← WENLEN SA
✓ Certificate active — valid until 2031/10/13
Certificate of Compliance
OE256 Pneumatic SIS/Final Element subsystem
2250.649.14-0
Certificate holder WENLEN SA
Estrada 180, Bella Vista, 1661, Pcia. Buenos Aires, Argentina
Compliant item OE256 Pneumatic SIS/Final Element subsystem
Certification type Subsystem
Category Actuators, Final Element Assembly, HIPPS
Initial certificate 2026/10/13
Current certificate 2026/10/13
Expire date 2031/10/13
Download ↓ Certificate
Verification QR code — 2250.649.14-0
Scan to verify
Risknowlogy — Actuators, Final Element Assembly, HIPPS certified
Issued and certified by Risknowlogy — independent certification body for functional safety, operating according to IEC 61508 and IEC 61511.
Scope:

The WENLEN OE256 Pneumatic SIS / Final Element Subsystem has been independently certified by Risknowlogy in accordance with IEC 61508:2010 and IEC 61511:2016 (certificate 2250.649.14-0, issued 13 October 2026). The certification confirms that its safety functions meet the applicable hardware integrity requirements of both standards.

The OE256 serves a dual purpose. It provides autonomous pneumatic safety instrumented functions, and it acts as the final element for functions executed by an external logic solver. It can perform up to four low demand safety functions: closing the valve to tight shutoff on low-low or high-high line pressure, or when a 24 VDC signal from an external logic solver is lost, and preventing it from opening while the pressure difference across the closed valve is too high.

Risknowlogy assessed the safety requirements specification, hardware requirements, hardware architecture and hardware reliability. The assessment combined a qualitative and quantitative analysis of failure behaviour, using failure data from WENLEN and independent recognised sources. The subsystem is Type A and has no programmable application logic.

Based on this assessment, each of the four safety functions is suitable for use in SIL 2 safety functions at hardware fault tolerance 0, subject to the proof test intervals in the report: up to five months for the two pressure-trip functions, seven months for the differential-pressure function and twelve months for the voltage-loss function. Where the OE256 acts as a final element, the SIL achieved also depends on the other subsystems in the function.

The certification covers hardware only. Management of functional safety, basic safety, user documentation, validation testing and the external pneumatic feed are outside its scope. The end user remains responsible for correct design, installation, validation, operation, proof testing and maintenance, and for securing power and pneumatic supply for the energise-to-trip functions. Modifications require re-assessment and re-certification.

The detailed certification basis, safety functions, conditions of use and limitations are defined in the issued certificate and Risknowlogy certification report 2250.649.13.

Certify your own product or system

Risknowlogy provides independent functional safety certification for products, subsystems, solutions, and FSM systems — according to IEC 61508 and IEC 61511.

Explore certification → Ask us a question
We use cookies
Cookie preferences
Below you may find information about the purposes for which we and our partners use cookies and process data. You can exercise your preferences for processing, and/or see details on our partners' websites.
Analytical cookies Disable all
Functional cookies
Other cookies
We use cookies to personalize content and ads, to provide social media features and to analyze our traffic. Learn more about our cookie policy.
Accept all Decline all Change preferences
Cookies