You’ve priced the work, mobilised the team and booked the possession. Then the Approval in Principle comes back with comments, the Network Rail Asset Engineer wants a Category 3 check you hadn’t allowed for, and suddenly a 54-hour window is at risk. On the railway, the design is rarely the hard part – proving it is.
The Network Rail approval process exists for good reason. It protects an operational railway carrying passengers at speed, over structures that are often more than 150 years old, with asset records that can be incomplete. But for project managers, bid managers and design engineers coming to rail from highways, water or building work, the certification framework can feel opaque. This guide explains what the approval process is, what each certificate does, and how to choose the right route for your project.
The assurance chain at a glance
Select a certificate to see what it proves, who signs it and when it happens.
Form A — Approval in Principle
What it proves. How you intend to design the works, agreed before you design them: scope, standards, loading, materials, design life, the proposed check category and any departures from standards.
Who signs. Submitted by the designer; accepted by the Network Rail Asset Engineer or Professional Head.
When. Before detailed design starts.
Watch out: departures must be identified here, not during detailed design. This is the single highest-leverage document in the process.
Form B — Design Certificate
What it proves. The completed design complies with the approved AIP, the applicable standards and the design brief, prepared by competent people under a controlled quality system.
Who signs. The CRE (Design) or equivalent named engineer — a personal, accountable signature, not a corporate rubber stamp.
When. Before the design can be issued for construction.
Form C — Design Check Certificate
What it proves. The design has been independently checked to the category agreed at AIP stage — Category 1, 2 or 3, driven by risk rather than fee value.
Who signs. The independent checker, at the agreed level of independence.
When. Alongside the Design Certificate, before construction.
Watch out: a Category 3 check on a complex structure is not a two-week exercise. Build it into the baseline, not the contingency.
Form G — Construction Compliance Certificate
What it proves. The works as constructed comply with the approved and certified design, including any design changes properly processed during construction.
Who signs. The CRE (Construction), supported by inspection and test records, cube results, pile records, weld and coating certification and as-built survey data.
When. At the end of the construction phase, for each element or package.
Form G is the bridge between “designed correctly” and “built correctly”. Without it, the assurance chain has a gap and handback is at risk.
Form H — Completion / Entry into Service
What it proves. The works are complete, the assurance evidence is in place, outstanding items are recorded and managed, and the asset is safe and suitable to enter or return to service.
Who signs. Top-level sign-off, accompanied by updated asset records, O&M information and a residual risk register.
When. At handback and handover into operational maintenance.
This is the certificate the Route Asset Manager and Operations Director care most about — it is what allows the railway to run.
Why the Network Rail Approval Process Catches Projects Out
Most delays we see aren’t caused by bad engineering. They’re caused by sequencing and scope misunderstandings in the assurance process:
- The Approval in Principle (AIP) is treated as a formality rather than a technical negotiation.
- The design check category is assumed rather than agreed, so an independent checker is appointed late.
- Departures from standards are identified during detailed design instead of at AIP stage.
- As-built information is thinner than expected, so the design cannot be certified without further survey work.
- Construction-stage certification is left to the site team, who inherit a paperwork trail nobody planned.
Each of these adds weeks. On a railway programme built around fixed access windows, weeks translate directly into cost and reputational risk.
What the Network Rail Approval Process Actually Is
At its simplest, Network Rail’s approval process is a structured chain of engineering assurance: a documented sequence in which the design intent is agreed, the design is produced and independently checked, the works are constructed in accordance with that design, and the completed asset is confirmed as safe to enter service.
That chain is delivered through named, accountable roles rather than anonymous organisations. Depending on the contract you’ll encounter:
CEM
Contractor’s Engineering Manager
Accountable for engineering management and assurance across the project.
CRE
Contractor’s Responsible Engineer
A discipline-specific role (civils, structures, drainage, geotechnics) responsible for the design or the works within that discipline.
CLIENT SIDE
Network Rail Asset Engineer / Professional Head
The client-side technical authority who accepts the design intent and approves any departures from standards.
INDEPENDENT
Independent Design Checker
Appointed at the check category agreed at AIP stage.
These roles sit alongside Network Rail’s project lifecycle. Since 2019 that lifecycle has been governed by PACE (Project Acceleration in a Controlled Environment), which replaced GRIP. PACE is more flexible and outcome-focused than GRIP’s eight-stage model, but the engineering assurance requirements underneath it have not gone away – if anything, clear certification has become more important now that the stage gates are less prescriptive.
One important distinction: if you are a third party working near the railway – a developer, a highways authority, a utility – your route in is normally through Network Rail’s Asset Protection team, usually under a Basic Asset Protection Agreement (BAPA). The certificates are broadly the same; the commercial and access arrangements are not. Get that clear at the outset, because it determines who pays for the review time.
A word of caution on form letters: Network Rail’s certificate designations differ between standards, issues and, occasionally, regions. Some teams refer to Form A/B/C, others to Form 001/002/003. The functions described below are consistent; the labels are not always. Always confirm the current forms with the Network Rail Asset Engineer or the project CEM before you build a programme around them.
The Network Rail Certificate Types Explained
Form A - Approval in Principle (AIP)
What it is: The AIP sets out how you intend to design the works before you design them. It captures the scope, the design standards and Eurocode National Annexes being applied, loading assumptions, materials, durability and design life, the proposed check category, and – critically – any departures from standards you need Network Rail to accept.
When and why you’d use it: Almost always, for permanent works affecting a Network Rail asset. Think of Form A as the point at which you and the client agree the rules of the game. Approval here removes the risk of a fundamental disagreement surfacing at detailed design, when reworking is expensive.
Example project: A Victorian masonry underbridge requires strengthening to accommodate increased axle loads. The AIP confirms the assessment code being used, the condition data underpinning it, the proposed strengthening philosophy (saddle slab versus sprayed concrete lining), and a departure application for headroom below current standards that cannot physically be improved. Nothing is drawn in detail until that is accepted.
Key takeaway: The AIP is the single highest-leverage document in the process. Invest in it.
Form B - Design Certificate
What it is: The designer’s formal statement that the completed design complies with the approved AIP, the applicable standards, and the design brief – and that it has been prepared by competent people under a controlled quality system. It is signed by the CRE (Design) or equivalent named engineer.
When and why you’d use it: For every permanent works design package that has been through AIP. Form B is what allows the design to be issued for construction. It is a personal, accountable signature, not a corporate rubber stamp – which is precisely why Network Rail values it.
Example project: A station car park and access road drainage renewal, including new attenuation and a controlled discharge to an existing culvert. Once the hydraulic calculations, adoption arrangements and detailing are complete and consistent with the AIP, the Design Certificate is issued for the package.
Form C - Design Check Certificate
What it is: The independent checker’s certificate, confirming that the design has been checked to the category agreed in the AIP. In broad terms, and subject to project-specific agreement:
| Check category | Typically means |
|---|---|
| Category 1 | Check by a competent person independent of the designer, usually within the same team |
| Category 2 | Check by a separate team within the same organisation, with no involvement in the design |
| Category 3 | Check by a wholly independent organisation, often including an independent re-analysis |
When and why you’d use it: Wherever the AIP requires it – which is most structural work of any consequence. The category is driven by risk: complexity, novelty, consequence of failure, proximity to the operational railway and the confidence in existing asset information.
Example project: A new steel footbridge over four electrified running lines at a commuter station. Given the consequence of failure, the modular lift-in methodology and the electrical clearances involved, a Category 3 independent check is specified. A separate consultancy re-analyses the structural model, the bearing and articulation details, and the temporary condition during the lift, then issues Form C.
Be honest about programme: a Category 3 check on a complex structure is not a two-week exercise. Build it into the baseline, not the contingency.
Form G - Construction Compliance Certificate
What it is: Confirmation that the works, as constructed, comply with the approved and certified design – including any design changes properly processed during construction. It is normally signed by the CRE (Construction) or the responsible engineer for the works, supported by inspection and test records, concrete cube results, pile records, weld and coating certification, and as-built survey data.
When and why you’d use it: At the end of the construction phase for each element or package. Form G is the bridge between “designed correctly” and “built correctly”. Without it, the assurance chain has a gap and handback is at risk.
Example project: A reinforced earth retaining wall and piled mat platform constructed to support a crane operating adjacent to the running line. During the works, the pile founding depths vary from those anticipated due to differing ground conditions. Those variations are processed as design changes, verified against the geotechnical design assumptions, and captured in the compliance certificate along with the piling and mat testing records.
Form H - Completion / Entry into Service Certificate
What it is: The top-level certificate confirming that the works are complete, the assurance evidence is in place, outstanding items are recorded and managed, and the asset is safe and suitable to enter (or return to) service. It is usually accompanied by updated asset records, operation and maintenance information, and a residual risk register for the asset owner.
When and why you’d use it: At handback and handover into operational maintenance. This is the certificate the Route Asset Manager and Operations Director care most about, because it is what allows the railway to run and what tells the maintenance organisation what it now owns.
Example project: Following completion of the footbridge above, Form H is issued alongside the health and safety file, structural inspection baseline, as-built drawings, LiDAR-derived clearance records and the maintenance access strategy – enabling the structure to be added to the asset register and brought into the routine examination regime.
Other forms you're likely to meet
The A–H sequence isn’t the whole picture. Depending on the standard in use, you may also need:
- Departure / derogation applications - formal requests to deviate from a Network Rail standard, approved by the relevant Professional Head. These take time; identify them at AIP stage.
- Design change certificates - for changes arising after the Design Certificate has been issued.
- Temporary works certification - a parallel assurance chain for propping, falsework, piling mats, crane pads and façade retention, with its own designer and checker roles.
- Interim or partial certificates - used on phased works where sections are handed back progressively.
How to Choose the Right Certification Route
The route follows the risk, not the fee value. Work through these questions early:
- Whose asset is affected? Network Rail permanent asset, third-party asset, or temporary works only? This determines whether you go via the project's engineering organisation or Asset Protection.
- Is it permanent or temporary? Both need assurance, but through different chains and different competent persons.
- What is the consequence of failure? Anything over, under or immediately adjacent to running lines pushes the check category up.
- How good is the existing information? Poor as-built records almost always mean survey work - LiDAR survey, structural inspection or intrusive investigation - before the design can be certified.
- Are departures from standards unavoidable? If yes, that becomes the critical path.
- Who signs? Confirm the named CRE and checker, and their acceptance by Network Rail, before you commit to dates.
How Matrix Handles Network Rail Approvals
We treat the certification chain as part of the design, not paperwork bolted on afterwards. In practice that means:
- A pre-AIP technical conversation. Before anything is drafted, we agree the likely design standards, check category and probable departures with the client’s engineering team. It’s a short meeting that routinely saves a month.
- Getting the baseline right. Rail assets rarely match their drawings. We use LiDAR and topographical survey, structural inspection and targeted site investigation to establish what is actually there, so the design assumptions are defensible under check.
- Writing AIPs to be approved, not to be commented on. A well-structured AIP states the assumption, cites the standard, evidences the justification and flags the departure. Reviewers can then say yes.
- Designing with the check in mind. Calculations are structured, referenced and traceable from the outset – because an independent Category 3 checker will ask for exactly that, and unpicking a disorganised model late is where programmes are lost.
- Supporting construction-stage certification. We stay involved through the works so that design changes, site queries and as-built variances are resolved and documented in real time, not reconstructed at handback.
- Being straight about what we don’t yet know. If the ground conditions or the hidden condition of a structure could change the answer, we say so early and price the investigation, rather than promising certainty we can’t deliver.
Our work spans bridge design, retaining walls, earthworks, drainage and structural steelwork, alongside temporary works, piling mat and crane mat design – so the permanent and temporary assurance chains can be coordinated rather than fought over.
Anonymised Case Study: A Twice-Rejected AIP
A Tier 1 contractor approached us after two unsuccessful AIP submissions for the strengthening of a masonry arch underbridge on a rural route. The possession was already booked.
The engineering was sound. The submission wasn’t. The condition data pre-dated recent deterioration, the assessment approach hadn’t been reconciled with the existing asset record, and two departures – headroom and drainage discharge – had been left as “to be confirmed”.
We carried out a fresh structural inspection with a LiDAR survey to establish accurate as-built geometry, rebuilt the assessment on that evidence, and rewrote the AIP with both departures fully argued and cross-referenced. The revised submission was accepted after a single round of comments. Design and Design Check Certificates followed, and the works were delivered within the original possession strategy – though with a genuinely tight, not comfortable, margin.
The lesson: the approval process rewards evidence and clarity. It punishes optimism.
Frequently Asked Questions
How long does the Network Rail approval process take?
It depends on complexity, the quality of the submission and the reviewer’s workload. As a planning rule of thumb, allow several weeks per AIP review round and assume at least one round of comments. Departures from standards and Category 3 checks extend this. Anyone quoting you a guaranteed turnaround is guessing.
Do I need an AIP for minor works?
Often, yes – though some low-risk or like-for-like renewals can follow a simplified route agreed with the Network Rail Asset Engineer. Ask early rather than assuming; retrofitting an AIP is far more painful than raising one.
Who can sign a Network Rail Design Certificate?
A suitably competent, named engineer acting in the relevant CRE role, accepted for that role on that project. Competence is assessed against the discipline and the complexity of the works, not simply seniority.
What's the difference between a design check and a peer review?
A peer review is advisory. A design check to a defined category is a formal assurance activity with a certificate and personal accountability attached. They are not interchangeable.
Does temporary works need Network Rail approval too?
Yes, where it interfaces with the operational railway or Network Rail assets. Propping, falsework, piling mats, crane pads and façade retention all require their own designer, checker and certification chain.
Where can I find the governing standards?
Network Rail standards are managed through the company’s standards catalogue, and industry-level standards are published via the RSSB Standards Catalogue. Access to Network Rail’s own documents is normally arranged through the project or Asset Protection team.
Talk to Us Before You Submit, Not After
The Network Rail approval process is navigable. It just isn’t forgiving of assumptions – and the cost of getting the assurance route wrong is almost always measured in lost access windows rather than lost drawing hours.
If you have a rail project at feasibility, an AIP that keeps coming back, or a possession date that depends on certification you haven’t yet scoped, we’re happy to look at it with you. A short conversation now is usually enough to identify the critical path.
Get in touch with the Matrix Consulting Engineers team to discuss your Network Rail approval strategy, design certification or independent check requirements.
