Functional Safety Certification for Indoor Warehouse Drones: ISO 13850 Explained

Date
2026-11-16
Location
Online
Host
Zach L

About this event

A Tabletop Exercise for Embedded Systems Engineers pursuing functional safety certification. A live 30-minute tabletop exercise on ISO 13850 (Emergency Stop) for indoor warehouse drones, built for embedded systems engineers pursuing functional safety certification. What We'll Cover: What ISO 13850 (Emergency Stop) requires and how its scope applies to indoor warehouse drones Mapping ISO 13850 clauses to the certification evidence assessors expect System-specific hazards and safety functions typical of indoor warehouse drones Common findings that delay certification, and how to avoid them A practical readiness roadmap for embedded systems engineers preparing for assessment Related topics: ISO 13850 · Indoor Warehouse Drones · functional safety certification · functional safety assessment ·

Topics

Registration

View event page

About ISO 13850 (Emergency Stop)

This event covers the compliance, engineering, and verification requirements defined by ISO 13850.

EN ISO 13850 specifies functional requirements and design principles for the emergency stop function of machinery: a complementary protective measure initiated by a single human action to avert or reduce harm, independent of the machine's operating mode.

What it regulates

Emergency stop principle of operation (stop categories 0 or 1 per IEC 60204-1), actuator design (red/yellow, mushroom types, accessibility), latching and reset behavior, and span-of-control considerations.

Who must comply

All machinery manufacturers (e-stop is expected on virtually all machines per the Machinery Regulation), integrators of multi-machine lines defining stop zones.

Key requirements of ISO 13850

  • Definition: complementary measure, not a substitute for safeguarding
  • Stop category selection (0: immediate power removal; 1: controlled stop then power removal)
  • Actuator requirements: shape, colors, direct opening operation, latching until manually reset
  • Reset must not restart the machine — restart requires separate deliberate action
  • Placement and span of control across machine zones

Key concepts: ISO 13850

Complementary protective measure
E-stop supplements, never replaces, guards and protective devices, because it depends on human reaction.
Latching function
The actuator must latch, keeping the stop command active until deliberately reset at the device.
Span of control
The defined portion of the machine or line a given e-stop device affects, which must be evident to operators.
Stop category 0 vs 1
Immediate removal of power versus a controlled deceleration followed by power removal — chosen from a risk perspective (for example, category 1 where uncontrolled coast creates hazard).

Frequently asked questions: ISO 13850

What PL is required for an emergency stop?

The e-stop safety function's PLr comes from risk assessment; common practice lands at PL c or d with ISO 13849 (often Category 3 for the circuit), and the actuator contacts use direct opening action per IEC 60947-5-1.

Can restart happen automatically after resetting an e-stop?

No — resetting the e-stop only permits restarting; the machine may start again only by the normal, separate start command after conditions are verified.

Standard information based on the published text of ISO 13850 (Emergency Stop). Event content is provided by the host. For authoritative guidance, consult the official standard body.