Integrated Automation Control of Conveying Equipment Installation AHA (Activity Hazard Analysis / Job Hazard Analysis)
Updated 2026-06-23
An Integrated Automation Control of Conveying Equipment Installation AHA (Activity Hazard Analysis / Job Hazard Analysis) plans the work of integrating conveying equipment — elevators, escalators, and lifts — into the building automation so it can be monitored and, within limits, commanded. What makes this different from every other system the automation controls is that conveying equipment carries people, so the stakes of an unexpected movement are immediate and severe.
Why integrated automation control of conveying equipment needs its own AHA
Every "control of..." integration commands equipment, but conveying equipment is the one that moves people. An elevator or escalator that moves unexpectedly during integration or commissioning can trap or injure a person in the shaft, the pit, on the car, or on the stairway. So the ordinary start-under-command hazard becomes a people-safety hazard. And conveying equipment is unusual in another way: it has its own dedicated safety controls and code-mandated life-safety functions (like fire-service recall) that the building automation must interface with but never override or defeat. So the integration is typically limited — monitoring and high-level signaling, with the elevator's own controller keeping safety control — and it's coordinated closely with the specialized elevator trade.
Three concerns carry the plan: the conveying-equipment integration, the people-carrying and entrapment life-safety, and the coordination with the dedicated safety controls.
Breaking integrated automation control of conveying equipment into steps
- Confirm the conveying equipment, its controller, and the integration scope from the submittal
- Confirm what the automation may monitor versus command (usually monitor plus limited signaling)
- Interface the automation to the elevator/escalator controller without overriding its safety systems
- Coordinate commissioning with the elevator trade
- Test the integration only with the equipment cleared of people and the shaft/pit secured
- Verify that the dedicated safety functions and fire recall remain intact
The hazards step by step
The people-carrying and entrapment life-safety
Conveying equipment moves people, so an unexpected movement during integration is a life-safety event, not just an equipment concern. Someone can be in an elevator shaft, on top of a car, in the pit, or on an escalator or its machinery — including maintenance and installation workers during construction — and a car or step band that moves under an integration command can trap, crush, or injure them. So the integration is never exercised with anyone in a position the equipment could reach: the car, shaft, pit, and escalator are cleared and secured, and the equipment is locked out for anyone working on or in it, before any test that could move it. The consequence of getting this wrong — a person in a shaft when a car moves — is why conveying equipment is treated with more caution than any other controlled system.
The dedicated safety controls that must not be overridden
Conveying equipment carries its own safety systems and code-required life-safety functions — the elevator's safety controller, its interlocks, and functions like fire-service recall (which sends cars to a designated floor in a fire) — and these must remain fully in control regardless of the building automation. So the automation interfaces with the conveying equipment in a limited way: it may monitor status and send high-level signals (a call, an emergency signal), but the elevator's dedicated controller retains safety control, and the integration never overrides or defeats the safety systems or the fire recall. Commissioning verifies those dedicated functions still work — an integration that compromised fire recall or a safety interlock would defeat a life-safety system. So the integration is designed and tested to leave the equipment's own safety authority intact.
The coordination with the elevator trade
Conveying equipment is specialized, installed and maintained by a dedicated elevator trade under specific codes, so the integration is coordinated with them rather than done to the equipment independently. The elevator contractor knows the equipment's controls and safety systems, controls access to the shaft and pit, and coordinates any movement — so integration testing happens with them, on equipment they've secured and cleared. This coordination is both a safety control (they manage the people-and-shaft hazard) and a practical necessity (they own the interface).
The commissioning, code, and integration fundamentals
Coordinated commissioning, the elevator and integration codes, and the general integrated-automation fundamentals — knowing what any test operates and clearing the field — apply throughout.
A simple Integrated Automation Control of Conveying Equipment Installation AHA structure
| Step | Hazard | Control | Standard |
|---|---|---|---|
| Test integration movement | Person trapped/injured in shaft/pit/stairs | Clear and secure car/shaft/pit; LOTO for anyone on equipment | OSHA 1910.147 |
| Interface to controller | Overriding safety systems | Limited monitor/signal; dedicated controller keeps safety | elevator code |
| Preserve fire recall | Defeating life-safety function | Verify fire recall/safety functions remain intact | fire/elevator code |
| Coordinate with elevator trade | Uncontrolled access/movement | Test with elevator contractor; they secure/clear equipment | coordination |
| Commission | Unexpected operation | Coordinate as people-safety operation | commissioning plan |
Where the people-mover role defines the work
Conveying equipment stands apart in this family because it carries people and has its own life-safety controls. So the integration is deliberately limited — monitoring and signaling, not taking over — and the commissioning discipline is elevated to a people-safety level: nobody in the shaft, pit, or on the unit when a test could move it, and the equipment's own safety systems and fire recall left fully intact. The plan is defined by respecting that this is a life-safety people-mover, not just another piece of equipment to command.
From the field: what actually goes wrong
The grave scenario is a person in the shaft, pit, or on a car when an integration test moves the equipment — a trapping or crushing injury, made possible when the equipment wasn't cleared and locked out and the elevator trade wasn't coordinating. The other serious failure is an integration that interferes with the equipment's own safety systems or fire recall — a life-safety function compromised by the building automation reaching too far. The lessons: never exercise the integration with anyone in a position the equipment can reach; clear, secure, and lock out the equipment first; coordinate every test with the elevator trade who control the shaft and the equipment; and keep the dedicated safety controls and fire recall fully intact, verifying them at commissioning.
The bottom line
An Integrated Automation Control of Conveying Equipment Installation AHA is the one control-of integration where the equipment carries people — so the discipline rises to life-safety. Keep the integration limited (monitor and signal, not override), never move the equipment with anyone in the shaft, pit, or on the unit, coordinate every test with the specialized elevator trade, and leave the dedicated safety controls and fire recall fully intact. The conveying-equipment and elevator AHAs cover the equipment itself; this covers commanding it through the automation, safely.
Frequently asked questions
Why is conveying equipment treated more carefully than other controlled systems?
Because it carries people, so an unexpected movement is a direct life-safety hazard rather than just an equipment concern. When the automation commands a fan or pump and it starts unexpectedly, the hazard is to a worker who happens to be on it. But conveying equipment — elevators, escalators, lifts — moves people by design, and a car, counterweight, or escalator step band that moves unexpectedly can trap, crush, or injure someone in the shaft, pit, on top of the car, or on the stairway, including workers during construction. The consequences are immediate and severe. So integrating and commissioning conveying equipment is held to a people-safety standard: the equipment is cleared of people and secured before any test that could move it, which is a higher bar than the general equipment-start caution.
What does it mean that the automation must not override the safety controls?
Conveying equipment has its own dedicated safety systems — the elevator's safety controller, mechanical and electrical safety interlocks, and code-mandated life-safety functions like fire-service recall (which automatically sends elevators to a safe floor during a fire). These are life-safety systems that must remain in control no matter what the building automation does. So the integration is designed so the automation interfaces with the conveying equipment in a limited way — typically monitoring status and sending high-level signals — while the elevator's own controller keeps full safety authority. The automation never overrides or defeats the safety interlocks or the fire recall. If an integration could compromise fire recall or a safety interlock, it would be defeating a life-safety system — so commissioning verifies those dedicated functions remain fully intact after integration.
Why coordinate so closely with the elevator trade?
Because conveying equipment is a specialized field — elevators and escalators are installed, maintained, and code-governed by a dedicated elevator trade with specific expertise and regulatory requirements. They know the equipment's controls and safety systems, they control physical access to the shaft and pit, and they manage any movement of the equipment. So integrating the automation with conveying equipment is done in coordination with them, not independently: integration testing happens with the elevator contractor present, on equipment they've secured and cleared of people. This coordination handles the people-and-shaft hazard (they control access and movement) and is practically necessary (they own the equipment interface and understand its safety systems). So the elevator trade is a key partner in doing this integration safely.
Is the automation's control of conveying equipment usually limited?
Yes. Because of the life-safety nature of conveying equipment and its dedicated safety controls, the building automation's role is typically limited to monitoring (status, faults, position) and high-level signaling (such as an elevator call, an emergency or fire signal, or a lobby command) — rather than taking over the moment-to-moment safety-critical control, which stays with the elevator's own controller. So the integration commonly reads and coordinates rather than deeply commands, precisely so the dedicated safety systems remain in charge. The exact scope is defined per project, but the principle holds: the automation supervises and signals while the conveying equipment's own controller retains safety control. This limited scope is itself a safety design, keeping the life-safety functions where they belong.
Related AHAs and JHAs
- Integrated Automation Control of Facility Equipment AHA — commanding facility equipment generally
- Conveying Equipment AHA — the conveying equipment itself
- Elevators AHA — the elevator fundamentals
- Equipment Commissioning JHA — the equipment-commissioning fundamentals
Written by Mustafa Tok, CSP, ASP, CHST — OSHA Authorized Outreach Trainer with 14+ years of international construction safety experience across federal, heavy civil, and industrial projects.