EHS glossary>Safety term

The Definition of Performance Level (PL) under ISO 13849

Performance Level (PL) is a rating from PL a to PL e under ISO 13849-1 that describes how reliably the safety-related parts of a machine control system perform a safety function.

Plain-English definition
Real-world example
Performance Level (PL) under ISO 13849 definition

Definition of Performance Level

Performance Level (PL) is a rating defined in ISO 13849-1, from PL a (lowest) to PL e (highest), that describes the ability of safety-related parts of a machine control system to perform a safety function under foreseeable conditions.

A safety function is something the control system does to keep people safe, such as stopping a machine when an interlocked guard opens, responding to an emergency stop, stopping when a light curtain beam is broken or limiting a robot to a safe speed. PL answers a practical question: how likely is it that this function fails dangerously when it is needed?

Performance Level matters to machine builders, integrators, controls engineers and plant safety teams. It applies across manufacturing, packaging, automotive, food processing, robotics and any setting where electrical, pneumatic, hydraulic or programmable controls are part of machine guarding. Safety devices are engineering controls, and PL is how you judge whether the control behind them is good enough for the risk.

How Performance Level Works

The Five Performance Levels

Each PL corresponds to a range of average probability of dangerous failure per hour (PFHd):

  • PL a: 10^-5 or more, up to less than 10^-4 per hour.
  • PL b: 3 x 10^-6 or more, up to less than 10^-5 per hour.
  • PL c: 10^-6 or more, up to less than 3 x 10^-6 per hour.
  • PL d: 10^-7 or more, up to less than 10^-6 per hour.
  • PL e: 10^-8 or more, up to less than 10^-7 per hour.

Required Performance Level (PLr)

The required PL comes from a risk graph applied to each safety function. The graph uses three parameters:

  • Severity (S1 or S2): slight, normally reversible injury versus serious, irreversible injury or death.
  • Frequency and exposure (F1 or F2): seldom or short exposure versus frequent or continuous exposure.
  • Possibility of avoidance (P1 or P2): whether the person can realistically avoid or limit the harm.

A serious injury with frequent exposure and little chance of avoidance points to PL e. Minor, infrequent, avoidable hazards point to PL a. The inputs come from a machine risk assessment under ISO 12100.

Achieved Performance Level

The designer then shows the actual system meets or exceeds PLr. The achieved PL depends on:

  • Category: the architecture and fault tolerance of the system, rated B, 1, 2, 3 or 4. Categories 3 and 4 use redundant channels so a single fault does not cause loss of the safety function.
  • MTTFd: the mean time to dangerous failure of each channel, rated low, medium or high.
  • Diagnostic coverage (DCavg): how well the system detects its own faults, rated none, low, medium or high.
  • Common cause failure (CCF): measures that stop one cause from defeating both channels. Categories 2, 3 and 4 need a score of at least 65 points.
  • Systematic measures: safety-related software practices and measures against systematic failures, such as design errors.

Regulations and Standards

ISO 13849-1 and ISO 13849-2

ISO 13849-1 is titled "Safety of machinery, Safety-related parts of control systems, Part 1: General principles for design." The current edition is ISO 13849-1:2023. ISO 13849-2 covers validation, including fault lists and the analysis and testing needed to confirm the design. Many engineers use SISTEMA, a free tool from the German IFA, to calculate achieved PL.

IEC 62061

IEC 62061 is a related functional safety standard for machinery that uses Safety Integrity Levels (SIL 1 to SIL 3) instead of PL. The two scales map roughly: PL d is about SIL 2, and PL e is about SIL 3.

United States

OSHA does not mandate a specific Performance Level. US consensus standards do reference it. ANSI B11.26 gives guidance on functional safety for machine control systems. ANSI B11.19 and the robot standard ANSI/A3 R15.06 reference ISO 13849 for the performance of safeguarding controls.

European Union

ISO 13849-1 is a harmonized standard used to show conformity with the Machinery Directive 2006/42/EC. The Machinery Regulation (EU) 2023/1230 replaces the directive from January 20, 2027. Builders selling into the EU should check which edition is listed as harmonized at the time of placing the machine on the market.

Good Practices for Performance Level

  • Start with the risk assessment: set PLr for each safety function based on documented hazards, not habit.
  • Define each safety function clearly: state the trigger, the response and the safe state, such as "guard opens, motor torque removed within 200 ms."
  • Use rated components: select devices with published MTTFd or B10d data and safety ratings.
  • Calculate and document: use a tool such as SISTEMA and keep the calculations in the technical file.
  • Validate the design: follow ISO 13849-2 to test fault behavior, wiring and software before startup.
  • Manage changes: re-verify PL after replacing components, editing safety PLC code or changing wiring.

Example of Performance Level

A food packaging plant added a robotic case packer with an interlocked access gate. The integrator wired the gate switch through a single standard relay. During startup, a technician found the relay contacts had welded closed, so the robot kept moving with the gate open. No one was hurt, but the near miss stopped the project.

The plant's risk assessment rated the hazard as serious with frequent access and low chance of avoidance, which set PLr at PL d. The integrator redesigned the circuit with a dual-channel interlock, a safety relay with monitoring and a Category 3 architecture, then verified PL d in SISTEMA. The plant now requires PL calculations and validation records before accepting any new machine.

Frequently Asked Questions: Performance Level

What is the difference between PLr and PL?

PLr is the required Performance Level set by the risk assessment for a safety function. PL is the level the actual control system achieves. The achieved PL must be equal to or higher than PLr.

What Performance Level does an emergency stop need?

There is no single answer. The required PL comes from the risk assessment for that machine. Many e-stop functions end up at PL c or PL d, but it depends on severity, exposure and avoidance.

How does PL compare to SIL?

PL comes from ISO 13849-1 and SIL comes from IEC 62061. They measure similar things. Roughly, PL d corresponds to SIL 2 and PL e corresponds to SIL 3.

Is ISO 13849 required by OSHA?

No. OSHA does not require a specific Performance Level. US consensus standards such as ANSI B11.19 and ANSI/A3 R15.06 reference it, and it is widely used as good engineering practice.

Part of SafetyIQ's EHS glossary: plain-English definitions of workplace health and safety terms.

> Keep learning

More EHS terms

Browse the full glossary >

> See it in action

Put these safety terms into practice with SafetyIQ

Capture hazards, run inspections, track training and close out corrective actions in one platform built for high-risk, field-heavy work.

Book my free demo
★★★★★
4.8 out of 5 stars on
G2
G2 High Performer, Fall 2026