Investigation Summary
AF447 entered the Inter-Tropical Convergence Zone overnight. Ice crystals blocked the three pitot probes, causing airspeed disagreements. The autopilot and autothrust disconnected and the flight control law reverted to Alternate. The pilot flying pulled back on the side-stick — a fully nose-up input held for most of the descent — putting the A330 into a deep stall at 16° angle of attack. Neither pilot recognised the stall warning before the aircraft struck the Atlantic three minutes and thirty seconds later.
Final Conclusions
The BEA concluded the accident resulted from a temporary inconsistency between airspeed measurements — caused by the obstruction of the Pitot probes by ice crystals at cruise altitude — that led to autopilot disconnection. The crew, faced with an unreliable-airspeed situation in a high-altitude, dark, and turbulent environment, responded with inappropriate sustained nose-up sidestick inputs. The aircraft entered an aerodynamic stall from which it never recovered, descending in a stalled attitude for approximately 3 minutes 30 seconds until impact. Underlying factors included inadequate high-altitude unreliable-airspeed and stall-recovery training, weak crew coordination on the flight deck, and ergonomic limitations of the dual-sidestick system that masked the pilot flying's inputs from the other crew members.
Video Analysis
TITANIC of the Skies! - The Air France 447 Accident Explained — A minute-by-minute breakdown of the cockpit dynamics, side-stick design, and stall recovery training that emerged from AF447.
Watch on YouTube ↗If playback is blocked, the owner has disabled embedding — use the link above.
Systems & Failure Modes
Pitot-Static System
Three independent pitot probes measure ram air pressure to compute airspeed. Ice crystals at high altitude can briefly block all three, producing the 'Unreliable Airspeed' condition.
Airbus Flight Control Laws
Normal Law provides full envelope protection. When sensor data degrades, the system drops to Alternate Law which removes stall protection — the aircraft can be stalled. Crews must recognise the law transition from the ECAM.
Stall Recovery Memory Item
Post-AF447, manufacturers and regulators revised the procedure: pitch DOWN, full thrust later. Previously, 'power out of the stall' encouraged pitch-up inputs that worsened high-altitude stalls.
Interesting Facts
- 01Side-stick inputs from the two pilots are not mechanically linked — neither pilot could feel the other's control input
- 02The stall warning paradoxically stopped when AoA exceeded 40° because the system rejected the reading as invalid
- 03The flight data and cockpit voice recorders were recovered from 3,900m depth two years after the accident
Safety Actions & Advisories
Replacement of Thales AA Pitot probes
Source ↗EASA mandated replacement of the Thales AA-model Pitot probes on the A330/A340 fleet with the Thales BA or Goodrich models, which had shown better resistance to high-altitude ice-crystal icing.
Mandatory high-altitude upset & stall recovery training
ICAO, FAA and EASA introduced mandatory recurrent training on manual handling at high altitude, recognition of and recovery from approach-to-stall and full stalls, and the unreliable-airspeed procedure — moving away from the previous "minimum altitude loss" doctrine.
Underwater locator beacon (ULB) requirements
ICAO Annex 6 was amended (2018) to require flight-recorder ULBs to operate for 90 days instead of 30, and to mandate an additional low-frequency airframe ULB with a 90-day life detectable at long range — a direct response to the two-year sea-floor search.
Flight-data streaming / autonomous distress tracking
ICAO GADSS framework (Global Aeronautical Distress and Safety System) required autonomous distress tracking once per minute for airliners in distress, with phased deadlines from 2021.
Cockpit ergonomics review
Renewed industry discussion of non-coupled sidesticks and of crew cross-monitoring procedures; Airbus revised SOPs to reinforce verbal callouts of sidestick inputs in abnormal situations.
BEA Final Report
Source ↗Final report on the accident — the canonical technical reference.