On a VFFS line the disconnect everyone remembers to pull is the electrical one. The energy that injures a servicing tech is the pneumatic charge still in the sealing-jaw cylinders and the heat still in the jaws.
Most incidents I see trace to a skipped energy-isolation step or a hand reaching into live jaws to clear a jam, not to a missing guard.
A VFFS machine runs two different hazard profiles depending on whether it is making bags or opened up for service. Before running a shift, verify the controls that protect the operator; before opening a guard, verify the machine cannot move, cut, or burn. The checklists below split along that line.
Operation-phase safety comes down to verifying the protective architecture works before a bag is made, then keeping hands clear of the sealing jaws and cut-off knife while the machine runs. The hazards are crush, pinch, burn, entanglement, and — on gas-flush lines — asphyxiation, all while the machine is energized.
| Check | Hazard it guards | Backed by |
|---|---|---|
| E-stop resets; guard doors latched | Safety relay won’t start | ISO 13850 |
| Light curtain trips across full jaw stroke | Jaw crush / pinch | EN 415-3 |
| Guard interlocks open when a door opens | Point-of-operation entry | OSHA 1910.212 |
| O2 monitor alarms below 19.5% (gas-flush) | Asphyxiation | OSHA 1910.134 |
| PPE on; no loose sleeves at the reel | Entanglement, burn | OSHA 1910.132 |
The two most common reasons a VFFS safety relay won’t let the machine start are an e-stop in the wrong position and a door slightly ajar. Treat a no-start as a safety signal, not a nuisance — the interlock is doing its job.
Verify the light curtain by breaking the beam and confirming the jaws lose power; coverage should span the full jaw stroke, not just the front access point.
The sealing jaws run hot enough to burn on contact and stay hot after the cycle stops. A jaw protective-stop can halt the seal-and-cut cycle if a hand enters the jaws, but that is a backstop to limit injury, not permission to reach in.
If clearing a jam means putting a hand in the jaws, the machine needs full lockout first.
Loading film rolls is where backs and hands get hurt. A reel can need a lift assist, and the reel shaft is a rotating entanglement point, so confirm the shaft drive is stopped before threading.
Well-designed VFFS machines integrate the guard interlocks, light curtains, and e-stops as standard architecture, so the operator’s job is to verify them, not improvise around them.
Servicing-phase safety starts with full lockout/tagout of every energy source and ends only when an authorized employee has verified zero energy — electrical and pneumatic — and the jaws have cooled. The machine is stationary now, so the danger shifts from moving parts to stored energy and residual heat.
Run this before any guard comes off or any hand goes near the jaws, blade, or forming tube.
These checks protect the routine work covered in the VFFS maintenance guide, and the jam-clearing decisions that trigger them run through the VFFS troubleshooting workflow.
Zero energy on a VFFS means the electrical supply is locked out, the pneumatic system is bled to zero, and the jaws have cooled. Pulling the electrical disconnect alone leaves two live hazards behind.
OSHA 1910.147(b) lists pneumatic and thermal energy alongside electrical, so bleeding the cylinders and waiting for the jaws to cool are part of the energy-control procedure the standard already requires.
The jaw air cylinders are the first trap. Cut the power and a cylinder can still hold enough charge to snap the jaws shut on a hand. Relieve the air per 1910.147(d)(5), then confirm the gauge reads zero.
The jaws are the second trap. Seal bars run hot to fuse film and shed that heat slowly — a tech who locks out the power and reaches in within a minute can still take a burn.
Verification is a step, not an assumption. After isolating and bleeding, an authorized employee tries the start controls and confirms nothing moves — 1910.147(d)(6) calls this verifying de-energization, and it catches the cylinder that didn’t fully bleed.
The minor-servicing exception at 1910.147(a)(2)(ii) lets an operator make routine adjustments without full lockout, but only when no guard is removed and no body part enters the point of operation. A jam that needs a hand in the jaws fails both conditions, so full LOTO applies.
Four standards carry the load behind a VFFS safety program: ISO 12100 for risk assessment, EN 415-3 for the machine class, OSHA 1910.147 for energy control, and OSHA 1910.134 for the gas-flush oxygen threshold. The one most often cited wrong for VFFS is the EN 415 part.
VFFS machines fall under EN 415-3 (Form, Fill and Seal Machines), not EN 415-2 — EN 415-2 covers pre-formed rigid containers, a different machine class. EN 415-1 (terminology) and EN 415-10 (general requirements) sit over the series, which defers to ISO 12100:2010 for hazards it does not address itself.
ISO 12100:2010 is the type-A umbrella standard every specific control sits under, and ISO 13850 governs the emergency-stop function behind the e-stop check.
For US lines, OSHA 1910.147 is the lockout/tagout backbone, with 1910.212 (guarding), 1910.132 (PPE), and 1910.146 (confined spaces, where a gas-flush enclosure qualifies) around it. ANSI/PMMI B155.1 is the US counterpart to the European part.
The failure mode is almost never a missing guard. It is treating an electrical disconnect as zero energy when the cylinders still hold air and the jaws still hold heat, and treating a protective stop as permission to reach into live jaws.
Both blind spots live in the gap between “the machine is off” and “the machine is safe” — which is why the operation and servicing checks stay separate. Run both checklists as written, verify zero energy as a deliberate step, and the VFFS hazards stop being the ones that catch a crew off guard.
