Strategic Analysis: CENELEC SIL 4 Relay Procurement Strategies and Market Dynamics in Railway Signaling

The Implications of Component and System-Level Safety Architectures on Total Cost of Ownership (TCO)

SIL 4 safety relays, one of the most critical safety components in railway signaling projects, create substantial procurement risks and cost pressures due to the market structure. This report analyzes the monopolistic nature of the current market, the two primary architectural approaches namely “Component-Level” and “System-Level”, and the impacts of these approaches on the 5-year Total Cost of Ownership (TCO).

Key Findings

• Market Monopoly: The “plug-and-play” (Component-Level) SIL 4 relay market is dominated by a single manufacturer (Clearsy); this situation creates high costs and procurement dependency.
• Architectural Shift Opportunity: The “System-Level” architecture constructed with industrial relays and safety PLCs offers a cost advantage of over 50% in the long term, despite the initial investment in engineering costs.
• Critical Turning Point: The biggest obstacle to market transformation is not technical, but rather the shifting of the responsibility for preparing the Safety Case from the supplier to the integrator, and the acceptance of this new model by the end-user.

Market Structure and Product Ecosystem

Relays used in railway safety should be evaluated in three main categories based on their certification and design philosophies.

Product Categorization Matrix

Technical Taxonomy of the Market and Product Families

Relay technologies in the railway signaling market are divided into two main classes based on the source of their safety mechanisms. This distinction directly determines the procurement strategy and the engineering burden.

Vital Relays

Representative: Clearsy RS4 Series Characterized as the comfort zone of the market, this product group guarantees safety through physical laws.

• Technical Basis: Gravity Fail-Safe principle. When the coil energy is cut off, the opening of the contacts is entrusted not to spring force, but to gravity and mass weight.
• Certification: The component is standalone SIL 4 certified.
• Commercial Characteristic: Very high unit cost and single-source dependency.

Industrial Safety Relays

Representatives: Arteche FF, Dold OA, Finder 7S Series These components act as the fundamental building blocks of system-level architecture.

• Technical Basis: Forcibly guided contact structure and spring-return mechanism compliant with the EN 50205 standard.
• Constraint: They are not SIL 4 on their own. They require external active monitoring against the risk of contact welding.
• Commercial Characteristic: Low unit cost and multiple supplier alternatives.

System-Level Architecture (Strategic Alternative)

This approach is not a product, but an engineering methodology.

• Philosophy: Safety by Design.
• Execution: Multiple industrial safety relays are combined in a redundant architecture (e.g., 1oo2).
• Safety Layer: Software covers the hardware’s vulnerability. Through a readback loop established via the safety PLC, the system is elevated to a safety level equivalent to component-level SIL 4 relays.

Architectural Paradigm: Where is Safety Located?

The fundamental difference between the two approaches is whether safety is confined to a purchased physical component or dispersed throughout the entire system design.

Approach A: Component-Level Safety (Clearsy Model)

This model relies on the certified black box principle.

• Internal Oversight: All diagnostics, redundancy, and safety logic are embedded inside the sealed unit before it leaves the factory.
• Integrator’s Role is Passive: The integrator simply sends the command. They do not have to worry about whether the relay contact is welded, the health of the coil, or the internal mechanism. The product handles this internally.
• Result: Safety is purchased as a product.

Approach B: System-Level Safety (Engineering Model)

This model relies on the architectural oversight principle.

• External Oversight: Safety resides not in the relay itself, but in the PLC software managing it. Standard industrial relays are used, but they are not left unmonitored.
• Integrator’s Role is Active: The integrator must establish a mechanism called a readback loop. Before the PLC issues a command to the relay, it physically verifies whether the relay successfully returned from the previous command.
• Result: Safety is constructed as a process.

Summary Comparison: Responsibility Matrix

Economic Analysis and Break-Even Point (TCO)

A 5-year projection based on an annual requirement of 1000 safety functions reveals the dramatic cost difference between the two approaches.

Cost Data

TCO Break-Even Analysis

Chart Analysis: Although the System-Level approach starts higher initially due to the one-time engineering cost, it passes the break-even point within the very first year thanks to dramatically lower unit costs, providing a savings of ~€1.45 Million at the end of the 5th year.

Strategic Recommendations

In light of the market’s current state and economic analyses, the recommended hybrid transition strategy for integrator firms is:

Short Term (Defense): Clearsy usage should continue in cases of customer insistence or project urgency. This minimizes project risk.

Medium Term (Preparation): Arteche/Dold-based system architecture should be applied in pilot projects, and the Safety Case documentation of this architecture should be matured. Independent Safety Assessor (ISA) approval must be obtained at this stage.

Long Term (Breakthrough): The matured and approved system architecture should become the standard solution in all high-volume projects. This will maximize the firm’s competitive strength and profitability.

Conclusion

The use of component-based SIL 4 relays (the Clearsy model) in railway signaling is a commercial comfort zone preference rather than a technical necessity. For organizations with high engineering capabilities, the System-Level approach is not just a substantial cost advantage, but a lever providing supply chain independence and strategic flexibility.

The core to the transformation is not the excellence of the technical solution, but rather the ability to correctly prove the reliability of this solution to the customer through the Safety Case and independent assessor approval. Brands like FEST, which previously operated in Turkey, have competed by bringing such required relays to the market. Today, with a new brand and formation, this process can certainly be advanced once more.

Recent intelligence from the field indicates that local engineering firms are preparing to design their own safety relay architectures to offer CENELEC-compliant standard solutions to the Turkish market at highly competitive and affordable prices. We sincerely hope that such visionary initiatives will succeed in significantly breaking foreign dependency and introducing much-needed flexibility into the monopolistic supply chain.

References

• EN 50129: Railway Applications – Communication, signaling and processing systems
• EN 50155: Railway Applications – Electronic equipment used on rolling stock
• EN 50205: Relays with forcibly guided (mechanically linked) contacts

📋 Related Links

🔗 Related Article: → Vital vs. Forcibly Guided: Engineering Analysis of Relay Technologies

---

Last update: March 2026 | Version: 1.1