Machinery Safety 101

Using Form C relays in safety circuits

I recently had a discussion with a colleague who wanted to know if it was OK for a design to include a form C relay in an e-stop circuit. You might recall that e-stop functions are required to meet at least PLc/SIL1 requirements [1], [2]. It’s important to remember that PLc/SIL1 can be met using Category 1, 2, or 3 architectures. See [1, Fig. 5] below.

ISO 13849-1 Figure 5 showing the relationship between PLs, Categories, DC and MTTFD.
Relationship between Categories, DC, MTTFd and PL [1, Fig. 5]

The Short Answer

YES, you can, but you need to understand the special requirements that apply. For that, read on!

Component Requirements

Frequently designers get confused about requirements for components to be used in SRP/CS*. To some degree, component selections are based on the architectural category selected (i.e., B, 1, 2, 3, 4), but it’s important to understand that, except for Categories B and 1, there are no explicit requirements placed on the components used.

*See the Definitions at the end of this post.

Category B

In Category B the component requirements are limited to their suitability for the prevailing circuit conditions. This applies equally to electrical and fluidic components. Category B forms the basis for all of the other Categories, so this minimum requirement applies in all designs. Having said this, no competent designer would do anything else.

Category 1

In Category 1 a new requirement is added: well-tried components. The idea of well-tried components has not been well defined since EN 954-1 was published in 1995, however, this will change in the next edition of the standard. In the meantime, the tables of well-tried components in ISO 13849-2 [3] give explicit examples of well-tried components in mechanical, electrical and fluidic technologies.

The use of well-tried components is the heart of Category 1 since this category relies on high-reliability components to achieve a higher PL.

Categories 2, 3, and 4

In Categories 2, 3, and 4, additional reliability is based on diagnostic capability and the use of redundancy. There is nothing that would preclude using well-tried components in these categories, however, they are not required.

Contactors and Relays

Simple safety circuits commonly use contactors or relays for output devices, the “O” devices in the block diagram below [1, Fig. 11].

Category 3 Architecture Logic Block Diagram
ISO 13849-1, Figure 11, Category 3 Block Diagram

Remember too that the dashed line used for the “m” links shown above indicate that some but not all faults may be detected by the diagnostics. In Category 3, this ranges from DCavg = Low (60% to 90%) to DCavg = Med (90% to 99%).


If we look at an example Category 3 circuit, below, we can see that there are auxiliary contacts from the output contactors, K1 and K2, connected into the reset loop (+24 Vdc to S34) on the safety relay to monitor the devices.

Example Category 3 safety circuit schematic diagram
Example Category 3 safety circuit. image: [5]

The mechanical design of some power contactors is such that the auxiliary contact and the power contacts are mechanically linked in a way that will force all the contacts to transfer together. Similar to a fluidic valve, contactors are only open or closed. In the event that a contact welds, the contactor will remain in the closed state.

Cutaway drawing showing the typical construction of a contactor relay.
image: [3]

As you can see, the basic mechanical construction is quite simple. The contacts are mounted to a rigid mechanical armature, ensuring that they move together when the solenoid is energized.

Two cutaway drawings showing the de-energized and the energized state of a contactor relay.
image: [3]

Beware, however, as not all contactors are built this way. Check to ensure that the contactor datasheet shows that the contacts are force-guided. An easy way to verify this is to look for IEC 61810-3 in the list of standards to which the contactor conforms.

What happens if the circuit conditions are such that a smaller relay is preferable?

Control Relays

A Form C relay is also sometimes called a “changeover” or “Single Pole-Double throw (SPDT)” relay.

Schematic diagram of an SPDT Form C contact relay. SPDT stands for single-pole double-throw.
Form C relay schematic. image: [6]

A single form C contact isn’t much good unless you are trying to design a system whose PL only requires PLa or PLb, but adding a second contact to this device adds the possibility of monitoring the relay. This is called a “double-pole, double-throw” or DPDT relay.

Schematic diagram of a DPDT Form C relay. DPDT stands for double-pole double-throw.
Form C DPDT Relay. image [6]

This is the configuration commonly found in control relays that physically look something like this:

Photo of a typical general-purpose DPDT control relay. Construction is visible through the transparent relay casing.
Typical DPDT Relay. image: [7]

Depending on how the armature is mechanically linked to the contact reeds, it is quite possible to have one contact transfer and one stay closed for a number of reasons. This is a “dangerous undetectable (?dd)” fault that will crush the reliability of your design. It’s for this reason that “force-guided” relays were created.

Force-guided relays, on the other hand, have a completely different design from a conventional control relay. In a force-guided relay, the armature is moved to the tip of the contact reeds and as close to the contacts as possible. This helps ensure that the contacts move together. Also, each contact is enclosed in a well inside the plastic body, which will contain the reed if it breaks, and also helps to contain any debris created by heavily loaded contacts. The drawing below shows a force guided relay that has failed, with one of the normally open (NO) contacts welded.

Diagram showing the detailed construction of a force-guided relay.
Internal diagram of a force-guided relay. image [11]

You can also see the location of the armature and the contact wells in the diagram above.

Photo of an example force-guided relay. Construction is visible through the transparent relay cover.
Example of a force-guided relay. image [8]

The close mechanical linking of the contacts helps to ensure that all the contacts transfer together. If one contact is used as a monitoring contact for the relay, there should be a high level of confidence that the state of the monitoring contact is the same as the in-circuit contacts. This mechanical design helps solve the problem with the dangerous undetectable fault created by the design of a standard control relay.

Force-guided relays that meet IEC 61810 [14] will bear the Class A contact mark shown below. Class A refers to the forcible guiding of the contacts. Class B contacts are those found in a standard control relay.

Class "A" contact mark used to denote force-guided relay construction on the label of a control relay.
Class A contact mark

The Class A contact mark will normally show up on the relay nameplate as shown below.

Example of a control relay label by OMRON showing the device approval marks, the Class "A" contact mark, and the contact arrangement diagram.
Typical relay nameplate with Class A marking. image: Omron [13]

For more depth on force-guided relay differences as compared to standard control relays, see Elesta’s explainer.

The Answer

If you only need the relatively small current handling capability offered by a control relay relative to a contactor, then there is no reason you should not select one for use in your SRP/CS with one caveat: it must be force-guided.

Once you’ve selected the appropriate device, you can then do the ISO 13849-1 analysis using the component reliability data provided by the relay manufacturer. In some cases, such as Category 4 applications, you may want to select two different relays from different manufacturers to help with diversity in the SRP/CS. This will be accounted for in your CCF scoring.

Contactors are equally good, but are physically larger and often have higher-power solenoids, so these aspects may also be constraints on the design. If you are selecting a contactor, picking a “safety contactor” makes manually overriding the solenoid more difficult by preventing access to the contactor armature with a small tool or a zip-tie. Safety contactors also ensure that the armature design ensures that the contacts are force-guided, including the auxiliary contacts.

If this doesn’t answer your question in enough depth, feel free to get in touch!


Forcibly Guided Contacts

  • combination of make contacts and break contacts designed in such a way that it is made sure by mechanical means that these make contacts and break contacts can never be in the closed position simultaneously [12]
  • makes it impossible to close the normally closed and normally open contact simultaneously. If a normally closed contact becomes welded, it must be impossible for the normally open contacts to close when the coil is energized.

    If a normally open contact becomes welded, it must be impossible for the normally closed contacts to close when the coil is de-energized. Also known as: forced contacts, positively activated contacts, guided contacts, and linked contacts. [9] See IEC 61810-3 [10] and [14].

Form C – A “Form C” contact has at least 3 terminals. One terminal is common, with one normally open contact and one is normally closed contact sharing the common. This is also called a “changeover” device because the common contact changes from the normally closed position to the normally open position when the coil is energized in a relay or a magnetic field is nearby in a reed switch [4]

safety–related part of a control system

part of a control system that responds to safety-related input signals and generates safety-related output signals

Note 1 to entry: The combined safety-related parts of a control system start at the point where the safety-related input signals are initiated (including, for example, the actuating cam and the roller of the position switch) and end at the output of the power control elements (including, for example, the main contacts of a contactor).

Note 2 to entry: If monitoring systems are used for diagnostics, they are also considered as SRP/CS. [1, 3.1.1]

Single-Pole Double-Throw (SPST), etc. (SPDT, DPST, and DPDT)

SP and DP refer to single pole and double pole, ST and DT refer to single throw and double throw.

Pole refers to the number of circuits controlled by the switch: SP switches control only one electrical circuit. DP switches control two independent circuits (and act like two identical switches that are mechanically linked). Do not confuse ‘pole’ with ‘terminal’. The DPST switch, for example, has four terminals, but it is a DP, not a 4P switch.

Throw refers to the extreme position of the actuator: ST switches close a circuit at only one position. The other position of the handle is Off. DT switches close a circuit in the Up position, as well as the Down position (On-On). A DT switch can also have a center position (frequently On-Off-On).

Single pole/throw and double pole/throw switches are by far the most common switches, but triple and quadruple configurations are also available. They are commonly denoted 3PST, 3PDT, 4PDT, etc. [15]


[1] Safety of machinery — Safety-related parts of control systems — Part 1: General principles for design. ISO 13849-1. 2015.

[2] Safety of machinery – Functional safety of safety-related electrical, electronic and programmable electronic control systems. IEC 62061. 2005.

[3] “Contactor Construction & Operating Principle – Electrical Engineering 123”, Electrical Engineering 123, 2019. [Online]. Available: [Accessed: 27- Oct- 2019].

[4] “Understanding Form A, Form B, Form C Contact Configuration”, Engineering and Component Solution Forum – TechForum ? Digi-Key, 2019. [Online]. Available: [Accessed: 27- Oct- 2019].

[5] Rockwell Automation, 52582 – Example Safety Circuits Categories for the SMC. 2019.

[6] Sivaranjith, “What are Control relays?”, Industrial Automation, PLC Programming, scada & Pid Control System, 2017. [Online]. Available: [Accessed: 27- Oct- 2019].

[7] grotedikken, “Magneet aan/uit – Forum – Circuits Online”,, 2018. [Online]. Available: [Accessed: 27- Oct- 2019].

[8] “HOZ-03463/11-001614-220/030.01”,, 2019. [Online]. Available: [Accessed: 27- Oct- 2019].

[9] “What are force guided contacts?”,, 2019. [Online]. Available: [Accessed: 28- Oct- 2019].

[10] “Distinguishing features of relays with forcibly guided contacts and elementary relays / ELESTA GmbH”,, 2019. [Online]. Available: [Accessed: 28- Oct- 2019].

[11] “Safety Relay: How Does a Forcibly Guided Contact Work | FAQ | Singapore | Omron IA”,, 2019. [Online]. Available: [Accessed: 28- Oct- 2019].

[12] “IEC 60050 – International Electrotechnical Vocabulary – Details for IEV number 444-04-23: “forcibly guided contacts””,, 2019. [Online]. Available: [Accessed: 29- Oct- 2019].

[13] “Safety Circuit Examples of Safety Components | Technical Guide | Australia | Omron IA”,, 2019. [Online]. Available: [Accessed: 29- Oct- 2019].

[14] “IEC 61810-3:2015 | IEC Webstore”,, 2019. [Online]. Available: [Accessed: 30- Oct- 2019].

[15] “SPST, SPDT, DPST, and DPDT Explained – Littelfuse”,, 2020. [Online]. Available: [Accessed: 13- Jan- 2020].


Thanks are due to the following people: my anonymous colleague who originally asked the question, Mr. Les Young, and Mr. Anthony Kerstens for their comments on this article through LinkedIn.

2 thoughts on “Using Form C relays in safety circuits

  1. Hi Doug,

    Scott here from MAKESafe Tools. I had this exact question and found your article. However, it appears that, to the best of my google-fu, that nobody actually makes a force guided relay with a Form C contact. Or, if a few are lingering out there somewhere, that it’s extremely uncommon.

    You get close with something like the TE SR2M series but then they have a fine print in the data sheet that says “According [to] EN61810-3 only 1NO / 1NC (11-14 and 22-21 or 12-11 and 21-24) shall be used as force guided contacts.”

    So I purchased EN61810-3 and section 4.2 says:

    “Changeover contacts – Only break contacts and make contacts are covered by this standard; in the case of relays that include changeover contacts, either the make circuit or the break circuit of a changeover contact can be considered to meet the requirements of this standard. Changeover contacts shall be break-before-make. It shall be assured that the forcibly guided operation is maintained, as described under the fault conditions described in 5.1.”

    Then I realized that the numbers in the TE note were referring to pin numbers from opposite contact pairs, basically meaning that, in this case, you cannot consider the single 3-terminal Form C contact as two force guided contacts sharing a common terminal, which seems to eliminates the benefit of a Form C contact and make it generally equivalent to a force guided 2A2B contact with special restrictive conditions on contact pairings.

    So my primary question is – do you interpret the EN61810 language to mean that the the NO and NC contacts with a shared common that make up a Form C contact cannot, by definition, be approved as force guided? Or is it the potential for NC-COM-NO fault by arcing inherent in any Form C contact that would inherently disallow them from being wholistically force guided? Or is this just one manufacturers attempt to navigate the ambiguity of the standard?

    ~ Scott Swaaley

    For anyone finding this on google, the terms “changeover contact”, “form c contact”, and “double-throw” (the DT in SPDT or DPDT) are often used interchangeably.

    [IEC 61810-3; “Electromechanical elementary relays –Part 3: Relays with forcibly guided (mechanically linked) contacts”; Edition 1.0 2015-02]
    [TE SR2M Relay; Datasheet:

    1. Scott,

      Great to hear from you!

      You are correct – to my knowledge, there are NO form-c contacts that are force-guided. That doesn’t mean you can’t use a form-C under the right circuit conditions, in the right architecture, and at the right PL levels. If I gave a different impression in the article, I will review and revise that. 🙂

      I don’t know what the specific rationale is, although I may be able to learn more from my network of gurus. Even gurus have to have gurus, after all. Let me see what I can learn.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.