Stored Energy Hazards in LOTO: Hydraulic, Pneumatic, and Capacitive Energy Isolation Under 1910.147

Published May 18, 2026 by LOTO Compliance

The single most common mistake we see on plant LOTO audits is treating the electrical disconnect as the whole isolation. The lock goes on the main, the meter sees zero on the load side, and the crew calls the machine safe. Then someone breaks a hydraulic line and a cylinder kicks. Or a tech opens a VFD enclosure and a 700-volt DC bus is still hot eight minutes after the disconnect opened. Or a die set drops two inches when a hose comes loose because nobody set the safety blocks.

The standard saw this coming. 1910.147(d)(5) is the paragraph that pulls every non-electrical energy source into the same isolation logic. If a program has a 12-page energy control program and one paragraph on stored energy, that paragraph is where the citations live. This guide is the senior EHS view of (d)(5): what the rule actually requires, the five stored-energy types that miss most procedures, and the verification step that closes the loop. It pairs with our periodic inspection checklist for audit-day documentation and our conveyor LOTO procedures piece for an equipment-specific example.

What 1910.147(d)(5) Actually Says

Pull the paragraph from the OSHA 1910.147 text and the obligations come into focus fast:

• 1910.147(d)(5)(i): following the application of lockout or tagout devices to energy-isolating devices, all potentially hazardous stored or residual energy shall be relieved, disconnected, restrained, and otherwise rendered safe.
• 1910.147(d)(5)(ii): if there is a possibility of reaccumulation of stored energy to a hazardous level, verification of isolation shall be continued until the servicing or maintenance is completed.

Two operative words. "Relieved" and "verified." The first says do the bleed, the block, the discharge. The second says prove it. A program that names the stored-energy sources but never describes how a worker verifies zero is half a program. An inspector who sees a hydraulic accumulator and no gauge reading on the (d)(6) verification line will write that gap up every time.

The Five Stored-Energy Types That Miss Most Programs

Here is what we see on real plant audits. Five energy types account for the bulk of (d)(5) deficiencies, and three of them are pure mechanical hazards that an electrical-only LOTO program never touches.

1. Hydraulic Accumulators and Trapped Pressure

An accumulator stores hydraulic energy under a charged gas bladder. The whole point is to hold pressure when the pump is off, so locking the pump disconnect does nothing to the accumulator. Press lines, injection molders, and large stampings routinely run accumulators charged to 2,000 to 3,000 PSI. Open the wrong fitting and you get a fluid jet capable of injection injuries that look like puncture wounds and end in surgery.

The compliant sequence is to close the manual isolation valve between the accumulator and the system, then open the bleed-down valve to atmosphere, then watch the gauge fall to zero and hold for at least a full minute. The accumulator drain port is the energy-isolating device for that stored energy and the procedure has to name it specifically. A program that says "bleed accumulator" without naming the valve number and pointing to the gauge is the kind an inspector eats for breakfast.

2. Pneumatic Reservoirs and Trapped Air

Compressed air looks harmless. A 90 PSI shop line trapped in a cylinder can still move a 6-inch bore ram with thousands of pounds of force. After the supply is locked out, the residual air in the FRL, the manifold, and the cylinder rod side has to be vented to atmosphere through a downstream exhaust valve. Then the gauge reads zero. Then the procedure can call the pneumatic side isolated.

Most pneumatic gaps we find come from one of two patterns. The procedure trusts a single ball valve at the supply with no bleed step, which leaves the downstream side fully pressurized. Or the procedure names a bleed step but never specifies the gauge or the pressure target, so the verification is theatrical. Both fail (d)(5)(ii). The fix is a written vent step, a labeled exhaust valve on the schematic, and a gauge reading that the worker initials.

3. Capacitor Banks on VFDs, Motor Drives, and DC Supplies

This is the stored-energy source most likely to kill someone in the next 12 months. Modern variable frequency drives, servo amplifiers, and large DC power supplies carry electrolytic capacitor banks that hold lethal voltage for minutes after the supply disconnect opens. Manufacturer plates on most industrial VFDs cite a wait time of 5 to 15 minutes for the DC bus to drop below 50 volts. Some larger drives need 20 minutes or more.

The program has to do three things. First, the procedure has to call out the wait time per the equipment plate and use it as a floor, not a target. Second, the verification step has to require a meter reading on the DC bus terminals, not a general assumption that "the drive bleeds down." Third, the program has to require qualified electrical workers for the verification step, which folds in NFPA 70E and 29 CFR 1910 Subpart S as well as 1910.147. An EHS program that treats VFDs the same as a standard motor disconnect is not compliant.

4. Springs Under Compression or Tension

Mechanical springs hold stored energy whether power is on or off. Die return springs, valve return springs, compressed gas springs on hoods and tilt tables, and torsion springs on conveyor takeups all behave the same way. Remove the constraint and they release the stored energy at the speed of failure, which is faster than a worker can react.

The compliant approach is to restrain or relieve. Restraint means a mechanical block that captures the spring in its energized state during service. Relief means controlled relaxation, usually with a tooling fixture or the manufacturer's release procedure, so the stored energy comes out at a managed rate. The procedure has to name the restraint or the relief step explicitly and the (d)(6) verification has to confirm the spring is captured or relaxed before any disassembly that exposes the spring path.

5. Gravity and Suspended Loads

Any suspended ram, lift table, die, hoist load, or counterweight is stored energy. The hydraulic or pneumatic hold can fail. A check valve can leak by. A line can rupture. The moment the hold is gone, the load falls at 32 feet per second per second, and a 4,000-pound die set falling 3 inches still arrives with enough kinetic energy to crush a hand.

1910.147(d)(5)(i) calls this out by requiring that the energy be "restrained." On a press, that means safety blocks rated for the slide weight, installed per the OEM procedure, with the block in place verified before any worker reaches under. On a lift table, it means the gravity prop or the mechanical pin. On a hoist load, it means setting the load down on dunnage or removing it from the rigging. Gravity restraint is the easiest stored-energy step to document, and the one most often left to a habit instead of a written rule.

The Verification Sequence That Closes (d)(5)(ii)

The single change that moves most programs from partial compliance to clean (d)(5)(ii) is rewriting the verification step. Generic phrasing like "verify all energy is isolated" is the language that draws citations. Specific phrasing keyed to the equipment is what stands up to an audit. The sequence we build into every machine-specific procedure looks like this:

Build that table into the machine-specific procedure required by 1910.147(c)(4) and the worker has a checklist that closes the loop. The (d)(6) verification box on the LOTO permit becomes a series of initials, one per energy type, instead of a single tick mark that means whatever the worker thought it meant.

What to Look at This Month

Three moves close the most common stored-energy gaps in any 1910.147 program:

1. Pull a sample of five machine-specific procedures from your highest-hazard assets (presses, injection molders, large VFD-driven motors, hydraulic test stands). Confirm each names every stored-energy source by valve number, terminal, or block, with a verification step that produces a measurable reading.
2. Walk the floor with the same five procedures in hand. Confirm the bleed valves, gauges, safety blocks, and capacitor wait times exist in the field exactly as written. The most common mismatch is a valve number on paper that nobody can find at the machine.
3. Update your periodic inspection per 1910.147(c)(6) to test a stored-energy release in real time. Watch a tech bleed an accumulator, vent a pneumatic line, or wait out a VFD discharge while reading the gauge or meter. Document what you watched.

If any of the three exposes a structural gap, that is the call point. ECPL writes machine-specific procedures with full stored-energy coverage, validates them in the field, trains the authorized employees who execute them, and documents the periodic inspection for the file. We work out of Chicago, Detroit, and Indianapolis with national travel. The assessment is free.

Frequently Asked Questions

What does OSHA 1910.147(d)(5) require for stored energy?

1910.147(d)(5)(i) requires that all potentially hazardous stored or residual energy be relieved, disconnected, restrained, or otherwise rendered safe after the energy-isolating devices are locked out. (d)(5)(ii) requires verification that the energy is in fact released. The list is not limited to electrical. Hydraulic accumulators, pneumatic reservoirs, capacitors, springs, suspended loads, and thermal energy all fall under the same paragraph.

How long do you have to wait for a capacitor to discharge?

It depends on the bleeder design. NFPA 70E requires that capacitors above 100 volts on circuits over 600 V have discharge means and that work not begin until verified. On VFDs and large motor drives, the manufacturer plate usually states a wait time of 5 to 15 minutes after the disconnect opens. Treat the plate value as the floor, not the ceiling. Verify with a meter on the DC bus terminals before any contact.

Is bleeding a hydraulic accumulator the same as locking out the pump?

No. Locking the pump motor disconnect stops new hydraulic energy from entering the system. The accumulator can still hold thousands of PSI of stored fluid. (d)(5)(i) requires that stored pressure be relieved before maintenance, which usually means opening a manual bleed-down valve and watching the gauge fall to zero. The accumulator vendor's drain port is the isolating device for that stored energy, not the pump disconnect.

What counts as gravity stored energy on a press or stamping line?

Any suspended ram, slide, die, lift table, or counterweight that can fall when the holding force is removed. (d)(5)(i) treats it as stored energy because the potential energy of the elevated mass is released by gravity the moment the hydraulic, pneumatic, or mechanical hold is gone. Safety blocks, ratchet pins, gravity props, and die-set safety blocks are the restraints OSHA expects in place before anyone reaches under the ram.

Do you need to drain pneumatic lines before maintenance?

Yes when the line or reservoir holds pressure that can drive a cylinder or actuator. The compliant sequence is to close the supply, lock the supply valve, then bleed downstream pressure to zero through a vent valve and confirm on a gauge. A simple ball valve with no bleed-down step leaves the trapped air in the line free to move a cylinder the moment a fitting cracks. (d)(5)(ii) verification means a gauge reading of zero, not an assumption.

Does (d)(5) apply if a machine cycles to a safe state by itself?

Sometimes, and the program has to say so explicitly. If the machine's PLC cycle ends with rams retracted, accumulators vented, and capacitors bled, the procedure can rely on that programmed safe state as the release step, then verify it with gauges and meters. The verification is still required by (d)(5)(ii). Skipping verification because the cycle usually finishes cleanly is the assumption that draws citations and hurts workers.