Blog

2026.09.01

Industrial Robot Implementation: ISO 10218 Execution Guide

Industrial Robot Implementation: ISO 10218 Execution Guide

A successful industrial robot implementation in a Thailand factory depends less on selecting an impressive arm than on executing the work after application selection. User requirements (URS), integration boundaries, risk assessment, safety functions, FAT/SAT, handover and operational change control must form one traceable evidence chain. This guide starts from the 2025 edition of ISO 10218 and explains the owner’s work from concept freeze to sustained production.

It is not another list of robot types or system integrators. It is for plants that already have a candidate process and now need to define responsibilities and acceptance. Safety circuits, required performance levels, stopping distance, collaborative-operation feasibility and legal conformity require review by competent machinery-safety, mechanical and control specialists using the actual site conditions. No article alone can establish conformity.

Read the implementation boundary from ISO 10218:2025

ISO’s public information explains that ISO 10218-1:2025 addresses safety requirements for an industrial robot as partly completed machinery. ISO 10218-2:2025 addresses integration of industrial robot applications and cells, including design, integration, commissioning, operation, maintenance and decommissioning. The second boundary is where the end-effector, workpiece, fixtures, conveyors, safeguards, control system and human tasks combine.

Buying a robot with safety capabilities is therefore not the same as accepting a safe production cell. Crushing, ejection, dropped workpieces, heat, welding, cutting, laser, dust, electricity, pneumatics and hazardous materials can arise from the application. They must be assessed at the integrated-system boundary.

ScopeMain responsibility focusEvidence to request
RobotIntended use, limits, embedded safety functions and information for useApplicable standards, declarations, manuals, limits and safety I/O
End-effectorGripping, tooling, stored energy and workpiece retentionLoad cases, loss-of-hold behavior, maintenance isolation and tests
ApplicationCombination of robot, tool, workpiece and process hazardsURS, risk assessment, reduction measures and validation plan
CellSafeguards, transfer, fixtures, controls, surrounding machines and accessBoundary drawing, safety requirements, FAT/SAT and residual risks
User operationTraining, inspection, release, change, contractors and disposalSOPs, LOTO, competence records, change control and periodic validation

State the edition explicitly in an RFP—such as ISO 10218-1:2025 and ISO 10218-2:2025—and separately identify local law, customer rules, legacy-equipment constraints and validation responsibility. Obtain the official standards and have competent specialists translate applicable clauses into project requirements.

Define production that must work in the URS

The first deliverable after application selection is a User Requirements Specification, not a manufacturer model sheet. “20 kg payload and 1,800 mm reach” describes a component; the URS states what products must be made, under what conditions, at what quality and capacity, and how the cell must stop, recover and be maintained.

Nine requirement groups for an implementable URS

GroupContentsAcceptance question
Product/processVariants, mass, tolerances, surface, temperature, oil and burrsCan the worst credible workpiece be reproduced?
CapacityCycle, operating hours, changeover and WIP limitsIs sustained good output demonstrated?
QualityPosition, torque, dispensing, weld, appearance and traceabilityAre measurement method and decision owner agreed?
EnvironmentHeat, humidity, dust, water, chemicals, power and airAre any conditions outside equipment ratings?
Human interventionRefill, sampling, cleaning, tool change and jam releaseWere frequency and body position observed?
SafetyAccess, stops, restart, modes, emergencies and residual riskIs every safety function verifiable?
InterfacesPLC, MES, quality, andon, network and timeAre signal ownership and failure behavior defined?
MaintenanceDiagnostics, spares, backup, restoration and remote supportCan faults be diagnosed safely?
HandoverDrawings, source, credentials, training, warranty and acceptanceWhat objective evidence releases payment?

Measure cycle performance as sustained good production, including feed, inspection, discharge, cleaning, changeover, minor stops and recovery. Test maximum and off-center loads, slippery or variable surfaces and tolerance extremes—not only a perfect demonstration part. Record assumptions and the safe response when they fail. For the earlier supplier-selection stage, see our Thailand robot system integrator guide.

Freeze integration boundaries in one drawing and responsibility matrix

The costliest omissions occur between the robot and PLC, new cell and legacy conveyor, integrator and machine supplier, OT and IT, or owner-furnished and contractor-furnished equipment. Freeze physical, functional, safety, information and commercial boundaries at kickoff.

Industrial Robot Implementation: ISO 10218 Execution Guide - figure 1
BoundaryInterfaceNormal conditionSafe behavior on failureEvidence owner
Robot–gripperFlange, electrical, air and safety statusRetain and move workpiecePrevent or contain drop/ejectionCalculations and loss-of-energy tests
Cell–conveyorPosition, I/O and interlocksAuthorized transferDo not start hazardous motionTiming diagram and fault injection
Safeguard–buildingFloor anchors, openings, overhead and escapePrevent accessPermit rescue and evacuationSurvey, installation and SAT
Safety PLC–standard PLCSafety communication and statusModes agreeStandard-control failure cannot defeat safetySRS and independent validation
OT–ITVLAN, time, backup and remote serviceAuthorized traffic onlyNetwork failure cannot create hazardous motionConnectivity and account audit

RACI is not enough. Assign who designs, verifies, approves, retains and revalidates each deliverable. Owner-supplied fixtures remain part of the integrated risk if they influence the cell. Version-control the I/O list, communication tags, state model, coordinate systems and layout under one baseline and link every change to its impact assessment and test result.

Use ISO 12100-style risk assessment as a design input

The public ISO 12100:2010 description provides general principles for machinery risk assessment and risk reduction. ISO shows the edition as confirmed in 2022 while a revision project is progressing. Check the current status at the decision date and do not present draft revision work as an existing requirement.

Risk assessment is not a signature collected after build. Iterate through machine limits, intended use and reasonably foreseeable misuse; identify hazards across the lifecycle; estimate and evaluate risk with an approved method; reduce risk through inherently safe design, engineering safeguards and information for use in that order; then identify any new and residual risks.

TaskPerson’s positionTypical hazardDesign direction
Automatic operationOutside guard, near transfer openingReach-in, ejection and transfer intrusionDistance, opening control, interlock and retention
TeachingInside or close to cellTrapping, unexpected start and unseen axesMode selection, enabling device, speed and lone-work rules
Jam releaseNear hazard pointGravity, springs and trapped pressureIsolation, dissipation, verification and tools
Tool changeNear flange or process toolDrop, sharp edge and heatSupport, restraint, cooling and procedure
Cleaning/inspectionFrequent access pointBypass and unplanned motionExternal access and monitored stop
DiagnosisPanel or cell interiorLive electrical and motion diagnosisControlled diagnostic mode, authority and audit

A safety fence is one possible measure, not a conformity verdict. Distance to hazards, reach direction, openings, under-clearance, climbing, transfer apertures, stopping performance, workpiece ejection, maximum and restricted spaces, and maintenance access must be evaluated together. A search for “robot safety fence standard” should lead to a task-specific assessment and specialist measurement, not a catalog dimension.

Treat the end-effector and retained workpiece as safety-critical

ISO/TR 20218-1:2018 provides safety-design guidance for industrial robot-system end-effectors. A vacuum tool requires evidence for material and surface variation, cup wear, leakage, source loss, monitoring and retained energy. Mechanical gripping must consider friction variation, center of gravity, acceleration, jaw wear and wrong-part loading. Welding, spindle and laser tools add heat, fume, radiation, cooling and fragment hazards.

Acceptance must cover power or air loss, sensor failure, worst-case workpieces, simulated wear, emergency and protective stops, and restart. “The robot stops” does not prove that the workpiece remains controlled. Validate stopping and retention as separate requirements.

Define safety functions in an SRS, not by device name

A Safety Requirements Specification defines trigger, hazard, affected actuators, demanded safe state, response, reset, restart prevention, fault behavior, diagnostics and validation for each safety function.

IDTriggerRequired stateReset/restartValidation evidence
SF-01Guard door opensHazardous motion reaches safe state within validated performanceDoor closed plus manual reset; reset cannot startWiring, stop measurement and fault injection
SF-02Emergency stopDefined emergency response across affected hazardsRelease alone cannot restartEvery device, mode and restoration path
SF-03Presence detectedInhibit start or execute monitored stopConfirm hazard area clearScenarios including muting
SF-04Grip faultRestrict motion and retain or safely reject partControlled recovery after cause checkPressure loss, sensor and power tests
SF-05Mode selectionOnly permitted equipment, speed and behavior availableKey/authority and clear indicationMode transitions and speed measurement

ISO 13849-1:2023 publicly describes a methodology for designing and integrating safety-related parts of control systems, including software. It does not prescribe the safety function or required performance level (PLr) for a particular application. Derive PLr from risk assessment per function, then have competent specialists evaluate architecture, component reliability, diagnostics, common-cause failure, software and validation.

A safety PLC alone is not the result. Trace the chain from input through logic, communications and output to drives, valves, contactors and mechanical stopping. Keep standard-control status separate from safety signals and assign validation with appropriate independence.

Collaborative robots follow the same sequence. A collaborative-capable arm does not automatically remove the need for safeguarding. Tooling, workpiece, speed, contact location, peripherals and non-collaborative modes remain part of the application. See the Thailand collaborative robot implementation guide and translate its findings into this project’s SRS.

Compare industrial robot price through TCO and a real RFQ

There is no responsible fixed answer to “industrial robot price.” The same arm can produce very different project totals after tooling, vision, safety, legacy modification, installation, testing, training and support. Compare real quotations against the same URS instead of inventing a market range.

Cost groupInitial itemsLifecycle items
Robot/controlArm, controller, pendant and safety optionsService, spares and obsolescence
ApplicationGripper, fixtures, vision and process packageConsumables, calibration and retuning
Cell integrationBase, guards, sensors, safety PLC and panelsInspection and periodic revalidation
Existing plantConveyor, utilities, floor, extraction and networkShutdown work and capacity constraints
EngineeringDesign, assessment, software and simulationNew variants and software changes
DeploymentTransport, installation, FAT/SAT and trainingRamp-up and off-hours support
Operation/endLabor, energy, maintenance, licenses and disposalDowntime, lock-in, migration and recovery

Measure benefits from a common baseline: throughput, yield, rework, exposure to hazardous tasks, changeover, absentee resilience, traceability, energy, WIP and downtime. Use optimistic, base and conservative scenarios with demand, learning curve, maintenance shutdowns and product life. Safety controls are not optional items to remove when a simple payback is weak.

Thailand BOI material must also be read narrowly. The published 2026–2027 measure referenced here is for the automotive industry. Its minimum investment is THB 1 million, excluding land and working capital. The corporate-income-tax exemption lasts three years and is capped at 50% of qualifying automation-and-robotics investment; the cap rises to 100% when machinery linked to or supporting Thailand’s domestic automation-machinery industry represents at least 30% of the relevant machinery value. The application window runs from the first working day of 2026 through the last working day of 2027. The 50% and 100% figures are exemption caps, not tax rates or cash-grant rates. These are conditional incentives, not a universal subsidy for every factory. Confirm the entity, eligible activity, project timing, domestic-linkage calculation and eligible expenditure with BOI or a qualified adviser before commitment.

Make vendor RFQs comparable

Issue the same URS, boundary matrix, site survey, layout assumptions, applicable-standard list, acceptance outline and commercial conditions. Require compliance, partial compliance, deviation and clarification against every requirement ID. Compare responsibility for machinery, electrical, control, safety, IT/OT and production; competence for risk assessment and validation; demonstrated cycle assumptions; source code and credential transfer; Thai-language training; support and spares; and change rates tied to accepted deliverables.

For staged projects, our small-manufacturer automation cases in Thailand show why a bounded first cell can establish reusable standards without pretending that every process should be fully automated.

Turn FAT into requirements and risk validation

FAT is not a demonstration of a few successful cycles. It closes URS requirements, interfaces, risk-reduction measures, safety functions, recovery and documentation with traceable records, using representative workpieces, upstream/downstream simulation and an approved software baseline.

Industrial Robot Implementation: ISO 10218 Execution Guide - figure 2
Test groupNormal casesFault/boundary casesRecord
CapacitySustained production, variants and qualityWorst parts, late feed and minor stopsTime, count, defects and stop reason
SafetyModes, closed guards and normal stopDoor, E-stop, sensor fault and restartFunction ID, response, instrument and result
RetentionPick, transfer and releasePower/air loss, wrong part and wearWorkpiece condition and recovery
InterfacesHandshake and historyTimeout, stuck signal, link loss and reconnectI/O revision, logs and state transition
RecoveryPlanned stop/startPower loss, PLC restart, robot fault and jamProcedure, authority and recovery time
DocumentationDrawings, BOM and manualsRevision mismatch and restore testRegister, revision, approval and restoration

Record response and stopping performance, affected actuators, reset location, prevention of unintended restart, diagnostic coverage and bypass control—not merely “stopped.” Retain instrument/calibration status, software version, tester, date, deviation, correction and retest. A punch list needs severity, owner, deadline, SAT impact and payment retention. Safety, legal, critical-quality and unrecoverable items require an explicit shipment gate.

Use SAT to validate the real Thailand factory

SAT validates the transported and installed cell against actual floor, anchors, power, air, network, heat, dust, lighting, transfer systems, operators, shifts and maintenance organization. Recheck datum, coordinates, fasteners, wiring, protective bonding, leakage, safeguards, time synchronization and backups after installation.

Capability tests should include breaks, replenishment, sampling, changeover, handover and minor stoppages. Plant personnel must demonstrate start, normal stop, jam recovery, recipe change, routine inspection and backup restoration without the integrator doing the work.

RequirementPurposeFATSATApproval
URS-CAP-01Sustained good outputSimulated-line runReal-line capabilityProduction owner
SRS-SF-01Safe response to door openingFault injection and stop measurementRepeat after installationSafety owner
URS-REC-02Recovery after power lossSimulated outageSite power testMaintenance owner

Reopen affected rows whenever a change occurs. This traceability prevents requirements from disappearing and test results from losing their purpose.

Complete handover of documents, competence and ownership

Production start is only part of handover. Deliver approved as-built mechanical, electrical, pneumatic, I/O, network and configuration records; risk assessment, SRS, validation and residual-risk files; buildable sources, licenses and backups; credential and remote-access transfer; operating, cleaning, jam-release, LOTO, diagnostic and restore procedures; role-based Thai-language training with practical assessment; spares, warranty and obsolescence plans; and a controlled punch list.

Attendance is not competence. Operators should demonstrate safe start, stop and recovery; maintainers should demonstrate isolation, diagnosis and restoration; administrators should demonstrate access control, change authorization and evidence preservation.

Protect safety and ROI through change control

Products, tools, trajectories, speeds, PLC software, networks and work methods will change after launch. Treat each modification as technical, safety and operational reauthorization: record before/after state; screen mechanical, electrical, control, safety, quality, IT/OT and training impacts; update the URS, risk assessment, SRS, drawings and procedures; implement under version control; run proportionate regression and safety-function tests; retrain; approve release; and review side effects.

Industrial Robot Implementation: ISO 10218 Execution Guide - figure 3

Emergency night-shift edits, remote vendor changes, taught-point adjustments and temporary bypasses are not exceptions. Give emergency changes an owner, expiry, interim risk reduction and next-business-day review. Track production together with safeguards bypassed, protective stops, jams, manual interventions, MTTR, repeat faults, quality loss and post-change defects.

A 90-day execution example

The durations are planning examples, not industry benchmarks.

PeriodWorkGate
Days 1–15Observation, baseline, URS, boundary and initial riskApproved RFQ package
Days 16–30Proposal comparison, concept and TCOTechnical/commercial selection
Days 31–55Detailed design, SRS and risk reductionDesign baseline and validation plan
Days 56–70Build, software, internal test and training preparationFAT-ready package
Days 71–78FAT, correction and shipment decisionFAT evidence and punch list
Days 79–88Installation, SAT, safety, capability and recoverySAT and competence evidence
Day 89 onwardStabilization, final handover and KPI reviewFinal baseline and improvement list

The important feature is the gate, not the speed. A risk assessment postponed until FAT leaves little room to change access, guards, drives or safety I/O.

FAQ about industrial robot implementation

How much does an industrial robot cost?

The arm price is not a project price. Obtain actual RFQs against one URS and compare tooling, safety, plant modification, engineering, FAT/SAT, training, support, downtime and end-of-life TCO. An unsupported online range is less useful than quotations normalized to the real site.

Where should a robot-arm implementation start?

Observe the process and write a URS covering product, capacity, quality, intervention and recovery. Then establish the integration boundary, task-based risk assessment, SRS and acceptance tests before freezing the model.

How should robot implementation ROI be measured?

Measure current throughput, yield, labor time, downtime, rework, absence, energy and WIP, then use the same definitions after launch. Include maintenance, consumables, licenses, modifications, downtime and disposal in TCO, with multiple demand scenarios.

Which standard determines a robot safety fence?

ISO 10218-2:2025 is among the relevant standards, but a fence dimension alone does not establish conformity. Evaluate hazards, reach, openings, stopping performance, ejection, transfer apertures and maintenance access. Have competent specialists apply the official standards and local requirements.

When should we request robot implementation support?

Before freezing the URS and responsibility boundary is ideal. An existing quotation can still be audited against requirement IDs, exclusions, SRS, FAT/SAT and handover. Specialist review remains necessary for safety design and conformity conclusions.

Does following ISO 10218:2025 mean the cell is certified?

No. Scope, edition, applicable law, design, installation, use conditions and validation evidence all matter. Robot information under Part 1 does not by itself establish conformity of the integrated application under Part 2.

Conclusion: close industrial robot implementation with evidence

Industrial robot implementation defines working production in the URS, freezes interfaces, converts task risk into safety functions, verifies them in FAT/SAT, transfers documents and competence, and maintains the baseline through change control. Understanding the Part 1/Part 2 boundary prevents a safe robot component from being mistaken for a safe integrated cell.

TOMAS TECH can help a Thailand factory structure an early URS, integration boundary, TCO and FAT/SAT package. We coordinate machinery, controls, IT/OT and operations while including competent specialist review for safety circuits, risk assessment and standards conformity. Contact us, even while requirements are still being shaped.

Primary references

  1. ISO, ISO 10218-1:2025
  2. ISO, ISO 10218-2:2025
  3. ISO, ISO 13849-1:2023
  4. ISO, ISO 12100:2010
  5. ISO, ISO/TR 20218-1:2018
  6. A3, ANSI/A3 R15.06-2025 notice
  7. IFR, World Robotics 2025
  8. Thailand BOI, Automation measures

*Facts checked 1 September 2026. Public standard descriptions are used; paid standards are not reproduced. Recheck standards, law and BOI conditions before a decision.*