Interface agreement responsibility matrix
Agree who is responsible for each safety activity and work product between customer and supplier, with approvals, phases and unassigned items flagged.
Quality worksheetsFor membersHow it worksSourcesWhere it helps
Register or sign in to use this tool
The working tool, its inputs and its results are for registered members. Registration is free and takes a minute. You come back to this page afterwards.
How it works
A development interface agreement (DIA) says, for a functional safety project shared between a customer and a supplier, who does which safety activity, who approves it, which work products pass between them and by when. This worksheet builds that list, proposes the usual activities for your ASIL and kind of element, checks that every row has exactly one Responsible party and an Approver, and counts what each side carries.
- Describe the agreement. Name the two parties, the item or element, the target ASIL and the kind of element (hardware built for this customer, software, or a chip or IP built without a known customer). A start date turns the proposed timings into due dates.
- Propose the activities. The proposal is a Hub template of the activities and work products that safety agreements between a customer and a supplier usually list: contacts and plans, the item's safety goals and the requirements allocated to the element, safety mechanisms and interfaces, safety analyses, hardware metrics, dependent failure analysis, verification, confirmation measures, safety case contributions, configuration and change management, and production and field monitoring. ASIL and element kind decide which rows appear: a QM element keeps only the quality items, and the metric, FMEDA, audit and assessment rows start at ASIL B. Every row stays editable.
- Assign roles in RASI form. Each row gives each party one role: Responsible (does the work), Approver (accepts the result), Supports, Informed, or none. A party that both does the work and approves it is shown as R and A. The result is a clear owner for every activity.
a clear row has exactly one Responsible party and at least one Approver - Check the matrix. Rows are flagged when nobody is assigned, when both parties are Responsible, when neither is, and when no one approves. The sheet also looks for topics that no row mentions (for example a safety plan, dependent failure analysis or field monitoring) and counts the roles each party carries, which shows whether the work is balanced.
rows with a problem = unassigned + both Responsible + no Responsible + no Approver - Track it. Each row has a phase, a due date and a status (not started, in progress, delivered, accepted). Rows past their due date and not delivered are counted. Export the sheet as CSV or JSON to attach to the contract or the safety plan.
Assumptions
- The activities are a Hub template written in our own words from how such agreements are commonly laid out; check every row against the parts of ISO 26262 that apply to your item.
- Roles in the template are those of a supplier who builds the element for a customer who owns the item and its safety goals; if you split the work differently, change the cells.
- RASI is a common way of writing responsibilities; the standard asks for the responsibilities to be agreed and documented, not for one notation.
- Dates are ISO dates (yyyy-mm-dd), and the example sheets are invented.
Limits and warnings
- This is not the standard and not a contract: the clause texts, tables and work product lists of ISO 26262 are not reproduced, and a signed agreement also covers confidentiality, liability, escalation and the like.
- Whether a given activity is required at your ASIL (for example the independence of a confirmation review) comes from the standard itself; the template only marks where it usually applies.
- Only the roles and dates are checked. Whether an activity is done well is for the safety manager and the assessor.
- The matrix does not model more than two parties. For a chain with several suppliers, keep one sheet for each interface.
Sources
The methods and default figures rest on these public sources. The wording here is our own; read the source for its full text.
- ISO 26262-8:2018, Road vehicles, Functional safety, Part 8: Supporting processes, clause 5, Interfaces within distributed developments, International Organization for Standardization, second edition, 2018. The requirement to agree responsibilities between customer and supplier. Cited by name, part and clause only; the method here is written in our own words.
- ISO 26262-2:2018, Road vehicles, Functional safety, Part 2: Management of functional safety, International Organization for Standardization, second edition, 2018. Safety management, the safety plan and confirmation measures (confirmation review, audit and assessment). Cited by name and part only.
- ISO 26262, Functional safety (knowledge centre entry) (opens in a new tab), Semiconductor Engineering, undated page, checked October 2026. A public glossary definition of the development interface agreement and its place in ISO 26262-8.
- Distributed Development of IP and SoC in Compliance with Automotive ISO 26262 (white paper) (opens in a new tab), Synopsys, undated page, checked October 2026. A public overview of how agreements define roles, responsibilities and work products between suppliers and integrators of IP and SoCs.
Where it helps
The lifecycle stages this tool serves: 2 stages in 2 lifecycles.
More quality worksheets tools
Terms on this page
- Work product
- A defined output of a development activity, such as a specification, design database, test plan, report or release package, that another team or a later stage uses.
- DIA
- A contract between customer and supplier that divides functional safety responsibilities, listing who produces which work product, review and approval duties, interfaces, and how safety-relevant in...
- Functional safety
- The part of overall safety that depends on a system working correctly in response to its inputs, including detecting and handling its own faults.
- ASIL
- The risk classification assigned to a hazardous event in ISO 26262, ranging from A (lowest) to D (highest).
- Chip
- The everyday word for a finished integrated circuit, used loosely for both the bare die and the packaged part sold to a customer.
- IP
- Intellectual property (IP).
- DFA
- The analysis of failures that defeat claimed independence between elements, covering both common cause failures from a shared root and cascading failures where one element corrupts another.
- Confirmation measures
- The independent checks ISO 26262 requires on a safety project: confirmation reviews of work products, a functional safety audit of the process, and a functional safety assessment of the resulting i...
- Safety case
- The structured argument, supported by the collected work products and evidence, that an item is acceptably safe for its intended use.
- QM
- The ISO 26262 classification for a hazard whose risk is low enough that no safety requirements apply, so the item is developed under an ordinary quality management system instead of the safety life...
- FMEDA
- The quantitative analysis that assigns a failure rate to every hardware part, splits it across failure modes, and credits each safety mechanism with a diagnostic coverage.
- ISO 26262
- The automotive functional safety standard that defines a safety lifecycle for electrical and electronic systems, assigning Automotive Safety Integrity Levels from A to D and prescribing the analysi...
Tell us what you're after and leave your email: we'll connect you with the right person on the Hub.