USE CASE — Use Case

Safety Certification for Autonomous Systems

From gap analysis to certification — functional safety architecture, ISO 13849 implementation, IEC 62443 cybersecurity compliance, and EU Machinery Regulation readiness for robotics and autonomous systems.

THE PROBLEM

Robotics Companies Ship Without Proper Safety Certification — Until They Cannot

The robotics industry is growing at 39-43% CAGR, with the humanoid robot market alone projected to reach $15.3 billion by 2030. But between a working prototype and a deployable product lies a certification gap that stops most companies cold. ISO 13849 (safety of machinery), IEC 62443 (industrial cybersecurity), and the EU Machinery Regulation 2023/1230 (replacing the Machinery Directive from January 2027) create a multi-layered compliance requirement.

Most robotics companies — especially VC-backed startups — staff heavily for AI/ML research and mechanical engineering but have minimal functional safety expertise. They discover the certification requirement when their first enterprise customer requests an ISO 13849 Performance Level (PL) declaration, or when they attempt to enter the EU market and learn that CE marking for autonomous systems requires documented safety architectures, not just working demonstrations.

The timeline problem is severe. A safety certification process started from scratch takes 18-42 months. For a startup that needs to ship product to meet Series B milestones, this is often an existential delay. Companies that wait until the certification requirement surfaces lose 12-18 months compared to those who design safety architecture into their system from the beginning.

70%+
Robotics Companies Lacking Safety Cert
18-42 mo
Certification Timeline (From Scratch)
Jan 2027
EU Machinery Regulation Enforcement
60-80%
Liability Reduction with Certification
THE SOLUTION

End-to-End Safety Architecture and Certification Support

Promwad provides a structured path from uncertified prototype to market-ready certified product. The approach leverages Promwad's ISO 26262 (automotive) and IEC 61508 (industrial) experience — transferring proven safety architectures and methodologies to robotics applications, typically cutting certification timelines by 50-60%.

The process starts with a comprehensive gap analysis that identifies exactly which standards apply, what the current system lacks, and what the most efficient path to certification looks like. This prevents the two most common mistakes: over-engineering (certifying to unnecessary standards) and under-engineering (discovering a gap during the audit that requires redesign).

L1
Safety Sensor Layer
Safety-rated sensors: SIL 2/3 proximity sensors, safety laser scanners (Type 3 per IEC 61496), emergency stop circuits, torque/force limiters for collaborative operation. Dual-channel redundant signal paths with cross-monitoring.
L2
Safety MCU & Logic
Dedicated safety controller (TI TMS570, Infineon AURIX) separate from the main application processor. Dual-core lockstep architecture with hardware watchdog. Safe torque off (STO), safe limited speed (SLS), and safe limited position (SLP) functions per IEC 61800-5-2.
L3
Safety Logic & Monitoring
ISO 13849 performance level calculation (PL a through PL e). Fault tree analysis (FTA) and failure mode effects analysis (FMEA). Diagnostic coverage calculation. Safe state definition and response time validation. IEC 62443 zone/conduit model for cybersecurity.
L4
Certification Package
Complete technical file per EU Machinery Regulation 2023/1230. ISO 13849 performance level declaration. IEC 62443 security level verification report. EU AI Act conformity assessment documentation (for high-risk AI systems). Test reports from accredited laboratories (TUV, UL, Bureau Veritas).
BEFORE vs. AFTER

Before vs. After: Safety Certification Status

Dimension
Before
After
Market Access
Limited to unregulated environments
Full access to EU, US, and regulated industrial markets
Liability Exposure
Full manufacturer liability, uninsurable
Documented safety case, standard insurance coverage
Enterprise Sales
Blocked by procurement safety requirements
ISO 13849 PL declaration satisfies enterprise procurement
Certification Timeline
18-42 months (from scratch, internal)
8-14 months (with Promwad methodology transfer)
Cybersecurity Posture
Ad-hoc security, no formal assessment
IEC 62443 zone/conduit model, documented security levels
IMPLEMENTATION

Implementation Roadmap

1
Gap Analysis & Architecture
2 months
Applicable standards identification (ISO 13849, IEC 62443, EU AI Act)
Current system gap assessment with risk scoring
Safety architecture proposal (hardware + software)
Certification roadmap with timeline and cost estimate
Preliminary hazard analysis (PHA)
2
Safety Design & Implementation
6 months
Safety controller hardware design (dual-core lockstep)
Safety function implementation (STO, SLS, SLP)
ISO 13849 performance level calculation and validation
IEC 62443 cybersecurity zone/conduit implementation
FMEA and fault tree analysis documentation
HIL test bench for safety function validation
3
Certification & Market Entry
12 months
Technical file compilation per EU Machinery Regulation
Third-party laboratory testing (TUV, UL)
ISO 13849 performance level declaration
IEC 62443 security level verification
EU AI Act conformity assessment (if applicable)
CE marking and Declaration of Conformity
Post-certification maintenance plan
EXPECTED OUTCOMES

Expected Outcomes

50-60%
Certification Timeline Reduction
Unlocked
Market Access (Regulated Industries)
60-80%
Liability Risk Reduction
2-3x improvement
Enterprise Deal Closure Rate
2 months
Time to Gap Analysis Results
20-40%
Insurance Premium Reduction
FREQUENTLY ASKED

We are a startup — do we really need safety certification before shipping?

It depends on your market. For consumer robotics in unregulated environments, you can defer. But for any industrial, medical, or public-facing deployment in the EU, CE marking under the Machinery Regulation is legally required. And enterprise customers in all markets increasingly require ISO 13849 declarations in procurement. Starting certification early (even at the architecture level) is 3-5x cheaper than retrofitting it after product launch.

How does Promwad's automotive safety experience transfer to robotics?

ISO 26262 (automotive) and ISO 13849 (machinery) both derive from IEC 61508. Promwad's ASIL-B/C experience directly transfers: hazard analysis methodology, dual-channel safety architectures, diagnostic coverage calculation, and HIL/SIL validation infrastructure. The transfer typically reduces certification timeline by 50-60% compared to a team starting without functional safety experience.

What about the EU AI Act — does it apply to our robot?

If your robot uses AI for safety-critical decisions (navigation, obstacle avoidance, human interaction), it is likely classified as a "high-risk AI system" under the EU AI Act. This requires conformity assessment, technical documentation, risk management per Article 9, and human oversight architecture per Article 14. Promwad includes EU AI Act readiness assessment in the gap analysis phase.

Can we do the certification ourselves with your architecture guidance?

Yes, partially. Promwad can deliver the gap analysis and safety architecture, then provide advisory support while your team implements. However, the certification documentation (technical file, FMEA, FTA, performance level calculation) requires specific expertise and tooling. Most clients find it faster and more cost-effective to have Promwad handle the full certification package.

RELATED
Start a Pilot →