Book a Discovery Call

Case Study · Certification Body Experience

How connected evidence makes certification assessment more efficient and focused

TÜV Rheinland

When TÜV Rheinland assessed the safety case for Amazon's Proteus autonomous mobile robot, the core technical review stayed focused. Because the evidence arrived standardized and structurally traceable, assessors could concentrate their scrutiny where it mattered. This is what the review process can look like when the underlying evidence is consistent and connected from the start.

At a glance

Industry: Advanced Robotics / Autonomous Mobile Robots

Application: Certification assessment of the technical file for an AI-driven autonomous system

Standards: Fennec's specified ASAP tools are qualified by TÜV Rheinland as Tool Class 2 (T2) offline support tools under IEC 61508-3:2010, Clause 7.4.4.

Solutions: ASAP Platform for authoring, traceability, and reporting, with the Validation module for standardized assessor-ready reports

Outcome: Standardized, traceable evidence supported an efficient assessment. The Safety Requirements Specification and Safety Concept were reviewed in detail, and software source-code reports were spot-checked.

The assessor's problem

Certification bodies do not slow programs down out of caution for its own sake. They slow down because the evidence forces them to.

A typical technical file for a complex autonomous system arrives as a patchwork: spreadsheets, Word documents, exports from legacy safety tools, and manually assembled traceability matrices. Before an assessor can evaluate whether the system is safe, they have to evaluate whether the documentation is trustworthy. That means auditing the toolchain that produced it, tracing requirements to their evidence by hand, and flagging every gap for follow-up.

Traceability gaps are a leading cause of assessor follow-up questions. Each round of questions adds time. For AI-driven systems, where safety guarantees are probabilistic rather than deterministic, the review burden compounds further. The result: a six-week review cycle is standard, and multiple rounds of questions are common.

What changed with the ASAP Platform

For the Proteus program, the technical file was authored, maintained, and generated inside the ASAP Platform, the functional safety platform within Fennec's Advanced Safety Acceleration Program. Three things shaped the assessment.

The qualified scope was documented. Fennec's specified ASAP tools are qualified by TÜV Rheinland as Tool Class 2 (T2) offline support tools under IEC 61508-3:2010, Clause 7.4.4. The qualification provided independent evidence about the named tools and versions. The certification body still evaluated the project evidence and conclusions within the assessment scope.

Traceability was structural, not assembled. ASAP maintains live connections between hazards, safety requirements, and test evidence as a property of the system. The gaps that normally trigger rounds of follow-up were prevented at the source rather than caught in review.

Reports arrived in a standardized, verified format. Fennec's Validation module documented safety data throughout the program and generated assessor-ready reports as evidence accumulated. Assessors received a consistent evidence package in a format they had built familiarity with over the course of the program.

A different kind of review

Because the ASAP Platform's connected architecture let TÜV Rheinland build familiarity with the outputs throughout the program, the documents that reached final review were already standardized and traceable. Standardized evidence does not remove the assessor's judgment. It makes the process more efficient: less time spent reconstructing how the evidence was produced, more time on the substance of the safety argument.

The depth of review varied by document, as it should. TÜV assessors reviewed the Safety Requirements Specification and the Safety Concept in detail, line by line. For the software source-code reports, the standardized format supported spot-checking. As on any program of this scope, the assessment included working meetings and an open-items list. The difference was that the consistent structure of the evidence kept the review focused and moving rather than stalled on reconstructing traceability.

Why this matters for certification bodies

Assessor time is a scarce resource, and the backlog of autonomous systems awaiting certification is growing. When evidence arrives standardized and structurally traceable from a qualified toolset, assessors spend their expertise where it matters: on judgment calls, edge cases, and the substance of the safety argument, not on reconstructing traceability by hand.

A focused, well-structured assessment is not only faster for the manufacturer. It is a cleaner, more defensible assessment for the certification body, with a complete, machine-maintained audit trail behind every conclusion.

Key standards and qualifications: Specified ASAP tools and versions · IEC 61508-3:2010, Clause 7.4.4 · TÜV Rheinland

Download the full case study

Get the assessor's-eye view: why technical files force slow reviews, what structural traceability changes, and what standardized evidence means for certification bodies.

All fields are required unless marked optional.

By submitting, you agree to our Privacy Policy. We'll use your information to provide the requested case study. Marketing updates are optional.

Qualification reference. Fennec's ASAP tools are qualified by TÜV Rheinland Industrie Service GmbH (Cologne) as Tool Class 2 (T2) offline support tools under IEC 61508-3:2010, Clause 7.4.4, each at a specific assessed version: Hazard Analysis and Safety Concepts, report 968/INS 870.00/24 (2024-09-17); Validation, report 968/INS 870.01/25 (2025-08-26, v0.4.129); Requirements and Systems Design, report 968/INS 870.02/25 (2025-12-08, UI 0.1.201 / UI 0.0.128); Reliability, report 968/INS 870.05/26 (2026, UI 0.5.181). Qualification applies within the assessed scope. Correct selection and application of the tools remains the responsibility of the user.

Standardized evidence

One connected, traceable technical file across the program

Focused review

Safety specifications reviewed in detail, source-code reports spot-checked

Technician inspecting machinery

GET IN TOUCH

Certification is the start, not the finish line

Intelligent machines change with every release. Their safety evidence has to keep up. See what a connected safety lifecycle looks like for your program.

Ready to get started?

We use optional analytics to measure site use and performance. They run only if you accept. Privacy Policy