Fenceless But Compliant: Navigating ISO 10218-2 And OSHA Safety Standards For A Cobot Palletiser

The primary selling point of a modern collaborative robot palletiser is its open, small-footprint design. Unlike traditional heavy-duty, four-axis industrial robots that require floor-to-ceiling metal fencing, interlocking safety gates, and light curtains, collaborative robots are marketed as equipment that can work right alongside human operators. For a factory manager looking to optimize floor layout behind a high-speed conversion line, removing physical cages seems like an easy way to save space, lower installation costs, and improve forklift accessibility.

However, this fenceless setup frequently turns into a major compliance hazard during factory inspections.

The misunderstanding lies in confusing a collaborative robot arm with a compliant palletizing system. While a cobot arm might be certified as safe out of the box by the manufacturer, the moment you attach a heavy metal clamp, pick up a sharp-edged corrugated cardboard bundle, and swing it through the air at high speed, the entire setup becomes a high-energy industrial hazard. If a human worker is struck by that moving bundle, the impact can cause serious injury. This is why regional safety inspectors operating under OSHA or European CE directives can, and will, shut down a fenceless palletizing cell if it fails a formal risk assessment.

Automatic Robotic Palletizer

To understand compliance, you have to look at the practical physics of impact energy. Under international safety frameworks, a robot is only truly collaborative if its energy output stays below the pain and injury thresholds of the human body during an unexpected collision. This operational approach is known as Power and Force Limiting.

The total kinetic energy of a moving robotic payload is driven by two real-world variables: the combined mass of the system and its operational speed. In a packaging environment, the mass is a fixed variable dictated by your production requirements. You cannot change the weight of the corrugated bundle, nor can you easily reduce the weight of the structural steel or aluminum gripper needed to secure it. Therefore, the only variable you can alter to keep impact energy within safe limits is the linear velocity of the robot arm.

To comply with collaborative standards without any physical barriers, a cobot palletiser must often be restricted to a slow linear speed, typically under a quarter of a meter per second. However, if your upstream folding, gluing, or strapping line is discharging twenty-five bundles per minute, running the robot arm at this low speed will cause an immediate bottleneck. Material will back up along your conveyors, eventually triggering an emergency line stop on the folder-gluer and severely degrading your overall plant efficiency.

To maintain high throughput, the robot must move fast. But when it moves fast, it ceases to be collaborative under standard power and force limits. Resolving this paradox requires moving away from permanent speed restrictions and embracing dynamic safety monitoring.

Building a compliant, high-speed, fenceless palletizing cell requires implementing an advanced safety strategy known as Speed and Separation Monitoring. This approach is governed by two core international standards that safety auditors use to evaluate factory floors.

This standard specifies safety requirements for the integration of industrial robot systems and cells. It mandates that a comprehensive, documented risk assessment must be performed for the entire installation. This means you cannot simply point to a certificate that came with the robot arm. The integrator or plant owner must evaluate the arm, the gripper, the physical environment, and the specific characteristics of the product being handled as a single integrated system.

This technical specification provides specific, quantitative guidance on collaborative robot operations. Crucially, it establishes maximum allowable contact forces for different areas of the human body, dividing contact into two categories:

Transient Contact: Dynamic, short-duration impacts where the robot strikes a human worker who is free to move away. The energy is absorbed momentarily, and the allowable force thresholds are relatively high because the human body can recoil from the impact.
Quasi-Static Contact: Crushing or clamping hazards where a human worker is trapped between the moving robot and a fixed object, such as a conveyor frame, a structural pillar, or the pallet itself. Because the worker cannot move away, the allowable force thresholds are exceptionally low, as the risk of debilitating crushing injuries is high.

Under these guidelines, you can legally run an automatic palletizing robot at its maximum industrial velocity without hard fencing, provided you install a monitored safety system that maintains a calculated protective separation distance between the robot and human workers. If that distance is breached, the system must automatically slow down or stop before any physical contact can occur, preventing both transient and quasi-static contact events entirely.

The most effective way to achieve open-floor compliance while maintaining high throughput is by deploying industrial safety laser scanners at the base of the palletizing cell. These scanners project a flat, multi-layered infrared monitoring field across the floor, dividing the open area around the pallet into distinct operational zones.

These zones are mapped directly into the robot's safety controller using specialized software protocols that maintain dual-channel redundancy to prevent a single point of electronic failure. The cell manages human presence through a stepped, automated speed reduction matrix that balances safety

with operational continuity.

Monitoring Zone	Physical Distance From Robot	Robot Operational State	Impact on Upstream Line
Green Zone (Clear Operation)	Greater than 2.5 meters	Full Industrial Speed: The arm moves at maximum velocity to keep pace with the high-speed folder-gluer.	No Impact: Production runs at peak throughput capacity.
Yellow Zone (Warning/Slowdown)	Between 1.2 and 2.5 meters	Controlled Deceleration: The safety controller triggers an immediate ramp-down, capping the robot's speed at a safe collaborative limit.	Temporary Buffering: Bundles begin to accumulate slightly on the zero-back-pressure infeed conveyor.
Red Zone (Hazard/Stop)	Less than 1.2 meters	Category 1 Monitored Stop: Power is maintained but motion is halted, executing a regenerative brake-to-stop before a human can reach the moving parts.	Line Hold: Upstream buffering activates fully; if the red zone remains blocked, the folder-gluer will eventually pause.

By utilizing this multi-tiered approach, the cell stays fully compliant with ISO 10218-2. Operators can walk up to the pallet station to inspect labels, check glue lines, or drop off empty pallet bases without forcing a hard, manual emergency stop that requires a lengthy electrical reset and homing procedure.

To satisfy a safety auditor, the physical boundaries of your yellow and red zones cannot be guessed; they must be calculated based on an industry-standard formula that considers multiple real-world timing factors:

The Hand-Reflection or Approach Speed: The standard human walking speed defined by safety regulations is 1.6 meters per second. If an operator is running or reaching quickly, this baseline may need to be adjusted upward during the risk assessment.
The Response Time of the Scanner: The internal processing delay of the laser scanner, which represents the time it takes for the device to detect an obstacle and change the state of its safety outputs.
The Response Time of the Safety Controller: The time required for the robot's internal safety PLC to process the stop signal from the scanner and command the motor drives to cut power or apply brakes.
The Total Stopping Distance of the Robot: The physical distance the robot arm travels after the brakes are applied. This is heavily dependent on the maximum speed of the arm, the weight of the gripper, and whether it is carrying a full cardboard bundle at the moment of the stop signal.

If a robot takes a half-second to come to a complete halt when carrying a heavy load at full speed, and the safety electronics introduce a slight processing delay, the red zone boundary must be positioned far enough away to ensure that a human walking at normal speed cannot bridge that gap before the robot achieves absolute standstill.

A common mistake that leads to a failed safety inspection is focusing entirely on the robot arm while ignoring the design of the end-of-arm tool. Traditional pneumatic side-clamp grippers used for stacking corrugated bundles feature high-pressure cylinders that generate significant crushing forces. If a worker puts their hand inside a fenceless cell and gets caught in those clamps, severe injury can occur, representing a critical quasi-static contact hazard.

To maintain a compliant, open-floor layout, your gripper engineering must incorporate specific safety features that eliminate or mitigate these mechanical pinch points.

The gripper chassis must be entirely free of sharp corners, exposed bolt threads, or knife-like plate edges. All external aluminum or steel plates should feature large radii corners. Furthermore, leading impact surfaces should be outfitted with soft, energy-absorbing polyurethane foam bumpers or pressure-sensitive safety edges. If these safety edges experience a minor compression, they send an immediate interrupt signal to the robot controller, halting all movement before destructive forces can build up against a human limb.

If your cell uses vacuum-based picking instead of mechanical clamps, the tool should integrate independent, dual-channel vacuum sensors. A major hazard in fenceless palletizing is the risk of a product releasing mid-air during a high-speed swing phase, turning a heavy bundle into a dangerous projectile.

The vacuum control system must feature integrated check valves that maintain holding pressure even during a sudden loss of factory compressed air. Additionally, if the sensors detect a drop in vacuum efficiency below a safe operating threshold, the robot must immediately drop into a restricted speed mode and execute a low-altitude controlled descent path to park the unstable load safely, preventing it from being thrown outside the monitored scanner footprint.

All exposed linkages, scissor mechanisms, pneumatic cylinder rods, and mechanical pivot joints on the gripper must be physically isolated. This is achieved by installing protective flexible bellows, neoprene wraps, or transparent polycarbonate shields over the moving mechanisms. The goal is to make it physically impossible for an operator's fingers to get drawn into a mechanical trap during the tool's clamping or actuation sequences.

An un-caged robotic cell is only as compliant as its documentation. When an OSHA inspector or internal corporate safety auditor reviews your plant, they will not be satisfied with verbal assurances or a simple demonstration of the laser scanners. They will ask to see the system's formal Safety Case. To ensure your facility passes without fines or operational shutdowns, your integration team must provide a complete, verified compliance package.

This document is a comprehensive spreadsheet or report that acts as the foundation of your safety compliance. It must systematically list every potential hazard identified within the cell during all phases of operation-including normal production, clearing jams, teaching new patterns, and performing routine maintenance.

An example entry in a compliant risk assessment follows a structured sequence:

Identified Hazard: Entrapment or crushing of an operator between the robot arm and a concrete structural building column during a pallet swap operation.
Initial Risk Level: High, due to the potential for severe crushing injuries and the open nature of the cell.
Mitigation Strategy: Implementation of software-defined safety limit boundaries within the robot controller that physically restrict the arm's articulation range, making it mechanically impossible for the arm to enter the clearance space near the column.
Residual Risk Level: Low, as the hazard has been engineered out of the system via certified safety software.

Safety inspectors will often require physical proof that your calculated safety distances match real-world performance. This validation is performed

using a specialized, third-party instrument called a stop-time meter.

During validation, the robot is run at 100% operational velocity with its maximum rated payload. The testing engineer uses the meter to trigger a safety stop while simultaneously measuring the exact fraction of a second and the precise millimeters of travel required for the robot to achieve absolute zero motion. These physical testing logs must be printed, signed, and attached to the safety file, proving that the laser scanner boundaries are correctly positioned relative to human approach speeds.

For systems that rely on Power and Force Limiting in certain zones, specialized impact-measuring devices must be used to validate compliance with ISO/TS 15066. These devices utilize calibrated springs and electronic force transducers designed to mimic the bio-elasticity of human flesh and bone.

The testing tool is placed in the robot's path, and the robot is commanded to intentionally collide with it at its designated collaborative operating speed. The device records both the peak impact force and the continuous crushing force. If the recorded values fall below the maximum Newton thresholds established for human tissue contact, the system is verified as safe for fenceless operation within that specific zone.

The final component of maintaining a compliant fenceless palletizing cell is the human element. Because there are no physical gates to unlock, operators can easily develop a false sense of security around a collaborative robot, forgetting that it is a piece of heavy industrial machinery. A robust compliance strategy must include ongoing operational training and clear visual cues on the plant floor.

While laser scanners create invisible safety fields, human operators need clear visual indicators to understand where safe zones end and hazardous zones begin. The physical floor around the cobot palletiser should be painted or taped to match the scanner's internal zoning matrix.

Bright yellow hatching should clearly define the warning zone where the robot will slow down, and solid red borders should mark the inner boundary where the robot will execute a hard stop. This allows forklift drivers and floor workers to navigate around the cell without causing accidental production slowdowns.

Operators must be trained on how to properly enter and exit the cell for routine tasks like label application, quality checks, or clearing a deformed cardboard bundle. Rather than simply walking into the scanner field and relying blindly on the automated laser slowdowns, best practices dictate using a controlled pause function on the local operator panel. This brings the robot to a controlled stop at a designated home position, allowing the worker to complete their task with zero risk of unexpected movement, protecting both the employee and the mechanical integrity of the equipment.

Balancing high-speed production throughput with open-floor flexibility is entirely achievable, but it requires moving past standard out-of-the-box factory settings. By designing your cell around dynamic laser scanning zones, choosing compliant gripper mechanics, maintaining clear engineering documentation, and training your staff properly, you can maximize your plant efficiency while ensuring your facility remains fully aligned with modern international safety standards.

Need help choosing the right Robotic Palletizer for you? Contact our team for a free consultation based on your paper size and production volume requirements.