The Machine Stopped, but Is It Safe?
A technician enters a robotic cell after pressing stop. The robot appears motionless. But a remote command, released brake, pneumatic gripper or stored electrical charge could still create movement.
This is the fundamental challenge of lockout/tagout in automated workplaces: stopping equipment is an operational action. Isolating hazardous energy is a safety process.
Lockout/tagout (LOTO) in automated equipment has become more complex because machinery now includes digital controls, remote connectivity, stored energy in multiple forms and automatic restart capabilities that traditional isolation procedures may not fully address.
Why LOTO Is More Complex in Automated Workplaces
The 2026 workplace introduces safety challenges that traditional LOTO procedures were not designed to address:
- Connected machinery with remote diagnostics
- AI-assisted control systems
- Multiple machines integrated into one production cell
- Battery-powered industrial equipment
- Autonomous mobile robots (AMRs) and automated guided vehicles (AGVs)
- Electric vehicle (EV) charging systems
- Stored software states and automatic restart commands
- High-voltage electrical systems
Critical point: Digital control does not remove physical energy. Electrical charge, pressurised systems, moving parts and stored mechanical energy remain dangerous regardless of whether a system is networked or automated.
What Hazardous Energy Must Be Controlled?
Different equipment types present different energy hazards. Understanding the specific energy sources in your workplace is essential for effective isolation.
|
Equipment
|
Main Energy Sources
|
Examples of Residual Hazards
|
|
Industrial robot
|
Electrical, mechanical, pneumatic, hydraulic
|
Dropping arm, brake release, gripper pressure
|
|
EV or hybrid vehicle
|
High-voltage DC, low-voltage electrical, chemical, thermal
|
Capacitor voltage, battery energy, thermal runaway
|
|
Automated production line
|
Electrical, pneumatic, hydraulic, gravity
|
Conveyor movement, suspended loads, accumulator pressure
|
|
AMR or AGV
|
Battery, mechanical, kinetic
|
Unexpected travel, wheel movement, autonomous restart
|
Critical warning: Residual energy can remain even when the display is dark and the equipment appears inactive. Never assume that a powered-down display means all hazardous energy has been eliminated.
Which Rules and Standards Apply in 2026?
OSHA Hazardous-Energy Requirements
OSHA 29 CFR 1910.147 addresses servicing and maintenance where unexpected start-up or stored-energy release could injure workers. The programme requires:
- Documented procedures
- Worker training
- Periodic inspections and audits
External reference: OSHA Control of Hazardous Energy standard provides regulatory requirements for workplace energy control.
Jurisdiction note: For construction work, employers must verify the applicable 29 CFR 1926 provisions rather than assuming that 1910.147 governs every task.
Robot-Safety Standards
Modern industrial robots must meet international safety standards:
ISO 10218-1:2025 addresses safety requirements for industrial robots, covering design, guarding, emergency systems and control interfaces.
ISO 10218-2:2025 addresses robot applications, integration and robot cells, including safety for collaborative robots, mobile robots and robotic systems.
External references:
- ISO 10218-1:2025 industrial robot requirements
- ISO 10218-2:2025 robot application and cell requirements
The Universal Eight-Step LOTO Framework
Effective energy isolation follows a systematic process regardless of equipment type:
-
Prepare: Identify the equipment, task and all energy sources. Understand the work to be performed and which hazardous energies present risks.
-
Notify: Inform affected workers, operators, contractors and control-room personnel of the lockout/tagout activity and expected duration.
-
Shut down: Use the normal controlled shutdown procedure to bring equipment to a stop.
-
Isolate: Operate every physical energy-isolating device—disconnect switches, circuit breakers, valve closures, belt guards—to separate equipment from energy sources.
-
Lock and tag: Apply individually identified locks and warning tags to every isolation point. Each worker performing isolation applies their own lock and tag.
-
Control stored energy: Discharge, bleed, block, restrain, ground or otherwise secure any stored energy in springs, accumulators, pressurised systems, elevated loads or capacitors.
-
Verify isolation: Attempt a normal start and perform appropriate electrical or mechanical verification to confirm that energy is isolated.
-
Restore safely: Inspect the area, remove tools, account for all workers, remove locks correctly and notify affected employees before operations resume.
OSHA requires physical operation of the necessary isolation devices and verification of the effectiveness of energy-control measures.
Develop practical hazardous-energy-control skills through the Lockout / Tagout course.
How Does Robot Lockout/Tagout Work?
Effective robot LOTO requires isolating multiple energy sources, not just the main controller:
- Main robot disconnect
- Controller and servo energy
- Pneumatic or hydraulic tooling
- Robot axes and gravitational movement
- End-effectors, weld guns and grippers
- Integrated conveyors and auxiliary machinery
- All machines within the robot cell that are electrically or mechanically connected
Critical point: A machine-specific procedure should identify every isolation point, not just the robot controller. Blocking or restraining robot arms where required prevents gravity-driven movement. Group LOTO during multi-person maintenance requires clear identification of which worker has locked off which devices.
Does an Emergency Stop or Safe Torque Off Replace LOTO?
No—not automatically.
Emergency stops, interlocks, protective stops and software controls normally act through control circuits. OSHA explicitly states that push buttons and other control-circuit devices are not energy-isolating devices.
Key Distinction:
-
Emergency stop: Halts operation through control circuits
-
Protective stop: Responds to safety sensors through control logic
-
Safety-rated monitored stop: Uses certified control systems but operates through control circuits
-
Safe torque off: Removes torque from motor windings but may not isolate all electrical energy
-
Physical isolation: Disconnects equipment from energy sources at the source
Only physical isolation—operated manually at the isolation device—provides the protection required for maintenance work.
How Is an Electric Vehicle Safely Isolated?
EV high-voltage isolation follows a multi-step process:
- Identify vehicle condition and model-specific hazards
- Prevent vehicle movement through parking brake and mechanical restraint
- Control keys, remote keys and mobile-app access to prevent unauthorised start
- Follow manufacturer shutdown and waiting-time instructions
- Isolate the high-voltage system using the specified isolation device
- Secure the isolation against reconnection
- Respect capacitor-discharge time before commencing work
- Verify absence of voltage with suitable test equipment
- Establish an exclusion zone where necessary
- Assess battery damage, heat, leakage and thermal-runaway indicators
Critical emphasis: Removing a service disconnect is not the final verification step. Official guidance recommends isolating and locking off the source, following manufacturer instructions and proving high-voltage components dead before work begins.
External reference: Official electric and hybrid vehicle high-voltage safety guidance provides manufacturer-specific procedures and voltage verification requirements.
How Should Automated and Remotely Controlled Equipment Be Isolated?
Modern automated systems present unique isolation challenges:
- PLC-controlled machines
- Automated conveyors and material handling
- Warehouse sortation systems
- Remote control rooms
- Cloud or network commands
- Automatic restart after fault clearance
- Stored production recipes
- Battery-backed controllers
- Pneumatic and hydraulic accumulators
- Multiple interconnected machines
Critical warning: Disabling a human-machine interface (HMI), disconnecting a network cable or selecting maintenance mode does not necessarily isolate the machine's hazardous energy. These are operational actions, not energy isolation.
Require identification of the complete energy boundary around the entire system, including all networked machines and remote control pathways.
Common LOTO Mistakes in Advanced Equipment
Safety professionals must recognise and prevent these critical errors:
- Relying only on an emergency stop
- Locking the robot but not its conveyor or tooling
- Ignoring stored pressure in accumulators or gravity in suspended loads
- Assuming an EV contactor removal proves zero voltage
- Failing to block robot-axis movement against gravity
- Forgetting remote and automatic restart pathways
- Using generic procedures for different vehicle models
- Skipping the verification step
- Poor group-LOTO or shift-handover control
Training, Inspections and Competency
Effective LOTO programmes depend on competent personnel:
-
Authorised employees: Qualified to perform isolation and control procedures
-
Affected employees: Those whose work may be impacted by LOTO
-
Contractors: Must understand site-specific procedures and energy sources
-
Supervisors: Responsible for procedure compliance
-
Qualified electrical or high-voltage personnel: Required for EV and high-voltage work
OSHA requires relevant employee training and at least annual periodic inspection of covered energy-control procedures. Retraining is needed when assignments, machinery, hazards or procedures change.
Build job-relevant competency through structured Lockout / Tagout training for safety professionals and technicians.
Quick LOTO Verification Checklist
✓ All energy sources identified and documented ✓ Normal shutdown completed and verified ✓ Physical isolation devices operated at source ✓ Personal locks and tags installed by each worker ✓ Stored energy discharged or restrained ✓ Remote-start capability controlled or disabled ✓ Robot arm or suspended parts secured against gravity ✓ Manufacturer waiting time observed ✓ Absence of voltage tested where applicable ✓ Start attempt returned to neutral after testing ✓ Work area and personnel checked before restart
Smart Equipment Still Requires Physical Energy Control
Advanced controls may stop motion, but safe maintenance requires identified isolation points, control of stored energy and documented verification.
Enrol in the Lockout / Tagout course to develop practical energy-control expertise for today's automated workplaces.