Prove modern systems safe.

Manage safety evidence and certification from one calm, independent workspace, from concept to revenue service.

>> Start a conversation
  • EN 50126
  • EN 50128
  • EN 50129
  • CSM-RA
  • 49 CFR Part 236 Subpart H
  • IEC 61508
  • IEC 62304
  • ISO 14971
  • IEC 60601
  • IEC 61513
What we do

Three domains. One discipline.

Different regulators, different standards, the same underlying question: can you demonstrate, with evidence, that this system is safe?

/RAIL

Railway Signalling

RAMS management and safety certification of ATC/CBTC signalling for metros and people movers, under CENELEC and FRA regimes.

  • CBTC & driverless ATC (GoA4)
  • Microlok interlocking technology
  • PTC (US regulatory framework)
  • EN 50126 / 50128 / 50129 · CSM-RA · 49 CFR 236H
/MED

Medical Devices

Safety and V&V for life-critical devices such as ventilators: risk management and software lifecycle evidence that stands up to audit.

  • Risk management per ISO 14971
  • Software lifecycle per IEC 62304
  • Safety requirements & hazard analysis
  • V&V planning, execution & reporting
/NUC

Nuclear Safety Systems

Independent assurance for nuclear power plant safety systems, where the burden of proof is highest and the margin for error is zero.

  • Safety-classified I&C systems
  • IEC 61513 / IEC 61508 frameworks
  • Defence-in-depth & diversity analysis
  • Qualification & V&V evidence
Metro & APM projects certified
Systems in revenue service
Safety-critical domains
Standards & regulations applied
In practice

Evidence that moves with the system.

We work where the signalling logic lives — occupancy, aspects, and movement authority — so the safety case matches what the train actually does.

ATI // MIMIC 01 · AUTOMATIC TRAIN CONTROL · LINE OVERVIEW SYS --:--:--   LIVE
STOP CAUTION / OCCUPIED PROCEED FIXED-BLOCK 3-ASPECT · CBTC MA OVERLAY · GoA4
Track record

Certified. In service. Carrying passengers.

Safety cases we've led or delivered aren't sitting in a drawer. They're running driverless trains, every day.

Project System Certification basis Status
MTA Baltimore Metro CBTC resignalling FRA · 49 CFR Part 236 Subpart H In progress
Copenhagen Metro Driverless metro · ATC CENELEC EN 50126 / 50128 / 50129 In revenue service
Roma Line C Driverless metro · CBTC CENELEC EN 50126 / 50128 / 50129 In revenue service
Milan Line 5 Driverless metro CENELEC EN 50126 / 50128 / 50129 In revenue service
Brescia Metro Driverless metro CENELEC EN 50126 / 50128 / 50129 In revenue service
Aarhus Light Rail Light rail transit system CENELEC · CSM-RA In revenue service
Riyadh PNU People Mover Driverless APM CENELEC EN 50126 / 50128 / 50129 In revenue service
"Probably safe" is not a deliverable. Safety is demonstrated, documented, and independently assessed, or it isn't safety.
The ATI operating principle
How we work

The full V, both sides.

We cover the complete RAMS lifecycle: hazard analyses (PHA, SHA, SSHA, O&SHA), FMEA and fault trees on the way down; verification, validation, test reports and safety cases on the way up. Including the part most consultancies avoid: defending it in front of the Independent Safety Assessor.

Explore our expertise →
ATI // EN 50126 · V-MODEL SIL 0-4
VALIDATION VERIFICATION V&V CONCEPT & RISK ACCEPTANCE & OPERATION SYSTEM REQTS SYSTEM V&V ARCHITECTURE INTEG & TEST DESIGN MOD TEST IMPLEMENTATION (SIL 0-4) CONCEPT & RISK SYSTEM REQTS ARCHITECTURE DESIGN IMPLEMENTATION (SIL 0-4) MOD TEST INTEG & TEST SYSTEM V&V ACCEPTANCE & OPS
Ready when you are

Your safety authority will ask hard questions. Let's have the answers ready.

Tell us about your system, your standard, and your deadline. We'll tell you what the evidence needs to look like.

>> Contact ATI