Updated ISO 10218-1 and ISO 10218-2 Safety Standards: Requirements for Robotic Workcells

Architectural Evolution: From ISO 10218:2011 to the 2025 Standards Revision

For over a decade, manufacturing plants and automated assembly lines relied on ISO 10218:2011 to govern the safe design, construction, and integration of industrial robotic systems. However, rapid technological shifts—specifically the expansion of human-robot collaboration, smart end-effectors, and interconnected industrial networks—prompted a complete overhaul of the legacy framework. In February 2025, the International Organization for Standardization (ISO) officially published the updated editions: ISO 10218-1:2025 for industrial robots and ISO 10218-2:2025 for industrial robot applications and robot cells¹. These standards modernize engineering benchmarks across the entire operational life cycle of automated workcells.

A fundamental update in this revision addresses how safety responsibility is divided across machinery boundaries. Under the revised framework, ISO 10218-1 is specifically targeted at robot manufacturers, establishing construction, control mode, and baseline testing requirements for the robot as partly completed machinery². In contrast, ISO 10218-2 directs system integrators who incorporate the manipulator, end-of-arm tooling (EOAT), workpieces, sensing equipment, and peripheral enclosures into a complete operating workcell². This distinct separation clarifies compliance duties and prevents integrators from assuming a cell is inherently safe purely based on manipulator-level declarations.

Manipulator Classification and Embedded Cybersecurity Mandates in Part 1

A major structural innovation introduced in ISO 10218-1:2025 is the formal division of industrial manipulators into two distinct classes based on their inherent risk profiles and physical capabilities¹². Class 1 encompasses low-power, lightweight robots that, based on reasonable engineering assessment, do not present significant mechanical hazards; these units are subject to streamlined control requirements, typically aligning with Performance Level b (PL b)¹. Class 2 encompasses conventional and heavy industrial robots representing standard factory machinery risks, which remain subject to higher functional safety baselines¹². This tiered categorization eliminates the previous standard's rigid one-size-fits-all approach to manipulator design.

In addition to physical classification, ISO 10218-1:2025 establishes mandatory industrial cybersecurity requirements directly linked to functional safety². Because modern robotic controllers connect to corporate networks, execution systems, and remote maintenance tools, external communication channels can introduce severe physical safety hazards. The revised standard mandates that controllers protect safety-related software and operational parameters against unauthorized network intrusion, remote tampering, or corrupted safety bus communications². Manufacturers must implement hardware isolation, role-based cryptographic authentication, and hardened configurations to prevent external network attacks from compromising motion limits or safety stops.

Integration Realities: The 'Collaborative Application' and ISO/TS 15066 Absorption

For system integrators, ISO 10218-2:2025 establishes a definitive conceptual transition: safety compliance applies to the 'collaborative application' rather than an isolated 'collaborative robot'². A certified lightweight manipulator fitted with sharp cutting blades, handling molten compounds, or gripping heavy stamped steel cannot be considered a safe collaborative installation without protective physical measures. Consequently, integrators must evaluate the entire operational ecosystem, factoring in payload geometry, tooling pinch points, dynamic transfer speeds, and nearby human transit zones during risk assessment².

To provide legal and engineering certainty, ISO 10218-2:2025 fully incorporates the technical provisions previously established under the interim technical specification ISO/TS 15066 into its normative and informative sections²³. Integrators must design protective systems around four operational collaborative methods: Safety-Rated Monitored Stop (SRMS), Hand Guiding (HG), Speed and Separation Monitoring (SSM), and Power and Force Limiting (PFL). Mixed-mode operations are common in high-efficiency facilities, where optical sensors or laser scanners allow a workcell to toggle between high-speed automated production and reduced-speed collaborative interaction based on operator proximity.

Biomechanical Thresholds and Bio-Fidelic PFL Testing Under Annex M and N

Validating an installation under the Power and Force Limiting (PFL) regime demands rigorous compliance with empirical biomechanical criteria. ISO 10218-2:2025 integrates human pain and injury thresholds into informative Annex M, defining allowable dynamic impact forces and quasi-static pressure values across 29 discrete human body zones³. The standard distinguishes between transient contact (dynamic collision where an operator's body segment can freely recoil) and quasi-static contact (clamping, crushing, or trapping between the robot tooling and stationary fixture surfaces).

In manual load and unload configurations, quasi-static trapping represents the primary hazard. Annex M explicitly establishes that the maximum permissible quasi-static clamping force for human hands and fingers is 140 N³. Integrators cannot demonstrate compliance through nominal manufacturer payload limits, motor current monitoring, or theoretical CAD calculations alone³. Instead, Annex N mandates physical verification using calibrated bio-fidelic measuring equipment fitted with specified spring constants and mechanical damping layers that replicate human tissue properties³. Measurements recorded during worst-case trial strikes must demonstrate that sustained clamping remains strictly below 140 N to validate collaborative deployment without physical fencing³.

The Shift to Function-Specific Default PLs in Functional Safety Design

A pivotal evolution in ISO 10218-2:2025 is the fundamental departure from the legacy 2011 approach to functional safety architectures¹². Previously, safety standards enforced a blanket rule requiring Performance Level d (PL d) with Category 3 architecture under ISO 13849-1, or SIL 2 under IEC 62061, across all safety-related control functions¹. The 2025 revision largely abandons this uniform mandate, acknowledging that rigid requirements restrict practical design without necessarily mitigating task-specific risks¹². Instead, ISO 10218-2 lists safety functions in an informative annex and assigns a tailored 'default performance level' to each individual function¹.

Under this modern differentiated framework, standard Emergency Stop functions default to PL c / SIL 1, whereas active Protective Stop, Enabling Function, and Reduced Speed monitoring functions default to PL d / SIL 2¹. Integrators have two distinct design pathways: they may implement the specified default performance level directly, or they may execute a comprehensive risk assessment following ISO 10218-2 guidance to justify deviating from the default level¹. While selecting an alternative PL requires thorough technical documentation and engineering justification, it grants design flexibility to tailor hardware redundancy and diagnostic coverage to specific operating risks¹².

Regulatory Enforcement, EU Machinery Regulation, and Harmonized Timelines

The regulatory urgency surrounding ISO 10218-1:2025 and ISO 10218-2:2025 is directly linked to European machinery legislation. On 4 September 2026, the European Commission adopted Implementing Decision (EU) 2026/2015, which entered into force upon publication in the Official Journal on 7 September 2026¹⁴. This decision officially added EN ISO 10218-1:2025 and EN ISO 10218-2:2025 to the list of harmonized standards under Directive 2006/42/EC, providing machinery manufacturers and integrators with an official presumption of conformity with essential health and safety requirements¹⁴.

This harmonized status serves as an operational stepping stone toward the mandatory enforcement of the new European Union Machinery Regulation (EU) 2023/1230⁴. Regulation (EU) 2023/1230 officially starts to apply on 20 January 2027, the exact date on which Directive 2006/42/EC is repealed⁴. Any robotic cell placed on the European market, commissioned, or undergoing substantial modification after 20 January 2027 must conform to these modern requirements⁴. Integrators and plant managers must audit technical construction files, transition safety validation calculations to the default PL framework, and verify bio-fidelic force limits to prevent regulatory delays and non-compliance penalties¹³⁴.