A marine loading arm has to move, because the vessel it is connected to rises and falls with the tide, shifts with the wind, and drifts along the berth, and the arm must follow all of that while product flows through it. But an arm can only move so far before it runs out of reach, and going past that limit risks tearing the arm or pulling the connection off the ship. A loading arm position monitor is the system that continuously tracks where the arm is within its safe working range and steps in with alarms and, ultimately, an emergency disconnect before the arm is overstretched. This page explains the encoders and inclinometers that measure arm position, the staged drift alarm and shutdown, how the emergency release coupler fits in, and how the envelope feeds the ESD and SCADA.
Loading Arm Position Monitor in one line: A loading arm position monitor uses encoders or inclinometers on the arm's joints to track its geometry and confirm it is within its safe working envelope as the connected vessel moves. When the vessel drifts far enough that the arm approaches its limit, a first-stage drift pre-alarm warns operators, and a second-stage limit triggers an arm-drift shutdown that stops the transfer and fires the emergency release coupler so the arm parts cleanly before it is damaged. The envelope status feeds the emergency shutdown, and the control system displays the arm's position so operators can see the margin remaining.
A marine loading arm is an articulated structure with swivel joints that let it pivot and extend, and to know where the arm is you have to know the angle of those joints. Position monitoring does this with sensors on the joints: encoders that measure the rotation at a pivot, or inclinometers that measure the tilt of a boom against gravity. From the combination of those joint measurements the system can reconstruct the arm's geometry, which is to say where the connection end of the arm actually is in space relative to the jetty. That reconstructed position is what everything else is built on.
The working envelope is the region of space within which the arm is designed to operate safely. Inside it the arm can pivot and extend to follow the ship without overstressing its joints, its swivels, or the connection. The edges of the envelope are the limits: the point where the arm is nearly fully extended, or twisted, or reaching to the top or bottom of its range. The position monitor's job is to know, continuously, where the arm sits within that envelope and, crucially, how close it is to any edge. It is the difference between an arm that is comfortably in range and one that is a few degrees from its limit.
This continuous geometry tracking is what lets the arm safely follow a moving vessel. As the ship rises with the tide or drifts along the berth, the arm moves with it, and the monitor watches that motion consume the available envelope. Because the sensors report the actual joint positions rather than an assumed state, the system reacts to what the arm is really doing, not to what it should be doing, which is exactly what a safety system tracking real vessel movement needs to do.
Position monitoring is protective because it is staged. The first stage is a drift pre-alarm: when the arm's position reaches a point where it is getting close to the edge of its envelope, the system raises an alarm so operators know the ship is drifting and the arm is running out of margin. This is a warning, not an action, and it exists so the crew can respond, by attending to the moorings, adjusting the transfer, or preparing to stop, while there is still room to recover. Catching drift early is the whole point of the first stage, because a mooring situation is far easier to manage before the arm is at its limit than after.
The second stage is the arm-drift shutdown. If the vessel keeps moving and the arm reaches the point where continuing would take it beyond its safe envelope, the monitor triggers a shutdown that stops the transfer, and it initiates the emergency release. The emergency release coupler, the ERC, is a device in the arm near the connection that can part the arm into two halves on command, with valves on each side that close as they separate, so the arm disconnects from the ship without spilling product. Firing the ERC lets the vessel continue to move away while the arm parts cleanly, rather than the arm being stretched until something breaks uncontrollably.
The sequencing between shutdown and release matters. The transfer is stopped and the relevant valves are closed before or as the arm parts, so the coupler is not separated with product flowing at full rate through it, which is how the ERC delivers a clean, low-spill disconnect. The two stages together, pre-alarm then shutdown-and-release, give a graduated response: a warning with time to act, followed by an automatic protective disconnect if the drift is not arrested. That staging is why the position monitor is a safety system and not just an instrument.
The arm position monitor does not stand alone; its envelope status is wired into the berth's emergency shutdown chain. Reaching the drift limit is one of the conditions that can drive the ESD, so an arm going out of envelope stops the pumps and closes the arm's ESD valve as part of the same coordinated shutdown that other trips invoke, and it commands the ERC. This ties the arm's geometry into the same protective logic that a ship/shore trip or a mooring problem would use, so however the emergency arises, the shutdown of pumps, valves, and the arm connection happens as one sequence rather than as separate reactions.
Displaying the arm's geometry in the control system gives operators the situational awareness the pre-alarm assumes they have. A SCADA or monitoring display can show the arm's position within its envelope, how much margin remains before the drift limit, and the state of the alarms, so the operator watching the transfer sees the ship drifting as it happens rather than being surprised by a pre-alarm out of nowhere. Seeing the margin shrink lets the operator act on the first-stage warning with an understanding of how quickly the situation is developing, which is what makes the warning useful.
For a terminal supervising berths through a cloud monitoring platform, having the arm position, envelope margin, and alarm and release events available remotely and historized is valuable both live and after the fact. During a transfer it lets a supervisor who is not at the berth see how close any arm is running to its limits under the prevailing weather. Afterward, a record of drift pre-alarms and any ERC activations tells the terminal how often the arms approached their limits and whether a particular berth, vessel type, or weather pattern repeatedly pushed the envelope. A platform such as Merobix can retain those events so the arm's behavior across many calls becomes analyzable rather than remembered only as isolated incidents.
It uses sensors on the arm's swivel joints, encoders that measure rotation at a pivot and inclinometers that measure the tilt of a boom, and combines those joint measurements to reconstruct the arm's geometry. From that it knows where the connection end of the arm actually is in space and how close the arm is to the edges of its safe working envelope. Because the sensors report real joint positions, the system reacts to what the arm is truly doing.
The drift pre-alarm is a first-stage warning raised when the arm gets close to the edge of its envelope, giving operators time to address the mooring or stop the transfer while there is still margin. The arm-drift shutdown is the second stage, triggered when the arm reaches its safe limit; it stops the transfer and fires the emergency release coupler so the arm parts cleanly before it is damaged. Together they give a warning followed by an automatic protective disconnect.
The emergency release coupler, or ERC, is a device in the arm near the connection that can part the arm into two halves on command, with valves on each side that close as they separate. Firing it disconnects the arm from the ship without spilling product, letting the vessel move away while the arm parts cleanly rather than being stretched until something breaks. The transfer is stopped and valves closed as the coupler separates, so the disconnect is low-spill.
Merobix reads your field devices into a cloud SCADA - the real thing behind these terms, live in days from any browser.