Quick Answer: ISO 10218 is the primary international safety standard for industrial robots, published in two parts — Part 1 for the robot (manufacturer scope) and Part 2 for the robot system installation (integrator and end-user scope). ISO/TS 15066 extends these requirements specifically for collaborative robots, defining force and speed limits that allow humans and cobots to share workspace safely. Together, these standards form the foundation of every compliant robot deployment worldwide.
Getting robot safety wrong is not an abstract risk. A single serious incident can halt production for weeks, trigger regulatory investigations, expose leadership to personal liability, and set back an organization's entire automation roadmap by years. Understanding these standards is not optional for anyone buying, deploying, or managing robots.
This guide breaks down what operations leaders, safety managers, and procurement teams need to know about ISO 10218, ISO/TS 15066, and the compliance process that ties them together.
ISO 10218-1: Safety Requirements for the Robot
ISO 10218-1:2024 defines what the robot manufacturer must build into the machine. When you evaluate a robot for purchase, certification to this standard is the first thing to verify. If the manufacturer cannot produce documentation of ISO 10218-1 compliance, that is a disqualifying finding.
The standard requires specific safety functions built into the robot controller. These include emergency stop capability with a performance level of PLd or PLe per ISO 13849, protective stop functions that halt motion when triggered by external safety devices, speed and force monitoring that enforces configurable limits in real time, and safety-rated soft axis and space limiting that constrains the robot's operating envelope.
The 2024 revision introduced several critical updates. Robot manufacturers must now implement safety-rated control systems with diagnostic coverage ratios documented and verifiable. The standard also strengthened requirements for cybersecurity of safety-critical functions, recognizing that a compromised controller is a safety hazard regardless of mechanical design.
For buyers, the practical implication is straightforward: request the manufacturer's Declaration of Conformity and the test reports from a notified body or nationally recognized testing laboratory. Verify the specific edition of the standard cited. A robot certified to the 2011 edition may not meet current requirements, particularly around cybersecurity and diagnostic coverage.
ISO 10218-2: Safety Requirements for the Robot System
While Part 1 is the manufacturer's responsibility, Part 2 falls squarely on the system integrator and end user. This is where most compliance failures occur, because organizations assume that buying a certified robot means the installation is automatically compliant. It does not.
ISO 10218-2:2024 requires a documented risk assessment of the complete robot system — meaning the robot, end-effector, workpiece, fixtures, conveyors, safety devices, and the physical space in which they operate. The standard mandates that this assessment follow ISO 12100 methodology and address every phase of the system lifecycle: transport, installation, commissioning, normal operation, maintenance, troubleshooting, and decommissioning.
Key requirements include safeguarding design that prevents access to hazard zones during automatic operation, safe procedures for tasks that require human presence in the robot's operating space (programming, maintenance, clearing jams), perimeter protection using safety-rated devices with defined response times, and layout design that accounts for the robot's maximum reach including any tooling or workpiece extensions.
The standard explicitly states that the integrator must produce a Declaration of Conformity for the complete system, separate from the robot manufacturer's declaration. In practice, many organizations overlook this requirement until an auditor or insurer asks for documentation that does not exist.
ISO/TS 15066: The Collaborative Robot Standard
ISO/TS 15066:2016 is the standard that makes fenceless human-robot collaboration possible. Without it, every robot installation would require physical barriers separating humans from the machine. For warehouse and manufacturing operations deploying cobots, this is the standard that governs daily operation.
The standard defines four collaborative operation modes, each with distinct safety requirements:
| Collaborative Mode | How It Works | Typical Applications | |---|---|---| | Safety-rated monitored stop | Robot stops before human enters collaborative workspace | Machine tending, large part handling | | Hand guiding | Human physically guides the robot with force/torque sensing | Finishing, polishing, path teaching | | Speed and separation monitoring | Robot slows or stops based on human proximity | Palletizing, material transport | | Power and force limiting | Robot operates within biomechanical contact limits | Assembly, inspection, packaging |
Power and force limiting is the most commonly deployed mode for warehouse and manufacturing cobots. ISO/TS 15066 specifies maximum allowable force and pressure values for 29 body regions, derived from biomechanical pain onset research. For example, the maximum quasi-static force for contact with the back of the hand is 140 N, while the chest allows up to 210 N. These are not guidelines — they are hard limits that the robot system must enforce.
The practical challenge is that these force limits constrain the payload and speed at which cobots can operate. A cobot carrying a 10 kg payload at full speed may exceed contact force limits in a collision scenario. Operations teams must work with integrators to model worst-case contact scenarios and validate that force limits are maintained across all operating conditions.
The Risk Assessment Process
Risk assessment is the central compliance requirement. ISO 10218-2 mandates it. OSHA expects it. Insurance carriers require it. Plaintiff attorneys will demand it. No robot installation is compliant without a documented risk assessment, and no risk assessment is valid unless it follows the ISO 12100 methodology.
The process has five stages. First, define the system limits: intended use, spatial boundaries, operating schedule, user population, and foreseeable misuse. Second, identify hazards systematically by walking through every lifecycle phase and every operating mode. Third, estimate risk for each identified hazard using severity of potential harm and probability of occurrence. Fourth, apply risk reduction measures following the hierarchy of controls — inherent design first, then safeguarding, then administrative measures. Fifth, document everything and establish a review schedule.
A common mistake is treating risk assessment as a one-time exercise. The standard requires reassessment whenever the application changes — new end-effectors, modified operating parameters, layout changes, software updates, or after any safety incident. Organizations that treat the risk assessment as a living document catch problems before they become incidents. Organizations that file it and forget it discover gaps during investigations.
Compliance Costs and Timeline
Budget and schedule planning for safety compliance should begin during the robot evaluation phase, not after purchase. The costs are predictable and the timeline is well-established, but only if planned for in advance.
| Compliance Activity | Typical Cost | Timeline | |---|---|---| | Risk assessment (single cell) | $5,000 - $15,000 | 2 - 4 weeks | | Risk assessment (multi-robot system) | $15,000 - $50,000 | 4 - 8 weeks | | Safety system design and installation | $10,000 - $40,000 per cell | 2 - 6 weeks | | Third-party validation | $3,000 - $10,000 | 1 - 3 weeks | | CE marking documentation (EU) | $5,000 - $20,000 | 2 - 4 weeks | | Annual safety audit | $2,000 - $8,000 | 1 - 2 days |
Total compliance cost typically adds 15% to 25% to the base robot system cost. Organizations that discover this after budget approval face difficult choices — either exceed budget or cut corners on safety, which is never an acceptable option.
The timeline impact is equally important. A robot that arrives on the factory floor cannot begin production until the risk assessment is complete, safeguarding is installed, validation is performed, and documentation is finalized. For a standard single-cell installation, expect 4 to 8 weeks from robot delivery to production readiness. For complex systems, 3 to 6 months is realistic.
Regional Regulatory Differences
While ISO standards provide the international baseline, regional regulations add specific requirements that vary by jurisdiction. Understanding these differences is critical for organizations operating across borders or sourcing robots from international manufacturers.
In the United States, OSHA enforces workplace safety through the General Duty Clause rather than mandating specific robot safety standards. However, OSHA field inspectors reference ANSI/RIA R15.06 (the American national adoption of ISO 10218) as the benchmark for compliance. After an incident, failure to follow R15.06 will be cited as evidence of a recognized hazard. Fines for serious violations start at $16,131 per instance, and willful violations can reach $161,323. Personal criminal liability for safety managers is possible in cases of knowing negligence.
In the European Union, the Machinery Regulation (replacing the Machinery Directive 2006/42/EC, effective 2027) requires CE marking for all machinery placed on the market. ISO 10218 is a harmonized standard under this regulation, meaning compliance with the standard creates a presumption of conformity with the regulation's essential health and safety requirements. The manufacturer and system integrator each bear distinct CE marking obligations.
Other major markets — Japan (JIS B 8433), China (GB 11291), South Korea (KS B ISO 10218) — have national standards largely harmonized with ISO 10218 but with regional additions. Multi-site deployments across regions should budget for local compliance review and may need region-specific safeguarding modifications.
Common Compliance Failures
Understanding where others fail helps prevent repeating the same mistakes. Based on audit data and incident investigations, these are the most frequent compliance gaps in robot installations.
The most prevalent failure is treating risk assessment as a formality rather than an engineering exercise. Generic templates filled out without site-specific analysis provide no protection — legally or physically. An effective risk assessment requires a qualified assessor walking the actual installation, observing actual operations, and evaluating actual hazard scenarios.
Second is inadequate validation of collaborative robot force limits. Many organizations rely on the cobot manufacturer's published force specifications without validating them in the actual application with the actual end-effector and workpiece. A cobot rated for safe contact force at the arm surface may exceed limits at the tool tip due to reduced contact area and increased pressure.
Third is neglecting maintenance phase hazards. Risk assessments often focus exclusively on normal production operation while ignoring the risks during maintenance, jam clearing, and troubleshooting — phases where workers are closest to the robot and safeguarding may be bypassed.
Fourth is failure to reassess after changes. A robot cell that was compliant when installed may not remain compliant after a product change, layout modification, or software update. Without a formal management-of-change process that triggers reassessment, compliance degrades silently.
Key Takeaways
Safety compliance is an investment with measurable returns: reduced incident rates, lower insurance premiums, regulatory confidence, and workforce trust in the automation program. Here is what matters most.
Start with the risk assessment. Everything else — safeguarding design, operating procedures, training programs — flows from a properly executed risk assessment. Budget $5,000 to $50,000 depending on complexity, and plan for 2 to 8 weeks of elapsed time.
Verify manufacturer certifications. Request ISO 10218-1 Declarations of Conformity and supporting test reports. Confirm the standard edition, testing laboratory, and scope of certification. Do not accept verbal assurances.
Understand your obligations as the integrator/end user. Even if you buy a certified robot from a reputable manufacturer, you are responsible for the system-level compliance per ISO 10218-2. This includes the risk assessment, safeguarding, documentation, and (in the EU) CE marking of the complete installation.
Budget for compliance from day one. Add 15% to 25% to the base robot system cost for safety compliance activities. Include compliance timeline in your project schedule — 4 to 8 weeks minimum from delivery to production for standard installations.
Treat compliance as ongoing. Annual safety audits, management-of-change processes, and risk assessment updates are not optional. Build them into your operational budget and assign clear ownership.
If you are evaluating robots for your facility and want to understand which systems meet your safety and compliance requirements, use our robot finder tool to compare options with full safety certification data. For a complete cost picture including compliance expenses, try the Total Cost of Ownership Calculator.