Short answer. An industrial rack washer is safe only when the buyer and supplier identify hazards across its complete life cycle, reduce risk by design and guarding, define site controls for the residual risk, and verify every safety function before production. A door switch, emergency stop or CE mark by itself is not a complete risk assessment.
For a roll-in washer, the review must cover more than moving parts. It should map electrical, thermal, hydraulic, pneumatic or steam energy; hot water and surfaces; detergent exposure; trolley movement; wet-floor access; cleaning, unjamming and maintenance tasks; restart after faults; and the interfaces supplied by the plant. Turn the results into testable purchase requirements, not generic requests to “meet all standards.”
What a rack washer safety assessment must deliver
ISO 12100:2010 provides a machinery risk-assessment and risk-reduction methodology covering life-cycle hazards, documentation and verification. ISO listed that edition as current when checked on 21 September 2026, while a replacement draft was in development. The practical hierarchy is:
- eliminate the hazard or reduce it through inherently safer design;
- use guards and protective devices for risk that cannot be designed out;
- provide information, procedures, training and PPE for residual risk.
The legal duties depend on where the machine is placed on the market and used. In the United States, OSHA workplace rules cited below apply to employers and work activities; they are not a product certification. In the EU, the current consolidated Regulation (EU) 2023/1230 sets machinery health-and-safety and conformity requirements and is scheduled to replace Directive 2006/42/EC in 2027. Confirm the current transition date, harmonized standards and local rules at contract award.
| Required output | Question it answers | Contract evidence |
|---|---|---|
| Intended-use statement | Who uses the washer, for which loads and under what limits? | Approved operating envelope and exclusions |
| Hazard register | Where can a person be harmed in each life-cycle phase? | Task-hazard-risk-control table |
| Safety-function specification | What must stop, inhibit or remain safe, and under which fault? | Function list, required performance and validation method |
| Energy-isolation plan | How are all supply and stored energies made safe? | Isolation drawing and machine-specific LOTO procedure |
| Residual-risk file | What remains after design controls? | Labels, manual, training and PPE inputs |
| Validation record | Did the delivered system perform as specified? | FAT/SAT results, faults, corrections and sign-off |
Step 1: assess real tasks, not only normal cycles
Define the machine boundary: washer, doors, pumps, heaters, chemical dosing, steam and condensate where fitted, exhaust, drain, trolley guides, ramp or pit, local isolators, control panel and plant interfaces. Then observe or simulate every reasonably foreseeable task:
- receiving, loading, restraining and unloading each approved trolley;
- starting, pausing, aborting and recovering a cycle;
- checking filters, tanks, spray arms, nozzles and dosing containers;
- clearing a jam or retrieving a fallen item;
- daily cleaning, descaling, inspection and calibration;
- maintenance behind guards or inside the chamber;
- power, water, air or steam loss and restoration;
- contractor work, shift handover and emergency response.
For each task record the hazard, exposed person, existing control, credible consequence, likelihood/exposure assumptions, further action, owner and acceptance evidence. Use the site’s approved risk matrix; a number without documented assumptions is not comparable.
The assessment should include operators, sanitation teams, maintenance personnel, contractors and nearby workers. A design that is safe during automatic operation may still expose a cleaner who opens a filter housing or an electrician troubleshooting a fault.
Step 2: build the hazardous-energy and LOTO map
A stop button is a control command, not necessarily an energy-isolating device. Map every energy source and every place energy can remain or reaccumulate:
| Energy | Rack-washer example | Isolation/verification question |
|---|---|---|
| Electrical | Main supply, separate dosing skid, control transformer | Are all feeds identified, lockable and proved dead by the site’s procedure? |
| Thermal | Heated tank, booster, hot surfaces and trapped hot water | How are cooling, draining and safe temperature verified? |
| Hydraulic | Pressurized wash/rinse lines and pump discharge | Where is pressure relieved and zero state confirmed? |
| Steam/pneumatic | Steam valve, condensate, air-operated valve or door | Can upstream energy be locked and downstream energy vented? |
| Mechanical/gravity | Door, trolley, spring, rotating arm or raised component | What restrains movement after power is removed? |
| Chemical | Detergent or rinse-aid line under pressure | How is flow isolated, depressurized and flushed safely? |
US 29 CFR 1910.147 covers servicing and maintenance where unexpected energization, start-up or release of stored energy can injure workers. It requires an energy-control program, procedures, training and periodic inspections; new or modified equipment with lockable isolating devices must be designed to accept lockout. The procedure must include shutdown, isolation, control of stored energy and verification of isolation.
Procurement should therefore require an energy-isolation drawing, lockable points, durable identification, a stored-energy release method and a draft machine-specific LOTO sequence. The site remains responsible for integrating these into its employer program. Coordinate connection points with the installation requirements guide.
Step 3: specify guards, door interlocks and safe restart
US 29 CFR 1910.212 requires machine guarding against hazards such as point-of-operation exposure, nip points and rotating parts. For movable guards, ISO 14119:2024 addresses the design and selection of guard interlocking devices and measures to minimize foreseeable defeat. ISO 13849-1:2023 gives a methodology for safety-related control-system parts; it does not choose the required performance level for a particular machine.
Do not specify only “interlocked door.” Define the required behavior:
- a cycle cannot start unless every safety condition is satisfied;
- opening or unlocking a guard causes the defined safe response;
- hazardous motion, spray, pressure or heat reaches a safe state before access;
- a closed door after a trip does not cause unexpected automatic restart;
- bypass or maintenance modes are authorized, indicated and risk-controlled;
- interlock defeat is not the practical way to perform frequent work;
- emergency-stop reset permits restart only through a separate deliberate command;
- faults, loss of power and restoration lead to the specified safe behavior.
The required safety performance must come from the risk assessment and destination framework, not from a guessed category. Ask the supplier to provide the safety-function list, architecture, calculations or validation evidence applicable to the ordered configuration, plus a controlled fault-test procedure.
Step 4: control heat, chemistry, trolleys and wet-floor hazards
Machine safeguarding does not resolve all wash-bay risk. Include these interfaces:
| Hazard | Preferred engineering/site controls | Evidence at SAT |
|---|---|---|
| Hot water, steam and surfaces | Insulation/guards, controlled venting, drainage, warning and safe cooldown access | Observe normal, abort and maintenance states |
| Chemical splash or incompatible mixing | Closed transfer/dosing where practical, keyed connections, containment, ventilation and SDS-based procedure | Trace line, label, refill and spill response |
| Wet or greasy floor | Adequate drainage, dry standing area where feasible, leak control and housekeeping | Run peak discharge and inspect access routes |
| Trolley movement and pinch/crush | Stable ramp/pit, wheel/load limits, guides or restraints and hand clearance | Test worst-case loaded trolley |
| Manual handling | Reach/force review, storage height and handling aids | Observe real operators and load families |
| Electrical equipment in a wet area | Destination-appropriate enclosure, bonding, protection and verified installation | Inspect drawings, labels and site test records |
29 CFR 1910.22 requires US employers to keep work surfaces clean and, as far as feasible, dry; where wet processes are used, drainage and dry standing places such as platforms or mats must be provided to the extent feasible. 29 CFR 1910.1200 requires hazard communication through a written program, labels, safety data sheets and employee information/training. 29 CFR 1910.132 requires a workplace PPE hazard assessment and suitable PPE where needed.
PPE is the last layer, not a substitute for containing hot liquid, preventing leaks or designing accessible chemical connections. Qualify trolley fit and movement with the trolley compatibility method.
Step 5: validate safety at FAT and SAT
Safety acceptance should trace each risk control to a test, inspection or document review. At FAT, verify the as-built machine and ordered options. At SAT, verify site utilities, isolators, drains, access, load routes, plant interfaces and real operators.
Minimum tests should include:
- challenge each door/guard interlock at the defined cycle phases;
- operate every emergency stop, then verify reset and restart behavior;
- simulate relevant sensor, power and utility faults using an approved method;
- demonstrate isolation, stored-energy dissipation and try/test verification;
- inspect hot, moving, electrical and chemical access points;
- run the worst approved trolley through loading, restraint and unloading;
- observe abort, drain, cooldown and recovery from interrupted cycles;
- record device IDs, expected response, actual result, instrument and witness;
- correct failures and repeat the affected tests before release;
- hand over manuals, drawings, risk information and operator/maintenance training.
Never create a hazardous fault merely to “prove” protection. The supplier and buyer must pre-approve safe simulation methods. Use the wider FAT/SAT commissioning protocol and trace every safety requirement in the rack washer URS.
Procurement checklist
Require each bidder to identify:
- intended use, limits, prohibited loads and foreseeable misuse considered;
- destination laws, standards and exact editions used for the offer;
- machine boundary and buyer/supplier safety responsibilities;
- risk-assessment deliverables and submission milestones;
- guard, interlock, emergency-stop and safe-restart functions;
- required control-system performance and supporting validation evidence;
- all energy sources, isolation points and stored-energy controls;
- hot-water, steam, chemical, drainage and wet-area safeguards;
- access needs for cleaning, inspection, unjamming and maintenance;
- residual risks, labels, PPE inputs and training scope;
- FAT/SAT safety tests, deviations and closeout criteria;
- declaration/certification documents actually included—without treating “designed to” as certified.
Frequently asked questions
Does an emergency stop replace a door interlock or LOTO?
No. These controls serve different functions. An emergency stop is a reactive control; an interlock manages access during operation; energy isolation protects servicing and maintenance.
Can the PLC alone perform every safety function?
Only when the safety-related control architecture and software are designed and validated for the risk-assessed function. A standard automation output should not be assumed to provide a safety-rated function.
Is CE marking enough for a US factory?
No. CE marking addresses applicable EU product requirements. A US employer must still meet applicable workplace rules, perform site hazard assessments and integrate the machine into energy-control, chemical, PPE and training programs.
Who owns the final risk assessment?
The manufacturer owns its machinery design risk assessment and required product documentation; the employer owns workplace hazards and use. The project needs both, with interfaces and residual risks exchanged rather than silently assigned.
When should the assessment be reviewed?
At design freeze, after FAT changes, before production release and whenever loads, chemistry, utilities, guarding, controls, procedures or incident history change the risk.
Planning a PTW-1900 project? Send V-TAI your load drawings, utility plan and destination requirements to request a configuration-specific safety-interface and acceptance-data review. Final compliance, risk reduction and site procedures must be approved for the ordered machine and installation.
Sources checked 21 September 2026: OSHA 29 CFR 1910.147, 1910.212, 1910.22, 1910.1200 and 1910.132; ISO 12100:2010 status page; ISO 14119:2024; ISO 13849-1:2023; ISO 14118:2017; eCFR 21 CFR 117.40; and the consolidated Regulation (EU) 2023/1230. Verify destination rules, current editions and the ordered PTW-1900 documents before purchase or commissioning.