Why this matters before mobilisation
A construction drone programme that fails GACA review does not get to fly. Worse, it can put the main contractor’s master licence at risk, because Saudi contractor regulations make the licence-holder responsible for unauthorised aerial activity on their site. Treat GACA permits as a mobilisation gate item, not a phase-two cleanup.
For the broader Saudi construction picture see the Vision 2030 digitisation context and the drone construction monitoring guide.
The four certificates and where they sit
GACA’s framework separates four artefacts. Most newcomers conflate them, then lose three weeks.
| Artefact | What it covers | Held by |
|---|---|---|
| RPAS Operator Certificate | Organisation authorised to operate drones commercially | Company (drone operator entity) |
| Aircraft Registration | Each individual airframe with serial and weight class | Company |
| Pilot Certificate | Each individual pilot, by class | Pilot |
| Flight Authorisation | Specific mission, area, time window | Operator (per mission) |
The first three are evergreen with renewal cycles. The fourth is per-mission. On a Saudi construction site you will request flight authorisations weekly for routine progress tracking, or monthly under a blanket arrangement if your operator certificate scope allows.
Step-by-step path to first authorised flight
Step 1. Pick the operator entity
The RPAS Operator Certificate is held by a Saudi-registered legal entity. International contractors typically use a local subsidiary or contract a Saudi drone services provider. The latter is faster — the entity already holds the certificate and you piggy-back through a service contract.
Step 2. Register each aircraft
Every drone above 250 g operating commercially must be registered with GACA. Submit:
- Make, model, serial number
- Weight class
- Camera and payload list
- Insurance certificate naming the operator entity
Allow up to four weeks as of public data May 2026 for first-time aircraft registration. Mature operators batch register their fleet in advance.
Step 3. Certify pilots
Each remote pilot needs a GACA pilot certificate matching the aircraft class. The certificate covers theory, practical flight, and Saudi-specific airspace knowledge. Foreign pilot licences are not transferable; budget time for KSA-issued certification.
Step 4. Define the mission and submit flight authorisation
This is the per-mission step. The flight authorisation request includes:
- Coordinates of the operating area (polygon, not a single point)
- Maximum altitude AGL
- Time window with precise start and end
- Pilot in command
- Aircraft serial
- Operation type (VLOS / EVLOS / BVLOS)
- Site authority approvals — the contractor permit chain below
- Risk assessment referencing SORA-like criteria
Step 5. Coordinate with airspace stakeholders
If the site is within a controlled-airspace radius of an airport — King Khalid International, King Abdulaziz International, King Fahd International, or any of the regional airports — additional coordination through the local Air Traffic Control (ATC) is required. Allow more lead time near airports. NEOM, Trojena, Sindalah, and the Red Sea projects each maintain their own airspace coordination offices on top of GACA — confirm requirements with the project authority.
Step 6. Fly within the authorised envelope
Stay inside the polygon, the altitude cap, and the time window. Deviation invalidates the authorisation and triggers an incident report.
The contractor permit chain that trips up newcomers
GACA’s authorisation is necessary but not sufficient. On a Saudi construction site you also need:
- Site authority approval. Aramco, NEOM, Royal Commission for Riyadh City, Royal Commission for Jubail and Yanbu, the Royal Commission for AlUla, and others each have their own drone-flight approval workflow on top of GACA.
- Main contractor approval. The EPC main contractor must consent in writing.
- HSE approval. Site HSE reviews the flight plan against active permits — particularly hot-work and confined-space permits, where a drone overhead changes the risk picture.
- Security approval. Many sites — particularly in the Eastern Province and around critical infrastructure — require security sign-off because aerial imagery falls under sensitive-information rules.
- PDPL alignment. Captured imagery containing identifiable persons triggers PDPL obligations. Even at low altitude, plan for retention windows and access control.
A common failure pattern is securing GACA authorisation on time and missing the security or HSE step on the day of flight. Build the dependency map before mobilisation.
BVLOS — the 2026 picture
Beyond Visual Line of Sight (BVLOS) operations remain restricted in 2026 and require a higher-tier authorisation. As of public data May 2026, BVLOS approvals are granted case-by-case, typically supported by:
- Detect-and-avoid technology onboard
- Redundant command-and-control link
- Detailed airspace risk assessment
- Operator track record on VLOS missions
- Coordination with ATC for the operating corridor
For routine construction monitoring — site progress, stockpile volumetrics, perimeter checks — VLOS or EVLOS is sufficient. Plan BVLOS only when the site geometry demands it (linear infrastructure, very large open sites). The drone services overview covers operational scoping.
No-fly zones to map before flying
GACA publishes restricted areas; layer them with project-specific overlays before submitting authorisation requests.
- Around airports — controlled airspace radius varies by airport class
- Around military installations — typically no-fly without dedicated coordination
- Around royal palaces and government compounds
- Around the two Holy Mosques and surrounding areas
- Around critical infrastructure such as oil and gas facilities, power plants, water utilities
For oil and gas sites specifically see the oil and gas drone inspection guide.
Insurance and incident response
GACA requires third-party liability insurance for commercial drone operations. Coverage levels in 2026 commonly start at SAR 1,000,000 per incident; mega-project owners frequently require higher limits. Confirm the limit against the contract before signing.
In an incident — loss of control, deviation from authorised area, third-party damage — the operator entity must file an incident report with GACA within the prescribed window and notify the site authority and main contractor immediately. Build the runbook before the first flight, not after the first incident.
A realistic timeline
For a contractor starting from zero, the realistic public-data timeline as of May 2026:
| Phase | Duration |
|---|---|
| Operator entity setup (if new) | 6–10 weeks |
| Operator certificate application | 8–12 weeks |
| Aircraft registration (per fleet) | 2–4 weeks |
| Pilot certification (per pilot) | 4–8 weeks |
| First flight authorisation | 2–4 weeks |
Existing Saudi drone services providers compress this dramatically — the typical lead time from contract signing to first authorised flight is 2–6 weeks because the operator certificate, aircraft registrations, and pilot certificates are already in place. See the drone services capability for typical contracting patterns.
Next steps
If you are scoping a 2026 construction-site drone programme, start with the drone site survey solution, the drone services capability, and the Vision 2030 digitisation context. For airspace planning around oil and gas review the pipeline inspection workflow.
Request a GACA permit assessment for your site and we will produce a permit-chain map and flight-authorisation template within 5 working days.
