We follow Part 8 Clause 11. You get a clear process, the right documents, and evidence that stands up in an audit.
See the Process → Talk to UsTraining · Qualification Kit · ASIL A–D
TOOL CONFIDENCE LEVEL · ISO 26262-8 CL.11
Three mistakes derail most ISO 26262 tool qualification efforts: assuming Simulink is already qualified, choosing the wrong qualification method for your ASIL level, and leaving the confidence-level assessment until too late — each avoidable with the right approach.
Many teams assume Simulink is already qualified. It is not. The vendor can provide pre-qualification — but the final qualification must be done in your own environment. That is your responsibility.
Choosing the wrong method for your ASIL level can invalidate your entire safety case. Each TCL level requires a different approach — and the difference matters.
A good process without evidence is still a failed audit. Traceability and clear records are not optional — they are the qualification.
ISO 26262 tool qualification follows five steps: rate the tool's impact (TI), determine how likely errors are to be detected (TD), combine them into a Tool Confidence Level (TCL), select the required qualification method, and produce the evidence — this section walks through each in plain terms.
If the tool can affect your safety case, it has a Tool Impact rating of TI 2. If it cannot, it is TI 1.
TD 1 means you have a high chance of detecting an error. TD 2 is low. TD 3 means no detection is possible at all.
TCL 1 = low risk. TCL 2 = medium. TCL 3 = high.
| TD 1 | TD 2 | TD 3 | |
|---|---|---|---|
| TI 1 | TCL 1 | TCL 1 | TCL 1 |
| TI 2 | TCL 1 | TCL 2 | TCL 3 |
Clear records. Traceable evidence. Audit-ready. Without documentation, none of the above counts.
EverCheck is a static model analysis tool for Simulink, Stateflow and TargetLink. It checks your models for safety compliance — and flags errors before they reach your code.
If it misses a model error, that error can reach your production code.
At ASIL-D, additional reviews and back-to-back testing are required — but they are not always enough to catch a silent tool failure.
For ASIL-D, assume TCL 3 unless you have strong evidence for TD 2.
EverBits provides a pre-qualification package — a safety manual and a qualification kit. This is a strong starting point. But you still need to run the validation tests in your own environment and document the results. That is your qualification.
EverTest — EverBits' dynamic verification tool for Simulink, Stateflow and TargetLink — is also qualifiable, with a safety manual assessed by TÜV SÜD (TCL 3). It ships with the same qualification kit structure, covering test specification, execution and reporting for MIL, SIL and PIL back-to-back testing.
ISO 26262 tool qualification does not have to slow you down. We give you the knowledge, the tools, and the guidance to do it right — from first assessment to final report.
Our training gives your team a clear, practical understanding of ISO 26262 Part 8 Clause 11.
Our qualification kit gives you a ready-to-use starting point.
If you need hands-on support, we work with you directly.
Dynamic model verification for Simulink, Stateflow and TargetLink — with a complete ISO 26262 Qualification Kit included.
Want the workflow behind the evidence? Free self-paced training in ISO 26262 for Simulink, Simulink and Stateflow, plus the EverTest tutorial library.
Over a decade of hands-on experience in ISO 26262 tool qualification — across ASIL A to D projects in the automotive industry.
"We have worked with OEMs and Tier-1 suppliers on programs where getting qualification right was not optional. Our customers do not share their names publicly. Their audits speak for themselves."
Tool Impact, Tool Error Detection and the Tool Confidence Level — the questions that come up most in an ISO 26262 Part 8 Clause 11 assessment.
Tell us about your project. We will help you find the right next step.
Book a Call →No commitment. Just a short conversation.
Or write to us at support@everbits.com