Test Station Setup

Test Bench Safety: A Complete Guide

Learn how to assess and reduce test bench hazards under EU machinery rules: ISO 12100 risk assessment, safety functions, guards and a checklist.

JJulien Buteau
intermediate11 min readOctober 27, 2026

A test bench that spins motors, stores energy in batteries and runs unattended for hours is a machine, with the hazards of a machine. This reference lists the hazards found on motor and propulsion test benches, the EU framework that applies to them, how obligations differ between a bench built for your own line and a bench delivered to a customer, and a checklist to work through before the first run.

This guide is not legal advice. It summarizes public texts to help engineers find the right documents. Read the texts themselves, and involve a qualified safety engineer or a notified body when the stakes require it.

Hazards on a Motor Test Bench

HazardSource on the benchTypical measures
Rotating partsRotor, propeller, couplings, shaftsFixed or interlocked guards, guard locking during run-down, distance
ProjectilesPropeller blade failure, loose fasteners, fixture failureGuards designed to contain ejected parts, rated mounts, torque-checked fasteners
Stored electrical energyLiPo packs, bus capacitorsFuses close to the pack, pre-charge, discharge path, isolation switch
FireBattery thermal runaway, overheated wiring, brake resistorsFire-resistant battery enclosure, wire sized for the current, no combustibles near hot parts, detection
Electrical shockMains side of supplies and chargers; high-voltage busesSupplies with their own conformity, protective earth, enclosures
Over-voltageRegenerative braking on a unidirectional supplyRamped deceleration, brake resistor, bidirectional supply or battery in parallel
NoisePropellers at full throttleEnclosure, hearing protection, measured exposure
Unexpected start-upSoftware or firmware commanding throttle after a resetReset that only re-enables power, zero throttle on every stop

A bus below 60 V ripple-free DC is extra-low voltage. Supplied from a SELV or PELV source, in dry conditions, it generally needs no basic protection against direct contact, which limits the shock risk. It does not limit the energy: a 6S pack can deliver hundreds of amps into a short circuit, and the resulting arc and heat cause burns and fires regardless of the voltage. Treat a low-voltage bench as an energy and fire hazard first.

The EU Framework

TextScopeRole on a test bench
Machinery Directive 2006/42/ECMachinery placed on the market or put into service in the EUEssential health and safety requirements (Annex I), conformity procedure, CE marking
Machinery Regulation (EU) 2023/1230Replaces the Directive; applies from 20 January 2027Same purpose, directly applicable, updated requirements and procedures
Work Equipment Directive 2009/104/ECEmployers providing work equipment to workersEmployer obligations for equipment used at work, including in-house benches
ISO 12100General principles, risk assessment and risk reductionThe method: identify hazards, estimate and evaluate risk, reduce it
ISO 13849-1Safety-related parts of control systemsPerformance Level (PL a to e) required and achieved by each safety function
EN 60204-1 (IEC 60204-1)Electrical equipment of machinesWiring, protective bonding, stop categories 0, 1 and 2, control circuits
ISO 13850Emergency stop functionE-stop device and function requirements, stop category 0 or 1
ISO 14119Interlocking devices associated with guardsInterlock types, coding, defeat prevention, guard locking
ISO 14120GuardsDesign and construction of fixed and movable guards, including containment

Harmonised standards give a presumption of conformity with the requirements they cover when their reference is published in the Official Journal of the EU. Check which edition is listed: the cited edition is the one that gives the presumption.

Risk Assessment with ISO 12100

ISO 12100 sets the sequence that every other standard plugs into:

  1. Determine the limits of the machine. Intended use, foreseeable misuse, operators and their training, the space it occupies, its life cycle phases (setup, test, maintenance, cleaning, transport).
  2. Identify hazards. Use the list above as a starting point, and walk through every life cycle phase, not only the test run.
  3. Estimate the risk. For each hazard: severity of the possible harm, and probability of occurrence (exposure, occurrence of the hazardous event, possibility to avoid or limit harm).
  4. Evaluate the risk. Decide whether it needs reduction.
  5. Reduce the risk in a fixed order, the three-step method:
    • Inherently safe design (lower energy, smaller propeller, current limits, ramped profiles)
    • Safeguarding and complementary protective measures (guards, interlocks, e-stop)
    • Information for use (instructions, warnings, training)

Iterate until the residual risk is acceptable, and document each step. The documentation is what you show an auditor, a customer or an investigator.

When a protective measure depends on a control system (an interlock that removes power, an e-stop), ISO 13849-1 takes over. Its risk graph uses severity of injury, frequency and duration of exposure, and possibility of avoiding the hazard to give the required Performance Level (PLr). The design must then achieve at least that PL, which depends on the architecture (category), the reliability of the components (MTTFd), the diagnostic coverage and the protection against common cause failures.

In-House Bench or Bench Delivered to a Customer

The obligations attach to the person who places the machinery on the market or puts it into service. The Machinery Directive's definition of manufacturer (Article 2(i)) includes a person who designs or manufactures machinery for their own use, so a bench built for your own production line is covered, and the employer obligations of the Work Equipment Directive apply on top. The Directive (Article 1(2)(h)) excludes machinery specially designed and constructed for research purposes for temporary use in laboratories; a production test bench is neither research nor temporary. Regulation (EU) 2023/1230 keeps the same exclusion (Article 2(2)(m)) and the same own-use case in its definition of manufacturer, for benches put into service from 20 January 2027.

SituationStatusDocuments under the Directive
Complete bench built and used in-houseMachinery put into service, you are the manufacturerTechnical file (Annex VII A), EC declaration of conformity (Annex II 1.A), CE marking, instructions
Complete bench delivered to a customerMachinery placed on the market, you are the manufacturerSame as above, delivered with the bench; instructions in the language required by the destination country
Bench delivered for integration into the customer's line, unable to perform its application on its ownPartly completed machineryRelevant technical documentation (Annex VII B), declaration of incorporation (Annex II 1.B), assembly instructions (Annex VI); no CE marking under the Directive for the partly completed machinery
Customer integrates partly completed benches into a complete machineThe integrator is the manufacturer of the complete machineThe integrator carries out the conformity procedure for the assembly

Most test benches are not listed in Annex IV of the Directive, so the conformity procedure is the internal check described in Annex VIII. Verify that against Annex IV and, from 20 January 2027, against Annex I of the Regulation: machinery in a category not listed there follows the internal production control procedure (module A, Annex VI).

Points to note in Regulation (EU) 2023/1230:

  • It is a regulation, directly applicable in every member state, without national transposition.
  • A person who substantially modifies machinery after it is placed on the market or put into service is considered a manufacturer for that machinery. Rebuilding a bench for a new, more powerful motor can fall under this.
  • Instructions may be provided in digital form, with a paper copy on request at the time of purchase.

What the texts say about who must do what is summarized above. They do not settle liability in a given incident; that depends on national law and on the facts.

Practical Checklist

Before the First Run

  • Limits of the machine documented: use, users, life cycle phases
  • Hazard list and risk estimation written per ISO 12100, with the measures chosen for each hazard
  • PLr determined for each safety function, achieved PL verified per ISO 13849-1
  • E-stop per ISO 13850, hardwired through a safety relay, reachable from the operator position
  • Guard interlock per ISO 14119, guard locking if the rotor can be reached before it stops
  • Guards per ISO 14120, designed to contain a failed propeller blade and fixture parts
  • DC contactors rated for DC breaking at the bus voltage and current, feedback monitored
  • Fuses or breakers sized for the wiring, close to the energy source
  • Pre-charge or anti-spark connection on large battery packs
  • Regeneration path defined: ramped profiles, brake resistor, bidirectional supply or battery
  • Battery storage and charging in a fire-resistant enclosure, away from combustibles
  • Thrust stand and fixture rated for the maximum thrust and torque, with margin
  • Electrical equipment per EN 60204-1: protective bonding, labelled wiring, enclosure
  • Instructions written: start-up, normal run, stop, reset, fault handling, maintenance

For Each Session

  • Guard, interlock and e-stop checked before the first run of the day
  • Propeller and fasteners inspected; damaged parts replaced
  • Battery packs inspected; swollen or damaged packs removed from service
  • Nobody inside the hazard zone when power is enabled

When Delivering a Bench

  • Status decided: complete machinery or partly completed machinery
  • Technical file complete and kept available for the period the text requires
  • EC declaration of conformity and CE marking, or declaration of incorporation and assembly instructions
  • Instructions in the language of the destination country

Record Safety Evidence with the Test Data

A safety function that is never tested is assumed to work. Recording its state with the test data turns that assumption into evidence:

TofuPilot records each of these per unit serial number, station and operator, with control charts and failure Pareto on the dashboard. That record supports the safety documentation; it does not replace the risk assessment or the safety functions.

Common Pitfalls

Treating a low-voltage bench as harmless. Extra-low voltage limits the shock risk only. Batteries and capacitors still store enough energy to burn and ignite.

Counting the software stop as the e-stop. The test PC is not a safety-related part of the control system. The e-stop removes power through hardware.

Starting with guards and skipping the risk assessment. ISO 12100 sets the order: design out the hazard first, then guard, then inform.

Assuming in-house benches are out of scope. Building machinery for your own use is putting it into service. Employer obligations apply as well.

Calling a delivered bench partly completed to avoid CE marking. Partly completed machinery cannot perform its application on its own. A bench that runs its test once powered is complete machinery.

Modifying a bench without reassessing. A new motor, a larger propeller or a higher bus voltage changes the hazards. Under the Regulation, a substantial modification can make you the manufacturer of the modified machine.

Key Points

  • Motor test benches combine rotating parts, projectiles, stored energy, fire and electrical hazards; low voltage does not mean low energy.
  • In the EU, the Machinery Directive 2006/42/EC applies until Regulation (EU) 2023/1230 takes over on 20 January 2027.
  • ISO 12100 sets the risk assessment method; ISO 13849-1, EN 60204-1, ISO 13850, ISO 14119 and ISO 14120 cover the safety functions, electrical equipment, e-stop, interlocks and guards.
  • A bench built for your own use is put into service and is covered; a bench delivered complete needs a declaration of conformity and CE marking; partly completed machinery needs a declaration of incorporation.
  • Record safety checks and abort reasons with the test data, as evidence that complements the safety documentation.
  • This guide is not legal advice; read the texts and involve qualified people.

More Guides

Put this guide into practice