.png)
Guide · Rail & Metro · Built in India
EN 50129 is the CENELEC standard for safety-related electronic systems for railway signalling. Titled Railway applications, Communication, signalling and processing systems, Safety related electronic systems for signalling, it sets out the evidence needed to show that a signalling system, subsystem or item of equipment is adequately safe, structured as a safety case. It covers the overall system and its hardware, while software is handled by EN 50716. The current edition, EN 50129:2026, was approved by CENELEC on 20 April 2026 and supersedes EN 50129:2018: national adoption is due by 31 May 2027 and conflicting national standards must be withdrawn by 31 May 2029, so tenders may cite either edition until then.
The short answer
EN 50129 is prepared by CENELEC subcommittee CLC/SC 9XA, Communication, signalling and processing systems, of technical committee CLC/TC 9X. It applies to safety-related electronic systems, including subsystems and equipment, for railway signalling applications, both to generic products or systems that define a class of applications and to systems for specific applications. It deals only with functional safety, not with occupational health and safety, and applies to the whole life cycle of a safety-related electronic system, focusing on phases 4 (specification of system requirements) to 10 (system acceptance) of EN 50126-1:2017. Requirements for systems that are not related to safety are outside its scope. It is primarily for equipment designed and manufactured for railway signalling, but it also applies, to the extent of its clause 6.2, to general-purpose or industrial equipment such as power supplies, display screens or other commercial off-the-shelf items procured as part of a safety-related electronic system. It is aimed at railway duty holders, suppliers, assessors and safety authorities, although it does not define an approval process for safety authorities.
Why it matters
For the purposes of EN 50129, railway signalling applications are the systems that control and protect train movements by conveying instructions or warnings to trains or trackside systems; where a signalling system includes equipment on board the train, the standard applies up to the interface with the braking, traction control or other relevant train systems. Passenger announcement and information systems, IP CCTV and remote diagnostics units are not normally signalling systems in that sense, so EN 50129 is rarely the governing standard for them. It becomes relevant when such equipment is supplied as part of, or interfaces with, a safety-related signalling system, for example a display screen or power supply procured inside one, where clause 6.2 on pre-existing items sets out the evidence needed. Whether it applies is decided by the system safety process and the contract, so check the tender.
Key requirements
A summary of what signalling specifications usually draw from EN 50129. Always check which edition, 2018 or 2026, and which safety integrity levels your tender names.
Safety acceptance rests on a safety case: a documented demonstration that the product complies with its specified safety requirements. EN 50129 structures it in six parts: definition of the system, quality management report, safety management report, technical safety report, related safety cases and conclusion. The technical safety report holds the documented technical evidence for the safety of the design, and the related safety cases part shows that the safety-related application conditions of each subsystem or equipment safety case are either fulfilled or carried forward.
EN 50129 distinguishes safety cases for generic products, for generic applications that cover a class of applications, and for specific applications such as a single installation. Cross-acceptance of safety approvals between national railway duty holders is aimed at generic products and generic applications, not at any single specific application. A specific application safety case relies on the generic ones and has to fulfil or carry forward their application conditions. The 2026 edition also adds a clause on a safety report for Basic Integrity functions.
Annex A (normative) covers safety integrity levels. Hazards identified through the EN 50126 process are given tolerable hazard rates, which are apportioned to functions as tolerable functional failure rates (TFFR), and each SIL corresponds to a TFFR band. In Table A.1 of the 2018 edition, SIL 4 covers 10⁻⁹ to below 10⁻⁸ per hour per function, SIL 3 10⁻⁸ to below 10⁻⁷, SIL 2 10⁻⁷ to below 10⁻⁶ and SIL 1 10⁻⁶ to below 10⁻⁵; a safety-related function with a TFFR of 10⁻⁵ per hour or higher is Basic Integrity. Annex D gives an informative example of THR, TFFR and failure-rate apportionment and SIL allocation.
Annex B (normative) covers the management of faults for safety-related functions, including fault detection and negation times, the effects of single and multiple faults and retention of a safe state. Annex C (normative) sets out how to identify hardware component failure modes, and Annex E (normative) lists techniques and measures for avoiding systematic faults and controlling random and systematic faults, with a new Basic Integrity column in the 2026 edition. Annex F (informative) gives guidance on user programmable integrated circuits such as FPGAs and CPLDs.
Related standards
EN 50129 is based on the system life cycle in EN 50126-1:2017 and EN 50126-2:2017, which define the RAMS process that identifies hazards and allocates safety integrity requirements. For safety-related systems that include software, the 2026 edition points to EN 50716:2023, and for safety-related communication to EN 50159; together, EN 50126-1, EN 50126-2, EN 50716 and EN 50129 form the railway equivalent of the EN 61508 functional safety series for communication, signalling and processing systems. EN 50716 in turn refers to EN 50129:2018 Annex F for safety-related FPGA and CPLD designs. EN 50155 covers electronic equipment on rolling stock, and EN 50129 normatively references EN 50125-1 and EN 50125-3 for the environmental conditions of rolling-stock and signalling equipment. EN 50129 does not specify cybersecurity requirements: it notes that cyberattacks can affect safety and points to the IEC 62443 series and CLC/TS 50701:2023. Internationally, IEC 62425:2025, edition 2.0, covers the same subject and replaced the 2007 edition.
Developing the software that runs inside a safety-related signalling system? Read: What is EN 50716?
What is EN 50716? Railway software explained →Addressing cyber threats that could affect safety-related functions? Read: What is CLC/TS 50701?
What is CLC/TS 50701? Railway cybersecurity explained →Checklist
Use these points when writing a specification or comparing suppliers. Ask for documented evidence for the exact product version and application rather than relying on a datasheet statement.
Standard and edition: does the specification name EN 50129:2018 or EN 50129:2026, and how will the change of edition be handled before conflicting national standards are withdrawn by 31 May 2029?
Scope: which functions are safety-related, which SIL or Basic Integrity has the system safety process allocated to each, and which equipment sits outside the signalling system boundary?
Safety case: which type of safety case is offered, generic product, generic application or specific application, and does it include the quality management, safety management and technical safety reports?
Application conditions: which safety-related application conditions does the supplier's safety case place on the installer, operator and maintainer, and how will they be carried forward?
Independent assessment: who carries out the independent safety assessment, and will the assessor's report be available to the duty holder and safety authority?
Pre-existing and COTS items: what evidence covers general-purpose equipment, such as power supplies or display screens, used inside the safety-related system?
Software, cybersecurity and sourcing: is the software developed to EN 50716, how are cyber threats to safety addressed under CLC/TS 50701 or IEC 62443, and does your programme favour Built in India / Make in India manufacturing?
Envision TechWorks
Envision TechWorks makes onboard and station electronics, including passenger information, IP CCTV, remote diagnostics and industrial control products, rather than signalling systems. Products are designed, manufactured and tested in an ISO 9001:2015 facility in India: production-ready and Built in India for Make in India programmes. PAPIS onboard passenger announcement and information hardware is built to EN 50155, and production includes in-circuit and functional test, AOI and X-ray inspection, and thermal cycling. Where your project needs displays, CCTV, diagnostics units or control panels alongside a safety-related signalling system, share the interface requirements and the evidence named in your tender, and the team can discuss your requirements.
Related
Railway software explained: integrity levels from Basic Integrity to SIL 4, lifecycle, roles, tools and deployment.
Read the EN 50716 guide →Passenger announcement and information system for metro trainsets, with hardware built to EN 50155.
See PAPIS product details →Onboard and station IP surveillance with centralised video management and vandal-resistant cameras for rolling stock and stations.
See IP CCTV product details →Railway cybersecurity with IEC 62443: zones and conduits, security levels SL 1 to SL 4 and secure development for onboard and station systems.
Read the TS 50701 guide →Platform and concourse displays that show route maps, arrivals, service status and emergency messages on sunlight-readable screens, managed centrally from the control room.
See Station PIS product details →IoT remote diagnostics for locomotive and rolling stock fleets — edge data acquisition, cloud analytics and predictive maintenance alerts, Built in India.
See RDPMS product details →FAQ
EN 50129, Railway applications, Communication, signalling and processing systems, Safety related electronic systems for signalling, is the CENELEC standard that defines requirements for the development and acceptance of safety-related electronic systems, subsystems and equipment for railway signalling. It covers the overall system and its hardware, structures the evidence as a safety case and uses safety integrity levels from Basic Integrity to SIL 4.
According to its European foreword, EN 50129:2026 supersedes EN 50129:2018 and its corrigendum. It updates requirements and guidance on safety qualification tests, safety-related tools and cybersecurity, moves much of the technical safety report content into a table, makes the Annex C insulation coordination requirements easier to read and adds a Basic Integrity column to the Annex E techniques tables. National adoption is due by 31 May 2027 and withdrawal of conflicting national standards by 31 May 2029.
Not usually. EN 50129 applies to safety-related electronic systems for railway signalling, meaning systems that control and protect train movements, and requirements for systems that are not related to safety are outside its scope. General-purpose equipment such as display screens or power supplies can still fall under its clause 6.2 when procured as part of a safety-related signalling system, so the system safety process and the tender decide.
EN 50126-1 and EN 50126-2 define the overall RAMS process and the allocation of safety integrity requirements; EN 50129 covers the safety-related electronic system and its hardware, with the safety case; and EN 50716 covers the software. Together they form the railway equivalent of the EN 61508 functional safety series for communication, signalling and processing systems.
Envision TechWorks makes onboard and station electronics, not signalling systems, in an ISO 9001:2015 facility in India. Where your project needs displays, CCTV, diagnostics units or control panels alongside a safety-related signalling system, share the interface and evidence requirements named in your tender and the team can discuss them, Built in India.
Share the standards, editions and interface requirements named in your tender, and the team will discuss your requirements, Built in India.