder. Moving from a certified Garmin G1000 or Collins Pro Line Fusion to a completely different avionics architecture means a panel replacement, a new Supplemental Type Certificate, a shop visit measured in weeks or months, and certification costs that have to be justified against operational benefits.

The Competitive Pressure on Garmin and Collins

Garmin dominates general aviation avionics. The G1000, G3000, and G5000 families have defined the cockpit experience for a generation of aircraft. Collins Aerospace holds a large share of commercial and business aviation avionics with the Pro Line Fusion suite. These are deeply certified, operationally proven platforms with large installed bases and extensive service networks.

Neither is going to be displaced overnight.

What Anthem introduces is a competitive benchmark around the software update model and user experience. If Honeywell can demonstrate that a touchscreen-first, software-updatable architecture achieves equivalent certification rigor while enabling a faster feature development cycle, it shifts what aircraft manufacturers can ask for across the market. The first generation of glass cockpits appeared in the 1980s and 1990s, and while they were a dramatic improvement over analog instruments, the interface paradigm - softkeys along the display edge, knobs for data entry - was designed around technology constraints that no longer exist.

Anthem’s underlying question is whether pilots who have grown up navigating complex information on touchscreen devices are better served by avionics that meet them where they are. That is an empirical question settled by human factors research, not assumption.

Cloud Connectivity and Why Cybersecurity Is the Hard Part

Anthem is designed around a connected ecosystem. Flight plan updates, weather data, and operational information can flow into the aircraft through a managed data link rather than exclusively through traditional ATIS broadcasts and manually entered data. The key word in Honeywell’s description is certificated - this connectivity is not bolted on. It is designed into the architecture.

The regulatory concern is direct. If avionics can receive data from outside the aircraft, they can theoretically receive corrupted or malicious data from outside the aircraft. The applicable standard is RTCA DO-326A, which addresses how manufacturers must identify and mitigate security risks for aircraft with external data connectivity. Honeywell has described Anthem as using a partitioned architecture to address the boundary between the connectivity layer and the flight-critical computing layer.

The regulatory work around connected avionics cybersecurity is not finished. As more aircraft enter service with meaningful external data connectivity, scrutiny will increase. This is not a reason to stop developing connected avionics - it is a reason to watch closely how the certification approach develops over the next several years.

The Economics Argument: Why This Matters Beyond eVTOL

Certifying a new avionics suite at Level A criticality under DO-178C - accounting for design, verification, documentation, independent auditing, and regulatory engagement - can cost hundreds of millions of dollars for a major platform. That cost has historically been amortized across large production runs for commercial transport aircraft. It is one significant reason general aviation aircraft have carried avionics that lag behind the state of the art, and why upgrading a certified panel costs so much relative to the underlying hardware value.

If a software-defined architecture reduces the per-feature certification cost by separating the application layer from the hardware certification baseline, the economics shift. Smaller programs can access more capable systems. Features certified for one aircraft category can potentially be deployed across a broader range of aircraft. The gap between what avionics can do and what current technology would allow might narrow rather than widen.

What This Means for Pilot Currency

A software-defined avionics architecture creates a new relationship between the pilot and the systems that support flight. When avionics software can be updated, the system the pilot trained on and the system the pilot flies can diverge.

Type ratings and instrument currency today are tied to procedures and aircraft systems as defined in the Aircraft Flight Manual and associated approved documentation. When software defines significant portions of the aircraft’s operational behavior - and that software can be updated after certification - the question of what constitutes currency becomes more complex. What was true the last time you flew a particular aircraft might not be true today if an update changed how a system presents information or manages a mode.

This is not a problem unique to Anthem. It is a question the entire industry will have to work through as software-defined systems become more common. Anthem brings it into focus because the platform is designed from the beginning around the assumption that the software will evolve.

Honeywell has also described Anthem as designed to support both piloted and future autonomous operations - an architectural statement, not a near-term product claim, about where the platform is intended to go. The avionics software for a remotely supervised autonomous air taxi is a fundamentally different thing from the avionics software for a pilot in the loop. Designing a single platform to support both within the same certification framework is an enormous engineering ambition.

Whether Honeywell delivers on that ambition over the next decade is an open question. But the fact that a major certified avionics manufacturer is designing toward that goal reflects where the industry believes aviation is heading.

Key Takeaways

• Honeywell Anthem is the first major certified avionics platform architecturally designed to allow post-delivery software feature updates, separating the application layer from the hardware certification baseline under RTCA DO-178C.
• The platform’s touchscreen-first design goes further than Garmin or Collins have been willing to go in a primary flight deck role; certification data, not design intuition, will determine whether that approach meets the standard.
• Vertical Aerospace is integrating Anthem into the VX4 eVTOL air taxi, which is pursuing simultaneous type certification from the FAA and the UK Civil Aviation Authority.
• Cloud-connected avionics introduce genuine cybersecurity requirements under RTCA DO-326A; the regulatory framework around this is still developing as more aircraft enter service with external data connectivity.
• If software-defined architecture reduces per-feature certification costs, the economics of avionics development shift in favor of smaller programs and faster capability deployment across all aircraft categories - not just eVTOL.
• Updatable avionics create an unresolved pilot currency question: type ratings and instrument currency are defined against documented aircraft systems, and software that can change after certification complicates what staying current actually means.