This document is the Functional Safety Manual for the TMS320F2838xD/S MCU series from Texas Instruments which is part of the high performance C2000™ real-time microcontroller product line. The TMS320F2838xD device is based on a dual core CPU architecture with a C28x CPU for each core. Each C28x CPU is referred as CPU1 and CPU2 respectively. In addition, this device contains a connectivity manager based on an Arm® Cortex® M4 CPU. The connectivity manager safety related topics are beyond the scope of this safety manual. The C2000 product line utilizes a common safety architecture that is implemented for multiple products in automotive and industrial applications.