The machine is finished. Its ANSI B11.0 risk assessment runs to dozens of pages: tasks, hazards, risk levels, safeguards, verification results, and residual risk. The customer in the United States is satisfied. Then an order arrives from the European Union.
Can the same machine receive CE marking?
When engineers compare ANSI B11.0 and ISO 12100, two bad ideas usually appear. The first is to discard the American assessment and start again from a blank page. The second is to replace the standard number in the heading, add a few European standards to the declaration, and assume the machine has acquired European citizenship.
The first approach wastes sound engineering work. The second works only until someone reads the file.
Changing a heading takes a minute. Unfortunately, find-and-replace is still not a conformity assessment procedure.
Why ANSI B11.0 and ISO 12100 do not by themselves authorize CE marking
These standards do not represent opposing safety philosophies. Both require the assessment team to define the scope, identify tasks and hazards, estimate risk, apply risk-reduction measures, and verify the result. ANSI B11.0 also addresses the responsibilities of suppliers, integrators, users, and organizations that modify machinery.
That makes a B11.0 assessment excellent input for an EU project. It does not make it an EU conformity assessment.
A U.S. manufacturer does not need to rediscover its own machine. It does need to determine which information and evidence can be reused under ISO 12100, identify the applicable EU legislation, and show how each legal requirement has been satisfied.
A risk matrix result such as Low may be a legitimate conclusion within the selected B11.0 method. It does not promote the machine to a fictional risk level called CE. No such cell exists.
ISO 12100 organizes the machinery risk assessment and risk-reduction process. It does not identify every applicable EU legal act, select the conformity assessment procedure, compile the technical file, or decide automatically whether third-party involvement is required.
The distinction is simple:
- A technical standard explains how to identify and reduce risk systematically.
- EU product law also asks which requirements apply, how each requirement was met, and where the supporting evidence can be found.
A supplier statement prepared under ANSI B11.0 may be valuable evidence. It is not the declaration required by EU machinery legislation and does not prove that the applicable European procedure has been completed.
CE marking is not an award for a thorough risk assessment. It is the manufacturer’s declaration that the product complies with all applicable EU requirements.
The legal transition also matters. Machinery placed on the EU market before 20 January 2027 is generally governed by the Machinery Directive 2006/42/EC. The Machinery Regulation (EU) 2023/1230 generally applies from 20 January 2027. The core engineering logic remains familiar, but manufacturers must use the legislation applicable on the date the product is placed on the market.
Under both regimes, the risk assessment must connect to the applicable essential health and safety requirements. The Machinery Regulation makes this relationship particularly explicit: risk-assessment documentation must identify the applicable requirements and describe the protective measures used to satisfy them.
The interlocked guard example
Suppose the American assessment says an operator may enter a hazardous area while clearing a jam. The design includes an interlocked guard, guard locking, and a safety-related stop function. Residual risk is rated low.
That sounds promising, but the European assessment still needs answers:
- Does the guard prevent access over, under, around, or through its openings?
- Is the interlocking device suitable for the environment and foreseeable use?
- Can it be defeated with a spare actuator, a piece of wire, or another readily available object?
- Does guard locking remain engaged until the hazardous movement has stopped?
- What required performance level or safety integrity level applies to the safety function?
- Was the actual stopping time measured under worst-case conditions?
- Was the complete safety function validated, rather than merely checking that an input changed state?
“Almost immediately” is a popular unit of stopping time. It does not appear in any machinery safety standard.
One row in a B11.0 worksheet may therefore expand into several legal requirements, technical design questions, and separate pieces of evidence. The physical safeguard may remain unchanged. What changes is the need to demonstrate that it satisfies the requirements applicable to machinery intended for the EU market.
What can be reused when comparing ANSI B11.0 and ISO 12100?
Do not discard the B11.0 assessment. Discard only the assumption that every conclusion crosses the Atlantic unchanged.
The most reusable material consists of facts that can be checked independently: the intended use, operating modes, exposed persons, task descriptions, hazardous scenarios, drawings, calculations, measurements, test results, and validation records.
Start with the limits of the machinery. Does the assessment define intended use, expected users, physical boundaries, service life, environmental conditions, and material properties? Does it cover cleaning, setup, adjustment, fault finding, jam clearing, maintenance, and reasonably foreseeable misuse?
A note stating operator use only is not a complete specification of the limits of use. A layout drawing does not replace an assessment of the space required for operation, maintenance, escape, and safe access.
Task-based hazard identification is especially valuable. ANSI B11.0 commonly links a hazard to a real person performing a real activity: an operator removes scrap, a controls technician diagnoses a fault with power available, or a maintenance worker enters the machine envelope.
That is far more useful than a worksheet containing only the phrase mechanical hazard.
The assessment must still cover the complete machinery and all relevant life-cycle phases. A document may describe normal production in impressive detail while saying nothing about transportation, assembly, commissioning, changeover, decommissioning, or disposal. A missing life-cycle phase can conceal more serious hazards than an imperfect risk matrix.
| Material from the B11.0 assessment | How it can be reused | What must be checked |
|---|---|---|
| Assessment scope and intended use | Input for defining machinery limits | Use, space, time, environment, users, and foreseeable misuse |
| Persons and tasks | Identification of hazardous situations | All operating modes and life-cycle phases |
| Hazards | Input to hazard identification under ISO 12100 | Real scenarios rather than broad hazard categories |
| Initial risk | Starting point for risk estimation | Assumptions behind severity and probability |
| Risk-reduction measures | Input to the three-step method | Correct priority of design, safeguarding, and information |
| Residual risk | Evaluation of the result and input to user information | Warnings or training have not replaced feasible design measures |
| Testing and validation | Potential conformity evidence | Physical behavior was tested, not only signal status |
ANSI B11.0 requires the organization to select and apply a risk-scoring system consistently, but it does not impose one mandatory matrix, point scale, or color scheme. The result may be reusable only if its assumptions can be reconstructed.
If probability was reduced because the operator is expected to be careful, the matrix has not calculated risk. It has calculated optimism.
Supplier responsibility cannot be transferred casually
B11.0 distributes responsibilities among suppliers, integrators, users, and modifiers. Its risk-reduction framework includes inherently safe design, engineering controls, warnings, procedures, training, supervision, hazardous-energy control, and personal protective equipment.
ISO 12100 requires the designer to use the three-step method:
- Apply inherently safe design measures.
- Use safeguarding and complementary protective measures.
- Provide information for use about residual risks.
These frameworks are not inherently contradictory. The problem appears when a user action is presented as a substitute for a technical measure that the manufacturer should reasonably have implemented first.
The cheapest safeguard in a spreadsheet is often labeled user responsibility. On the factory floor, it can become the most expensive one.
Partial use of standards and the limits of presumption of conformity
A list of standards is not armor for the declaration.
EN ISO 13849-1 will not repair a single-channel circuit merely because its number appears below a signature. EN ISO 14119 will not make an interlock difficult to defeat. EN ISO 14120 will not strengthen a weak guard, and EN ISO 13855 will not move a light curtain farther from a hazard.
The machine usually has no idea which standards were declared.
A manufacturer may apply only relevant parts of a standard and use other technical solutions elsewhere. The documentation must define the scope of that application and show how all remaining applicable legal requirements have been met. Under the Machinery Regulation, partial application must also be reflected appropriately when standards or common specifications are identified in the EU declaration of conformity.
A standard can be applied partially. A machine cannot be declared partially compliant with the essential requirements that apply to it.
Presumption of conformity has a defined scope, not an aura. It does not radiate from one correctly applied clause to every other section of the standard or to hazards outside that standard’s scope.
ANSI B11.0 can serve as a useful technical specification and a source of engineering evidence. It is not an EU harmonized standard whose reference provides presumption of conformity under EU machinery legislation. Citing it alone therefore does not establish conformity with the applicable essential health and safety requirements.
This does not prohibit American technical solutions. Manufacturers may select alternative methods, but that freedom comes with the obligation to demonstrate that the chosen measures are effective.
Design freedom is not freedom from evidence.
Functional safety still requires a complete argument
Return to the guard-locking example. The documentation cites EN ISO 14120, EN ISO 14119, and EN ISO 13849-1. Was the guard structure actually assessed? Was foreseeable defeat considered? Was the safety function specified? Was the required performance level determined? Was the entire function validated?
If not, the three standard numbers mainly describe the author’s ambition.
The functional-safety route must also be selected and applied coherently. The familiar discussion of ISO 13849 vs IEC 62061 is not a contest over which number looks better in the file. The appropriate framework depends on the control system, architecture, technology, competence, and project needs. Whichever route is selected, the manufacturer still needs a safety requirements specification, justified target integrity, architecture and reliability evidence, systematic measures, verification, and validation.
Cybersecurity, electromagnetic compatibility, and explosive atmospheres
Modern machinery may include a safety controller, operator panel, industrial computer, wireless connection, and remote-service modem. A supplier can change software parameters without visiting the site. The risk assessment contains one reassuring line: cybersecurity considered.
That is almost as comforting as finding the service password written on the control cabinet door.
ANSI B11.0 recognizes cybersecurity, remote operation, control-system issues, electromagnetic compatibility, and environmental hazards. Their presence in the standard does not prove that the manufacturer has completed the assessment required by the relevant EU legislation.
Ask practical questions. Can a remote user modify a safety parameter, change operating mode, reset a fault, authorize a restart, or upload new software? After an update, can the manufacturer identify which version was validated? Are access rights controlled, reviewed, and revoked? Are changes logged? What happens when communication is lost?
A virtual private network is only a tunnel. If the account at the other end can alter a safety-related parameter without adequate control, the manufacturer has built a secure tunnel to an unsafe decision.
The Machinery Regulation includes requirements addressing protection against corruption and the resilience of control systems against influences that may lead to hazardous situations. Cybersecurity becomes a machinery safety issue whenever interference with hardware, software, data, or communication can change the machine’s safe behavior.
Network-connected products may also fall within broader EU cybersecurity legislation. Applicability, transition dates, product scope, and obligations must be checked separately rather than assumed from the machinery assessment.
Electromagnetic compatibility is a system property
If the Electromagnetic Compatibility Directive applies, the completed machine must be assessed for emissions and immunity. The manufacturer should define representative configurations, cable types, filters, shielding, grounding, enclosure arrangements, operating states, and installation conditions.
Five CE-marked devices mounted in one cabinet do not automatically create an EMC-compliant cabinet.
Electromagnetic compatibility has an inconvenient habit of depending on the physics of the complete installation rather than the number of component declarations in the purchasing folder.
Potentially explosive atmospheres need defined conditions
If machinery is intended for use in a potentially explosive atmosphere, the manufacturer must determine whether EU requirements for equipment and protective systems intended for such environments apply. That requires defined information about the atmosphere, intended zone, equipment category, material characteristics, temperatures, and potential ignition sources.
The operator generally owns the workplace zoning assessment, but the machine manufacturer cannot design in a vacuum. The intended environmental conditions must be known and agreed.
“There is not much dust” is not an equipment category. “The customer probably does not have a hazardous zone” is not an agreed specification.
One machine may be subject to machinery, electromagnetic compatibility, explosive-atmosphere, radio-equipment, pressure-equipment, and cybersecurity requirements. A single declaration may cover several applicable EU legal acts, but each act retains its own scope, requirements, and evidence.
How to convert existing engineering work into EU conformity evidence
The tempting plan is straightforward: create a folder called CE, copy the B11.0 assessment, rename it as an ISO 12100 risk assessment, and add European standard numbers.
After an hour, the project appears European. After the first serious customer or authority question, it no longer appears complete.
You are not converting an American declaration into a European declaration. You are converting existing engineering work into evidence against applicable EU requirements.
Step 1: Audit the existing material against ISO 12100
Retain the machinery description, tasks, hazards, protective measures, assumptions, calculations, tests, and validation results. Then verify coverage of all machinery limits, life-cycle phases, operating modes, foreseeable misuse, and interventions.
Do not copy a risk result without the assumptions behind it. A matrix with unexplained inputs is an adult coloring sheet, not technical evidence.
Step 2: Identify the applicable EU legislation
Determine which machinery regime applies on the date the product is placed on the market. Then assess other relevant legislation, including electromagnetic compatibility, explosive atmospheres, radio equipment, pressure equipment, and cybersecurity rules where applicable.
Do not select legislation by copying the declaration from a similar-looking machine. Two machines can share a frame and have different intended uses, interfaces, environments, and legal obligations.
Step 3: Link each requirement, measure, and item of evidence
For each hazardous scenario, record:
- the applicable essential health and safety requirement;
- the implemented risk-reduction measure;
- the harmonized standard, other standard, or engineering specification used;
- the drawing, calculation, test, inspection, or validation record proving effectiveness;
- the remaining gap and the person responsible for closing it.
This creates traceability from law to machine and from machine to evidence. It also exposes attractive but unsupported conclusions before an auditor, notified body, customer, or market-surveillance authority does.
Step 4: Verify standards rather than collecting numbers
Select standards because they address the hazard and technical solution, not because they appear on another manufacturer’s declaration. Check each standard’s scope, edition, harmonization status under the applicable legislation, relevant clauses, and required verification methods.
If only part of a standard was applied, define that part honestly. If an alternative technical solution was used, document the engineering justification and evidence demonstrating equivalent compliance with the applicable legal requirement.
Step 5: Close physical and documentary gaps
Perform the missing stopping-time measurement. Complete the safety-function validation. Redesign an interlock that can be defeated. Confirm environmental conditions with the customer. Update instructions to describe residual risks without using warnings to excuse avoidable design defects.
The shipping deadline is not a risk-reduction measure. Physics may be informed that the machine leaves tomorrow, but it is under no obligation to shorten the stopping time.
Only after the gaps are closed should the manufacturer finalize the conformity assessment procedure, compile the technical documentation, prepare the required declaration, and affix CE marking.
| EU requirement | B11.0 scenario | Implemented measure | Technical basis | Evidence | Open gap |
|---|---|---|---|---|---|
| Protection against moving parts | Access while clearing a jam | Interlocked guard with guard locking | Guarding, interlocking, and safety-function standards | Drawings, access assessment, test records | Worst-case stopping time not measured |
| Safety and reliability of control systems | Guard opened during hazardous movement | Safety-related stop function | Applicable functional-safety standard | Safety requirements specification and validation report | Required performance level not justified |
Keep the B11.0 assessment, but do not mistake it for CE conformity
Crossing the Atlantic does not change a machine’s stopping time. A guard does not lose its strength, and a well-executed hazard analysis does not become worthless.
What changes is the legal system in which the manufacturer must demonstrate conformity.
A strong ANSI B11.0 assessment may provide most of the underlying engineering information: tasks, hazards, safeguards, calculations, measurements, and validation results. It does not automatically prove that every applicable EU requirement has been identified and satisfied.
There is no need to repeat sound engineering work. Audit its scope, map the evidence to the applicable requirements, verify the technical basis, and close the remaining gaps.
ANSI B11.0 can save months of work. It cannot save the manufacturer from responsibility.
That final discipline is what separates intelligent reuse of engineering evidence from swapping standard numbers—and what separates valid CE marking from a sticker.