Robot safety fence standards in the United States are set by ANSI/A3 R15.06-2025, which adopts the international ISO 10218 series and pulls in supporting ISO and IEC standards for the specifics: how tall the fence must be, how small the mesh openings, how far back from the robot it must sit, and how gates must be interlocked. OSHA enforces the rules through the General Duty Clause, and a serious violation now carries a penalty of up to $16,550 per instance.
The Governing Standard
ANSI/A3 R15.06-2025 was approved in August 2025 and is the current national standard for industrial robot safety. Parts 1 and 2 are the U.S. adoption of ISO 10218-1:2025 and ISO 10218-2:2025, so a facility that meets R15.06 also meets the international baseline.1Association for Advancing Automation (A3). ANSI/A3 R15.06-2025 American National Standard for Industrial Robots and Robot Systems Safety Requirements Part 1 governs the robot itself and places obligations on the manufacturer. Part 2 governs the robot cell and places obligations on the integrator who designs the perimeter guarding. A third part, ANSI/A3 R15.06-3-2025, gives operating guidance to end users.
R15.06 works in combination with several other standards that fill in the details:
- ISO 13857 sets the safety distances that keep people from reaching over, under, or through a barrier. The specific fence heights, gap limits, and mesh opening rules come from here.
- ISO 13855 provides the formula for calculating minimum safe distance from the hazard based on stopping time and human approach speed.
- ISO 14119 covers interlocking devices on guard doors, including the rule against automatic restart when a gate is closed.
- IEC 60204-1 defines the stop categories that describe how a machine halts when a safety device triggers.
Everything begins with a risk assessment under ISO 10218-2. That assessment identifies the hazards in a particular cell, and its results drive every downstream decision: fence dimensions, placement distance, interlock type, and even whether a physical fence is the right answer at all.2International Organization for Standardization. ISO 10218-1:2011 Robots and Robotic Devices Safety Requirements for Industrial Robots Part 1 Robots
Fence Height, Bottom Gap, and Mesh Openings
ISO 13857 sets the physical parameters. A protective structure must stand at least 1,400 mm tall (about 55 inches) to be used on its own. Most robot cells go well above that, using fencing of 2,000 mm or taller, particularly around high-speed or heavy-payload robots.
The gap between the fence and the floor must be small enough to prevent whole-body access. A slot opening greater than 180 mm at floor level is considered large enough for a person to pass through, so installations typically keep the bottom gap in the range of 50 to 100 mm to accommodate uneven floors while still blocking access.
Mesh opening size drives how close the fence can sit to moving parts. ISO 13857 Table 4 gives the exact safety distances based on what body part could fit through a given opening. Some illustrative points for adult workers:3International Organization for Standardization. ISO 13857 Safety of Machinery Safety Distances to Prevent Hazard Zones Being Reached by Upper and Lower Limbs
- Openings up to 4 mm admit only a fingertip. Minimum distance from the hazard: 2 mm.
- Openings of 8 to 10 mm admit a finger to the knuckle. Minimum distance for a slot: 80 mm.
- Openings of 12 to 20 mm admit a hand. Minimum distance: 120 mm.
- Openings of 40 to 120 mm admit an arm to the shoulder. Minimum distance: 850 mm.
Smaller mesh lets the fence sit closer to the robot and saves floor space. Larger mesh forces greater separation, which becomes impractical in tight facilities. It is one of the earliest trade-offs in cell design.
How Far Back the Fence Must Sit
Height and mesh handle reach hazards. Separation distance handles the fact that a robot cannot stop instantly and a person can keep moving during the stopping time.
ISO 13855 provides the calculation. The minimum safe distance S equals the human approach speed K multiplied by the total stopping time T, plus an intrusion distance C that accounts for how far a body part can penetrate past the detection point before motion fully stops. Written out: S = K × T + C. For a person walking toward an interlocked gate, K is typically 1,600 mm per second. For a light curtain, where a hand can approach at full speed, K rises to 2,000 mm per second.
A worked example: if a cell’s total stopping time is 0.5 seconds and the safeguard is an interlocked gate, the distance starts at 1,600 × 0.5 = 800 mm. Once the intrusion distance is added, the fence may need to sit a full meter or more from the robot’s restricted space.
Measured Stop Time, Not Datasheet Stop Time
The stopping time in the formula has to be physically measured at the actual installation. Brake wear, mechanical alterations, and control response times all affect how quickly the robot halts. A stop-time measurement device records the elapsed time from safety input to complete cessation of hazardous motion, and that measured number is what goes into the calculation.
Stop time gets longer as equipment ages. Stop-time validation should be repeated at least annually, and always after significant maintenance or component replacement. If the measured stopping time has crept up enough that the existing fence is now too close, the fence must be moved back or the robot’s speed reduced.
Design to Maximum Space, Not Restricted Space
The distance calculation uses the robot’s maximum space, not just its programmed restricted space. Restricted space is where the robot travels during normal operation. Maximum space is the full volume it could reach if its software limits failed. Fences are designed to the worst case because software limits can be reprogrammed or malfunction, while a bolted steel fence stays put.
Gates and Interlocks
Every cell needs at least one access point for maintenance, part loading, or troubleshooting, and every access point is the weakest link in the perimeter.
Each gate must be connected to the robot’s safety control system through an interlocking device. Opening the gate triggers an immediate stop. Under IEC 60204-1, this is either a Category 0 stop (power cut instantly, uncontrolled halt) or a Category 1 stop (controlled deceleration, then power removed at standstill). The risk assessment determines which. Heavier robots carrying loads that could fly loose during an abrupt stop often need controlled deceleration; lighter systems can safely cut power outright.
No Automatic Restart
Closing the gate must never restart the robot on its own. After someone enters, closes the gate behind them, and the interlock re-engages, the system stays stopped until an operator deliberately presses a reset button. The reset must be located outside the fenced area with a clear view of the entire cell interior, so the person hitting start can visually confirm nobody is still inside. If the cell layout blocks that visual check, additional measures are required, such as a time-delayed restart or a trapped key system.
Trapped Key Systems
In large cells or multi-robot lines where one reset location cannot cover the whole interior, trapped key interlocks add another layer. The operator removes a key from the control panel to unlock the gate, and the door cannot be locked again (and the robot cannot restart) until the key is returned. Some setups issue a personal key to the person entering, physically preventing restart while they are inside.
Lockout/Tagout for Real Maintenance
Interlocks protect workers during brief access. They are not enough for actual maintenance. OSHA’s lockout/tagout standard, 29 CFR 1910.147, applies whenever an employee must remove or bypass a guard or safety device during servicing.4Occupational Safety and Health Administration. Control of Hazardous Energy Lockout Tagout
Hazardous energy must be controlled through a mechanical energy-isolating device: a disconnect switch, circuit breaker, or valve that physically prevents energy from reaching the robot. OSHA is explicit that push buttons, selector switches, and other control-circuit devices do not qualify. The isolating device must accept a padlock so the worker performing maintenance holds exclusive control over when power comes back on.4Occupational Safety and Health Administration. Control of Hazardous Energy Lockout Tagout
In a robot cell that means two things running in parallel: the electronic gate interlock for day-to-day production access, and a physical lockout point on the robot’s power supply for maintenance. Skipping lockout because “the interlock will keep it off” is one of the most common and most dangerous shortcuts in robotic manufacturing.
When Physical Fencing Is Not the Right Answer
A physical fence is the straightforward safeguard, not the only one. The risk assessment may point to other options.
Light curtains project an array of infrared beams across an opening; breaking a beam triggers a stop. They fit well at material loading points where a gate would slow production. The trade-off is a longer required safety distance, because nothing physically stops a person from continuing forward during the stopping time. The formula uses 2,000 mm/s at a light curtain versus 1,600 mm/s at a gate, and the curtain’s own detection resolution and response time factor in as well.
Collaborative robots designed to work alongside people may not need perimeter fencing at all, provided they meet ISO/TS 15066. That specification defines four collaborative operation modes, one of which is power and force limiting: the robot is engineered so any contact with a person stays below pain and injury thresholds set through biomechanical research, with different limits for different body regions. The catch is that those force limits are low, which caps speed and payload. When the job requires high speed or heavy loads, a physical fence remains the standard solution.
Warning Signs and Floor Markings
Fencing and interlocks handle the engineering side. Signs and floor markings handle worker awareness, and the standards expect both.
Safety labels on cell fencing follow ANSI Z535.4, which calls for labels to communicate four things: the nature of the hazard, the consequences of exposure, how to avoid it, and the severity level. A cell gate label might read “DANGER — Robot arm moves without warning. Severe crush injury or death. Do not enter while system is operating. Follow lockout/tagout procedures.” Signal words like DANGER (for hazards that will cause death or serious injury) and WARNING (for hazards that could cause death or serious injury) use standardized colors and formatting.
Floor markings around the outside of a cell use yellow to designate caution areas and physical hazards, consistent with OSHA’s general color coding. Many facilities paint a yellow boundary line around the cell perimeter so workers see the restricted zone before they reach the fence.
Keeping the Installation Compliant Over Time
A compliant fence at commissioning is only the starting point. Interlocks, emergency stops, light curtains, and the fence structure itself all need periodic functional testing. Manufacturers typically specify intervals, and the integrator’s risk assessment should establish a schedule matched to the severity of the hazard and the operating environment.
Stop-time measurements repeat at least annually, and always after maintenance that could affect braking. If a test shows degradation, the integrator must either repair the braking system or recalculate the safety distance and move the fence back. Gate interlocks need regular testing to confirm they still trigger a proper stop, because a damaged, contaminated, or tampered interlock provides no protection. Documenting every inspection and test is the kind of evidence that matters most during an OSHA investigation or after an incident.
What OSHA Enforces and What It Costs
OSHA has no regulation written specifically for industrial robots. It relies on the General Duty Clause, which requires every employer to provide a workplace “free from recognized hazards that are causing or are likely to cause death or serious physical harm.”5Occupational Safety and Health Administration. OSH Act of 1970 Section 5 Duties Inspectors treat consensus standards like ANSI/A3 R15.06 as the benchmark. A facility that ignores those standards has effectively handed the inspector the basis for a citation.
As of 2026, a serious violation carries a maximum penalty of $16,550 per instance. Willful or repeat violations can reach $165,514 each. Both figures adjust annually for inflation, and OSHA can stack citations across a single facility when separate hazards are found at different cells.