While three ozone sensors is the golden number, two sensors is also acceptable in an ozonated water system, providing all regulatory protection along with excellent process control. This comes with a caveat, though.
During normal operation, the two sensors will monitor pre-UV destruct and post-UV destruct. The pre-UV destruct sensor provides process control for the ozone generator, and the post-UV destruct sensor provides data showing that no ozone is breaking through the UV destruct.
During sanitization, the post-UV destruct sensor will monitor the loop return. No product is being made while sanitization is taking place and the points of use are closed, so the sensor that would normally monitor for ozone reaching points of use can move to the loop return and serve as the insurance that sanitization levels are met at the end of the loop.
This method is acceptable, and nothing is lost by setting up the ozone system this way. The only consideration is that the sensor must change which stream it is monitoring, either through an engineering control or by having personnel manually switch it. It should also be taken into account that the sensor should not have a long length of tubing between it and the measurement point since ozone’s half-life is so short.