A car seal is a tamper-evident seal, usually a wire or cable and a crimp, applied to a valve to hold it in a required position, either fully open or fully closed, and to make any unauthorized change to that position obvious. It protects the safeguards a facility depends on: relief paths that must stay open, isolation valves that must stay shut, and other process protections whose whole value is that no one quietly moves them. Unlike a temporary maintenance lockout, a car seal governs the standing position of a process valve. This guide explains what car seals do, the CSO and CSC convention, and the seal-register workflow that manages them.
Car Seal in one line: A car seal is a tamper-evident seal placed on a valve to keep it locked in a required open or closed position and to make any change to that position visible. Marked car-seal-open (CSO) or car-seal-closed (CSC), it protects relief paths and process safeguards, and it is tracked in a seal register so the facility can verify every safeguarded valve is in its correct state.
Car seals exist to protect the valves whose position is a safety matter, most importantly the paths to and from pressure relief devices. A relief valve only protects a vessel if the block valve feeding it is open, so that block valve is car-sealed open, and its seal is the evidence that no one has isolated the relief path. Closing that valve without authorization could leave a vessel unprotected against overpressure, which is precisely the outcome the seal is meant to prevent by making any tampering obvious.
The same logic applies to valves that must stay closed. A valve that connects two systems that must remain separated, a bypass that must not be used, or a drain that must stay shut can be car-sealed closed so that opening it is a visible, deliberate act rather than something that can happen unnoticed. In both directions the seal does not physically stop a determined person; it removes deniability, because a broken or missing seal proves the valve's protected position was disturbed.
This is what makes a car seal a safeguard-management tool rather than an operating control. Operators run a plant by opening and closing many valves routinely, but a small set of valves have a correct standing position that the process safety of the facility depends on. Car seals mark that set apart and give them a status that is checked and defended, so a valve whose position matters is not left indistinguishable from the dozens of valves whose position is adjusted every day.
The convention that communicates a sealed valve's required state is CSO and CSC: car-seal-open and car-seal-closed. A valve tagged CSO must remain open and is sealed in the open position; a valve tagged CSC must remain closed and is sealed shut. This marking appears on the valve, on drawings, and in the facility's records, so anyone at the valve or reading the documentation knows not just that it is sealed but which position the seal is protecting. Getting the direction right is essential, since a relief-feed valve sealed shut would defeat the very protection the seal is supposed to guarantee.
Because the safety case depends on every safeguarded valve actually being in its sealed position, the seals are managed through a register. The seal register lists each car-sealed valve, its required CSO or CSC state, its seal number, and its location, and it is the master record against which the field is checked. Periodic verification walks the register, confirming that each valve is in the correct position and that its seal is intact and matches the recorded number, so a broken, missing, or mismatched seal is caught rather than discovered after an incident.
The register also governs authorized changes, because sometimes a car-sealed valve legitimately has to be operated. Changing the position of a sealed valve is a controlled action: it requires authorization, the old seal is cut and its removal recorded, the valve is operated, and a new seal with a new number is applied and logged. This documented cut-and-reseal is what keeps the register truthful, so that at any moment the paperwork reflects the real state of every safeguarded valve and any unauthorized change stands out against it.
A car seal is a physical, visual control, and its classic weakness is that its status is only known when someone is standing at the valve looking at it. Between verification walks, a broken seal or a moved valve is invisible to the control room, and on a remote or unmanned site that blind window can be long. This is where continuous monitoring complements the seal rather than replacing it, by watching for the process consequences of a safeguarded valve being in the wrong state.
A cloud SCADA platform such as Merobix cannot see a wire seal, but it can see the process, and many car-sealed valves guard conditions that show up in the data. Pressures, levels, and flows that behave in a way consistent with a relief path being isolated or a supposed-to-be-closed valve being open give an early, remote signal that something is wrong, prompting a check of the physical seal. The register defines what the correct state is; the monitored process helps catch when reality has departed from it before the next scheduled walk.
The platform also serves the recordkeeping side of seal management. The seal register, verification results, and the authorized cut-and-reseal events are documentation, and holding that alongside the live process history gives an engineer a single place to line up a valve's sealed state against how the system has actually behaved. In an audit or an incident review, being able to show both the seal register and the continuous process record from a browser strengthens the case that the facility's safeguards were maintained and monitored, not just sealed and forgotten.
CSO means car-seal-open, a valve that must remain open and is sealed in the open position, and CSC means car-seal-closed, a valve that must remain closed and is sealed shut. The marking tells anyone at the valve or reading the drawings which position the seal is protecting. Getting the direction right is critical, since sealing a relief-feed valve closed would defeat the protection the seal is meant to guarantee.
Lockout-tagout isolates energy to protect people working on equipment during maintenance and is temporary, applied and removed for a specific job. A car seal is a standing control that holds a process valve in a required open or closed position to protect a safeguard such as a relief path, and it stays in place during normal operation. One protects a maintenance task; the other protects the permanent process configuration.
A car seal register is the master record of every car-sealed valve, listing its required CSO or CSC state, its seal number, and its location. It is used to verify in the field that each safeguarded valve is in the correct position with an intact, matching seal, and to control authorized changes by recording each cut-and-reseal. The register is what lets a facility prove that all of its sealed safeguards are actually in place.
Merobix reads your field devices into a cloud SCADA - the real thing behind these terms, live in days from any browser.