It is based on the M306AFGTFP step D 16-bit microcontroller by Tokyo-based Renesas Technology Corp. (www.renesas.com) featuring two independent on-chip CAN modules that are used to achieve redundancy. The CAN transceiver and the CAN cable are not redundant. The external circuitry (CAN transceiver, watchdog and the like) is not part of the certification.
The CANopen Safety Chip is a single-processor implementation that is designed for simple sensor and actuator applications, but may also be used as a safety-relevant communication processor for more complex devices.