Industrial Robot Safety Standards: A Buyer

The Standards That Actually Govern an Industrial Robot Cell

Industrial robot safety is defined by two ISO documents that were revised together in 2025. ISO 10218-1:2025 covers safety requirements for the robot itself, and ISO 10218-2:2025 covers the robot system and its integration, replacing the 2011 editions cited in many older quotes.

In the United States the same content is adopted through ANSI/RIA R15.06-2012 (R2022), published by the Association for Advancing Automation (A3). A revision to align R15.06 with the 2025 ISO editions is in progress at A3, but R15.06-2012 remains the standard R15.06 buyers are expected to comply with today.

Collaborative operation is addressed in ISO/TS 15066:2016, which supplements ISO 10218 with force and pressure limits for power and force limiting cobots. OSHA does not publish a robot-specific standard but enforces the General Duty Clause and cites these consensus standards in its Technical Manual chapter on industrial robots.

What Changed in ISO 10218:2025

The 2025 revision consolidates and clarifies material that used to be split across the 2011 standards and ISO/TS 15066. ISO 10218-1:2025 reorganizes the four collaborative techniques (safety-rated monitored stop, hand guiding, speed and separation monitoring, and power and force limiting) as recognized modes of operation rather than exceptions.

A key practical change is a new risk-based classification of robots by hazard level, which affects the performance level required for safety functions. The 2011 default of PL d, Category 3 per ISO 13849-1 still fits most industrial arms, but higher-hazard applications now have an explicit path to PL e.

ANSI/RIA R15.06-2012 has not yet been reissued to match the 2025 ISO text. A3 has confirmed a revision project is underway, so buyers signing multi-year integration contracts should ask the integrator in writing which edition of ISO 10218 the cell will be validated against, and get the answer before the purchase order.

How ISO/TS 15066 Governs a Collaborative Cell

ISO/TS 15066 exists because a cobot is not automatically safe. It supplies the biomechanical limits, force and pressure thresholds by body region, that a power and force limiting application must respect after a risk assessment. Cobot builders including Universal Robots, ABB, FANUC, and KUKA ship arms designed to meet those limits at low speeds, not at every payload and every tool.

The four collaborative techniques from ISO 10218 are not interchangeable. Safety-rated monitored stop and speed and separation monitoring rely on external safeguarding to detect a person entering the space. Hand guiding requires an enabling device. Power and force limiting is the only one that permits contact, and only within the 15066 limits.

A sharp, hot, or heavy end effector can push a power and force limiting cell out of compliance even when the robot itself is certified. That is why the ISO framework requires the risk assessment to consider the entire application, including the tool and the workpiece, not just the arm.

Industrial Robot Guarding Requirements Checklist

ISO 10218-2 requires a safeguarded space around the robot, established by a risk assessment following ISO 12100, and enforced by a combination of fixed guards, movable interlocked guards, and presence-sensing devices. Perimeter guarding hardware is sold by Pilz, SICK, Keyence, and Banner Engineering, and integrators such as Rockwell Automation assemble it into compliant cells.

A guarding package that looks complete on a drawing can still fail an OSHA inspection if the interlocks are bypassable, the safety distances are wrong, or the emergency stop does not remove power from the actuators. The checklist below is the minimum a buyer should confirm before signing off on a cell.

• A written risk assessment per ISO 12100 covering the robot, tool, workpiece, and every task including teach, maintenance, and cleaning.
• Fixed perimeter guarding sized to the reach of the robot plus the workpiece, with safety distances per ISO 13857.
• Interlocked access gates that command a safety-rated stop and cannot be defeated with a coin or a zip tie.
• Light curtains, laser scanners, or safety mats positioned so no person can reach a hazard before the robot stops, calculated per ISO 13855.
• Emergency stop devices at every operator station and every access point, hard-wired to remove power from the drives, per IEC 60204-1.
• A teach pendant with a three-position enabling switch and reduced speed of 250 mm/s in manual mode, per ISO 10218-1.
• Documented lockout and tagout procedures for maintenance, aligned with OSHA 29 CFR 1910.147.
• Safety functions validated to at least PL d, Category 3 per ISO 13849-1, or the level identified by the risk assessment.
• A commissioning acceptance test that exercises every safety function, signed by the integrator and the end user.

Who Is Responsible, and What OSHA Enforces

The ISO framework splits duties: the robot builder complies with ISO 10218-1, the integrator complies with ISO 10218-2, and the end user maintains the safeguards. OSHA holds the employer, not the vendor, accountable under the General Duty Clause of the OSH Act when a robot injury occurs. The OSHA Technical Manual, Section IV, Chapter 4 notes that a large share of robot incidents happen during programming, setup, maintenance, and testing rather than normal automatic operation.

Recent enforcement bears this out. OSHA has issued citations under the General Duty Clause referencing ANSI/RIA R15.06 after robot-related fatalities, and lists industrial robotics as a recognized machine-guarding hazard in its robotics standards page. The consensus standard is treated as the recognized method of controlling the hazard even though it is not codified in 29 CFR.

The buyer takeaway is that a signed integrator acceptance test does not transfer liability. The employer must keep the safeguards effective, retrain after any change to the cell, and document that training. A cell that was compliant on day one but has a bypassed interlock on day 400 is an OSHA finding waiting to happen.