Protection and safety of Ampy
Ampy protects itself and your system out of the box, with several layers of protection, not just one:
- Electronic fuse for each output: value and tripping behaviour freely adjustable
- Short-circuit protection in hardware: acts in fractions of a second, without any software
- Overvoltage and undervoltage protection for each load: can be switched on and adjusted
- Temperature monitoring: if it gets too warm inside the device, Ampy switches off in stages.
- Safe state after a fault, with restore after a power cut: after a fault, the affected output stays off. If only Ampy loses power, it restores the last state of its outputs by itself once power is back, and your settings are kept. A boiler heating element that Ampy has already locked stays off until you deliberately reset the fuse.
- Direction interlock for motors: never both directions at the same time
A second, independent monitoring
It keeps watch over the main control: if the control fails, the second monitoring brings all outputs into the safe state in a controlled way, like a co-pilot looking over the pilot's shoulder.
Developed to automotive standards
Ampy is developed to ISO 26262 up to ASIL B, the functional safety standard that airbags, ABS and electronic steering in cars are also built to. Put simply: it is not enough for a device to work under normal conditions, it must also be planned and proven what happens in the event of a fault. ASIL B is the safety level achieved here, and the scale goes from A to D. The key semiconductors in the power and safety path are also automotive-qualified to AEC-Q100, which means they are designed for tough continuous use in vehicles.
Still have questions? We'll help you personally.
Get in touch