Power converter for supplying an electrical machine with an operating voltage, which power converter comprises one or more half-bridges with circuit breakers (7, 8) for generating AC phases, wherein the circuit breakers (7, 8) can be controlled by a control circuit comprising: - a control logic module, to which a first request line for a request signal predefining a desired operating state of the machine and first sensor lines for first sensor signals (S1-S5) are connected, wherein the control logic module is set up to determine an actual operating state of the machine on the basis of the first control signals (S1-S5) and to generate control signals (TOP-PWM, BOT-PWM) for the circuit breakers (7, 8) on the basis of the actual operating state in order to set the desired operating state, - a monitoring logic module which is connected to a second request line for the request signal and to second sensor lines for second sensor signals (S1'-S5'), wherein the monitoring logic module is set up to determine an actual operating state of the machine on the basis of the second sensor signals (S1'-S5') after expiry of a predefinable waiting time after generating the control signals (TOP-PWM, BOT-PWM), to compare the actual operating state and the desired operating state, and to generate a monitoring logic error signal (ERR 1) if the actual operating state differs from the desired operating state, - at least one safety logic module (16, 17) which is connected to the monitoring logic module by means of a first error line, wherein the safety logic module (16, 17) is set up to modify the control signals (TOP-PWM, BOT-PWM) on the basis of the monitoring logic error signal (ERR 1) in such a manner that supply of the machine with an operating voltage can be stopped, wherein the control logic module and the monitoring logic module are connected to one another by means of a control logic line, wherein the control logic module is connected to the at least one safety logic module (16, 17) by means of a second error line, wherein the monitoring logic module is set up to transmit the actual operating state and/or the second sensor signals (S1'-S5') to the control logic module, and the control logic module is set up to generate a control logic error signal (ERR 2) if signal transmission is not carried out by the monitoring logic module, and wherein the safety logic module (16, 17) is set up to modify the control signals (TOP-PWM, BOT-PWM) on the basis of the control logic error signal (ERR 2) in such a manner that supply of the machine with operating voltage can be stopped. - a control logic module, to which a first request line for a request signal predefining a desired operating state of the machine and first sensor lines for first sensor signals (S1-S5) are connected, wherein the control logic module is set up to determine an actual operating state of the machine on the basis of the first control signals (S1-S5) and to generate control signals (TOP-PWM, BOT-PWM) for the circuit breakers (7, 8) on the basis of the actual operating state in order to set the desired operating state, - a monitoring logic module which is connected to a second request line for the request signal and to second sensor lines for second sensor signals (S1'-S5'), wherein the monitoring logic module is set up to determine an actual operating state of the machine on the basis of the second sensor signals (S1'-S5') after expiry of a predefinable waiting time after generating the control signals (TOP-PWM, BOT-PWM), to compare the actual operating state and the desired operating state, and to generate a monitoring logic error signal (ERR 1) if the actual operating state differs from the desired operating state, - at least one safety logic module (16, 17) which is connected to the monitoring logic module by means of a first error line, wherein the safety logic module (16, 17) is set up to modify the control signals (TOP-PWM, BOT-PWM) on the basis of the monitoring logic error signal (ERR 1) in such a manner that supply of the machine with an operating voltage can be stopped, wherein the control logic module and the monitoring logic module are connected to one another by means of a control logic line, wherein the control logic module is connected to the at least one safety logic module (16, 17) by means of a second error line, wherein the monitoring logic module is set up to transmit the actual operating state and/or the second sensor signals (S1'-S5') to the control logic module, and the control logic module is set up to generate a control logic error signal (ERR 2) if signal transmission is not carried out by the monitoring logic module, and wherein the safety logic module (16, 17) is set up to modify the control signals (TOP-PWM, BOT-PWM) on the basis of the control logic error signal (ERR 2) in such a manner that supply of the machine with operating voltage can be stopped.