FADEC and EECU: the digital brain of modern engines
In many modern aircraft the pilot selects power — and a computer with full authority decides how to deliver it. What FADEC does, why it is dual-channel, and why its degraded modes deserve your attention.

What if the most critical engine decisions in flight were no longer made directly by the pilot?
In many modern aeroplanes and helicopters, turbine engines are controlled by a FADEC — Full Authority Digital Engine Control. As the name says, the system has full authority over the engine: there is no direct mechanical link that lets the pilot override it in normal operation.
What a FADEC does
A FADEC doesn't simply assist the pilot. It directly controls fuel flow and continuously manages the engine to:
- deliver the selected thrust, or in helicopters the required rotor speed (NR) and power,
- prevent exceedances — over-temperature, over-speed and over-torque,
- keep the engine within its certified limits in every phase,
- manage start sequences, accelerations and decelerations,
- optimise performance and efficiency.
The EECU at the core
At the heart of the system is the Electronic Engine Control Unit (EECU) — called the ECU or EEC in some installations. It is a computer that:
- receives inputs such as shaft speeds (N1, N2 or NG/NF), temperatures, pressures and the pilot's power demand,
- processes them through certified control laws,
- commands the fuel metering unit and, where fitted, variable geometry such as bleed valves or stator vanes.
Built for failures
Because so much depends on it, a FADEC is designed to tolerate failures:
- Most certified installations are dual-channel: two independent channels, one active and one in standby, so a single failure does not cause loss of engine control.
- Sensors are often duplicated, and the system compares them to detect faults.
- Some installations provide a backup or manual mode that lets the pilot control fuel flow directly if the digital control is lost — with reduced or no automatic limit protection.
The benefits — and the professional question
The benefits are clear: lower workload, precise limit protection, consistent performance and protection from inadvertent exceedances.
But full authority raises a question every pilot of a FADEC-equipped aircraft should be ready to answer:
If software has full authority over engine limits, how well do I understand its logic, its degraded modes and its behaviour after a failure?
Selecting power is straightforward. Knowing what the system is doing — especially when it is no longer in its normal mode — is where real professional competency begins. Questions worth knowing for your type:
- What happens if one channel fails? Is there any crew action?
- Is there a manual/backup mode? How is it engaged, and which protections are lost?
- How are FADEC faults annunciated, and what are the associated limitations?
- How does the system behave if a sensor input is lost or erroneous?
Check yourself
Knowledge check
Keep learning
Try the free course Human Factors Essentials for Pilots, or create an account to follow new articles.
