Arbin employs extensive safety protection, both at the hardware-level and the software-level.

A hardware interlock provides immediate shut-off of the DC power to the fuel cell and purges the gas line with inert gas when system/test malfunction is detected.  The interlock is triggered under such conditions as emergency button being pushed, DPH and exhaust high/low water-level alarms, boiler or gas heater over heats, gas sensor alarms, and digital signal input/output alarms.

Signal interlock input accepts and reacts to an alarm signal from internal or external devices.  Signal interlock output provides an alarm signal to external devices, and includes a digital output.  Signal interlock reacts to discharge stop, H2 sensor, safety limits of temperature, pressure, stack/cell voltage/current/power, and other monitored parameters.

Software-level safety measures are implemented through safety limit settings in test schedule and monitoring of these limits for a safe operation.