Robot Cell Safety and Safeguarding

An industrial robot can sit perfectly still for minutes, then swing at full speed with no warning, because it was only waiting for a signal. That is the core hazard. A stopped robot is not a safe robot. Robot safety comes back to one idea: keep people out of the arm's reach while it can move, and make sure it truly cannot move before anyone goes in.

What You Will Be Able to Do

• Name the safeguards on a robot cell and say what each one does and does not do.
• Explain why stop circuits are built separately from the robot's program.
• Name the current robot safety standards and clear up common myths about collaborative applications.
• Use the enabling device correctly and explain what manual mode limits.
• Tell maintenance entry apart from teaching with power on, and follow the right steps for each.

How Robots Hurt People

A NIOSH study of US workplace deaths found 41 robot-related fatalities from 1992 to 2017. Stationary robots were involved in 83% of them, and 78% involved a robot striking the worker. Many happened during maintenance. Those are deaths only, so injuries are on top of that count.

The pattern matters more than the total. Most serious robot incidents do not happen while parts run normally behind a closed gate. They happen when someone is inside for setup, programming, testing, maintenance, or fault recovery.

The main hazards are:

• Impact. The arm or its tool strikes you. Arms can move about 2 meters a second or faster.
• Crushing and trapping. The arm pins you against a fixture, post, or fence.
• Thrown objects. A gripper loses a part at speed, or a tool breaks.
• Other energy. Electricity, compressed air, hydraulics, hot tools, and weld arcs.

The Spaces Around a Robot

Safety drawings divide the cell into zones. Names vary a little by plant, but the ideas are the same.

If a robot's program uses only a small area, do not assume the arm stays there. A fault or a wrong program can take it anywhere in its restricted space.

Safeguards You Will See

Why Light Curtain Distance Matters

A light curtain's job is to notice a person entering the hazard zone and stop the robot before they get there. Its beam spacing, called resolution, sets what it can detect. A typical 14 mm curtain detects a finger, and a 30 mm curtain detects a hand.

The arm does not stop instantly, so distance counts. Suppose the sensor, controller, and arm together need 0.5 seconds to stop. A person walking about 1.6 meters a second covers 1.6 x 0.5 = 0.8 m in that time. The curtain must sit at least that far from the hazard, plus an allowance for reaching through the beams. ISO 13855 sets out the full calculation, and a qualified person does it.

This is why small changes can make a cell unsafe. Moving a curtain closer, adding payload, or raising speed can all change the numbers even though nothing looks different. Report any of these. Do not adjust a safeguard yourself.

Some openings mute a beam for a moment so a pallet can pass. Muting is timed and sensed for the pallet. It is never a way in for you.

Stop Circuits

Why They Are Separate From the Program

If a stop depended on the robot's normal program, a frozen controller or a software bug could disable it at the worst moment. So E-stops, gates, and curtains run through safety circuits built apart from normal control. They are hardwired or run through a safety-rated controller, and they cut the drives even if the main controller stops responding.

These circuits are also redundant, meaning two channels do the same job. A broken wire or a welded contact on one channel does not defeat the stop, and monitoring spots the mismatch and blocks a restart. Safety circuits are rated with a performance level under ISO 13849-1, and PL d is a common rating for robot safety functions.

Types of Stops

Resetting a stop must never start the robot by itself. A separate start is needed. Reset buttons sit outside the cell, where you can see inside. Before you press one, look to be sure no one is in there.

Warning: A stop is not lockout. After a protective stop the arm may still have power. After an E-stop it can be reset by someone who does not know you are inside.

The Standards That Apply

OSHA has no standard written only for robots, but its general rules apply, including 29 CFR 1910.212 for machine guarding and 1910.147 for hazardous energy. The detailed requirements come from consensus standards.

A3 is the Association for Advancing Automation, formerly RIA, so older paperwork says ANSI/RIA R15.06. The 2025 editions replaced the 2011 ISO editions. ISO/TS 15066 used to hold the rules for human-robot contact, and that content now sits inside ISO 10218-2:2025. Older cells may still have documents that cite these earlier versions. If you are unsure which version your plant follows, ask your safety lead.

Risk Assessment

Every robot cell needs a risk assessment. ISO 10218 is the standard that guides it, and it is normally done by the integrator with the plant's engineers.

1. Define the system: the robot, tool, part, and every task. Include cleaning, maintenance, and fault recovery, not only production.
2. List the hazards for each task.
3. Estimate each risk: how bad, how often, and whether a person could avoid it.
4. Reduce the risk, starting with design, then safeguards, then procedures, training, and PPE.
5. Test that each safeguard works, and write the results down.
6. Repeat it when anything changes: a new tool, part, speed, program, or fixture location.

Your part as an operator is to speak up. If people have to do something that the cell was not designed for, such as reaching in to free a part every hour, the assessment may have missed it.

Myths About Collaborative Applications

The 2025 standards replaced "collaborative robot" with "collaborative application", because the arm alone does not make a job safe. They recognize three technologies: hand guiding, speed and separation monitoring, and power and force limiting.

The main danger of leaning on force limiting alone is that it says nothing about what the tool or part does to you. The force and pressure limits are written for specific body regions, and they are checked on the real setup.

Manual Mode and the Enabling Device

Manual mode is how trained people move the robot by hand from the teach pendant. In reduced-speed manual mode, speed at the tool is limited to no more than 250 mm/s, about 10 inches a second. Some robots also have a high-speed manual mode for proving a program. It needs extra controls and special authorization.

The enabling device is a three-position switch on the pendant, often called a deadman switch.

The third position exists because people react to a scare in two ways. Some let go, and some clench. Both stop the arm. Never tape, wedge, or clamp an enabling switch.

Slow does not mean harmless. At 250 mm/s, the arm covers 125 mm, about 5 inches, in half a second. That is enough to pin a hand before you react, so keep yourself out of any spot between the arm and something solid.

Going Into a Cell

These are two different activities with two different sets of rules. Know which one you are doing before you open the gate.

Entry for Maintenance or Part Recovery

Going in to fix something, clean, or recover a part means locking out the robot and all its associated energy. An open gate or a pressed E-stop is not enough.

1. Stop the cycle. If you can, park the arm with no part in the gripper and the tool low.
2. Tell everyone affected, including the operators of machines that feed the cell.
3. Shut down and isolate each energy source under the cell's written procedure: robot controller, air, hydraulics, conveyors, and connected machines.
4. Put on your own lock and tag. Everyone who goes in uses their own.
5. Release or block stored energy. Bleed air lines, and support anything held only by air, a brake, or a spring.
6. Verify. Try the normal start, confirm nothing moves, and return the control to off.
7. Enter, and do the work.
8. When finished, clear your tools, count everyone out, and restart from outside the cell.

Warning: Parts and arms can still move after lockout. A vacuum gripper lets go when the air is gone. A heavy arm can drop if a brake fails or is released. Drive capacitors can hold a charge after the power is off. Block or support first.

Teaching or Troubleshooting With Power On

Some tasks need power, such as teaching points. This is a separate activity for people who have been trained and authorized. It is never a shortcut for a quick fix.

1. Check the cell from outside. Look for anything that could trap you or that is out of place.
2. Switch to manual reduced-speed mode, which blocks automatic operation. Keep control of the mode key.
3. Take the pendant with you, with the enabling device in your hand.
4. Keep other equipment in the cell from moving unexpectedly, as your procedure directs.
5. Keep other people out. The person holding the pendant controls the arm.
6. Stay out of pinch points and keep a clear way out.
7. Before returning to automatic, leave the cell and confirm it is empty.

Some safeguards are not active in manual mode, so your own position and the enabling device are your main protection.

Common Mistakes

Check Your Understanding

1. A robot has stopped on a light curtain trip, and a part sits crooked in the fixture just past the curtain. Your lead says to grab it quickly. What do you do?

Do not reach in. The arm may still have power and may be waiting to move. The part is inside the hazard zone, so lock out the robot and its energy sources under the procedure, then go in.

2. Maintenance raised the robot's speed 15% to hit a new rate. Does anything about the safeguards need a second look?

Yes. Faster motion usually means a longer stopping distance, so the light curtain position and the risk assessment need review.

3. While teaching, you get startled and clench the pendant hard. What should happen, and why?

The robot stops. Squeezing the enabling switch fully stops motion, just as letting go does, because people freeze in either direction.

4. A vendor says a 250 mm/s setting makes an arm safe to share with people. Is that right?

No. That number is the limit for reduced-speed manual mode. Speed in a collaborative application comes from the risk assessment for that tool, part, and task.

Key Takeaways

• A robot that is not moving may only be waiting for a signal.
• NIOSH counted 41 robot-related deaths at US workplaces from 1992 to 2017, mostly stationary robots striking workers, and many during maintenance.
• Stop circuits are separate and redundant so they work even when the controller does not.
• ISO 10218-1:2025, ISO 10218-2:2025, and ANSI/A3 R15.06-2025 are the current standards.
• Going in for maintenance or recovery means lockout of the robot and all associated energy.
• Teaching with power on is a separate, trained activity, in reduced speed, with the enabling device in hand.