ISO 26262, IEC 61508, IEC 62304, ASPICE — we engineer safety into the architecture, not bolt it on afterward. From hazard analysis through certification body audit, with full requirements traceability.
Functional safety certification is the single largest barrier to market entry for safety-critical embedded products. ISO 26262 alone requires 12-24 months of systematic engineering — hazard analysis, safety concept development, hardware/software architecture design with proven fault detection mechanisms, unit and integration testing against safety requirements, and external audit by TUV, UL, or equivalent certification bodies.
Promwad integrates functional safety engineering into the development process from day one. Our safety engineers work alongside hardware and software teams to ensure that safety requirements are traceable through architecture, implementation, and verification. This "safety by design" approach is consistently faster and less expensive than retrofitting safety onto an existing design — which typically requires 40-60% rework.
Led the functional safety workstream for a 6-camera surround-view system targeting commercial trucks. Performed HARA, developed the technical safety concept, designed ASIL-B decomposition across FPGA (AMD Zynq) and MCU (NXP S32K), implemented safety mechanisms (watchdog, ECC, redundant paths), and supported the TUV audit.
Implemented the complete IEC 62304 software lifecycle for a European medical device company's patient monitoring system. Covered software development planning, requirements management (Polarion ALM), architecture design with risk analysis per ISO 14971, unit testing with MC/DC coverage, and integration/system testing. Prepared the technical file for MDR submission.
Designed and certified a SIL 2 independent safety layer for a BESS installation. The system implements dual-channel disconnect logic with self-diagnostics, multi-sensor fusion (gas, temperature, BMS telemetry), and a fireproof data recorder. Followed IEC 61508 lifecycle with systematic capability assessment.
Client identities changed. Methodologies and outcomes are real.
SIL 2/3 safety instrumented system with dual-channel sensing, self-diagnostics, and proven-in-use actuator logic per IEC 61508.
ASIL-D compliant architecture with lockstep MCU, redundant sensor paths, independent fault monitoring, and defined safe states per ISO 26262.
When integrated from the start ("safety by design"), functional safety adds 20-40% to the base development cost. Retrofitting safety onto an existing design typically costs 60-100% more than the original development and takes 12-18 months longer. The single largest cost driver is rework — changing architectures and interfaces that were not designed for fault detection.
We start with a gap analysis against the target standard. Some designs can be certified with targeted modifications — adding safety mechanisms, improving test coverage, completing documentation. Others require partial or full redesign if the architecture fundamentally cannot meet diagnostic coverage or fault detection requirements. The gap analysis typically takes 4-6 weeks and gives you a clear decision.
We have established working relationships with TUV SUD, TUV Rheinland, UL, and SGS for functional safety audits. For CE/FCC compliance, we work with accredited test laboratories across Europe. We manage the entire certification body interaction — from initial scope agreement through final audit support.
Yes. Regulatory compliance (EMC, radio, electrical safety) is a separate workstream from functional safety but often runs in parallel. We handle pre-compliance testing, design modifications for EMC (filtering, shielding, grounding), test laboratory coordination, and technical file preparation for CE marking.