← Resources
Safety·7 min read·

Safety relay or safety PLC: how to decide

One is a wiring decision, the other is a programming one. The count of safety functions, not the size of the machine, is what settles it.

Short answer

Use a safety relay when there are a handful of independent safety functions and they do not interact: an E-stop, a guard, a light curtain, each stopping everything. Use a safety PLC when functions interact, when zones must stop independently, when muting or speed monitoring is involved, or when there are more than roughly six functions. The crossover is usually cost neutral around four to six relays.

The safety chain, and where the rating appliesSensorguard switchLogicrelay or safety PLCActuatorcontactorTHE RATING APPLIES TO ALL OF THIS, NOT TO ONE BOXONE SAFETY FUNCTION

The question is usually asked as a budget question and answered badly as a result. The right frame is different: how many safety functions are there, and do any of them need to know about each other?

When a relay is the right answer

One E-stop circuit, one guard door, one light curtain, each of which stops the whole machine. Three relays, or one relay with enough channels, and no software.

The virtue of a relay is that there is nothing to get wrong in it. The function is fixed in hardware, the wiring is the design, and validation is a matter of proving each circuit does what the drawing says.

A relay based system is also legible to whoever comes next. A drawing is easier to hand over than a project file for a piece of software they may not own.

When the relay approach stops scaling

Three things break it, and any one of them is enough.

Zones. If opening the guard on station 4 should stop station 4 and let stations 1 to 3 keep running, you no longer have independent circuits. You have a matrix of which input stops which output, and that matrix in relay logic is a wall of wiring nobody will maintain.

Interaction. Muting a light curtain while a pallet passes through it is conditional logic. So is allowing a jog at safely limited speed with the guard open. Both need state, and relays do not hold state well.

Count. Somewhere around four to six relays, the cost of a small safety controller and the cost of the relays cross over. After that the relays get more expensive and the safety controller does not.

What a safety PLC actually is

Two processors running the same program and comparing results, with certified I/O that tests itself, in a package assessed to IEC 61508. You program it in a restricted environment with certified function blocks: E-stop, two hand control, muting, safe speed.

The restriction is the point. You are not writing safety logic from scratch; you are configuring blocks whose behaviour has been assessed. That is why the programming looks limited, and why treating it as a general purpose controller is a mistake.

Keep the two networks separate in your head

The commonest architectural error is letting the standard PLC into the safety function because it is convenient.

The standard PLC can read every safety status, drive the HMI, log the events and sequence the machine around them. It must not be the thing that decides whether the contactor drops out.

Where the two need to talk, use the safety network's own mechanism, or hardwire the status. Do not invent a handshake.

The practical checklist

  • Count the safety functions, then count them again after asking whether any zone stops independently.
  • Check whether any function is conditional, which means muting, speed monitoring, or a mode selector.
  • Look at the drives. If they have safe torque off inputs, that changes the stopping architecture and often removes contactors.
  • Ask who maintains it. A relay panel with a good drawing outlives a software project whose licence has expired.

Common questions

Is a safety PLC safer than a safety relay?
No. Both can achieve PL e. A relay does one fixed function in hardware; a safety PLC does many, defined in software, with certified function blocks. The choice is about how many functions and how they interact, not about the level achievable.
Can I use a standard PLC for safety if I add a relay?
Yes, and it is the normal arrangement. The safety relay performs the safety function; the standard PLC reads its status for the HMI and sequencing. What the standard PLC must never do is be the thing that removes the energy.
What is a safe torque off input on a drive?
A hardware input on the drive that removes torque producing power to the motor without dropping the mains contactor. It is usually dual channel and rated to a Performance Level, and it is what lets a machine stop safely without waiting for a drive to restart afterwards.

Keep reading