Assessing Machine Retrofit CE Compliance Requirements

Daniel Price6 min read
Best PracticesOther ManufacturerSafety Systems
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

The machine runs after a cabinet and controls retrofit, but its existing CE mark has no supporting documentation. For this 2002 automatic crosscut saw, the decision cannot rest on whether the electrical system was touched. Trace each modification from the physical protective device through the control logic to the final actuator, then decide whether the work introduced or increased risk and whether the modified machine must undergo a new conformity assessment.

Where does the compliance decision start?

Start with the entity that defined the retrofit and placed the modified machine back into service. That entity must establish whether the work is maintenance, a non-substantial modification, or a substantial modification that effectively creates a newly assessed machine. The applicable jurisdiction and machinery rules govern that classification.

The practical test is risk-based: did a change alter intended use, operating limits, performance, protective measures, or the behavior of a safety-related function? A replacement that preserves verified characteristics may remain a repair. A change that creates a new hazard, increases an existing risk, or requires a new protective measure points toward substantial modification. Rebuilding the electrical cabinet, changing sensors and the motor, installing a new PLC and HMI, writing new software, and adding functionality require a documented assessment; they do not produce an automatic answer by themselves.

Decision reading Lower-impact outcome Higher-impact outcome Next check
Intended use and operating limits Unchanged and documented New mode, material, speed, capacity, or task Analyze hazards created by the change
Control and power architecture Equivalent replacement with validated behavior New architecture or changed stopping behavior Trace every safety function
Protective measures Original function restored without changing its specification Guarding, interlocking, two-hand control, or stopping function redesigned Recalculate and validate required risk reduction
Residual risk No new or increased risk New or increased risk remains Select additional protective measures

What does the physical safety path show?

Layer one first. Inspect the fixed saw cover, movable guards, door switch, emergency-stop devices, two-hand controls, motor power removal, and pneumatic energy control before reviewing PLC alarms or HMI screens. A diagnostic alarm is not a protective measure unless the control architecture was designed and validated to perform that safety function.

The door switch had previously been wired so that it was effectively ignored; the retrofit restored its function. Treat that finding as a safety defect and record the before-and-after circuit. Determine which hazardous movement the switch stops or prevents, how power is removed, whether a reset is required, and whether closing the door can initiate motion. Apply the same trace to the emergency stops and the manual-mode two-hand control.

Function Reading to take Pass meaning Failure branch
Guard or door interlock Device state, input state, output command, and actual motion Opening the guard produces the defined safe response Correct wiring, logic, output switching, or actuator isolation
Emergency stop Motion and stored-energy response at every device Hazardous movement stops and restart remains inhibited Review stop path and reset behavior
Two-hand manual control Both control inputs and resulting saw motion Manual motion requires the intended concurrent action Review device placement, logic, and release response
Saw cover Access to the cutting hazard through the operating cycle The cover controls access as defined by the risk assessment Redesign the physical protective measure

Did the new controls change the risk?

Follow the signal from sensor to PLC, from PLC to output, and from output to motor or pneumatic actuator. Compare normal operation, manual operation, setup, fault recovery, cleaning, and maintenance. Added functionality matters when it creates a new command path, automatic movement, remote initiation, bypass condition, or recovery sequence.

For each hazard, record severity, exposure, avoidance possibilities, existing protective measures, and required additional reduction. Then inspect foreseeable faults: welded switching devices, broken conductors, short circuits, failed sensors, lost air pressure, unexpected power restoration, program errors, and communication loss where communication participates in control. Determine the required integrity of each safety function from the risk assessment, then verify that the complete input-logic-output chain achieves it.

If ordinary PLC logic controls any safety function, stop the decision tree and identify the actual safety architecture. A well-tested program and useful alarms improve diagnostics, but testing for programming mistakes does not establish the fault tolerance or diagnostic coverage of a safety-related control system.

Can the existing CE mark still support the machine?

The CE plate shows that a conformity claim was made for an earlier configuration. With no declaration, risk assessment, schematics, calculations, test records, or instructions available, it cannot demonstrate that the present configuration matches the assessed machine.

Record the plate data and search the machine owner’s archives and official manufacturer channels for the original declaration and instructions. Compare any recovered records against the current mechanical, electrical, pneumatic, software, and safeguarding configuration. If the retrofit is not substantial, retain the original identity and add a controlled modification dossier. If it is substantial, the responsible party must complete the applicable conformity-assessment route, compile the technical documentation, issue a new declaration, and apply or update marking as required.

Classification Documentation path Marking path
Repair or equivalent replacement Record equivalence, work performed, tests, and revised drawings Preserve the original status if legally applicable
Non-substantial modification Document the classification, change risk assessment, validation, and instructions Follow the applicable rules for the retained machine
Substantial modification Build the technical file and complete conformity assessment for the modified machine Issue the required declaration and marking under the responsible party

What belongs in the retrofit technical file?

Build a controlled record that another engineer can use to reproduce the safety decision. Include the machine identification and limits; description and drawings; electrical and pneumatic schematics; bill of safety-relevant components; risk assessment; safety-function specification; design calculations; software and configuration records; test and validation results; declarations and instructions for incorporated products; change history; and the machine user manual.

The manual must describe intended use, prohibited use, installation, commissioning, operation, setup, cleaning, isolation, maintenance, fault recovery, residual risks, required training, and inspection intervals. Match every instruction and drawing to the as-built machine. Record who approved the risk assessment, software, drawings, and validation, with revisions and dates.

How should the resolving procedure be completed?

  1. Freeze the as-built configuration and record the CE plate, circuits, components, software revisions, operating modes, and machine limits.
  2. Trace every hazard-control path physically from guard or command device to the final energy-controlling element.
  3. Perform the modification risk assessment and classify each change by its effect on intended use, hazards, and protective measures.
  4. Determine the legal modification category and conformity route with a competent machinery-safety specialist for the jurisdiction where the saw is placed into service.
  5. Correct gaps in guarding, interlocking, stopping, reset, two-hand operation, isolation, control architecture, or documentation.
  6. Validate every safety function under normal operation and credible fault conditions. Record commanded state, measured response, actual motion, reset behavior, and test result.
  7. Complete the applicable declaration and marking path, issue the as-built manual, and release the machine only after the technical file and validation records match the installed configuration.

FAQ

How do I decide whether a machine retrofit needs new CE marking?

Document whether the retrofit changed intended use, operating limits, hazards, or required protective measures. A new cabinet alone is not the deciding test; a substantial change that creates or increases risk can trigger a new conformity assessment.

How do I handle an existing CE mark with no documentation?

Record the plate data, seek the original declaration and instructions through owner records and official manufacturer channels, and compare the documented configuration with the as-built machine. Create a retrofit dossier even when the original CE status can be retained.

How do I verify the crosscut saw after the retrofit?

Test the guard switch, every emergency stop, two-hand manual control, saw cover, restart inhibition, motor stopping, and pneumatic response from input through the final actuator. The final verification step is to sign the validation record only after every measured result matches the safety-function specification.

Back to blog