The Airbus A320 family does not simply translate every sidestick movement directly into an equivalent control-surface movement. In its baseline Normal Law, the fly-by-wire flight-control system interprets pilot inputs through computerised control laws and applies a set of flight-envelope protections intended to keep the aircraft within defined operational limits. Airbus identifies high angle-of-attack, high-speed, pitch-attitude, bank-angle, load-factor, low-energy and alpha-floor protections as elements of this philosophy. [1]
These protections are not an autopilot and they do not replace the pilot’s responsibility to manage the flight path. They are embedded in the flight-control laws and are designed to reduce the likelihood that a control input or developing energy state drives the aircraft beyond limits associated with aerodynamic control, structural loading or excessive speed. Airbus describes the overall objective as maintaining control authority while reducing the risk of over-controlling, overstressing, losing control or damaging the aircraft. [2]
What Airbus means by “flight envelope”
An aircraft’s flight envelope is the region of speeds, angles of attack, attitudes, loads and other parameters within which the aircraft is intended to operate. EASA guidance defines the normal flight envelope as the range of altitude and operating speeds established by the manufacturer for routine operation and recognises that fly-by-wire flight-control systems may incorporate speed-protection features. [3]
Airbus extends that concept beyond speed alone. Its public explanation of flight-envelope protection includes angle of attack, pitch attitude, bank angle and vertical load factor as protected parameters. The protections are therefore best understood as a collection of coordinated limits and control-law behaviours rather than one single “stall prevention” function. [1]
Normal Law is the protected baseline
The A320 family’s flight-control system can operate in different control-law configurations depending on aircraft and system status. In the baseline Normal Law, the protection set is available as part of the flight-control logic. Airbus states that the protections in Normal Law are intended to remain available following any single system failure, although certain combinations of multiple failures can result in partial or complete loss of protections. [1]
When failures cause the control laws to degrade, the aircraft can transition to Alternate Law or, in more severe cases, Direct Law. Airbus explains that protection availability changes in degraded law and that the flight crew may then have to manage more of the envelope manually. This distinction matters because statements such as “an Airbus cannot stall” or “an Airbus cannot overspeed” are over-simplifications unless the aircraft’s control-law state and system status are specified. [2]
High angle-of-attack protection
Angle of attack is the angle between the wing’s reference chord and the local relative airflow. As angle of attack increases, lift initially increases, but beyond the wing’s maximum usable angle the airflow separates sufficiently for lift to reduce. Airbus’s high-angle-of-attack protection is intended to prevent the aircraft being driven into the aerodynamic stall region while the relevant protection is available in Normal Law. [1]
Airbus uses the concepts of alpha protection and alpha maximum. In Airbus Safety first material, Vα PROT is the speed corresponding to the angle of attack at which alpha protection becomes active, while Vα MAX corresponds to the maximum angle of attack permitted by the Normal Law protection logic. These values are represented on the primary flight display speed scale when the applicable conditions exist. [4]
The system does not merely hold a fixed minimum airspeed because angle of attack depends on aircraft state, Mach number, load factor and configuration. Airbus notes that the alpha-protection and alpha-maximum relationships vary with Mach number. This is why the protection logic is fundamentally based on aerodynamic state rather than one universal indicated-airspeed threshold. [4]
What the pilot feels when alpha protection activates
In Normal Law, pitch control is based on a flight-control-law interpretation of sidestick demand rather than direct elevator position. As angle of attack reaches the protected region, the control law changes the relationship between sidestick input and aircraft response so that continued aft sidestick cannot command an angle of attack above the protected maximum. Airbus describes the protection as limiting high angle of attack and reducing stall risk. [1]
This is a key reason the A320 feels different from a conventionally controlled aeroplane near the edge of the low-speed envelope. The pilot retains the ability to command the aircraft within the protected range, but the control law prevents further demand beyond the protected angle-of-attack limit while the protection is valid. It is therefore inaccurate to describe the system as the autopilot “taking control”; the pilot is still commanding the aircraft through a control law that contains an aerodynamic boundary. [2]
Alpha floor is a thrust protection, not a control-surface limit
Alpha floor is related to low-energy/high-angle-of-attack protection but acts through automatic thrust. Airbus lists alpha floor among its flight-envelope protections and describes it as a function intended to maintain a suitable aircraft-energy level through an automatic increase in engine thrust when the activation conditions are met. [1]
This distinction is important. High-angle-of-attack protection limits the aerodynamic state through the flight-control law, while alpha floor commands thrust through the autothrust architecture. The two functions support the same broad objective of avoiding an unsafe low-energy condition, but they use different mechanisms. Airbus also identifies low-energy protection separately, showing that the complete philosophy is not one single trigger. [1]
High-speed protection
The opposite end of the envelope presents a different risk. Excessive speed or Mach number can create aerodynamic and structural concerns and may increase control sensitivity. Airbus’s high-speed protection is intended to reduce the risk of overspeed and the control difficulties associated with very high aerodynamic loads. [1]
Airbus Safety first material distinguishes the normal operating limits VMO/MMO from higher design limits. It notes that transport aeroplanes are designed and certificated with margins beyond normal maximum operating speed, while the crew is expected to remain within the published operational limits. High-speed protection is an additional control-law layer; it does not convert VMO/MMO into an optional recommendation. [4]
When the high-speed protection becomes active in Normal Law, the control law changes the aircraft’s response so that the system resists continued movement deeper into the overspeed region and provides a tendency toward a safer speed condition. Exact thresholds and control-law behaviour depend on aircraft standard and are defined in approved Airbus flight-crew documentation, so public summaries should not be used as operating instructions. [1]
Bank-angle protection
An aircraft in a steep bank requires increased lift to maintain altitude, which increases load factor and can consume energy quickly. Very large bank angles can also create unusual-attitude and spatial-orientation risks. Airbus’s bank-angle protection limits bank angle and roll rate in Normal Law to prevent excessive banking and to reduce the possibility of the aircraft approaching an inverted attitude. [1]
The roll-control law also includes a form of bank-angle stability. Within the normal operating range, releasing the sidestick does not simply leave the aircraft behaving like an uncontrolled rolling body. The flight-control law manages roll rate and bank-angle behaviour according to its programmed logic. The important engineering point is that sidestick displacement represents a demand to the flight-control computers rather than a direct mechanical command to the ailerons. [2]
Why 33 degrees is often discussed
Airbus flight-control descriptions commonly distinguish a normal bank region from a higher bank region in which the system provides a restoring tendency. The exact operational behaviour belongs in the approved aircraft documentation, but the underlying purpose is consistent with Airbus’s public description: bank-angle protection is intended to prevent excessive bank and excessively steep turns. [1]
That does not mean the A320 is incapable of turning more steeply than a routine airline turn. The protection envelope allows substantial manoeuvring authority while attempting to keep the aircraft away from extreme bank. It is therefore more accurate to say the aircraft is protected against excessive bank in Normal Law than to claim the computer restricts every turn to one fixed airline-operating angle. [2]
Load-factor protection
Vertical load factor is the ratio between aerodynamic force supporting the aircraft and its weight, commonly expressed in g. Manoeuvres, turbulence and control inputs can increase or decrease load factor. Airbus lists load-factor protection as one of the Normal Law protections and states that it is intended to keep vertical acceleration within limits compatible with aircraft structural protection. [1]
In Normal Law pitch control, the pilot’s sidestick input is interpreted as a demand related to aircraft response rather than a direct elevator deflection. This architecture allows the computers to limit the demanded load factor before it reaches a value outside the protected flight envelope. The benefit is especially clear during abrupt control inputs: the protection is designed to prevent the pilot from unintentionally commanding a structural overstress simply by pulling or pushing the sidestick to its stop. [2]
Pitch-attitude protection
Airbus also includes pitch-attitude protection in the flight-envelope system. The purpose is to prevent pitch attitudes from becoming excessively nose-high or nose-low, which can create energy-management and controllability problems even before a pure angle-of-attack or speed limit is reached. [1]
Pitch attitude and angle of attack are not the same parameter. An aircraft can have a relatively high nose attitude with a moderate angle of attack during a climb, or a high angle of attack at a less dramatic pitch attitude depending on flight-path angle and airflow. Airbus therefore protects both concepts through separate elements of the Normal Law envelope logic. [1]
Low-energy protection
Low-energy situations can develop before the aircraft actually reaches the maximum protected angle of attack. Airbus therefore includes low-energy protection as part of its envelope philosophy. It is intended to alert and protect against combinations of low speed, flight path and thrust state that are eroding the aircraft’s energy margin. [1]
This matters because safe flight is not governed by airspeed alone. A heavy aircraft in a steep climb at low thrust may have a very different energy trend from an aircraft at the same indicated speed in level flight with high thrust available. Modern flight-control and autothrust functions can therefore use multiple aircraft-state parameters to recognise a developing low-energy condition. [2]
The protections rely on valid sensor information
A computerised protection can only work correctly if the system has sufficiently reliable information about the aircraft state. Airspeed, Mach number, angle of attack, inertial data and other parameters feed the flight-control computers. Airbus notes that protection availability can be reduced under certain multiple failures, and EASA certification guidance specifically requires flight-guidance and flight-control integrations to address degradation and crew awareness. [1] [3]
This is why the phrase “the computer will always stop it” is technically unsafe. Flight-envelope protection is a system function with defined assumptions, valid operating laws and failure cases. If sensor or system failures cause the aircraft to leave Normal Law, the crew may have fewer protections and must use the applicable degraded-law procedures and limitations. [2]
Protections do not remove aerodynamic physics
The A320 wing still obeys the same aerodynamic principles as any other wing. It can generate only a finite amount of lift for a given configuration, density, Mach number and angle of attack. The flight-control system does not abolish stall physics, structural load or overspeed; instead, when the relevant protections are available, it uses computerised control laws to keep the commanded aircraft state away from those limits. [1]
Likewise, protection does not create unlimited engine thrust or energy. Alpha floor can command thrust, but engine response, aircraft configuration, altitude and available performance still matter. The protection is a risk-reduction layer inside the certified flight-control and propulsion-control architecture, not a guarantee against every conceivable combination of failures or environmental conditions. [2]
Why the protections matter in gusts and windshear
Airbus specifically identifies high-angle-of-attack protection as useful during dynamic manoeuvres, gusty conditions and windshear because those conditions can change angle of attack rapidly. The flight-control computers can respond to measured aircraft state much faster than a pilot can manually estimate instantaneous wing angle of attack from cockpit sensation alone. [1]
That does not mean the protections replace windshear detection, escape guidance or pilot training. They operate as one layer within the wider aircraft safety architecture. Crews still follow the approved windshear, upset-prevention and recovery procedures for the aircraft. EASA training rules classify modern fly-by-wire and advanced envelope-protection aircraft as a distinct generation requiring appropriate training on the characteristics of these systems. [5]
Why pilots still train for stalls and upsets
Protected fly-by-wire aircraft have not removed the need for stall and upset training. EASA’s air-operations framework includes upset-prevention and recovery training because crews must be prepared for degraded systems, unusual states and circumstances in which normal protection assumptions no longer apply. [5]
That training reinforces an important design principle: automation is most effective when pilots understand what it is doing, when it is available and what changes when it is not. An A320 pilot therefore needs knowledge of Normal Law, Alternate Law and Direct Law rather than treating flight-envelope protection as an invisible guarantee. [2]
Protection and pilot authority
Airbus designed its fly-by-wire philosophy so the pilot remains the person commanding the manoeuvre while the flight-control computers shape those commands within protected boundaries in Normal Law. Full sidestick movement still represents a maximum permitted demand within the applicable protection logic; it is not ignored. This allows substantial control authority without requiring the pilot to manually calculate angle-of-attack or load-factor limits during an abrupt manoeuvre. [1]
The result is a different control philosophy from a purely mechanical aircraft. In a traditional mechanical system, the pilot may be able to command a control-surface deflection that drives the aircraft beyond an aerodynamic or structural limit if the input is sufficiently large. In the A320 Normal Law architecture, the computerised control law sits between cockpit input and surface command and is designed to stop the resulting aircraft state exceeding the protected boundary. [2]
The protections are one part of a wider certified system
Flight-envelope protection depends on redundant computers, sensors, electrical power, hydraulic actuation and flight-control software. EASA certification material for modern flight-guidance systems recognises the close integration between guidance functions and fly-by-wire flight-control protections and requires designers to consider how degradation affects crew information and system behaviour. [3]
Airbus also states that the protection philosophy has continued to evolve across its fly-by-wire families, with later enhancements intended to provide additional protection and alerting in some degraded-law circumstances. Because those enhancements depend on aircraft standard and software configuration, the exact capability of an individual A320-family aircraft must be established from approved Airbus and operator documentation. [2]
What the system actually prevents
The most accurate summary is not that the A320 “flies itself” or that the pilots cannot override the aeroplane. In Normal Law, the flight-control computers interpret pilot commands and deliberately restrict the resulting aircraft state in defined areas: excessive angle of attack, excessive speed, excessive pitch attitude, excessive bank angle and excessive load factor, while low-energy and alpha-floor functions support energy protection. [1]
Those protections represent a major systems-engineering change from conventional mechanical control. The computer is not merely transmitting the pilot’s command faster; it is actively enforcing a certified control law between the pilot and the aerodynamic surfaces. When the required systems and sensor information are available, that architecture gives the A320 family a protected operating envelope that is designed to reduce the chance of a routine pilot input becoming an extreme aerodynamic or structural event. [2]
Verified Sources / References
- Airbus — Safety Innovation #7: Flight Envelope Protection. Airbus manufacturer explanation of high-angle-of-attack, high-speed, pitch, bank, load-factor, low-energy and alpha-floor protections.
- Airbus — Safety Beyond Standard. Airbus explanation of flight-envelope philosophy, Normal Law and degraded-law behaviour.
- EASA Easy Access Rules for Large Aeroplanes — Flight Guidance System and Fly-by-Wire Integration Guidance. Regulatory guidance concerning speed protection and degraded fly-by-wire integration.
- Airbus Safety first — Control Your Speed in Cruise. Airbus technical explanation of VMO/MMO, Vα PROT and Vα MAX.
- EASA Easy Access Rules for Air Operations — Evidence-Based Training Aircraft Generations. European operational-training material identifying advanced flight-envelope protection and fly-by-wire systems.
Editorial Notice
Editorial Notice: This article was prepared using information considered reliable and publicly available at the time of publication. Every reasonable effort has been made to ensure accuracy; however, aviation requirements, technical standards and operational guidance may change as further information or revised regulation becomes available. This article is for general aviation education and reporting and is not a substitute for approved aircraft manuals, operator procedures, regulatory material or professional training. Cockpit King does not allege fault or responsibility against any person or organisation unless confirmed by an authoritative source. If you believe any material is inaccurate, misleading, improperly attributed or should be reviewed for amendment or removal, please contact us with the article title, the specific passage concerned and supporting evidence. We will assess legitimate requests promptly and, where appropriate, correct, clarify, update or remove the material.