ISO 13482 Conformity and the Risk Assessment Buyers Should Read
The Certificate Problem
Ask five service robot suppliers for their safety documentation and you will receive five different things: a CE mark on the nameplate, a certificate for the electrical components, a self-declaration referencing a directive that no longer applies, and an ISO 13482 test report for a single model that is not the one being quoted. All five look like compliance. Only some of them are.
The confusion is structural. A robot sold into a commercial building is a machine, and machines placed on the EU market must carry a conformity assessment under the Machinery Regulation, with the applicable harmonised standards cited in the technical file. ISO 13482 is the standard that addresses the specific hazards of a mobile service robot interacting with people, and citing it is meaningful only if the technical file shows a risk assessment that actually drove design decisions.
For a buyer, this matters because the safety document is the artefact that survives an incident. After an injury, the question asked is not whether the robot carried a mark, but whether a documented risk assessment identified the hazard, whether the mitigation was implemented, and whether the residual risk was communicated to the operator. A buyer who has never seen that document cannot answer, and neither can the insurer.
What ISO 13482 Actually Requires
ISO 13482 covers personal care robots and sets out a risk-assessment process rather than a checklist of features. Three things in it are worth understanding before a supplier meeting.
| Element | What the standard expects | What a buyer should be shown |
|---|---|---|
| Hazard identification | Systematic enumeration of mechanical, electrical, thermal, functional and information hazards arising from the robot's tasks and environment | A hazard table naming the robot's actual tasks, not a generic template |
| Risk evaluation | Each hazard assessed for severity and probability, both in normal use and in reasonably foreseeable misuse | The severity and probability ratings, and the residual risk after mitigation |
| Risk reduction | Inherently safe design first, then safeguarding and protective measures, then information for use as the last resort | Evidence the mitigation was design-led, not a warning sticker standing in for a bumper sensor |
The third row is where weak technical files fail. A supplier whose only mitigation for a collision hazard is an instruction to keep people away has not reduced risk, they have transferred it to the operator. A credible file shows the detection system, the speed and force limits it enforces, the stopping distance measured under load, and the operating envelope in which those limits hold.
Reading a Conformity Declaration Without Being Misled
The declaration of conformity is a short document, and its details carry the whole argument. Six fields decide whether it is worth anything.
- The exact model and serial range. A declaration that does not name the model being purchased covers a different machine. Fleets are routinely quoted on a declaration for a predecessor model.
- The regulation cited. Machinery Directive 2006/42/EC has been superseded by the Machinery Regulation (EU) 2023/1230, with a transition period. A declaration still citing only the directive in a new purchase is a signal about how current the technical file is.
- The standards listed. ISO 13482 should appear where the robot interacts with people, alongside the electrical safety standard and, for cleaning machines, the applicable floor-treatment machine standard. A list that names only EN 60204 is an electrical file, not a robot safety file.
- The standards' dates. Citing a withdrawn edition of a standard, such as an older version of the electrical safety family, indicates the file has not been maintained.
- The signatory and date. A named person within the manufacturer, with a date and a place. An unsigned PDF is marketing material.
- The notified body reference, where applicable. For categories where third-party involvement is required, the body's four-digit number must appear. A declaration claiming full self-certification for a category that requires a notified body is a defect.
None of these checks requires an engineer. They require knowing which fields to read, and they are worth two minutes before a purchase order, because after delivery the document set is much harder to renegotiate.
Hazards That Matter in Real Buildings
The generic hazard list is long. In commercial deployments, five categories cause nearly all the incidents worth worrying about, and each has a specific question that separates a real mitigation from a claim.
| Hazard | Where it bites | Question to ask | Evidence that counts |
|---|---|---|---|
| Contact with a person | Blind corners, lift lobbies, aisle ends | What is the stopping distance at maximum speed and maximum payload, and how was it measured? | Measured stopping distance on the floor type at the site, not a datasheet figure |
| Crushing against a fixed object | Robot reversing into a wall, a display, a parked trolley | Does the robot detect an obstruction behind it, and does it stop or continue? | Rear detection coverage in degrees, with the behaviour on detection stated |
| Loss of stability | Ramps, kerbs, wet floors, a lifted load | What slope and step is the machine rated for, and what happens beyond it? | Rated climb and step figures, plus the detection that refuses an unrated transition |
| Thermal and fire | Charging, hot plant rooms, dust on ventilation | What are the pack's charge and discharge temperature limits, and what does the BMS do at the limit? | Thermal cut-off behaviour and the charging-room requirement in the information for use |
| Emergency stop and recovery | Any intervention by staff | Where are the stops, what does the robot do when one is pressed, and how is it recovered? | A demonstrated stop and recovery, timed, by the site's own staff |
The stopping-distance question is the one most often answered from a datasheet that was measured on a clean, dry, level floor at half load. Wet terrazzo at full payload is a different number, and on a cleaning robot the wet floor is the normal condition rather than an edge case. Ask for the measurement protocol alongside the figure.
Operator Obligations Buyers Inherit
Conformity is not transferred with the machine. The manufacturer places it on the market; the operator who puts it into service in a workplace acquires duties of its own under workplace safety and machinery-use rules. In practice that means four obligations the fleet owner must discharge independently.
- A risk assessment for the deployment. The manufacturer's file covers the machine; the operator assesses the site, the routes, the people, and the interaction. This is the document a workplace inspector asks for first, and it belongs in the site readiness process described in site survey and readiness assessment.
- Information and training for staff. Everyone who works near the fleet needs to know the stop locations, the exclusion zones during operation, and what not to do. Training records are the evidence.
- Maintenance to the stated schedule. Safety functions degrade with worn sensors and dirty lenses. A fleet maintained outside the vendor schedule is no longer the machine the assessment covered, and after an incident that gap becomes the finding.
- Incident recording. Near misses as well as events. A near-miss log is what shows a hazard was recognised and managed, and its absence reads as an unmanaged risk. The event escalation structure is set out in incident response and escalation.
Insurance underwriting follows the same artefacts. A fleet with a site risk assessment, a training record and an incident log is a different risk from an identical fleet without them, and the difference shows up in the premium and in whether a claim is paid. The insurance evidence pack is described in the insurance evidence pack.
The Documents to Demand Before the Order
Ask for all six at quotation stage, not at delivery. A supplier who cannot produce them at quotation stage will not produce better ones later.
- Declaration of conformity naming the exact model, with the standards and their editions listed.
- Risk assessment extract for the hazards above, showing severity, probability and mitigation for each.
- Test report for the stopping distance and detection coverage, including the test conditions.
- Information for use, the operator manual section covering residual risks, exclusion zones and the charging environment.
- Electrical safety and battery transport certificates, including UN 38.3 for the pack, as covered in battery certification and transport.
- A statement of the safety-function maintenance schedule, with the intervals and the checks, so the operator's maintenance contract matches it.
Two of these are commonly missing and both are decisive. The risk assessment extract is often refused as confidential, which is answerable by asking for the extract rather than the file; a supplier unwilling to show any extract has not done the work. The maintenance schedule for safety functions is often absent from the manual entirely, which means the operator cannot know whether the fleet is still within its assessed configuration.
What the Documentation Should Change in Your Decision
Documentation is not paperwork that follows the purchase, it is information that should change it. Three findings justify changing a decision.
If the declaration does not name the model being purchased, treat the fleet as unconformity-assessed until the correct document is produced, and make delivery conditional on it. If the risk assessment cites no measured stopping distance at payload, the safety claim is theoretical and the site assessment must assume a longer stop, which in turn changes the operating speed and possibly the route. If the maintenance schedule for safety functions does not exist, budget for an independent annual safety inspection of the fleet, because nobody else is checking whether the assessed configuration still holds.
For our own part, the AOMAN C1, AOMAN C2 Pro and AOMAN D1 documentation sets are available on request at quotation stage, including the conformity declaration for the exact model, the hazard table extract, and the safety-function maintenance intervals our service schedule is built on. Request the documentation set with your site details and we will send it with the quotation rather than after it.
Where the Standards Sit Relative to Each Other
Three families of requirement apply to a commercial cleaning or delivery robot, and they are often confused. ISO 13482 addresses the robot-specific hazards of moving among people. The electrical safety family covers the machine's power and control systems. The floor-treatment machine standard covers the cleaning function itself, including the squeegee, brushes and wet-floor hazards. A complete technical file cites all three; a file citing one is covering a third of the risk surface, and the gap is usually the one that produces the incident.
For buyers, the practical use of this is a single question: which standards does the declaration list, and does the list include one for the robot's interaction behaviour? If it does not, the conformity claim is about electrical assembly, not about what happens when the machine meets a person in a corridor.
The Site Risk Assessment, Concretely
The operator-side assessment need not be long. A useful one is five pages covering the route map with hazards marked, the people who share each route, the operating hours, the response to a stopped robot, and the residual risks accepted by the site. It should be reviewed whenever a route changes, a new robot model joins the fleet, or a near miss is logged. Fleets that treat it as a one-off document for the day of delivery end up with a file that describes a building that no longer exists.
For multi-site operators, one template with a per-site annex is enough. The annex carries the route map, the floor-plan hazards and the named responsible person, and the template carries the common operating rules.
The Takeaway
Safety compliance in service robotics is a document trail, and the buyer's leverage exists only before the purchase order. Ask for the declaration naming the exact model, the risk assessment extract with measured stopping distances, and the safety-function maintenance schedule at quotation stage. Then discharge the operator obligations that do not transfer with the machine: a site risk assessment, staff training, maintenance to schedule, and an incident log that includes near misses. A fleet with those four in place is insurable, auditable and defensible; an identical fleet without them is a liability that happens to clean floors.
