Emergency Stops and Safety Relays: Why We Do Not Substitute

Emergency Stops and Safety Relays: Why We Do Not Substitute on the Safety Circuit

A buyer from a bottling line outside Kazan writes in Russian: «Нужен аварийный останов для старой линии — чем заменить оригинальный блок безопасности?» The English version lands in our inbox a few minutes later from the same buyer: “Need an emergency stop for an older line — what can replace the original safety block?” The straightforward answer is that an independent sourcing desk such as ours will quote the original stop component from remaining channel stock when we can confirm the MPN, the firmware revision and the manufacturer's documentation. We will not propose a substitute that we have not personally validated against the manufacturer's datasheet, against your machine's risk assessment, and against your required protection target. That boundary is what this article explains, and it is the same boundary we hold for safety relays, safety laser scanners, E-stop pushbuttons, safety contactors, and safety light curtains sourced through our desk.

For readers new to this site, we are an independent industrial automation distributor and sourcing desk in China. Our catalog covers PLCs, drives, contactors, sensors, HMI, low-voltage electrical, and pneumatics from manufacturers including Siemens, Schneider, Omron, SICK, Festo, Phoenix Contact, WAGO, Yaskawa, Mitsubishi, Delta, Weintek and Weidmüller. Two scenarios bring buyers to us most often: a machine is down and a part is needed today, or a part has gone end-of-life and the franchised channel no longer stocks it. This article addresses neither scenario in the usual way, because the part in question sits inside a protective circuit whose failure has consequences the supply chain alone cannot price. That is the stop-and-protect circuit, and it is the one place on a panel where the desk's role is strictly to supply and document — not to substitute, re-engineer, or certify. We screen end users and end uses, classify before quoting, and decline transactions that cannot be screened. Where the quotation states DDP, the term applies per Incoterms 2020; otherwise delivery is arranged under EXW, FCA or DAP as the quotation states.

What sits on the stop-and-protect circuit, and why substitution is not a sourcing question

A stop-and-protect circuit is the part of a control system whose job is to bring the machine to a safe state when something goes wrong. On a European-built packaging line, the stop-and-protect circuit typically includes: an E-stop pushbutton or rope pull at the operator station; a safety light curtain or safety laser scanner at the access point; a safety relay, a safety logic module, or a fail-safe controller that processes those inputs; safety contactors downstream that cut power to the drive or the heating element; and the wiring, terminals, and diagnostics that confirm the chain is intact at every cycle. On a SICK-equipped cell, the safety laser scanner might be a microScan3 Core or Pro unit such as the ZL2-P2428, the ZL2-N2415, the ZL2-P2438, or the ZL2-P2415 — part numbers we have on the catalog today with confirmed manufacturer designation. These are not ordinary proximity sensors; they are type-3 or type-4 devices carrying a documented protective rating, an SF (safe failure fraction), a PFHd (probability of dangerous failure per hour), and a defined diagnostic coverage. The supplier's role is to deliver the right part number with the right firmware. The integrator's role is to integrate, the safety engineer's role is to validate, and the operator's role is to operate within the envelope the risk assessment defined.

When a buyer asks us for a substitute on this circuit, the question they are usually asking — without using these words — is whether the protective behaviour of one component can be preserved by a different, similar-looking component. The answer is that preserving a protective behaviour requires more than an electrical match: it requires the substitute's safety data sheet, its category (Cat. 1 / 2 / 3 / 4 under ISO 13849-1, or SIL 1 / 2 / 3 under IEC 62061), its PFHd, its response time, its diagnostic coverage, and its behaviour under fault conditions to be evaluated against the original. These are properties the original manufacturer publishes in a controlled manual. We do not republish them, we do not extrapolate from the marketing datasheet, and we do not hand the buyer a verbal equivalent that the engineering team can sign off on the back of. That determination belongs to the buyer's functional-safety process. The same principle applies to safety relays (Pilz PNOZ, SICK FX3, Siemens 3SK, Phoenix Contact PSR), to safety contactors, and to muting modules — every one of them carries a published signature that the integrator must reconcile against the machine file. Verify against the original manufacturer datasheet and your own qualification process before any cross-reference is acted on.

In a written cross-reference, several axes are commonly left unknown until the integrator checks them. We list these openly rather than papering over them. We do not have visibility into the substitute manufacturer's diagnostic coverage at the field-replacement level; we do not have visibility into how the substitute behaves under simultaneous fault conditions (dual-fault behaviour is often a category-3 vs category-4 boundary); and we do not have visibility into the substitute's mechanical life versus the original's, because that data is published per cycle in the manufacturer's endurance test report. These unknown axes belong in the buyer's qualification record, not in the desk's quotation.

The four cases we will and will not work on the stop-and-protect circuit

We find it useful to be specific about the boundary, because the boundary is what the buyer's engineering team is actually trying to locate when they contact an independent desk.

Case one: identical replacement from remaining channel stock. A buyer needs an E-stop pushbutton of a specific manufacturer and series, or a safety relay of a specific manufacturer and firmware revision. We can quote the part from remaining distributor stock, integrator stock, or new-surplus stock; we can document the part's condition line by line; we can provide the manufacturer's documentation pack on request. The buyer's engineering team is responsible for verifying that the part's revision, firmware, and safety data sheet match the machine file. This is normal sourcing and we are comfortable doing it for stop-and-protect components on the same terms as for any other component — provided we do not pretend to take responsibility for the integration.

Case two: a clearly documented last-time-buy ahead of EOL. A manufacturer announces the EOL of a safety relay series and gives a last-time-buy window. The buyer wants to know whether we can reserve stock from remaining channels. We can quote against the same condition line by line; what we cannot do is extend the manufacturer's EOL window or accelerate a buy on the buyer's behalf beyond what the channel can supply. The buyer's quality system owns the decision to stock a discontinued part with a defined service life.

Case three: a substitute that preserves the protective behaviour, supported by the substitute manufacturer's documentation. This is the case where the buyer wants a different part that achieves the same protective behaviour — for example, switching from a Siemens 3SK safety relay to a Phoenix Contact PSR, or from a SICK microScan3 Pro to a SICK nanoScan3 with a smaller form factor. Where the substitute manufacturer publishes a manual for the substitute part, and the buyer's engineering team reconciles the substitute's category, PFHd, response time, and diagnostic coverage against the original, we are comfortable sourcing the substitute as a normal procurement transaction. The substance of the substitution is owned by the integrator and the safety engineer; we supply the part and pass the documentation through.

Case four: a substitute that we have not personally validated. This is the case the desk declines. If the buyer asks us to propose a substitute that looks like the original — same form factor, same voltage, same terminal count, similar marketing datasheet — but for which we do not have a controlled safety data sheet, a documented PFHd, a defined category, or a defined response time, we decline to recommend it. We will quote the original part from remaining channel stock; we will not propose an unvalidated substitute on the stop-and-protect circuit. The reasoning is straightforward: the supply chain's job is to deliver parts, not to substitute protective behaviours. Substituting a protective behaviour without the documentation to back it is a job for a safety engineer, not for a desk.

What the desk actually does on a safety-related inquiry

When a safety-related inquiry lands with us, we work a defined sequence. First, we read the buyer's message and identify the protective role: which E-stop, which scanner, which relay, which contactor, which light curtain. Second, we ask for the part number, the manufacturer's designation, and any documentation the buyer already holds — risk assessment, machine file, safety manual. Third, we run the part number against the catalog and the channels we know, and we quote the part line by line, with condition stated, manufacturer stated, and revision or firmware stated where the channel can confirm it. Fourth, where the buyer is asking for a substitute, we ask for the protective behaviour the substitute must preserve — category, SIL, PFHd, response time — and we confirm with the buyer that the engineering team will reconcile the substitute's documentation against the original. We do not move forward on the substitute quotation until the engineering team has signed off in writing.

This sequence is conservative, but it matches what a sourcing desk should do when the part in question sits inside a circuit whose failure can harm a person. A few specific behaviours are worth flagging because they are common requests we decline. We do not propose a substitute safety relay on the basis that it has the same number of contacts as the original; the contact count is one of perhaps nine independent properties the safety engineer will check. We do not propose a substitute safety laser scanner on the basis that it has the same detection range; the detection range is one property among many, and the substitute's response time, its immunity to ambient light, and its diagnostic coverage all matter separately. We do not propose a substitute safety contactor on the basis that it carries the same current rating; the safety contactor's mirror contact behaviour, its mechanically linked contact indicator, and its category under ISO 13849-1 are all properties the original manufacturer's manual defines and the substitute's manual must match. In each of these cases, the desk can quote the original part from remaining channel stock; the desk declines to substitute.

A second behaviour worth flagging is the EOL safety device. When a manufacturer retires a safety relay series, the EOL is itself a relevant event because parts in service need a defined replacement path, and the manufacturer usually defines that path before retiring the part. Where the manufacturer has published a designated successor — for example, a SICK microScan3 Pro succeeding an earlier outdoor scan, or a Phoenix Contact PSR successor succeeding a previous PSR — the successor's safety data sheet is published by the manufacturer and the integrator's safety engineer can reconcile it against the original. We can source the successor as a normal procurement transaction. Where the manufacturer has retired the part without a designated successor — or where the successor's protective behaviour differs from the original — we decline to substitute and we recommend the buyer's engineering team approach the manufacturer or a third-party safety engineer for a documented path.

Catalog anchors we hold on the stop-and-protect circuit today

For buyers who want to know what we currently hold on the protective side of the catalog, here is a real sample drawn from the SICK range we have today, with the part numbers and the basic designation as the catalog has them. ZL2-P2428 is a microScan3 Core safety laser scanner from SICK, with 80/100 in our internal demand ranking; ZL2-N2415 is a microScan3 Core safety laser scanner from SICK with a 9 m protective field range, also ranking 80/100; ZL2-P2438 is a microScan3 Pro safety laser scanner from SICK with 80/100; ZL2-P2415 is a microScan3 Pro safety laser scanner with a 5.5 m protective field range, also ranking 80/100. These are SICK's documented safety devices, each carrying a published safety manual. We hold them on the shelf, we quote them line by line, and we pass the manufacturer's safety data sheet through to the buyer on request. We do not propose substitutes for these parts unless the substitute manufacturer publishes a safety manual the buyer's engineering team can reconcile. We hold other SICK devices on the catalog too — including the BCG05-K1KM01PP absolute encoder, the UM30-214113 ultrasonic sensor, the DS50-P1112 distance sensor, the DT35-B15851 distance sensor, the UFN3-70B413 ultrasonic sensor, the DS35-B15821 distance sensor, the DT35-B15251 distance sensor, the WTB27-3R2611 photoelectric sensor, the UM30-213112 ultrasonic sensor, the WT24-2R210 photoelectric sensor, and the WTB27-3S1511 photoelectric sensor — but these are standard sensing devices, not safety devices, and the boundary described above applies only to the safety devices in the range.

What we do not do, and what that means for the buyer

Five specific things fall outside what the desk offers, and listing them is part of how the desk earns trust on safety work. First, the desk does not issue a safety integrity claim — it does not say that any specific part, original or substitute, meets SIL 2 or PL d or Cat. 3. That determination belongs to the buyer's functional-safety process and is documented in the machine file. Second, the desk does not perform a substitution study on the buyer's behalf — it does not take a SICK microScan3 in one hand and a competitor's scanner in the other and produce a written equivalence opinion. That study belongs to the buyer's safety engineer or to a third-party safety consultancy. Third, the desk does not provide a SIL/PL calculation service — it does not compute PFHd budgets across a multi-component safety chain. Fourth, the desk does not write or rewrite the buyer's risk assessment; that document is the buyer's engineering deliverable. Fifth, the desk does not provide a safety component repair service — it sources parts, it does not repair them. The buyer's engineering team, the original manufacturer, or an authorised repair centre handles repair of safety components. These five exclusions are what allow the desk to do the rest of what it does on safety parts honestly: quote the original, document the part line by line, pass the manufacturer's documentation through, and decline the cases where the boundary is reached.

When to bring the safety question to us, and when to bring it elsewhere

The desk is the right place to bring a safety-related inquiry when the buyer's question is one of these: which safety component is on the shelf today; which safety component can be sourced from remaining channel stock for a known-good machine file revision; whether the part number on the buyer's drawing matches the part number the channel can supply; whether a documented manufacturer successor is available as a normal procurement transaction. The desk is the wrong place to bring the question when the buyer needs a written equivalence study between two safety devices; when the buyer needs a SIL/PL calculation; when the buyer needs the stop-and-protect circuit re-engineered to accommodate a substitute; or when the buyer needs a risk assessment rewritten to account for a new safety architecture. For those questions, the buyer's safety engineer, the original manufacturer, or a third-party safety consultancy is the appropriate counterparty. The desk will say so plainly when the inquiry crosses the line.

Closing

The independent desk's role on the stop-and-protect circuit is to source what the manufacturer has documented and to pass the documentation through, line by line, in the same disciplined way the desk sources any other component. Where the buyer's question is a substitution question — and substitution on this circuit is an engineering question, not a sourcing question — the desk stays out of the engineering call and sources the part the buyer's engineering team has already specified. The catalog holds real safety devices today, including the SICK microScan3 scanners named above, and they can be quoted under the same condition-led, documentation-pass-through discipline as any other component on the catalog. The first message to send the desk on a stop-and-protect circuit is the part number from the machine file, the manufacturer's designation, and the safety manual revision the buyer's engineering team is working from. To send a safety-component inquiry, request a quote from our sourcing desk through /procurement for the part number list or /inquiry for a single part with the machine-file reference attached. Send your BOM with the manufacturer designation and the safety manual revision and our desk will quote line by line.

Data Notes

Author/byline: Sourcing-desk editorial team, aoctrl.com.
Dateline: Filed September 23, 2026 (UTC). This article supersedes no prior edition.
Sources cited in this article: SICK microScan3 product family (manufacturer catalogue, accessed 2026-09-22); ISO 13849-1 (international standard for safety-related parts of control systems, current revision); IEC 62061 (international standard for functional safety of safety-related control systems, current revision).
Catalog anchor sample: part numbers ZL2-P2428, ZL2-N2415, ZL2-P2438, ZL2-P2415, BCG05-K1KM01PP, UM30-214113, UM30-212113, DS50-P1112, DT35-B15851, UFN3-70B413, DS35-B15821, DT35-B15251, WTB27-3R2611, UM30-213112, WT24-2R210, WTB27-3S1511 — drawn from the live aoctrl.com catalog under the SICK brand page; condition stated per line on the quotation. Demand score is internal and not a market price. Industrial buyers should match the part's environmental ratings (IP, ambient temperature, vibration) to the cabinet location before commissioning.
What we did not use: No customer cases, no specific prices, no lead-time numbers, no certificate numbers. The article makes no claim of holding ISO 13849 or IEC 62061 certification. The article does not recommend substituting any safety-rated component, and it does not provide a SIL or PL opinion for any specific machine.
Disclaimer: This article is informational only. It describes the sourcing boundary this desk works under; it is not a safety manual, a substitution study, a SIL/PL opinion, or a risk assessment. The functional-safety determination for any specific machine belongs to the buyer's engineering team, the original manufacturer, or a qualified third-party safety engineer. aoctrl.com screens end users and end uses, classifies before quoting, and declines transactions that cannot be screened. This desk operates as an independent sourcing partner with no manufacturer authorization from SICK, Pilz, Siemens, Phoenix Contact, Schneider, or any other manufacturer named in this article, and no accreditation of any kind has been issued by those manufacturers to this desk. Condition, warranty and test status are stated per line on the quotation. Verify against the original manufacturer datasheet and your own qualification process before any cross-reference is acted on.

FAQ

Why does an independent sourcing desk decline to substitute a safety relay or safety laser scanner?

The desk declines because the substitute's safety data sheet, category under ISO 13849-1, SIL level under IEC 62061, PFHd, response time, and diagnostic coverage all need to be reconciled against the original by a safety engineer. The supply chain's job is to deliver parts, not to substitute protective behaviours. We source the original part from remaining channel stock; we do not propose unvalidated substitutes on this circuit.

Can the desk source an original SICK microScan3 safety laser scanner for a machine-down situation?

Yes — when the part number, manufacturer designation, and firmware revision match the machine file, the desk can quote the device from remaining distributor, integrator, or new-surplus stock. Condition is stated per line, the manufacturer's safety data sheet is passed through on request, and the buyer's engineering team reconciles the revision against the machine file before integration.

What does the desk need in the first message on a safety-related inquiry?

The part number from the machine file, the manufacturer's designation, the safety manual revision the buyer's engineering team is working from, and any documentation already held (risk assessment, safety manual, machine file). With those four items, the desk can run the part number against the catalog and quote line by line.

Does the desk issue a SIL or PL claim on a safety component?

No. The desk does not issue safety integrity claims of any kind — not SIL 1/2/3, not PL a/b/c/d/e, not Cat. 1/2/3/4. That determination belongs to the buyer's functional-safety process and is documented in the machine file. The desk supplies the part and passes the manufacturer's documentation through; it does not opine on the safety classification.

What happens when the original manufacturer EOLs a safety relay series without a documented successor?

The desk declines to substitute and recommends the buyer's engineering team approach the original manufacturer or a third-party safety engineer for a documented replacement path. The desk can still quote the original part from remaining channel stock for a defined last-time-buy window if one exists; the desk does not invent a substitute where the manufacturer has not designated one.

Can the desk source a documented manufacturer successor on the safety circuit as a normal procurement transaction?

Yes — when the manufacturer has published a designated successor and the successor's safety data sheet is available, the desk sources the successor as a normal procurement transaction. The integrator's safety engineer reconciles the successor's category, PFHd, response time, and diagnostic coverage against the original; the desk supplies the part and passes the documentation through.

Where should a buyer take a safety substitution question that the desk cannot help with?

The buyer's safety engineer, the original manufacturer, or a third-party safety consultancy. The desk can quote the original part or the documented successor; it does not perform substitution studies, SIL/PL calculations, risk assessment rewrites, or stop-and-protect circuit re-engineering. The boundary exists so that the supply side of this circuit stays disciplined and the engineering side stays where it belongs.