Streamline your functional safety system certification. Meet the rigorous requirements of functional safety standards such as ISO 26262 and IEC 61508 with our analog and embedded processing products. While all of our products follow certified quality-managed processes, we understand that safety critical functions require more rigor. This is why our functional safety-compliant products leverage our TÜV SÜD-certified functional safety hardware and software development processes. Let us help you achieve the highest Automotive Safety Integrity Level (ASIL) and Safety Integrity Level (SIL) your design requires.

 


View all Functional safety products

Filter, compare and select the right device for your Functional safety design with our selection tool.

View all products

Functional safety classifications

Functional Safety-CapableFunctional Safety Quality-Managed*Functional Safety-Compliant
Development processTI quality-managed process
TI quality-managed processTrueTrueTrue
TI functional safety processTrue
Analysis report
Functional safety FIT rate calculationTrueTrueTrue
Failure mode distribution (FMD) and/or pin FMA**TrueIncluded in FMEDAIncluded in FMEDA
FMEDATrueTrue
Fault-tree analysis (FTA)**True
diagnostics description
Functional safety manualTrueTrue
certification
Functional safety product certificate***True

* We are phasing out the “SafeTI” terminology in favor of the three categories outlined in the table above. For products previously labeled SafeTI-26262 or SafeTI-61508, see the Functional Safety-Compliant category. For SafeTI-60730 or SafeTI-QM products, see Functional Safety Quality-Managed.

** May only be available for analog power and signal chain products.

*** Available for select products.

Certificate for Functional Safety Software Development Process

Compliancy to functional safety standards IEC 61508 and ISO 26262.

View functional safety certificate

Certification for Functional Safety Hardware Process

Compliancy to functional safety standards IEC 61508 and ISO 26262.

View functional safety certificate

Understanding functional safety FIT base failure rate estimates per IEC 62380

Systematic and random hardware failures need to be addressed for you to achieve functional safety compliance. Learn about two techniques for estimating the base failure rate (BFR) required to calculate quantitative random hardware.

View white paper

Streamlining functional safety certification in automotive and industrial

Whether you are designing for the factory floor or the highway, this white paper explains how we approach designing integrated circuits (ICs) and provides the resources needed to streamline your functional safety design.

View white paper

Why choose TI for your functional safety needs?

Sustainability and compliance
Access industry-standard reports on TI.com
System-level expertise

Functional safety technologies

Industrial and automotive functional safety motor-control resources

If you are designing industrial and automotive motor control applications that include variable speed drives and automotive traction inverters, you need to comply with functional safety standards such as International Organization for Standardization (ISO) 13849, International Electrotechnical Commission (IEC) 61800-5-2 and ISO 26262 to ensure correct operating procedures and keep operators safe. Our semiconductor isolation technologies with increased lifetimes help meet your isolation requirements and enable highly reliable systems, while sensing and real-time processing for monitoring faulty scenarios and actuating to a safe state help reduce the overall risk of hazards.


High-power, high-performance automotive SiC traction inverter reference design

Developed by Texas Instruments and Wolfspeed, this 800-V, 300-kW silicon carbide-based traction inverter reference design helps design engineers create high-performance, high-efficiency traction inverter systems.

ASIL D safety concept-assessed high-speed traction, bidirectional DC/DC conversion reference design

This reference design demonstrates control of a hybrid electric vehicle/electric vehicle traction inverter and bidirectional DC/DC converter with a single TMS320F28388D real-time C2000™ microcontroller.

TÜV SÜD-assessed safe torque off (STO) reference design for industrial drives (IEC 61800-5-2)

This reference design outlines a safe-torque-off (STO) subsystem for a three-phase inverter with complementary metal-oxide semiconductor input-isolated IGBT gate drivers.

TPS6594-Q1ACTIVE

Automotive 2.8-V to 5.5-V PMIC with five buck regulators and four low-dropout regulators

TMS320F28388DACTIVE

C2000™ 32-bit MCU w/ connectivity manager, 2x C28x+CLA CPU, 1.5-MB flash, FPU64, CLB, ENET, EtherCAT

DRV8350FACTIVE

102-V max 3-phase Functional Safety Quality-Managed smart gate driver

Accelerating functional safety in intelligent sensing application designs

High accuracy, low response time and reliable sensing applications need to comply with functional safety standards. Our innovative dual-die sensing technologies support the development of ISO 26262- and IEC 61508-compliant applications and provide seamless integration to meet functional safety levels as high as ASIL D.

Our sensing portfolio offers AEC-Q100-qualified devices with failure-in-time rate and failure-mode distribution documentation to aid your industrial and automotive functional safety system designs.


Technical article

Understanding functional safety in automotive and industrial sensing applications

Leverage our autonomous monitoring capability to meet functional safety requirements with minimum loading on the host, decreasing the need for external components while maintaining performance.
Functional safety information

Design Guide for Functional Safety Compliant Systems using mmWave Radar Sensors (Rev. A)

Learn the steps involved in developing a  functional safety-compliant design, and what artifacts you will need for an application certified as compliant with functional safety.
Technical article

How TI mmWave radar safety guards can help improve manufacturing productivity with

Learn how to keep industrial robot cycle times as short as possible without compromising human safety.

TMAG5170D-Q1ACTIVE

Automotive, high-precision, 3D linear Hall-effect dual-die sensor with SPI interface

TMAG6180-Q1ACTIVE

Automotive high-precision analog AMR angle sensor with 360° angle range

IWR6843ACTIVE

Single-chip 60-GHz to 64-GHz intelligent mmWave sensor integrating processing capability

Integrated processing

The integrity of the processing block is important in the signal chain – from sense to process to actuate – for compliance with functional safety requirements. Our processors have a safety architecture with built-in hardware features for executing software, and our processing units support symmetric or asymmetric redundancy to enhance system integration. In microcontrollers (MCUs) with symmetric redundancy, lockstep or dual-core mode configurations support different levels of safety integrity functions at the system level and trade off with processing power to enable the implementation of automotive (ISO 26262) and industrial or machinery (IEC 61508, ISO 13849) system architectures.


White paper

Driver and Occupancy Monitoring Systems on AM62A

This technical white paper describes how the AM62A processor can be used to build automotive grade driver and occupancy monitoring systems.
Product overview

C2000™ Safety Mechanisms (Rev. B)

Learn about our C2000 safety mechanisms.
Product overview

Functional Safety for AM2x and Hercules™ Microcontrollers

Learn how to streamline the ISO 26262 and IEC 61508 certification processes with Functional Safety-Compliant products, documentation, software and support.

TMS320F28P659DK-Q1ACTIVE

C2000™ 32-bit MCU, 2x C28x+CLA CPU, Lock Step, 1.28-MB flash, 16-b ADC, HRPWM, CAN-FD, AES

TMS320F28388DACTIVE

C2000™ 32-bit MCU w/ connectivity manager, 2x C28x+CLA CPU, 1.5-MB flash, FPU64, CLB, ENET, EtherCAT

AM62A7ACTIVE

2 TOPS vision SoC with RGB-IR ISP for 1-2 cameras, low-power systems, machine vision, robotics

Scalable power supply

Safe power designs require uncompromised performance, along with fail-safe mechanisms to comply with functional safety standards. We have a broad portfolio of switching regulators, low-dropout regulators, supervisors and power-management integrated circuits (PMICs) enabling scalable power architectures that can meet functional safety requirements. 

High-accuracy and high-speed over- and undervoltage fault detection reduce overall system failure-in-time and fault-tolerance time intervals. Pairing discrete and integrated power solutions with scalable supervisor solutions help support power designs that conform to automotive (ISO 26262), industrial (IEC 61508) and machinery (ISO 13849) standards.


TPS6594-Q1ACTIVE

Automotive 2.8-V to 5.5-V PMIC with five buck regulators and four low-dropout regulators

TPS389006-Q1ACTIVE

Automotive multichannel overvoltage and undervoltage I²C programmable voltage supervisor and monitor

TPS3762-Q1ACTIVE

Automotive 65-V window supervisor with ultra-low quiescent current and built-in self-test
With technology advancements, the need for functional safety is critical. Our commitment of a growing functional safety product portfolio and design tools help you simplify and accelerate your design process.
– Heinz-Peter Beckemeyer | Texas Instruments Director, Functional Safety Marketing
 
 

Find your answers here

Still have questions? Find your answer here or search the TI E2E™ technical support forums where our engineers answer your questions and share their knowledge.

Is the functional safety FIT rate different than the technology FIT rate? How is functional safety FIT-rate calculated?

Yes, the functional safety FIT rate is different than the technology FIT rate. Our online mean time between failure (MTBF)/FIT estimator for technology FIT rate is derived using the JESD85 methodology from internal high-temperature operating life (HTOL) and early life failure rate (ELFR) reliability testing. The MTBF and FIT are estimated with a 60% confidence level for reliability.

This method provides an accurate FIT rate for the process technology but does not take into account transistor or gate count, die size or other important factors. We provide functional safety FIT rate based on one of two standards, IEC TR 62380 or SN 29500, which offer a 99% confidence level. Functional safety standards, such as IEC 61508 and ISO 26262, often suggest 99% confidence levels be used for safety-related random failure FIT rate estimation.

For more on functional safety FIT rate, read this Understanding Functional Safety FIT Base Failure Rate Estimates per IEC 62380 and SN 29500. 

Which standards do your parts comply with?

IEC 60730 – Applies to automatic electrical controls for use in, on or in association with equipment for household and similar use. This standard also applies to automatic electrical controls for equipment that may be used by the public, such as equipment intended to be used in shops, offices, hospitals, farms and commercial and industrial applications.

IEC 61508 – Covers functional safety aspects to be considered when electrical, electronic and programmable electronic (E/E/PE) systems are used to carry out safety functions.  This standard can be applied to a large range of industrial applications and also provides a basis for many other standards.

ISO 26262 – Applies to functional safety-related systems that includes electrical and/or electronic (E/E) systems and that are installed in series production automotive vehicles.

What is the difference between FMEA and pin FMA?

Both reports are the results of failure mode analysis. The report content and format are different.

A failure modes and effects analysis (FMEA) report follows a process and format that is required by the IATF 16949 standard for automotive product development using the AIAG FMEA requirements standard.  When a failure mode analysis report does not follow the AIAG FMEA process and format it is called a pin FMA.

Why do some of your products offer the FMD and pin FMA, but some only have one or the other?

Providing a pin FMA is required when you have dedicated single function pins that can be easily mapped to a specific failure mode. In contrast, for a microcontroller or processor device the IO’s are typically multi-function and have several layers of in-built pin muxing, meaning that there is no single function and no practical means of mapping a single IO to a single specific failure mode.

In this scenario each pin is assumed to have the same potential for failure and therefore an equal failure rate. Within our FMEDA the package failure rate is calculated as per the IEC 62380 model and then equally divided by the number of pins to provide a FIT per pin failure rate. The FMEDA allows the customer full control over the package failure rate through the applied diagnostic measures down to the individual pin level. Finally, failure modes of IP that include failures of the pins are covered in the analysis of individual IP and a further pin FMA would be redundant.

What should I do if a product I’ve selected does not have an analysis report available?

Please contact your local sales representative.

Where can I find SafeTI products?

While we are no longer using the brand SafeTI, these products are still supported and available! If you were using or considering a SafeTI-26262 or SafeTI-61508 product, you will find them under the Functional Safety-Compliant category. If you were using or considering a SafeTI-60730 or SafeTI-QM product, you will now find them listed as Functional Safety Quality-Managed products.