Author: IEM Architects

IMPORTANT DISCLAIMER: This guide references NFPA 101, Life Safety Code; NFPA 72, National Fire Alarm and Signaling Code; NFPA 3 (commissioning of fire protection and life safety systems); NFPA 4 (integrated fire protection and life safety system testing); NFPA 25 (inspection, testing, and maintenance of water-based systems); NFPA 1620 (pre-incident planning); the International Fire Code (IFC); the International Building Code (IBC); ISO 19650 (information management using building information modelling); ISO 16739-1 (Industry Foundation Classes, IFC); ISO/IEC 30173 (digital twin concepts and terminology); and buildingSMART International standards. Digital twin technology and its application to fire safety are evolving rapidly. There are no fire-code requirements for digital twins at this time. The Authority Having Jurisdiction (AHJ) may accept digital twin documentation as part of a fire safety plan, pre-incident plan, or records program, but this is jurisdiction-specific. This guide is a starting point only. Always verify the requirements for your project with your AHJ and a qualified fire protection engineer.

A digital twin is a virtual representation of a physical building, connected to real-time data from sensors, systems, and operations. For fire safety, the twin is not just a 3D model. It is a living model that reflects the current condition of the building, the status of its fire protection systems, and the location of hazards. It lets a facility manager, a fire safety director, or a firefighter see the building as it actually is, not as it was designed.

The term “digital twin” was introduced in the early 2000s for product lifecycle management and has been used in manufacturing and aerospace for years. Its application to fire safety is more recent. The BIM model created during design and construction holds a great deal of information that can be used throughout the building’s life, if it is verified, maintained, and connected to real-time data.

The twin does not replace the physical building, the fire protection systems, or the inspection and testing program. It is a tool that makes the building more legible, more manageable, and safer.

This article covers what a digital twin is, how it supports fire safety, the BIM and data foundation, the real-time connection (and how to protect listed life safety systems), cybersecurity and privacy, simulation, pre-incident planning, inspection and compliance records, and how to build a twin that is accurate, useful, and sustainable.

---

◆ Section 1: What a Digital Twin Is, and Is Not

A. Definitions

Note: Definitions vary between standards and vendors. Some definitions require two-way data flow. For fire protection systems, one-way, read-only data flow is the safe default (see Section 4).

B. What a Digital Twin Is

A digital twin:

• Represents the building’s geometry, systems, and components
• Is connected to real-time or near-real-time data
• Reflects the current state, not just the design state
• Supports decisions on operations, maintenance, and emergency response
• Is maintained and updated over the life of the building

C. What a Digital Twin Is Not

A digital twin is not:

• A 3D model that is not connected to data
• A BIM model that is not maintained after construction
• A replacement for inspection, testing, and maintenance
• A replacement for the fire alarm control unit, annunciator, or other listed equipment
• A guarantee of fire safety
• A code compliance tool

D. The Life Cycle

Key point: A digital twin is a living model connected to data. A 3D model that is not maintained is not a digital twin.

Key Article: Article 157 — Fire Safety in Smart Buildings and IoT Integration

Pro Tip: The value of a twin depends on its accuracy. A model that does not reflect the current building is worse than no model, because it creates false confidence.

---

◆ Section 2: How Digital Twins Support Fire Safety

A. Pre-Incident Planning

The twin gives firefighters a detailed, accurate view of the building before they arrive:

B. Emergency Response

During an incident, the twin can provide:

• Alarm activation location
• Sprinkler flow location
• System status (normal, impaired, in trouble)
• Occupant counts or locations, where permitted
• Access routes

The fire alarm control unit and annunciator remain the authoritative source during an incident. The twin supplements them.

C. Inspection, Testing, and Maintenance

The twin supports ITM by tracking each device’s location and status, recording test results, identifying overdue items, and visualizing deficiencies and impairments.

D. System Performance Analysis

The twin can support simulation of fire and smoke, egress, detection response, and suppression performance.

E. Compliance Documentation

The twin can serve as a repository for as-built drawings, ITM records, deficiency records, and impairment records. Whether digital records satisfy the AHJ is a local decision, so confirm it.

Key point: The twin supports fire safety across the building’s life: pre-incident planning, response, ITM, performance analysis, and records.

Pro Tip: Start with the use case that addresses your biggest challenge. If pre-incident planning is the priority, build for that first.

---

◆ Section 3: The BIM and Data Foundation

The twin is built on a BIM model and a structured asset database. The quality of that foundation determines the quality of the twin.

A. Standards

B. Fire Protection Content in the Model

The model should include:

• Sprinkler and standpipe layouts and components, including control valves
• Fire alarm devices and panels
• Fire pump, controller, and tank locations
• Fire protection equipment rooms
• Fire-rated assemblies, smoke barriers, and fire dampers
• Means of egress, including areas of refuge
• Hazardous material locations
• Firefighter access features

Define the level of information need for each element (ISO 19650). A sprinkler head needs a unique ID, location, type, and ITM history. It does not need the detailed geometry of a fire pump casing.

C. Unique Identifiers and Naming

Every device and asset needs a unique ID that is the same in the BIM model, the asset database, the ITM records, and the field label. Without consistent IDs, the real-time data cannot be matched to the model.

D. Accuracy and Existing Buildings

For new buildings, accuracy comes from as-built verification, change management, and quality control. For existing buildings, where most fire safety work happens, the model may not exist or may be out of date. Reality capture (laser scanning or photogrammetry, then “scan-to-BIM”) can create or verify the model. Field verification of fire protection devices is still required.

E. COBie Handover

COBie (Construction Operations Building Information Exchange) is a data format for handing over equipment and asset data from construction to operations. It can populate the twin’s asset register.

Key point: The BIM model and asset data are the foundation. They must be accurate, uniquely identified, and maintained.

Key Article: Article 75 — How to Integrate Fire Safety with Building Information Modeling (BIM)

Pro Tip: Specify twin requirements in the BIM Execution Plan and the owner’s information requirements: which systems, which data fields, which IDs, and which update procedures.

---

◆ Section 4: The Real-Time Connection

The connection to live data is what distinguishes a twin from a static model. It is also the part that carries the most risk for life safety systems.

A. Data Sources

B. Data Architecture

The integration requires:

• A data platform (cloud or on-premises)
• Interfaces to source systems (commonly BACnet, Modbus, OPC UA, or vendor APIs)
• A consistent data model (for example, tagging by device ID and type)
• Data normalization and validation
• Access control and logging

C. Protecting Listed Fire Protection Systems

This is the most important design rule in this article.

• Do not compromise the fire alarm or suppression system. Fire alarm systems are listed systems (UL 864 and NFPA 72 in the U.S.). Connecting third-party software to them must not degrade their operation or listing.
• Use read-only connections. Use manufacturer-approved gateways or interfaces, or one-way mechanisms such as data diodes. Do not allow the twin to send commands to life safety systems unless the system is listed and designed for it.
• Failure of the twin must not affect the system. If the platform, network, or cloud service goes down, the fire alarm and suppression systems must operate normally.
• Coordinate with the system manufacturer and the AHJ before connecting.
• Keep the connection under change control. Firmware updates and panel reprogramming can break or alter the interface.

D. Data Quality

Typical problems are incomplete, inaccurate, delayed, or missing data (during outages), uncalibrated sensors, and mismatched IDs. Validate the data before relying on it. Display a timestamp and “last updated” status on every live data point, so users can tell stale data from current data.

E. Degraded Modes and Offline Access

The twin must be usable when things go wrong. Firefighters and facility staff need:

• An offline or cached copy of the twin and pre-incident plan (for example, on a tablet or in a fire command center)
• A printed or otherwise independent backup of key information (floor plans, riser locations, FDC)
• Clear indication when live data is unavailable

Key point: The connection makes the twin a twin, but it must be read-only toward life safety systems, validated, timestamped, and designed to fail safely.

Pro Tip: Start with a few data sources. Verify quality before expanding.

---

◆ Section 5: Cybersecurity and Privacy

A. Cybersecurity

The connection to fire protection systems adds attack surface (Article 157). Basic measures:

• Network segmentation between the twin platform and life safety networks
• Read-only or one-way interfaces to life safety systems
• Encryption of data in transit and at rest
• Role-based access control, multi-factor authentication, and audit logs
• Vendor security requirements and patch management
• Alignment with recognized frameworks (for example, IEC 62443 for industrial and building control systems, UL 2900-1 for product cybersecurity, and the NIST Cybersecurity Framework)
• Incident response procedures that cover the twin platform

B. Sensitive Building Information

A detailed model of a building is sensitive. It shows egress, security, and critical systems. Define who can see what, how data is shared with the fire department, and how it is protected in transit and storage.

C. Privacy

Occupant tracking and video raise privacy and legal issues. Requirements vary by jurisdiction and may include data protection and employment laws. Practical steps:

• Collect only what the fire safety use case needs (for example, counts by zone rather than named individuals)
• Define purpose, retention, and access
• Consult legal counsel and, where applicable, employee representatives before deployment

Key point: Cybersecurity and privacy are design requirements, not afterthoughts.

---

◆ Section 6: Simulation Capabilities

A. Fire and Smoke Simulation

Fire models (for example, FDS and CFAST, both from NIST) predict fire growth, smoke movement, temperature, visibility, and toxicity.

B. Egress Simulation

Egress models (for example, Pathfinder and STEPS) predict occupant movement, exit usage, evacuation time, and bottlenecks.

C. System Response Simulation

Models can predict detection response, sprinkler activation, smoke control performance, and notification coverage.

D. Use Cases

E. Limitations

Simulation is a model, not reality. Most fire and egress simulations run offline on a specified scenario. They are not predicting a live fire in real time. Results depend on:

• Input data and assumptions (fire size, growth rate, occupant behavior)
• The suitability of the model for the scenario
• Verification and validation of the model and software (for example, ASTM E1355 addresses evaluating the predictive capability of deterministic fire models)
• The expertise of the analyst

Key point: Simulation supports decisions. It does not make them. A qualified fire protection engineer must interpret the results, and performance-based design must be accepted by the AHJ.

Pro Tip: Document assumptions and keep the simulation inputs linked to the model, so the analysis can be updated when the building changes.

---

◆ Section 7: Pre-Incident Planning and Fire Department Integration

A. What Pre-Incident Planning Is

Pre-incident planning is gathering information about a building before an incident, so that responders can act effectively. NFPA 1620 provides the standard framework for it.

B. The Twin Advantage

The twin can provide accurate geometry, system locations and status, hazards, access points, and utility shutoffs, in a form that is easier to keep current than paper plans.

C. Integration with Fire Department Systems

The twin can feed, or be linked to:

• Computer-aided dispatch (CAD)
• Mobile data terminals and tablets
• Pre-incident plan databases

Agree on data formats and exchange methods with the fire department. They may use specific platforms.

D. What Firefighters Need

Information must be accurate, current, accessible, and actionable. A simple, clear view often beats a complex 3D model. Typical needs are:

• Building address, access, and key box location
• Riser and FDC locations, standpipe connections, and pump room
• Alarm panel location and annunciator
• Stair and elevator layout, areas of refuge, and rated shafts
• Hazards and utility shutoffs
• Current impairments

E. Keeping the Plan Current

Define triggers for updating the pre-incident plan: renovations, occupancy changes, hazard changes, and system impairments. Review it on a set schedule and after drills.

Key point: Pre-incident planning is one of the most valuable uses of the twin, but only if the fire department helps define it and can use it under real conditions, including without network access.

Key Article: Article 69 — How to Design Firefighter Access and Building Features for Rescue Operations

Pro Tip: Involve the fire department from the start. Their needs determine what data to include and how to present it.

---

◆ Section 8: Inspection, Testing, Maintenance, and Records

A. ITM Support

The twin can link each device to its ITM schedule and history (NFPA 25 for water-based systems, NFPA 72 for fire alarm systems), show overdue items, and record results from mobile inspections.

B. Impairment Management

When a system is impaired, the twin can show the impaired zone, start the impairment notification process, and track restoration. It supports the impairment program but does not replace it.

C. Deficiency Tracking

Link deficiencies to a device and location in the model. Track corrective action to closure.

D. Records

Many codes require records to be kept for specified periods and to be available to the AHJ. If records live in the twin:

• Confirm that the AHJ accepts electronic records and the format
• Use controlled, tamper-evident storage with backups
• Keep records retrievable even if the twin platform changes or the vendor goes away

E. Predictive Maintenance

Trend data (for example, pump run times, repeated trouble signals, or pressure drift) can flag components that are likely to fail. Use it as an addition to required ITM, not a substitute.

Key point: The twin makes ITM easier to manage and verify, but required inspection, testing, and maintenance still have to be performed as the code requires.

---

◆ Section 9: Building and Maintaining a Digital Twin

A. The Build Process

B. Maintenance Triggers

Update the twin when systems are modified, the building is renovated, equipment is replaced, or data sources change. Tie updates to your management of change process and to renovation permits, so that the twin is not forgotten (NFPA 241 applies to construction and alteration safeguards).

C. Governance and Ownership

Define who owns the twin, who updates it, who has access, how changes are approved, and how data is retained. Assign ownership to a specific role. An unowned twin will not be maintained.

D. Cost, Value, and Sustainability

Estimate both build and ongoing costs (licenses, sensor and integration upkeep, staff time). Define metrics that show value, for example:

• Time to find information or equipment
• Percentage of devices with current ITM records
• Number of overdue inspections
• Pre-incident plan accuracy at drills
• Response and drill outcomes

Insurers or the fire department may value some of these, but do not assume any code credit or premium reduction without confirmation.

E. Open Standards and Vendor Lock-In

Require open formats (IFC, COBie, open APIs) and a data export capability, so the data stays usable if the platform changes.

Key point: The twin is not a one-time project. It is a living system that needs ongoing maintenance and governance.

Pro Tip: Start with a pilot: one building, a few systems, and a defined use case. Demonstrate value, then expand.

---

◆ Section 10: Common Challenges and Mistakes

Key point: Most twin failures are governance and maintenance failures, not technical ones. The twin is built but not maintained, or the data is never validated.

---

◆ Section 11: Design Checklist

---

◆ Section 12: Conclusion

A digital twin is a virtual representation of a physical building, connected to data, and used to support decisions about the building. For fire safety, it supports pre-incident planning, emergency response, inspection and maintenance, performance analysis, and records.

The critical elements are:

• BIM and data foundation: accurate, uniquely identified, and maintained
• Real-time connection: validated, timestamped, and read-only toward life safety systems
• Cybersecurity and privacy: designed in from the start
• Simulation: used to support engineering judgment
• Pre-incident planning: built with the fire department, usable offline
• Governance and maintenance: clear ownership and update triggers

The most common failure is treating the twin as a one-time project. A twin that is not maintained becomes obsolete, and an inaccurate twin is worse than none.

Key Takeaways:

• A digital twin is a virtual model connected to data. A 3D model alone is not a twin.
• The BIM model and asset data are the foundation and must be accurate and maintained.
• The data connection must never compromise listed fire alarm or suppression systems.
• The twin must still be usable when the network is down.
• Simulation supports decisions but does not replace engineering judgment.
• Pre-incident planning is among the most valuable uses; engage the fire department early.
• Cybersecurity, privacy, governance, and maintenance are essential.
• The twin supports ITM and records but does not replace required inspection and testing.
• Start small, demonstrate value, then expand.

Take Action Today:

1. Define the use cases and success metrics.
2. Assess the BIM model and asset data; plan field verification.
3. Identify data sources and how they will connect safely.
4. Agree on a read-only interface approach with the system manufacturers and the AHJ.
5. Design the data architecture, cybersecurity, and privacy measures.
6. Engage the fire department on requirements and offline access.
7. Confirm AHJ acceptance of digital documentation.
8. Define governance, ownership, and change triggers.
9. Estimate build and ongoing costs.
10. Plan a pilot with one building and a few systems.
11. Document lessons learned and expand.

Continue Reading from Our Series:

• Related guide: Article 157 — Fire Safety in Smart Buildings and IoT Integration
• Related guide: Article 75 — How to Integrate Fire Safety with Building Information Modeling (BIM)
• Related guide: Article 69 — How to Design Firefighter Access and Building Features for Rescue Operations
• Read more: Article 159 — Drone and Robotics Applications in Fire Safety (planned)

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and a qualified fire protection engineer for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references NFPA 101, Life Safety Code; NFPA 72, National Fire Alarm and Signaling Code (including supervising station, communication path, and remote connectivity provisions); NFPA 4, Standard for Integrated Fire Protection and Life Safety System Testing; NFPA 3, Standard for Commissioning of Fire Protection and Life Safety Systems; NFPA 25 (inspection, testing, and maintenance of water-based systems); NFPA 70 (National Electrical Code); the International Fire Code (IFC); the International Building Code (IBC); UL 864 (Control Units and Accessories for Fire Alarm Systems); UL 2572 (Mass Notification Systems); UL 2900-1 (Software Cybersecurity for Network-Connectable Products); IEC 62443 (Industrial Automation and Control Systems Security); ISO/IEC 27001 (Information Security Management Systems); the NIST Cybersecurity Framework; and the requirements of the Authority Having Jurisdiction (AHJ), the insurer, and the IT security team. Smart building and IoT requirements are evolving rapidly. Some AHJs have specific requirements for remote monitoring and cloud-connected fire alarm systems; others do not. Cybersecurity requirements vary by jurisdiction and by the organization’s IT policies. Section numbers and requirements cited here follow the model codes and standards and may differ in your adopted edition. Local amendments and the edition adopted by your AHJ always control. This guide is a starting point only. Always verify the requirements applicable to your project with your AHJ, your insurer, and your IT security team.

Smart buildings are characterized by connected systems: HVAC, lighting, security, access control, elevators, and increasingly, fire protection. The promise of the smart building is that systems work together, that data flows between them, and that the building is more efficient, more comfortable, and safer as a result. The reality is more complex, especially for fire protection.

Fire safety in smart buildings is the discipline of connecting fire protection systems to building networks without compromising their reliability, their code compliance, or their cybersecurity. The fire alarm system is no longer a standalone panel; it may be connected to a cloud platform, integrated with building automation, monitored from a remote location, and supplemented by IoT sensors. Each of these connections introduces benefits and risks.

The benefits are real. Real-time monitoring can detect impairments faster, data analytics can identify trends, and integration can improve emergency response. But the risks are also real. A cyberattack on a connected fire alarm system could disable detection or notification. A network outage could interrupt remote monitoring. An integration error could cause the system to respond incorrectly. The fire protection system is a life safety system, and it must remain functional even when the network is not.

This article covers the integration models, the benefits and risks, the role of IoT devices, cybersecurity, the code and standards framework, integration testing, data analytics, operations and lifecycle management, and how to design smart building fire protection that is both connected and reliable.

Section 1: What Smart Building Integration Means for Fire Protection

Smart building integration for fire protection takes several forms, each with different benefits and risks.

Model	Description	Benefits	Risks
Standalone	Fire alarm panel not connected to other systems	Highest reliability; no network dependency	Limited data; manual monitoring
Monitored (traditional)	Panel connected to a supervising station via cellular, IP, or radio path	Remote monitoring; dispatch	Communication path dependency
Building automation integration	Panel shares data with the BAS	Coordinated response; data visibility	Integration errors; BAS failure
Cloud-connected	Panel or gateway connected to a cloud platform	Remote diagnostics; analytics; mobile alerts	Cybersecurity; network dependency
Full integration	Multiple systems share data and control	Optimized response; continuous monitoring	Complexity; cascading failures

A. The Core Tension

The core tension in smart building fire protection is between connectivity and reliability. Every connection is a potential failure point. The more connected the system, the more benefits it provides, and the more failure modes it has.

B. The Life Safety Constraint

Fire protection systems are life safety systems. They must function when the network is down, when the power is out, and when the building is under stress. A connected system that depends on the network to function is not a reliable life safety system.

C. Supervising Station Monitoring vs. Cloud Connectivity

Two things are often confused. Supervising station monitoring (NFPA 72, Chapter 26) is the code-required transmission of alarm, supervisory, and trouble signals to a listed or approved supervising station, using approved communication paths. Cloud connectivity is typically an added service for diagnostics, analytics, and mobile notifications. Unless the AHJ has approved it as part of the required signaling path, a cloud platform is a supplement, not a substitute, for supervising station monitoring.

D. Communication Paths

The communication path is where many smart-building projects succeed or fail. Traditional copper telephone lines are being retired by carriers, and older cellular technologies have been sunset, which has left many legacy communicators unable to transmit. When designing or upgrading:

• Use communicators and paths permitted by NFPA 72 and the AHJ (IP, cellular, radio, or approved combinations).
• Provide redundancy: a second, independent path where required or where reliability demands it.
• Confirm supervision of the path, so a failed connection produces a trouble signal.
• Plan for carrier technology changes; a communicator that works today may not work after the next network retirement.

Key point: The fire protection system must remain functional independently of the network. Connectivity is an enhancement, not a dependency.

Key Article: Article 146, Integrated Testing of Fire and Life Safety Systems

Pro Tip: For every connected fire protection system, ask: “What happens if the network fails?” If the answer is “the system stops working,” the design needs to change.

Section 2: The Benefits of Smart Integration

Smart building integration offers real benefits when it is designed and implemented correctly.

A. Faster Detection of Impairments

Connected systems can report impairments (closed valves, trouble signals, battery faults) to a monitoring platform in real time, so they can be addressed faster than with periodic inspection alone.

B. Data Analytics

Data from fire protection systems can reveal trends such as repeated trouble signals on a specific device, gradual changes in water pressure, and patterns of alarm activations. Analytics can identify issues before they become failures.

C. Remote Diagnostics

Technicians can diagnose issues remotely, reducing response time and improving first-time fix rates.

D. Improved Emergency Response

Integration with building systems can improve emergency response: elevators recall automatically, doors release for egress, HVAC responds to prevent smoke spread, and mass notification activates.

E. Compliance and Documentation

Connected systems can generate ITM records automatically, reducing administrative burden and improving record completeness.

Key point: Smart integration offers faster impairment detection, data analytics, remote diagnostics, improved response, and automated documentation.

Pro Tip: Start with the benefits that address your biggest challenges. If impairment detection is a problem, focus on that; if documentation is a problem, focus on that.

Section 3: The Risks of Smart Integration

Every connection introduces risk. The risks must be identified and managed.

A. Cybersecurity Risks

Risk	Consequence
Unauthorized access	Attacker disables detection or notification, or triggers false alarms
Malware or ransomware	System compromised; false alarms or silence; loss of records
Data breach	Building data exposed; privacy violation
Denial of service	System or monitoring unavailable when needed
Compromised vendor access	Attacker reaches the system through a contractor or cloud provider

B. Network Dependency

If the fire alarm system depends on the network to function, a network outage is a fire protection outage.

C. Integration Errors

Integration between systems can introduce incorrect data mapping, conflicting control sequences, timing issues, and cascading failures.

D. Vendor Lock-In and Obsolescence

Proprietary systems can lock the owner into a single vendor for maintenance, upgrades, and support. Connected systems may also become obsolete faster than standalone systems, since software, hardware, and vendor support are ongoing requirements.

E. False Alarms and Alert Fatigue

More data means more alerts. If operators receive too many low-value notifications, they begin to ignore them, and a real impairment can be missed.

F. Regulatory Uncertainty

Some AHJs have specific requirements for connected systems; others do not. The regulatory landscape is evolving.

Key point: Smart integration introduces cybersecurity, network dependency, integration error, vendor lock-in, obsolescence, alert fatigue, and regulatory risks. Each must be identified and managed.

Pro Tip: Include cybersecurity in the fire protection design review. The fire alarm system is a life safety system and must be protected accordingly.

Section 4: IoT Devices and the Listed Fire Protection System

The “internet of things” brings low-cost wireless sensors, smart valves, and connected devices into buildings. They can add useful data, but they are not the same as listed fire protection equipment.

A. Listed vs. Non-Listed Devices

Detection, notification, and supervisory devices that satisfy a code requirement must be listed for fire alarm service and installed in accordance with NFPA 72 and the manufacturer’s listing. A general-purpose IoT smoke, heat, temperature, or water sensor is typically not listed for this purpose.

Use	Acceptable approach
Code-required detection or notification	Listed devices connected to the listed fire alarm control unit
Valve and water flow supervision	Listed supervisory switches and waterflow devices; IoT sensors may add data but do not replace them
Early warning, trending, or operational awareness	IoT sensors as a supplement, clearly separated from the life safety system
Wireless devices within the fire alarm system	Listed wireless devices, with the signal strength and battery supervision NFPA 72 requires

B. Rules for Integrating IoT Data

• IoT data should not be the only means of detecting a fire or an impairment where the code requires listed devices.
• A failure of an IoT sensor or platform must never cause the fire alarm system to fail, alarm falsely, or silence.
• Data from non-listed devices should enter the fire alarm system, if at all, only through approved interfaces and with AHJ acceptance.
• Document clearly which devices are life safety and which are supplemental, so that inspectors, operators, and future designers do not confuse them.

C. Emerging Technologies

Video-based flame and smoke detection, AI-assisted analytics, and digital twins are expanding quickly. Where they are used for code-required detection, they must be listed and accepted by the AHJ. Where they are used for situational awareness, they should be designed as supplements. See the planned Article 158 on digital twins for fire safety management.

Key point: IoT sensors can enrich the picture, but listed devices remain the basis of the life safety system.

Pro Tip: Label every device and data point as “life safety” or “supplemental” in the design documents and the monitoring platform.

Section 5: Integration with Other Building Systems

Integration with BAS, access control, elevators, and mass notification is where most smart-building benefits, and many failures, occur.

A. Control Direction

The fire alarm system should control the other systems, not the reverse. In general:

• Signals flow from the fire alarm system to the BAS for monitoring and for coordinated responses.
• Commands from the BAS to the fire alarm system (such as remote silence or reset) should be avoided unless the listing and the AHJ allow them.
• Data-only gateways (for example, read-only BACnet or Modbus interfaces) are preferred for monitoring.
• Smoke control systems must use equipment and sequences listed and tested for that purpose; they should not be handled as ordinary BAS points.

B. Access Control and Egress

Electrically locked egress doors must release on fire alarm activation and on loss of power, in accordance with NFPA 101 (§7.2.1.5 and §7.2.1.6) and the IBC. Security “lockdown” functions must be coordinated so they never prevent egress required by the code. This interface must be tested, not assumed.

C. Elevators

Elevator recall and shunt trip interfaces are governed by ASME A17.1 and NFPA 72, and must be tested with the elevator contractor present.

D. Mass Notification

Mass notification systems (UL 2572; NFPA 72, Chapter 24) may share infrastructure with fire alarm systems. Priority rules must make sure a fire alarm message is never overridden by a lower-priority message.

E. Network Power and Pathways

If network equipment (switches, media converters, gateways) carries fire alarm signals, it becomes part of the fire alarm pathway. It must meet the NFPA 72 requirements for secondary power, supervision, pathway survivability, and installation (NFPA 70, Article 760 for fire alarm circuits). Standard office-grade network gear on a general building UPS typically does not meet these requirements.

Key point: Treat every interface as a life safety interface: define the direction of control, the failure behavior, and the test.

Pro Tip: Document each interface in a sequence-of-operations matrix that shows what happens when either side fails.

Section 6: Cybersecurity for Fire Protection Systems

Cybersecurity is the most significant new risk introduced by smart building integration.

A. The Standard Framework

Standard	Scope
UL 2900-1	Software cybersecurity for network-connectable products
IEC 62443	Security for industrial automation and control systems (zones, conduits, security levels)
ISO/IEC 27001	Information security management systems
NIST Cybersecurity Framework	Risk-based cybersecurity framework

B. The Design Principles

Principle	Application
Least privilege	Users have only the access they need
Network segmentation	Fire alarm system isolated from the general building network
Encryption	Data encrypted in transit and at rest where supported
Authentication	Strong, multi-factor authentication for all remote access; no default credentials
Monitoring and logging	Continuous monitoring and audit logs of access and configuration changes
Patch management	Controlled updates for known vulnerabilities
Backup and recovery	Offline backups of panel programming and configuration
Incident response	Plan for responding to a cyber incident

C. Network Segmentation

The fire alarm system should be isolated from the general building network, ideally on a dedicated network or a firewalled segment (not simply a shared VLAN). Where data must leave the fire alarm network, use a controlled gateway that limits what can pass, and consider a one-way (read-only) path for monitoring. This limits the attack surface and prevents lateral movement from a compromised system.

D. Remote Access

Remote access is the most common route for attackers and also one of the most valuable features for technicians. Control it:

• Distinguish remote viewing and diagnostics from remote control and programming. Remote programming, silencing, and resetting should be allowed only where the listing, the AHJ, and the owner’s policy permit.
• Use secure, encrypted access with multi-factor authentication, per-user accounts, and time-limited vendor access.
• Log every session and review the logs.

E. Third-Party and Supply Chain Risk

Vendors, cloud providers, and central stations are part of the attack surface. Contracts should address security requirements, breach notification, data ownership, software updates, and what happens if the vendor ends support or goes out of business.

F. Cyber Incident Response

The response plan should define who is notified, how the system is verified after an incident, and how fire safety is maintained in the interim (for example, impairment procedures and a fire watch if protection is compromised).

G. The AHJ’s Role

Some AHJs require that the connection be approved, that the fire alarm equipment be listed, or that specific cybersecurity measures be taken. Others have no specific requirements. The AHJ’s interpretation determines the compliance path.

Key point: Cybersecurity is a life safety issue for connected fire protection systems. The design must include segmentation, authentication, monitoring, backups, and incident response.

Pro Tip: Include the IT security team in the fire protection design review. The fire alarm system must be protected to the same standard as other critical systems.

Section 7: The Code and Standards Framework

Smart building integration for fire protection is governed by a combination of fire codes, electrical codes, and cybersecurity standards.

A. NFPA 72

NFPA 72 establishes requirements for fire alarm systems, including supervising station and remote monitoring (Chapter 26), communication paths, pathway survivability, secondary power, documentation, and reacceptance testing after software or hardware changes. Recent editions have expanded provisions on communication methods and connectivity. Confirm exactly what your adopted edition says before relying on any cloud or remote function.

B. UL 864 and Listing

UL 864 is the standard for fire alarm control units and accessories. Equipment that performs fire alarm functions, and the communicators and gateways that carry its signals, must be listed for that purpose. Listing of the fire alarm control unit does not by itself prove the cybersecurity of a connected platform.

C. UL 2900-1 and IEC 62443

UL 2900-1 evaluates the cybersecurity of network-connectable products. IEC 62443 addresses security for systems and networks. Specify them, or an equivalent, for connected products and ask vendors for evidence of conformity.

D. NFPA 70

The National Electrical Code governs wiring, including fire alarm circuits (Article 760) and communications cabling. Fire alarm and general network cabling must be installed and separated as the code requires.

E. The IFC and IBC

The IFC and IBC establish the general requirements for fire protection systems, including monitoring of required fire alarm systems (IFC §907.6.6) and impairment procedures. They may include provisions for remote monitoring and connected systems.

F. The AHJ’s Requirements

The AHJ determines the specific requirements for connected systems in its jurisdiction. Some AHJs require approval of the connection; others require specific cybersecurity measures.

Key point: NFPA 72, listing requirements, UL 2900-1, IEC 62443, and the AHJ’s requirements together determine the compliance path.

Pro Tip: For any connected fire protection system, verify the listing and the AHJ’s requirements before design. The compliance path is not always clear.

Section 8: Integration Testing and Commissioning

Integrated systems must be tested as a system, not as individual components. The integration is where failures occur.

A. The Test Scope

Test	Purpose
Component testing	Verify each component functions
Interface testing	Verify data flows correctly between systems
Sequence testing	Verify the correct sequence of operations
Failure testing	Verify the system responds correctly to failures
Cybersecurity testing	Verify the system resists attack

B. NFPA 3 and NFPA 4

NFPA 3 addresses commissioning of fire protection and life safety systems, and NFPA 4 addresses integrated testing of those systems. Together they call for a commissioning and integrated test plan, test procedures, acceptance criteria, qualified personnel to lead the integrated tests, and documentation. Cybersecurity verification is generally outside the scope of NFPA 4, so it should be specified separately (for example, against UL 2900-1 or IEC 62443) and coordinated with the integrated test plan.

C. The Failure Scenarios

Integration testing should include failure scenarios:

• What happens if the network fails?
• What happens if the BAS fails?
• What happens if the cloud platform or supervising station path is unavailable?
• What happens if primary power is lost and the system runs on standby power?
• What happens if a cyberattack or credential compromise occurs?

The system should respond correctly to each failure, and the supervising station and the building operators should receive the correct trouble signals.

D. Retesting After Changes

Software and firmware updates, new integrations, and network changes can alter system behavior. NFPA 72 requires reacceptance testing after modifications, and the extent depends on the change. Build a change-control process so that no update to a connected component is applied without evaluating what must be retested.

Key point: Integration testing verifies that the system works as a system. The test must include failure scenarios, not just normal operation, and must be repeated when the system changes.

Key Article: Article 146, Integrated Testing of Fire and Life Safety Systems

Pro Tip: Include failure scenarios in the integration test plan. The system’s response to failure is as important as its normal operation.

Section 9: Data Analytics and Predictive Maintenance

Connected fire protection systems generate data that can support predictive maintenance.

A. The Data Sources

Source	Data
Fire alarm panel	Trouble signals, alarm history, device status
Sprinkler system	Pressure, flow, valve position
Fire pump	Run status, pressure, flow
Inspection records	ITM results, deficiencies
Environmental sensors	Temperature, humidity

B. The Analytics

Analysis	Purpose
Trend analysis	Identify gradual changes
Pattern recognition	Identify recurring issues
Anomaly detection	Identify unusual events
Predictive maintenance	Predict failures before they occur

Used well, analytics can reduce unplanned failures, extend equipment life, improve compliance, and lower maintenance costs.

C. The Limitations

Data analytics is not a substitute for inspection. The data is only as good as the sensors that generate it, and the analytics must be validated against actual conditions. NFPA 25 and the IFC still require physical inspection, testing, and maintenance, and the required ITM frequencies and records are not reduced because a system is connected, unless the AHJ explicitly accepts an alternative.

D. Data Governance and Privacy

Fire protection data may include building layouts, occupant patterns, and system weaknesses. Define who owns the data, where it is stored, who can access it, how long it is retained, and how it is deleted. Confirm that any cloud provider’s terms are consistent with the owner’s policies and applicable privacy and records-retention requirements.

Key point: Data analytics can improve maintenance and compliance, but it does not replace inspection. The data supports the inspection; it does not replace it.

Pro Tip: Start with a small pilot. Use the data from a few systems to validate the analytics before expanding.

Section 10: Operations, Impairments, and Lifecycle Management

A well-designed connected system still fails if no one is responsible for it. Operations is where long-term reliability is won or lost.

A. Roles and Responsibilities

Define who receives alerts, who responds, and who has authority to act. Fire protection, facility management, IT, the fire alarm contractor, and the central station each have a role; gaps between them are where signals get lost. Document an escalation path for after-hours alerts.

B. Alert Management

Tune alert thresholds so that operators receive meaningful, prioritized notifications. Separate life safety alarms and impairments from routine analytics notices. Review alert history periodically to remove noise.

C. Impairment Procedures

A connected platform may report an impairment faster, but the response is still governed by the impairment program in NFPA 25 (Chapter 15), NFPA 72, and IFC §901.7: notify the AHJ and insurer as required, implement a fire watch or other interim measures where needed, and restore the system promptly. A cyber incident that compromises the system should be treated as an impairment.

D. Software, Firmware, and Hardware Lifecycle

• Keep an inventory of connected devices, software versions, and support end dates.
• Apply updates through a controlled process with testing and rollback plans.
• Plan and budget for replacement before vendor support ends.
• Retain current backups of panel programming, network configuration, and as-built documentation.

E. Training

Train operators, security staff, and facility personnel on what the system does, what the alerts mean, and what to do when the network or platform is unavailable.

Key point: Reliability depends on clear responsibility, controlled change, and a plan for the whole life of the system.

Pro Tip: Write a one-page “what to do when the network or the platform is down” procedure and post it where operators can find it.

Section 11: Implementation Roadmap

Implementing smart building integration for fire protection requires a phased approach.

Phase	Activities
1. Assess	Identify current systems, integration opportunities, and risks
2. Define	Define the integration scope, benefits, and requirements
3. Design	Design the integration architecture, cybersecurity, and testing
4. Select	Select vendors and products that meet the requirements
5. Test	Test the integration, including failure scenarios
6. Deploy	Deploy with monitoring and support
7. Operate	Operate, monitor performance, and improve

A. The Pilot Approach

For organizations new to smart integration, a pilot is recommended. Start with a single building or a single system, learn from the experience, and then expand.

B. Procurement and Contract Considerations

• Require open, documented protocols and interfaces to reduce vendor lock-in.
• Require evidence of listings and cybersecurity conformity (UL 864, UL 2900-1, IEC 62443 or equivalent).
• Define service levels, support life, and security update commitments.
• Define data ownership, access, and an exit plan if the vendor or platform is replaced.
• Specify who is responsible for integrated testing and for retesting after changes.

C. Stakeholder Engagement

Smart integration requires engagement from the fire protection engineer, the IT security team, facility management, the fire alarm contractor, the BAS contractor, the AHJ, and the insurer.

Key point: Smart integration is a multi-disciplinary project. The fire protection engineer must be involved from the beginning.

Pro Tip: Include the AHJ and the IT security team in the design phase. Their input determines the compliance and security path.

Section 12: Common Challenges and Mistakes

Challenge or mistake	Why it happens	How to avoid it
Assuming the network is always available	System designed to depend on the network	Design for standalone operation
Cybersecurity not addressed	Not in scope or not assigned	Include in design review; engage IT security
Treating IoT sensors as listed devices	Low cost, convenient data	Keep listed devices as the life safety basis
Network gear not meeting fire alarm requirements	Office-grade equipment reused	Meet NFPA 72 pathway and power requirements
Integration errors	Interfaces not tested	Integrated testing with failure scenarios
Vendor lock-in and obsolescence	Proprietary systems; no lifecycle plan	Require open standards; plan upgrades
AHJ unfamiliar with connected systems	New technology	Hold a pre-submittal meeting
Data analytics not validated	Assumed accurate	Validate against inspection
Updates applied without retesting	No change control	Define a change and retest process
Alert overload	Too many low-value notifications	Prioritize and tune alerts
Insurer requirements not met	Not aware	Obtain requirements in writing

Key point: Most smart building integration failures are not technical failures. They are failures to integrate the fire protection, IT security, and operations perspectives.

Pro Tip: For any smart integration project, hold a kickoff meeting that includes fire protection, IT security, facility management, and the AHJ.

Section 13: Design Checklist

Item	Status	Notes
Integration scope defined	☐	Which systems; which connections
Benefits and risks documented	☐	For each integration
Life safety vs. supplemental devices identified	☐	Listed devices vs. IoT
Communication paths designed	☐	Redundancy; supervision; carrier changes
Network architecture designed	☐	Segmentation; power; pathway survivability
Control direction and interfaces defined	☐	BAS, access control, elevators, MNS
Cybersecurity measures specified	☐	UL 2900-1, IEC 62443; remote access controls
Standalone operation verified	☐	System functions without the network
Failure scenarios tested	☐	Network, BAS, cloud, power, cyber
Integrated testing specified	☐	Per NFPA 3 and NFPA 4
AHJ requirements confirmed	☐	Connected systems
Insurer requirements obtained	☐	In writing
IT security team engaged	☐	Design review
Operations and impairment procedures	☐	Roles, alerts, network-down procedure
Change control and lifecycle plan	☐	Updates, retesting, backups, end of support
Procurement terms defined	☐	Open standards, data ownership, exit plan
Data analytics plan	☐	If applicable; validated against inspection
Implementation roadmap	☐	Phased approach with pilot

Section 14: Conclusion

Smart building integration offers real benefits for fire protection: faster impairment detection, data analytics, remote diagnostics, improved response, and automated documentation. It also introduces real risks: cybersecurity, network dependency, integration errors, vendor lock-in, obsolescence, and regulatory uncertainty.

The critical elements are:

• Benefits and risk assessment: what the integration will achieve and what it introduces
• Listed life safety devices: IoT data supplements, but does not replace, listed equipment
• Reliable communication paths: redundant, supervised, and ready for carrier changes
• Cybersecurity: segmentation, controlled remote access, authentication, monitoring, and backups
• Standalone operation: the system functions without the network
• Integration testing: including failure scenarios and retesting after changes
• AHJ and IT security coordination: the regulatory and security paths
• Operations and lifecycle: clear responsibilities, impairment procedures, and controlled updates
• Phased implementation: pilot, learn, expand

The most common failure is treating smart integration as a technology project rather than a life safety project. The fire protection system must remain functional independently of the network, and the integration must be designed, tested, and operated with life safety as the primary objective.

Key Takeaways:

• Smart building integration offers real benefits for fire protection.
• Every connection introduces risk: cybersecurity, network dependency, integration errors.
• The fire protection system must remain functional independently of the network.
• Supervising station monitoring is the code-required path; cloud connectivity is generally a supplement.
• Listed devices remain the basis of the life safety system; IoT sensors are supplemental.
• Cybersecurity is a life safety issue for connected fire protection systems.
• Integration testing must include failure scenarios and be repeated after changes.
• Data analytics can support predictive maintenance but does not replace inspection.
• The AHJ and IT security team must be engaged early.
• The most common failure is treating smart integration as a technology project rather than a life safety project.

Take Action Today:

1. Define the integration scope and objectives.
2. Identify which devices and data are life safety and which are supplemental.
3. Review communication paths for redundancy and carrier changes.
4. Design the network architecture with segmentation, power, and pathway requirements.
5. Specify cybersecurity measures and remote access controls.
6. Verify the system functions independently of the network.
7. Define failure scenarios and include integrated testing in the project scope.
8. Confirm AHJ requirements and obtain insurer requirements in writing.
9. Engage the IT security team in the design review.
10. Establish operations, impairment, and change-control procedures.
11. Plan a phased implementation with a pilot.

Continue Reading from Our Series:

• Related guide: Article 156, Flood, Wind, and Seismic Resilience and Fire Safety
• Related guide: Article 146, Integrated Testing of Fire and Life Safety Systems
• Read more: Article 158, Digital Twins for Fire Safety Management (planned)

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ, your insurer, and your IT security team for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references NFPA 1144, Standard for Reducing Structure Ignition Hazards from Wildland Fire (2018 edition, now consolidated into NFPA 1140); the International Wildland-Urban Interface Code (IWUIC); the International Fire Code (IFC), including its wildland-urban interface chapter; the California Building Code (CBC) Chapter 7A, Materials and Construction Methods for Exterior Wildfire Exposure, as the most developed U.S. example of ember-resistant construction requirements; NFPA 101, Life Safety Code; NFPA 13 (sprinkler systems); NFPA 1142 (water supplies for rural and suburban firefighting); FM Global Property Loss Prevention Data Sheet 9-19 (Wildfire/Bushfire Exposure); and Insurance Institute for Business & Home Safety (IBHS) guidance. NFPA 1144 was consolidated into NFPA 1140 under NFPA’s Emergency Response and Responder Safety Document Consolidation Plan. Wildfire requirements vary significantly by jurisdiction, by hazard zone, and by the adopted code edition. Defensible space distances and construction requirements cited here follow model codes and standards and may differ in your adopted edition. Local amendments and the edition adopted by your Authority Having Jurisdiction (AHJ) always control. This guide is a starting point only. Always verify the requirements applicable to your project with your AHJ and a qualified fire protection engineer.

Wildfire is no longer only a wildland problem. It is increasingly an urban problem. The Eaton and Palisades fires of January 2025 destroyed more than 16,000 structures in Southern California, including many multifamily and commercial buildings. The 2023 Lahaina Fire in Hawaii destroyed more than 2,000 structures in a dense town, including commercial and mixed-use buildings. The pattern is clear: wildfires are reaching into developed areas, and commercial buildings are not immune.

Wildfire resilience for commercial buildings is the discipline of understanding how wildfire ignites buildings and applying the design, construction, and maintenance measures that reduce the risk. The primary ignition mechanism is not the flame front. It is embers. Wind-borne embers can travel a mile or more, land on roofs, enter vents, accumulate in corners, and ignite combustible materials. Radiant heat and direct flame contact are secondary mechanisms, but they become dominant when the building is close to heavy fuels.

Commercial buildings have vulnerabilities that single-family homes do not: large flat roofs that collect debris, complex rooftop equipment, shared HVAC systems that can distribute smoke, and vented rainscreen assemblies that can act as chimneys. The protection must address these specific vulnerabilities.

This article covers how wildfire ignites commercial buildings, the codes that govern wildfire resilience, defensible space, roofs, walls, openings, site-level measures (access, water supply, utilities, and exterior storage), smoke resilience, emergency planning and business continuity, and how to approach a wildfire resilience assessment for an existing or new commercial building.

◆ Section 1: How Wildfire Ignites Commercial Buildings

Wildfire threatens buildings through three mechanisms: embers, radiant heat, and direct flame contact. Embers are the most common cause of building ignition, and they are the most difficult to defend against.

Mechanism	How It Works	Relative Importance
Ember exposure	Wind-borne burning debris lands on or near the building	Primary cause of ignition
Radiant heat	Heat from nearby flames preheats and ignites materials	Secondary; dominant when heavy fuels are close
Direct flame contact	Flames reach the building	Usually follows ember or radiant ignition

A. The Ember Problem

Embers can travel a mile or more from the fire front. They are small enough to enter vents, gutters, and gaps in construction. They accumulate in corners, on flat roofs, and behind equipment. A single ember landing on dry debris can start a fire that spreads to the building.

Post-fire investigations, including those of Lahaina, show that fire spread in dense developed areas is driven by embers and by building-to-building and fuel-to-building exposure, not just by the wildland flame front. A building that meets its prescriptive code can still be vulnerable if embers can get in or ignite something next to it.

B. Commercial Building Vulnerabilities

Vulnerability	Why It Matters
Large flat roofs	Collect debris; multiple penetrations (HVAC, skylights, solar)
Rooftop equipment	HVAC units, solar panels, and vents create ember entry points
Rainscreen assemblies	Vented cavities can draw embers and flames into wall systems
Shared HVAC systems	Can distribute smoke and embers through the building
Mixed uses	Higher occupant loads and complex egress
Connected fuels	Wooden fences, decks, dumpsters, and outbuildings can act as fuses

Key point: Wildfire ignition of commercial buildings is primarily an ember problem, not a flame problem. The protection must address ember entry points: vents, roofs, wall cavities, and openings.

Key Article: Article 137, Roof Assemblies and Fire Classification

Pro Tip: Walk the roof and exterior of the building during a wildfire resilience assessment. Look for every opening where an ember could enter: vents, gaps, penetrations, and cavities.

◆ Section 2: The Codes: NFPA 1140/1144, IWUIC, IFC, and Chapter 7A

Wildfire resilience is governed by a patchwork of codes and standards. The applicable requirements depend on the jurisdiction and the building’s location.

A. NFPA 1144 (Consolidated into NFPA 1140)

NFPA 1144 provides a methodology for assessing structure ignition hazards and requirements for new construction to reduce ignition potential. The 2018 edition addresses roof design and materials, vents for attics, subfloors, and walls, projections (balconies, decks, patio covers), exterior vertical walls, exterior openings, and defensible space.

Important: NFPA 1144 has been consolidated into NFPA 1140. The 2018 edition is the last standalone edition. For current requirements, refer to NFPA 1140.

B. IWUIC and IFC

The International Wildland-Urban Interface Code (IWUIC) is the model, code-enforceable document in jurisdictions that adopt it. It establishes:

• Hazard severity classification of WUI areas
• Ignition-resistant construction classes (Class 1, 2, 3)
• Defensible space and vegetation management requirements
• Fire department access and water supply requirements

The IFC also contains a chapter on requirements for wildland-urban interface fire areas, which jurisdictions often adopt in place of, or alongside, the IWUIC. Some recent wildfire-driven code updates also address exterior wall base clearance (see Section 5).

C. California Chapter 7A and Other State Programs

The model International Building Code (IBC) does not contain a Chapter 7A. Chapter 7A, Materials and Construction Methods for Exterior Wildfire Exposure, is part of the California Building Code. Because it is the most detailed U.S. set of ember-resistant construction requirements, it is widely used as a reference even outside California. It addresses roof coverings, vents, eaves and soffits, exterior walls, exterior windows and doors, decking, and accessory structures. Other states and local jurisdictions have adopted their own WUI codes or amendments. Confirm what applies at your site.

D. FM Global Data Sheet 9-19

FM Global Property Loss Prevention Data Sheet 9-19 (Wildfire/Bushfire Exposure) provides property loss prevention guidance, including site clearance and construction recommendations. For insured facilities, it often functions as the practical design standard even where no local code applies. Confirm the current edition and its clearance distances for your fuel type and slope.

Key point: The applicable requirements depend on jurisdiction. Verify the hazard zone designation, the adopted code and edition, and any local amendments before design begins.

Pro Tip: For any building in a wildfire-prone area, confirm the hazard zone designation (for example, California’s Fire Hazard Severity Zones or your state’s WUI map) with the local AHJ. The designation determines which requirements apply.

◆ Section 3: Defensible Space

Defensible space is the area around a building where vegetation and combustible materials have been removed or modified to reduce fire spread, limit radiant heat exposure, and provide a safe area for firefighters.

A. The Zones

Zone	Typical Distance	Objective
Zone 0 (ember-resistant zone)	0 to 5 ft from the building	Noncombustible surface; no combustible materials against the building
Zone 1 (lean, clean, and green)	5 to 30 ft	Irrigated, low-growing vegetation; no ladder fuels; limited combustibles
Zone 2 (reduced fuel zone)	30 to 100 ft	Reduced vegetation density; spaced trees and shrubs; dead material removed

Zone names and distances follow common practice (for example, CAL FIRE guidance). Some codes and standards require more, particularly on steep slopes or near heavy fuels, so use the distances adopted in your jurisdiction. Where a jurisdiction is still developing Zone 0 regulations, treat the 0 to 5 ft guidance as best practice.

B. Site Clearance Beyond Code Minimums

Insurer guidance can exceed code minimums. FM Global Data Sheet 9-19 bases clearance on fuel type, slope, and exposure, and its recommended clearances can be considerably larger than the defensible space required by local codes. For structures on slopes, fire spreads faster uphill, so clearance on the downslope side should be increased. Request your insurer’s site-specific requirements.

C. Zone 0: The Most Critical

The 0 to 5 foot zone is the most critical for ember defense. Combustible materials in this zone can ignite from embers and transmit fire to the building. These include mulch, plants, stored items, fences, and doormats.

Recommended measures for Zone 0:

• Noncombustible surface (concrete, gravel, pavers)
• No combustible mulch
• No vegetation against the building
• Noncombustible fencing and gates where they attach to the building
• No combustible storage, furniture, or trash containers

D. Landscaping Choices

• Prefer low-growing, well-irrigated, fire-resistant plants; avoid resinous shrubs and conifers near the building
• Prune trees so branches are well clear of roofs; maintain separation between tree crowns
• Remove “ladder fuels” that let ground fire climb into trees
• Avoid bark mulch near buildings; use gravel or decomposed granite
• Keep irrigation systems maintained, and note that no plant is fireproof

E. Maintenance

Defensible space is not a one-time project. It requires ongoing maintenance:

• Remove dead vegetation and leaf litter
• Maintain irrigation
• Clear debris from roofs and gutters
• Remove combustible storage

Key point: Defensible space is the first line of defense. Zone 0 is the most important, and it is the zone most often neglected.

Pro Tip: Treat defensible space as a maintenance program, not a landscape design. The fuel load changes with growth and seasonal dieback.

◆ Section 4: Roofs and Rooftop Equipment

The roof is the largest horizontal surface exposed to embers and the most vulnerable part of a commercial building.

A. Roof Covering

Class A fire-rated roof assemblies should be the default for commercial buildings in wildfire-prone areas. Class A assemblies provide the highest level of external fire resistance. See Article 137 for classification details.

B. Roof Debris

Large flat roofs collect debris such as leaves, branches, and wind-blown material. This debris can ignite from embers and transmit fire to the roof covering. Regular maintenance to clear debris from drains, gutters, and the area behind equipment is essential.

C. Rooftop Penetrations

Penetration	Risk	Mitigation
HVAC units and curbs	Ember entry through intakes and gaps; combustible housing or curb	Noncombustible curbs and housings; screen openings
Skylights	Ember accumulation; breakage from radiant heat	Tempered or fire-rated glazing; noncombustible frames
Solar panels	Debris accumulation; wiring exposure	Clear debris; verify rapid shutdown (Article 152)
Roof vents	Ember entry into the building	Metal mesh screens or ember-resistant listed vents

D. Gutters, Eaves, and Edges

• Gutters and downspouts should be noncombustible, with noncombustible gutter guards where gutters are used
• Eaves, soffits, and fascias should be noncombustible or ignition-resistant, with vents protected
• Parapets and roof edges should be maintained free of combustible debris
• Roof-to-wall junctions and roof-mounted signage should be checked for ember traps

Key point: The roof is the most vulnerable surface. Class A roofing, debris maintenance, and ember-resistant penetrations are the core measures.

Key Article: Article 152, Solar Panel and PV System Fire Safety

Pro Tip: Include roof debris removal in the building’s regular maintenance schedule, and schedule an extra cleaning before wildfire season. A clean roof is a resilient roof.

◆ Section 5: Wall Assemblies and Rainscreens

Exterior walls are vulnerable to radiant heat, flame contact, and ember accumulation. Vented rainscreen assemblies present a specific risk.

A. The Rainscreen Problem

Vented rainscreens are effective for moisture management, but they can act as chimneys if unprotected. The cavity between the cladding and the wall can draw flames and embers upward, spreading fire within the wall system.

B. Rainscreen Mitigation

Measure	Detail
Noncombustible insect screens	Metal mesh with openings of 3.18 mm (0.125 in.) or less at the top and bottom of cavities
Cavity fire blocking	Horizontal mineral wool or other noncombustible barriers at intervals to stop vertical flame spread
Noncombustible insulation	Mineral wool rather than foam-based products
Cladding and gaps	Fiber cement or metal panels; minimize air gaps
Base and head detailing	Flashing or intumescent materials to protect transitions

C. Base Clearance

A minimum noncombustible vertical clearance at the base of exterior walls (commonly 6 inches above grade) acts as a fuel break and limits ember accumulation and ignition at the wall-ground intersection. California Chapter 7A addresses this, and some other codes have added similar provisions after recent fires. Confirm whether your adopted code edition requires it.

D. Metal Cladding

Metal cladding is noncombustible and resists ignition from flames and embers. However, metal conducts heat. If the insulation or substrate beneath is combustible, heat transfer can ignite hidden layers.

E. Attached Features

Balconies, canopies, awnings, decks, and trellises are common ember traps and ignition points, especially in mixed-use buildings. Use noncombustible or ignition-resistant materials, keep the underside of projections enclosed or protected, and avoid combustible furniture and storage on them.

Key point: Wall assemblies must be detailed as complete systems, not just individual components. The cavity, the insulation, the cladding, and the transitions all matter.

Pro Tip: For buildings with rainscreen assemblies, verify that the cavity is screened and fire-blocked. An unscreened cavity is an ember pathway.

◆ Section 6: Openings: Windows, Doors, and Vents

Openings are the weakest points in a building’s wildfire defense. Embers can enter through open windows, broken glass, and unprotected vents.

A. Windows and Glazing

Measure	Detail
Tempered glazing	Multi-pane assemblies with at least one tempered pane resist breakage from radiant heat
Noncombustible frames	Aluminum, steel, or other frames that will not ignite or soften
Screens	Metal mesh to block embers (see mesh sizing below)
Perimeter sealing	Intumescent caulk or backer rod where applicable

Glass is the weak point when radiant heat is high. For storefronts and large glazed areas close to fuels, consider fire-rated or fire-protective glazing, and use noncombustible shutters or rolling shutters where practical.

B. Doors

• Exterior doors should be fire-rated or noncombustible, especially at balconies and decks
• Doors should be tight-fitting with gaskets or weatherstripping to limit ember intrusion
• Garage and loading dock doors should be rated or protected where required, and sealed at the sill and sides

C. Vents

All vents (attic, subfloor, wall, and mechanical) should be protected to prevent ember entry. A common benchmark is noncombustible, corrosion-resistant metal mesh with openings no larger than 1/8 in., and no smaller than 1/16 in. so the mesh does not clog easily. Vents listed to resist ember and flame intrusion (for example, tested to ASTM E2886) provide better performance and should be specified where required. Confirm the mesh size and listing your adopted code requires.

D. Mechanical Intakes

HVAC outdoor air intakes, exhaust openings, and louvers are ember entry points. Protect them with screens, locate intakes away from vegetation and high-exposure walls, and consider dampers that can close during a wildfire event.

Key point: Every opening is a potential ember entry point. Windows, doors, vents, and mechanical intakes must be protected as part of the building envelope.

Pro Tip: Walk the exterior of the building and identify every vent and opening. Verify that each is screened or protected.

◆ Section 7: Site Features: Access, Water Supply, Utilities, and Exterior Storage

Wildfire resilience does not stop at the building envelope. Site conditions determine whether embers have fuel next to the building and whether firefighters can protect it.

A. Fire Department Access

• Provide access roads and turnarounds sized for fire apparatus, with adequate load capacity, width, and clearance
• Keep driveways and gates accessible; provide emergency-access key boxes or lock access as required by the AHJ
• Maintain vegetation clearance along access routes so firefighters can enter and exit safely
• Provide clear building and street address identification visible in smoke

B. Water Supply

• Confirm available hydrant flow and pressure, or provide on-site storage (tanks, ponds, or cisterns) where hydrants are limited
• For rural or suburban sites with limited municipal supply, NFPA 1142 provides methods to size water supplies
• Consider backup power for fire pumps and water systems, since power loss during wildfire events is common
• Sprinkler systems protect the building’s interior from fires that start inside. Wildfire protection generally relies on exterior ignition resistance, but a sprinklered building limits fire growth if embers do enter. Maintain sprinkler systems in accordance with NFPA 25

C. Exterior Sprinklers and Water-Based Defenses

Exterior sprinkler or roof-wetting systems are sometimes proposed for wildfire protection. They require a reliable, adequate water supply and power, and they can fail when pressure drops during an event. Treat them as a supplement to ignition-resistant construction and defensible space, not a substitute. Obtain AHJ and insurer approval before relying on them.

D. Utilities and Fuel Storage

• Locate propane tanks, fuel tanks, gas meters, and generators away from the building and vegetation; maintain clearance as required by the IFC and applicable fuel gas codes
• Protect electrical equipment and transformers from vegetation; coordinate utility vegetation management
• Consider how power shutoffs and outages affect fire pumps, alarms, elevators, and ventilation
• Where hydrogen, battery storage, or EV charging is present, see Article 154 (Hydrogen Fuel Systems) and the related battery and EV charging guides for wildfire-specific separation and detection concerns

E. Parking, Dumpsters, and Exterior Storage

• Locate dumpsters, pallets, and stored materials well away from the building, or use noncombustible enclosures
• Remove vegetation and combustible mulch from parking islands near the building
• Treat vehicles, especially in parking structures and adjacent lots, as potential ember and radiant exposures
• Keep wooden fences, sheds, and outbuildings away from the building or replace them with noncombustible alternatives

Key point: Many ignitions start at items next to the building, not on the building itself. Site housekeeping is part of the fire protection strategy.

Pro Tip: Walk the site at the same time as the building. Fences, dumpsters, and stored pallets are common culprits.

◆ Section 8: Smoke Resilience

Wildfire smoke is a building emergency even when flames never reach the building. Smoke infiltration can affect occupants, HVAC systems, and business continuity.

A. The Smoke Problem

Wildfire smoke contains fine particulate matter (PM2.5) and gases that can enter buildings through HVAC intakes, open windows, doors, and gaps in the envelope. Exposure can aggravate respiratory and cardiovascular conditions, and prolonged smoke events can make buildings unusable even when they are undamaged.

B. Smoke Mitigation

Measure	Detail
HVAC filtration	MERV 13 or higher where the system can support it; verify fan capacity and pressure drop
Outdoor air control	Reduce or close outdoor air intakes during smoke events and use recirculation mode where appropriate
Portable air cleaners	HEPA units in occupied or critical spaces if HVAC upgrades are limited
Envelope sealing	Tight-fitting windows and doors; weatherstripping
Building pressurization	Positive pressure to reduce infiltration, designed with the mechanical engineer
Clean air areas	Designate rooms or zones with higher filtration for sheltering
Emergency plan	Shelter-in-place or relocation procedures for smoke events

C. The Continuity Perspective

For commercial buildings, smoke can force closure even if the building is undamaged. Business continuity planning should include wildfire smoke events and the ability to operate with reduced outdoor air or limited occupancy.

Key point: Wildfire resilience includes smoke resilience. A building that survives the flames but is unusable because of smoke is still a loss.

Pro Tip: Upgrade HVAC filtration and test mechanical changes before wildfire season. The cost is small relative to the cost of closure.

◆ Section 9: Emergency Planning, Evacuation, and Business Continuity

Building hardening reduces the chance of ignition. Planning reduces the harm to people and operations when a wildfire threatens.

A. Wildfire Emergency Plan

• Define triggers for action: red flag warnings, evacuation warnings, air quality thresholds
• Establish evacuation routes (with alternates, since roads may be blocked or congested), assembly points, and a method to account for occupants and visitors
• Plan for people who need assistance, and for mixed-use buildings with residents, customers, and employees
• Coordinate with neighboring properties, the fire department, and local emergency management
• Align with the building’s general emergency action plan (NFPA 101 and OSHA requirements)

B. Pre-Incident Preparation

• Prepare a wildfire pre-incident plan for the fire department, including access, water supply, utility shutoffs, hazardous materials locations, and known vulnerabilities
• Pre-stage shutdown procedures: HVAC intake closure, gas and utility shutoffs, securing of exterior combustibles
• Train staff on wildfire season readiness and emergency roles

C. Business Continuity and Recovery

• Protect critical records, data, and equipment, and identify alternate operating locations
• Understand insurance coverage for wildfire, smoke damage, and business interruption, including any mitigation conditions
• Plan for post-event inspection of the building before reoccupancy, including smoke, ash, and water damage

D. Community Context

The building’s risk depends partly on its neighbors. Participation in community programs such as Firewise USA, and coordination with adjacent owners on shared fuel management, reduces risk beyond the property line.

Key point: A resilient building with no plan can still fail the people who use it.

Pro Tip: Review the plan every year before wildfire season and update contacts, routes, and shutdown steps.

◆ Section 10: Assessment, Existing Buildings, and Retrofits

Most commercial buildings were not designed for wildfire resilience. Retrofitting an existing building requires a prioritized approach based on an assessment.

A. How to Approach a Wildfire Resilience Assessment

1. Confirm the context. Hazard zone designation, adopted codes, insurer requirements, and local ordinances.
2. Review the site. Surrounding fuels, slope, wind exposure, adjacent structures, access, and water supply.
3. Walk the exterior. Check Zone 0, vegetation, storage, fences, and utilities.
4. Walk the roof. Roof covering, debris, penetrations, equipment, and solar.
5. Assess the envelope. Walls, rainscreens, eaves, soffits, windows, doors, and vents.
6. Review building systems. HVAC intakes, filtration, power backup, fire protection systems.
7. Review plans and maintenance. Emergency plan, pre-incident plan, maintenance schedule.
8. Prioritize and document. Rank findings by risk reduction and cost, assign owners, and set deadlines.

NFPA 1140 (formerly NFPA 1144) provides a hazard assessment methodology, and insurers may use their own survey tools.

B. Prioritization

Priority	Measure	Why
1	Zone 0: clear combustibles from the building perimeter	Highest impact; lowest cost
2	Roof debris removal and maintenance	Reduces ember ignition sites
3	Vent screening and mechanical intake protection	Blocks ember entry
4	Opening protection (windows, doors)	Blocks ember and radiant heat entry
5	Site housekeeping: storage, dumpsters, fences, fuel tanks	Removes fuses near the building
6	Rainscreen cavity screening and fire-blocking	Addresses hidden pathways
7	HVAC filtration and smoke plan	Maintains operability
8	Roof replacement (Class A)	Long-term; capital cost
9	Wall assembly upgrades	Long-term; capital cost

C. The Insurance Perspective

Insurers increasingly require wildfire mitigation for buildings in high-hazard areas. FM Global and other insurers recommend measures including debris removal, vent screening, and defensible space. Compliance with insurer requirements can affect coverage availability and premiums. Obtain requirements in writing.

D. The Fire Department Perspective

The fire department needs access to the building and a water supply. Defensible space provides a safe area for firefighting operations. Pre-incident planning should include the building’s wildfire vulnerabilities. In a major wildfire, resources are overwhelmed, so the building must be able to survive without firefighter intervention.

Key point: Retrofitting is not all-or-nothing. The highest-impact measures (Zone 0, debris removal, vent screening) are relatively low-cost and can be implemented quickly.

Key Article: Article 76, How to Design a Fire Safety Strategy for Existing Buildings (Retrofits)

Pro Tip: Start with Zone 0 and roof maintenance. These measures are inexpensive and address the most common ignition pathways.

◆ Section 11: Design Checklist

Item	Status	Notes
Hazard zone designation confirmed	☐	With AHJ
Adopted code edition confirmed	☐	IWUIC, IFC, state WUI code, NFPA 1140
Zone 0 established	☐	0 to 5 ft; noncombustible
Zones 1 and 2 established	☐	Per code/insurer
Roof covering Class A	☐	Per adopted code
Roof debris maintenance program	☐	Regular cleaning
Rooftop penetrations protected	☐	Noncombustible curbs/housings
Gutters, eaves, and soffits protected	☐	Noncombustible; vents screened
Vents screened	☐	Metal mesh, 1/16 to 1/8 in., or listed ember-resistant vents
Mechanical intakes protected	☐	Screens; dampers
Rainscreen cavities screened and fire-blocked	☐	Noncombustible mesh and barriers
Base clearance provided	☐	Where required (commonly 6 in.)
Windows protected	☐	Tempered; noncombustible frames
Doors protected	☐	Fire-rated; tight-fitting
Fire department access and water supply verified	☐	AHJ; NFPA 1142 where applicable
Utilities and fuel storage located safely	☐	Propane, generators, gas meters
Exterior storage and dumpsters controlled	☐	Away from building
HVAC filtration and outdoor air control	☐	MERV 13+ where feasible
Wildfire emergency plan	☐	Triggers; evacuation; shelter
Fire department pre-plan	☐	Wildfire vulnerabilities
Insurer requirements obtained	☐	In writing

◆ Section 12: Common Mistakes and How to Avoid Them

Mistake	Why It’s a Problem	How to Fix
Assuming code compliance is sufficient	Ember penetration can defeat code-compliant buildings	Address ember pathways specifically
Neglecting Zone 0	Most common ignition pathway	Noncombustible surface; no combustibles
Not screening vents or intakes	Ember entry	Metal mesh or listed ember-resistant vents
Ignoring rainscreen cavities	Hidden ember pathway	Screen and fire-block
No roof maintenance	Debris ignites from embers	Regular cleaning
Not protecting windows	Radiant heat and ember entry	Tempered glazing; screens
Ignoring site features	Fences, dumpsters, and storage ignite next to the building	Relocate or replace with noncombustible alternatives
Relying on exterior sprinklers alone	Water and power may fail	Use as a supplement only
No smoke or emergency plan	Smoke forces closure; occupants unprepared	Shelter-in-place; filtration; evacuation plan
Not engaging insurer or AHJ	Requirements unclear or unmet	Obtain requirements in writing; hold a pre-submittal meeting
Treating resilience as a one-time project	Maintenance neglected	Include in the maintenance program

Key point: Most wildfire resilience failures are maintenance and detailing failures, not material failures. The building may have the right materials, but the details and maintenance determine performance.

◆ Section 13: Conclusion

Wildfire resilience for commercial buildings is a distinct discipline. The primary ignition mechanism is embers, not flames. The vulnerabilities are specific to large buildings: flat roofs, rooftop equipment, rainscreen cavities, and shared HVAC systems. The protection must address these specific vulnerabilities, and the site and the plan around the building.

The critical elements are:

• Ember awareness: embers are the primary ignition mechanism
• Defensible space: Zone 0 is the most critical
• Roof protection: Class A roofing, debris maintenance, penetration protection
• Wall protection: rainscreen screening, fire-blocking, noncombustible insulation
• Opening protection: windows, doors, vents, and mechanical intakes
• Site measures: access, water supply, utilities, and exterior storage
• Smoke resilience: HVAC filtration and shelter-in-place planning
• Emergency planning and maintenance: wildfire resilience is a program, not a project

The most common failure is assuming that code compliance is sufficient. Fires such as Lahaina show how embers and neighboring fuels can defeat buildings that appear to meet requirements. The protection must address the specific pathways that embers exploit.

Key Takeaways:

• Embers are the primary cause of building ignition during wildfires.
• Commercial buildings have specific vulnerabilities: flat roofs, rooftop equipment, rainscreen cavities, shared HVAC.
• NFPA 1144 has been consolidated into NFPA 1140; IWUIC, the IFC, and state codes such as California Chapter 7A are the code-enforceable references.
• Defensible space Zone 0 (0 to 5 ft) is the most critical for ember defense.
• Class A roofing is the default for wildfire-prone areas.
• Vents and intakes must be screened or ember-resistant.
• Rainscreen cavities must be screened and fire-blocked.
• Windows should have tempered glazing and noncombustible frames.
• Site features (storage, fences, fuel tanks) can ignite the building from outside.
• Smoke resilience requires HVAC filtration, outdoor air control, and shelter-in-place planning.
• Wildfire resilience is a maintenance program, not a one-time project.

Take Action Today:

• Confirm the building’s hazard zone designation and adopted codes.
• Establish Zone 0: remove all combustibles from the building perimeter.
• Implement a roof debris maintenance program.
• Screen all vents and mechanical intakes.
• Verify rainscreen cavities are screened and fire-blocked.
• Verify windows are tempered with noncombustible frames.
• Verify doors are fire-rated or noncombustible and tight-fitting.
• Relocate dumpsters, storage, and fuel tanks away from the building.
• Confirm access and water supply with the fire department.
• Upgrade HVAC filtration and develop a smoke and emergency plan.
• Obtain insurer wildfire requirements in writing.

Continue Reading from Our Series:

• Related guide: Article 154, Hydrogen Fuel Systems and Fire Safety
• Related guide: Article 152, Solar Panel and PV System Fire Safety
• Related guide: Article 137, Roof Assemblies and Fire Classification
• Read more: Article 156, Flood, Wind, and Seismic Resilience and Fire Safety (planned)

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and a qualified fire protection engineer for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references NFPA 2, Hydrogen Technologies Code; NFPA 55, Compressed Gases and Cryogenic Fluids Code; the International Fire Code (IFC), including Chapter 58 (Flammable Gases and Cryogenic Fluids) and Chapter 23 (Motor Fuel-Dispensing Facilities); the International Building Code (IBC); NFPA 70 (National Electrical Code), including Articles 500 and 505 (Hazardous Locations); NFPA 72 (National Fire Alarm and Signaling Code); NFPA 68 (Explosion Protection by Deflagration Venting); NFPA 69 (Explosion Prevention Systems); NFPA 853 (Stationary Fuel Cell Power Systems); ASME B31.12 (Hydrogen Piping and Pipelines); the ASME Boiler and Pressure Vessel Code; and CGA G-5.4 (Hydrogen). NFPA 2 governs hydrogen storage, use, and handling, and NFPA 55 directs users to NFPA 2 for hydrogen requirements. Requirements vary by application (fueling station, laboratory, industrial, power generation), by quantity, by storage form (gaseous or liquid), and by adopted edition. Section numbers, separation distances, and quantity thresholds cited here follow the model codes and may differ in your adopted edition. Local amendments and the edition adopted by your Authority Having Jurisdiction (AHJ) always control. This guide is a starting point only. Always verify the requirements for your project with your AHJ and a qualified fire protection engineer.

Hydrogen is the lightest element and the most abundant element in the universe. It is also a fuel with fire characteristics unlike any conventional fuel. A hydrogen flame is nearly invisible in daylight. It has a very wide flammability range, from about 4% to 75% by volume in air. It takes very little energy to ignite. And it can embrittle the metals that contain it, creating leaks that are hard to detect and that can lead to fires or explosions.

Hydrogen is appearing in more building types: vehicle fueling stations, backup power and fuel cell systems, laboratories, industrial processes, electrolyzers, and energy storage. Each application introduces hydrogen into an environment where a leak, a fire, or an explosion could have severe consequences. The codes that govern hydrogen are relatively new and still evolving, and the fire safety approach differs fundamentally from that for conventional fuels.

This article covers how hydrogen behaves in fire, the codes that govern it, the main hazards, storage forms, siting and separation, detection and ventilation, electrical classification, pressure relief and venting, explosion control, fueling stations, indoor hydrogen rooms, firefighting and emergency response, and how to approach a hydrogen project.

---

◆ Section 1: Why Hydrogen Is a Different Fire Hazard

Property values are approximate and vary with temperature, pressure, and mixture. Use them for comparison, not design.

A. The Invisible Flame

A hydrogen fire can burn with little or no visible flame in daylight, and it produces no smoke. It also radiates much less heat than a hydrocarbon fire, so people may not feel the heat until they are very close. A person can walk into a hydrogen fire without seeing it. Detection often relies on thermal imaging, hydrogen-capable flame detectors, or the sound of the release.

B. The Wide Flammability Range

The 4% to 75% range is far wider than gasoline’s. Almost any leak in an enclosed space can create a flammable mixture.

C. Low Ignition Energy

Hydrogen can be ignited by a very small spark, including static electricity. Grounding and bonding are critical. High-pressure releases can also ignite on their own, without an obvious ignition source.

Key point: Hydrogen safety is not a scaled version of natural gas safety. The invisible flame, wide flammability range, and low ignition energy require specific detection and protection strategies.

Pro Tip: Never assume a hydrogen fire is out because you cannot see a flame. Confirm extinguishment with thermal imaging.

---

◆ Section 2: The Codes and Standards

A. NFPA 2

NFPA 2, Hydrogen Technologies Code, is the primary standard for hydrogen generation, storage, piping, use, and handling. It addresses separation distances, ventilation, detection, explosion control, equipment, fueling, and emergency procedures. It also provides performance-based and equivalency options.

B. NFPA 55

NFPA 55 provides the general framework for compressed gases and cryogenic fluids. For hydrogen, it directs users to NFPA 2.

C. IFC and IBC

The IFC applies hydrogen requirements through Chapter 58 (flammable gases), Chapter 23 (motor fuel-dispensing, including hydrogen dispensing and generation facilities), and Chapter 50 (general hazardous materials, including control areas and quantity limits). The IBC governs the building side: occupancy classification (such as Group H), fire barriers, and construction type.

D. Supporting Standards

E. The Equivalency Clause

NFPA 2 allows alternative means of compliance where equivalency is demonstrated to the AHJ. A quantitative risk assessment (QRA), using tools such as Sandia’s HyRAM, is commonly used to evaluate reduced separation distances or alternative safety measures.

Key point: NFPA 2 is the governing standard. The IFC is the enforceable code in most jurisdictions. Know which editions your AHJ has adopted.

Pro Tip: Engage the AHJ early. Separation distances and equivalency determinations are case-specific and need AHJ approval.

---

◆ Section 3: The Hazards of Hydrogen Systems

A. Leaks and Embrittlement

Hydrogen can permeate some materials and embrittle certain metals over time, weakening containment. Leaks usually start at seals, gaskets, valves, threaded joints, and flanges. The smallest molecule is also the hardest to contain.

B. Dispersion and Accumulation

Hydrogen is very buoyant and disperses quickly outdoors. In enclosed spaces it collects at the ceiling and in roof pockets, beams, and other high points. A leak indoors is a major explosion hazard.

C. Deflagration and Detonation

If hydrogen accumulates and ignites, the result can be a deflagration (subsonic) or, in confined or congested spaces, a detonation (supersonic). The wide flammability range and low ignition energy make both credible.

D. High-Pressure Jet Fires

Many systems operate at high pressure. A leak from a high-pressure line or a pressure relief device can produce a jet fire that is long, intense, and hard to see.

E. Cryogenic Hazards (Liquid Hydrogen)

Liquid hydrogen adds extreme cold, which can cause severe cold burns and embrittle ordinary materials. It also condenses oxygen from the air on cold surfaces and expands greatly when it vaporizes.

F. Asphyxiation

Hydrogen is not toxic, but in a confined space it displaces oxygen and can cause asphyxiation.

Key point: The primary hazards are leak, accumulation, ignition, and explosion. Leak prevention, detection, ventilation, and ignition control are the main safeguards.

---

◆ Section 4: Storage Forms and Applications

The fire safety approach depends on how hydrogen is stored and where it is used.

Quantity matters. IFC and NFPA 2 thresholds for maximum allowable quantities, control areas, and Group H occupancies determine whether storage can be in a normal building, in a dedicated room, or must be outdoors. Determine the quantity early, because it shapes the whole design.

---

◆ Section 5: Siting and Separation Distances

Outdoor storage is generally preferred. Hydrogen released outdoors disperses upward and away.

NFPA 2 establishes minimum separation distances between hydrogen systems and exposures such as:

• Buildings and building openings
• Property lines
• Public ways and parking
• Ignition sources and electrical equipment
• Air intakes and ventilation inlets
• Other hazardous materials

Distances depend on the storage form, quantity, pressure, and exposure type, and they are generally larger for liquid hydrogen and higher pressures. They can be reduced with fire barriers or through equivalency and QRA approved by the AHJ.

Key point: Siting is the cheapest safeguard. Distance and open air reduce the need for engineered controls.

Pro Tip: Keep hydrogen vents, relief discharge, and storage away from air intakes, overhead power lines, trees, and building overhangs where gas can collect.

---

◆ Section 6: Detection and Ventilation

A. Gas Detection

A gas detection system is required for hydrogen fuel gas rooms and many other enclosed installations. It must:

• Detect hydrogen at or below 25% of the lower flammable limit
• Activate audible and visible alarms inside and outside the room
• Automatically start the mechanical exhaust ventilation
• On system failure, start ventilation and shut down hydrogen generation or supply

B. Detection Technologies

Common technologies include thermal conductivity, electrochemical, and semiconductor sensors, plus catalytic types where suitable. Ultrasonic leak detectors can help for high-pressure releases. Hydrogen-capable flame detectors (UV or multi-spectrum IR) address the invisible flame. Each technology has limits, such as sensor poisoning, drift, and response time, so selection must match the application.

C. Sensor Placement

Hydrogen rises. Place gas sensors at high points, near the ceiling, and in roof pockets, plus near likely leak sources such as valves, fittings, and equipment enclosures. Mounting detectors only at low levels, as for heavier-than-air gases, is a design error.

D. Ventilation

Mechanical exhaust is required for hydrogen fuel gas rooms and enclosed installations. It should:

• Maintain negative pressure relative to adjacent spaces
• Provide enough air change to prevent accumulation
• Draw from high points where hydrogen collects
• Be on standby power
• Start automatically on a detection alarm

E. The Detection-Ventilation Link

Detection and ventilation must be interlocked. Detection triggers ventilation, and detection can also trigger shutoff of the hydrogen supply.

Key point: Detection and ventilation are the first line of defense. They prevent accumulation before ignition is possible.

Pro Tip: Ventilation needs standby power. A power failure during a release is when it is needed most.

---

◆ Section 7: Electrical Classification and Ignition Control

Hydrogen is a Class I, Group B material under the NEC, which is the most demanding group and needs specially rated equipment. Electrical equipment in classified areas must be listed for the classification (Division or Zone) and for Group B.

• Define classified areas around vents, relief discharges, fittings, enclosures, and dispensers according to NFPA 2 and NFPA 70.
• Use listed equipment for those areas, and prohibit non-rated equipment inside them.
• Ground and bond equipment, piping, and vehicles to control static electricity.
• Post signs prohibiting smoking, open flames, and other ignition sources in hydrogen storage and use areas.
• Control hot work with a permit program (see Article on hot work permit programs).

Pro Tip: The classification drawing should be part of the design package so electrical and mechanical designers use the same boundaries.

---

◆ Section 8: Pressure Relief and Venting

Hydrogen systems rely on pressure relief devices (PRDs) and vent lines to avoid overpressure.

• Relief devices and vent stacks must discharge to a safe location outdoors, away from people, ignition sources, air intakes, and structures.
• Vent lines should be sized, routed, and supported to avoid back pressure, blockage, and rain or ice intrusion.
• Fire-exposed vessels need thermally activated relief (TPRDs) as required by the standards, and their release path must be considered in site design.
• Purging before service and during startup is a high-risk activity and needs written procedures.

Key point: Relief and vent design controls where hydrogen goes during abnormal events. A badly placed vent can create the fire it is meant to prevent.

---

◆ Section 9: Explosion Control

Where hydrogen is used or stored in enclosed spaces, explosion control may be required.

A. When It Is Required

IFC Section 911 requires explosion control where a deflagration hazard exists and is not otherwise mitigated. NFPA 68 and NFPA 69 provide design guidance.

B. Methods

C. Design Basis

Design must consider the worst credible release, the enclosure volume, congestion, the ventilation rate, and hydrogen’s high reactivity. Venting hydrogen deflagrations is difficult because of the fast burning velocity, so engineering analysis is needed.

Pro Tip: Coordinate explosion control with the structure early. Vent panels need a safe discharge path, and the structure must withstand the design pressure.

---

◆ Section 10: Hydrogen Fueling Stations

A. Typical IFC and NFPA 2 Requirements

B. Emergency Shutdown

Emergency manual shutdown devices must be accessible, labeled, and located away from the hazard. Activation should shut off power and hydrogen supply to affected equipment.

C. Canopies

Where a canopy covers dispensing, its design must prevent hydrogen from collecting beneath it. Avoid pockets, include venting, and keep ceilings free of traps.

D. Fueling Safety Features

Dispensing systems typically include pressure and temperature limits, communication with the vehicle, and leak checks before fueling.

Pro Tip: Give the fire department a pre-incident plan showing the shutdown locations, the gas detection panel, storage locations, and separation distances.

---

◆ Section 11: Hydrogen Fuel Gas Rooms (Indoor Installations)

Where hydrogen is used or stored indoors, a dedicated hydrogen fuel gas room may be required. IFC Section 5808 (verify the section number in your adopted edition) sets requirements such as:

Negative pressure keeps hydrogen from migrating to adjacent spaces if a leak occurs.

Pro Tip: Verify negative pressure during commissioning and periodically afterward. A room that is not under negative pressure is not containing the hazard.

---

◆ Section 12: Fire Protection and Emergency Response

A. Fire Protection Approach

Hydrogen fires are controlled mainly by cutting off the fuel, not by extinguishing the flame. Fixed protection supports this goal:

• Automatic or manual shutoff of hydrogen supply
• Sprinklers or water spray for exposure protection and cooling of nearby equipment, as required by NFPA 2, NFPA 13, and the adopted codes
• Portable extinguishers at dispensers and equipment areas
• Fire alarm integration, so gas alarms and shutdowns report through NFPA 72 systems

B. The “Let It Burn” Principle

Extinguishing a hydrogen flame without stopping the leak can allow an unburned cloud to form and re-ignite explosively. The standard strategy is to isolate the supply, let the fire burn out, and cool exposures with water.

C. Firefighter Considerations

• Use thermal imaging cameras, since the flame is nearly invisible.
• Approach from upwind and avoid enclosed spaces where gas may collect.
• Cool nearby vessels, but do not spray water on liquid hydrogen vents or cold piping in ways that cause freezing and blockage.
• Treat any hydrogen vessel exposed to fire as a potential BLEVE or relief-release hazard.

D. Hydrogen Vehicles in Garages

Fuel cell vehicles have onboard storage with thermally activated relief devices that vent hydrogen in a fire. Parking facilities should consider ventilation and detection, as required by the adopted codes, and responders should be trained in vehicle emergency response.

E. Pre-Incident Planning

Provide the fire department with site plans, the hazard summary, shutoff and detection locations, and contact information for the system operator.

---

◆ Section 13: Maintenance, Operations, and Training

A. Inspection and Maintenance

NFPA 2, NFPA 55, and the IFC establish maintenance and inspection requirements, including:

• Periodic maintenance by qualified personnel (typically annually)
• Checks for physical damage, leak tightness, grounding, vents and relief devices, equipment identification, warning signs, and alarm and shutdown function
• Calibration and function testing of gas detectors
• Written records retained for the period the code requires (commonly at least 3 years; verify in your edition)

B. Personnel Training

Personnel must be trained in hydrogen hazards, safe operation, leak response, emergency shutdown, and evacuation. Keep training records.

C. Management of Change

Changes to hydrogen quantities, piping, or equipment need review before they are implemented, so the safety layers remain valid.

Pro Tip: Include the hydrogen system in the building’s fire safety management system. The maintenance and training records are the evidence of compliance.

---

◆ Section 14: Common Challenges and Mistakes

Key point: Most hydrogen safety failures are failures of the safety layers (detection, ventilation, electrical control, and procedures), not of the equipment alone.

---

◆ Section 15: Design Checklist

---

◆ Section 16: Conclusion

Hydrogen presents a fire hazard fundamentally different from conventional fuels. The flame is nearly invisible, the flammability range is very wide, the ignition energy is very low, and the gas can embrittle the metals that contain it. Protection must address these specific hazards through layers: siting, material selection, leak prevention, detection, ventilation, ignition control, relief and venting, explosion control, and emergency response.

The most common failure is treating hydrogen like a conventional fuel. Design for how hydrogen actually behaves, engage the AHJ and the fire department early, and maintain the safety systems for the life of the installation.

Key Takeaways:

• Hydrogen flames are nearly invisible in daylight, so visual detection is unreliable.
• The flammability range is very wide (about 4% to 75% in air).
• Ignition energy is very low; static electricity can ignite hydrogen.
• Hydrogen can embrittle metals, so material selection matters.
• NFPA 2 is the primary standard; NFPA 55 directs users to NFPA 2.
• Hydrogen rises, so place gas detection at high points and near leak sources.
• Ventilation must be interlocked with detection and on standby power.
• Electrical equipment in hydrogen areas must be rated for Class I, Group B.
• Vents and relief discharges must go to a safe outdoor location.
• Fires are usually handled by isolating the supply, not by extinguishing the flame.
• Maintenance, training, and records are the evidence that the system is being managed.

Take Action Today:

1. Confirm the adopted NFPA 2, IFC, and IBC editions.
2. Identify the hydrogen application, quantity, pressure, and storage form.
3. Verify separation distances or obtain equivalency approval.
4. Install gas detection at high points, interlocked with ventilation.
5. Verify ventilation is on standby power.
6. Define electrical classification and confirm equipment ratings.
7. Verify the location of vents and relief discharge.
8. Evaluate explosion control for enclosed spaces.
9. Install emergency shutdown devices and verify accessibility.
10. Establish a maintenance program with detector testing and records.
11. Train personnel on hydrogen hazards and emergency response.
12. Coordinate with the fire department on pre-incident planning.

Continue Reading from Our Series:

• Related guide: Article 151, Lithium-Ion Battery Fire Safety and Energy Storage Systems
• Related guide: Article 152, Solar Panel and PV System Fire Safety
• Related guide: Article 153, Electric Vehicle Charging Station Fire Safety
• Read more: Article 155, Wildfire Resilience for Commercial Buildings (planned)

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and a qualified fire protection engineer for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references the International Fire Code (IFC), including Section 1207 (Energy Storage Systems) and Section 320 (Lithium-Ion Battery Storage, where applicable); NFPA 1, Fire Code; NFPA 101, Life Safety Code; NFPA 70 (National Electrical Code, NEC), including Article 625 (Electric Vehicle Power Transfer System); NFPA 13 (Sprinkler Systems); NFPA 72 (National Fire Alarm and Signaling Code); NFPA 88A (Parking Structures); NFPA 855 (Stationary Energy Storage Systems, where EV charging is paired with battery storage); UL 2202 (EV Charging System Equipment); UL 2594 (EV Supply Equipment); UL 2251 (Plugs, Receptacles, and Couplers for EVs); UL 2231 (Personnel Protection Systems for EV Supply Circuits); UL 9741 (Bidirectional EV Charging System Equipment); and UL 9540 (Energy Storage Systems and Equipment). Model code editions referenced are the 2021 and 2024 IFC and the 2023 and 2026 NEC. EV charging requirements vary by jurisdiction, by installation type (residential, indoor, outdoor, parking structure, fleet depot), and by the adopted code edition. Some jurisdictions have adopted specific EV charging provisions; others rely on general fire code provisions. Section numbers cited here follow the model codes and may differ in your adopted edition. Local amendments and the edition adopted by your Authority Having Jurisdiction (AHJ) always control. This guide is a starting point only. Always verify the requirements applicable to your project with your AHJ and a qualified fire protection engineer.

Electric vehicles are no longer a niche product. They are a growing share of new vehicle sales, and the charging infrastructure to support them is being installed in every type of building: residential garages, office parking, retail centers, hotels, fleet depots, and public parking structures. Each charging station is a connection point between the building’s electrical system and a high-energy lithium-ion battery.

EV charging station fire safety is the discipline of understanding the hazards that EV charging introduces and applying the codes and standards that address them. The hazards differ from conventional vehicle fires: the battery can enter thermal runaway, the fire can be difficult to extinguish, it can reignite, and the location of the charging station determines the exposure of the building and its occupants.

The regulatory landscape is still evolving. The IFC addresses EV charging in several places rather than in one consolidated section. The NEC governs the electrical installation. NFPA 88A governs parking structures but does not address EV charging specifically. NFPA 855 governs stationary battery storage where it is paired with charging. The AHJ has significant discretion in applying these requirements to a specific installation.

This article covers the hazards of EV charging, the charging equipment itself, the governing codes, siting for indoor, outdoor, and parking structure installations, ventilation, detection, suppression, pairing with energy storage, fire department response, and how to operate and maintain EV charging infrastructure safely.

◆ Section 1: Why EV Charging Is a Fire Safety Concern

An EV charging station is a connection point to a high-energy lithium-ion battery. The battery is the main fire hazard, not the charging equipment itself, but the equipment and its location determine the exposure.

Factor	Conventional Vehicle Fire	EV Fire
Fuel	Gasoline or diesel	Lithium-ion battery (plus conventional vehicle materials)
Fire development	Rapid, but generally predictable	Thermal runaway can be sudden and difficult to predict
Suppression	Water, foam, dry chemical	Sustained water cooling; smothering is not effective
Reignition	Possible but uncommon	Possible; can occur hours or days later
Gas generation	Combustion products	Flammable and toxic gases (hydrogen, CO, hydrogen fluoride, electrolyte vapors)
Extinguishing effort	Minutes to hours	Often hours and large volumes of water
Location	Vehicle	Vehicle and charging equipment

Research generally finds that peak heat release from an EV fire is comparable to that of a modern conventional vehicle. The difference is in what follows: battery reignition, toxic gas, and the effort needed to cool the battery fully. Sprinklers can control the spread of an EV fire, but they typically will not extinguish a burning battery pack.

A. The Thermal Runaway Risk

A lithium-ion battery can enter thermal runaway under conditions such as:

• Internal short circuit (manufacturing defect, damage, degradation)
• Overcharging (rare with a modern battery management system, but possible with equipment failure)
• External heat exposure (adjacent vehicle fire, building fire)
• Mechanical damage (collision, impact, underbody strike)
• Water damage: vehicles that have been flooded, especially by saltwater, can ignite days or weeks later

B. The Charging Equipment Risk

The charging equipment (electric vehicle supply equipment, or EVSE) is not the primary hazard, but it can contribute to a fire:

• Electrical faults can create arc hazards
• Worn, contaminated, or damaged connectors can create resistance and overheating
• Cable damage can cause short circuits
• Improper installation, such as loose terminations or undersized conductors, can cause overheating

C. The Location Risk

• Indoor garage: fire can spread to the building, and smoke and gases accumulate
• Parking structure: fire can spread to adjacent vehicles and challenge the structure
• Outdoor surface lot: fire is more contained but can spread to adjacent vehicles
• Near building openings: fire and smoke can enter the building
• Residential garage: often attached to sleeping areas, with limited detection and suppression

Key point: The fire hazard of EV charging is the battery in the vehicle, not the charging equipment. The charging equipment is the connection point, and the location determines the exposure.

Key Article: Article 151 — Lithium-Ion Battery Fire Safety and Energy Storage Systems

Pro Tip: Treat an EV fire as a lithium-ion battery fire, not a conventional vehicle fire. The strategies are different, and the incident may require hours of cooling and monitoring.

◆ Section 2: Charging Equipment and Power Levels

The fire safety considerations depend partly on how much power is delivered and how the equipment is built.

Charging Level	Typical Supply	Typical Power	Common Locations
Level 1	120 V AC, cord-and-plug	About 1.4 to 1.9 kW	Residential garages, some workplaces
Level 2	208/240 V AC	About 3.3 to 19.2 kW	Homes, workplaces, hotels, retail, parking structures
DC fast charging	Three-phase AC input converted to DC in the charger	50 kW to 350 kW or more	Corridors, retail, fleet depots

Key considerations:

• Continuous load. EV charging is a continuous load, so conductors and overcurrent devices are sized accordingly (NEC Article 625 and Article 220 load calculations).
• Load management. Energy management systems can limit demand so that more chargers can share a service. The NEC recognizes them, but they must be listed and configured correctly so that they do not overload conductors.
• Connectors. Standardized interfaces (such as SAE J1772, CCS, and NACS/J3400) reduce compatibility problems. The practical connector risk is wear, contamination, bent pins, and damaged cables, not mismatched hardware.
• Bidirectional charging. Vehicle-to-load and vehicle-to-grid systems can feed power back into a building. They add interconnection and isolation requirements (see Section 9).
• Higher power, more heat. DC fast chargers carry high currents and often use liquid-cooled cables. They warrant closer attention to installation quality, thermal monitoring, and maintenance.

Key point: Understand the power level and equipment type before determining the protection strategy. Higher power increases the electrical and thermal stress on connectors, cables, and conductors.

◆ Section 3: The Codes and Standards

EV charging is governed by a combination of codes and standards. The requirements overlap and depend on the installation type.

A. IFC

IFC Provision	Subject
Chapter 5	Fire service features (fire department access, water supply)
Chapter 9	Fire protection systems (sprinklers, standpipes, alarm and detection)
Chapter 10	Means of egress
Chapter 12	Energy systems, including Section 1207 for energy storage systems paired with charging
Section 320	Lithium-ion battery storage, where applicable
Chapter 23	Motor fuel-dispensing facilities, where charging is co-located with fuel dispensing

The IFC does not have a single consolidated section for EV charging. Requirements are distributed, and the AHJ applies them based on the installation.

B. NEC Article 625

The NEC governs the electrical installation. Key requirements include (confirm section numbers in your edition):

• Listed equipment (UL 2202, UL 2594) and listed personnel protection (UL 2231)
• Disconnecting means for EVSE rated above 60 A or above 150 V to ground (625.43)
• GFCI protection for personnel for applicable receptacles (625.54)
• Mounting height: indoor EVSE at least 18 in. above the floor, outdoor at least 24 in. (625.50)
• Ventilation where the equipment is listed for charging that requires it, such as vehicles with vented lead-acid batteries (625.52)
• Cord and cable management and protection from damage
• Overcurrent protection, grounding, and bonding

C. NFPA 88A

NFPA 88A governs parking structures, including ventilation, fire protection, and construction. It is a general parking structure standard and does not contain EV-specific charging provisions, so the AHJ decides how it is applied to EV charging.

D. NFPA 855

Where EV charging is paired with a stationary battery system, NFPA 855 and IFC Section 1207 apply to the battery system.

E. UL Standards

Standard	Subject
UL 2202	EV Charging System Equipment
UL 2594	EV Supply Equipment
UL 2251	Plugs, Receptacles, and Couplers for EVs
UL 2231	Personnel Protection Systems for EV Supply Circuits
UL 9741	Bidirectional EV Charging System Equipment
UL 9540	Energy Storage Systems and Equipment

Key point: EV charging is governed by multiple codes and standards. The AHJ determines which apply based on the installation type and the adopted editions.

Pro Tip: Engage the AHJ early. The requirements are not consolidated, and the AHJ’s interpretation determines the scope of protection.

◆ Section 4: Siting and Installation: Indoor, Outdoor, and Parking Structures

A. Outdoor Installations

Consideration	Good Practice
Separation from building	Keep charging spaces away from building openings, combustible cladding, and combustible storage
Vehicle spacing	Provide spacing or layout that limits fire spread between vehicles
Fire department access	Keep clear access to the charging area
Water supply	Hydrant or other water source within reach
Physical protection	Bollards or wheel stops to prevent vehicle impact on equipment
Canopies	Do not let canopies or weather protection add combustible fuel load
Signage	Emergency contact information and shutdown procedures

B. Indoor Installations

Consideration	Good Practice
Ventilation	Mechanical ventilation to remove smoke and gases
Detection	Smoke, heat, or other detection appropriate to the space
Suppression	Sprinkler protection per NFPA 13
Separation	Separation from other occupancies as required by the building code
Egress	Egress paths kept clear of cables and equipment
Fire department access	Access to the charging area and to the equipment disconnects
Signage	Emergency contact information and shutdown procedures

C. Parking Structures

Parking structures are a hybrid case: partially enclosed but often open to the exterior. Requirements depend on how open the structure is, how many chargers are installed, the fire protection features present, and the AHJ’s interpretation. Enclosed parking garages are generally required to be sprinklered by the building code (IBC Section 903.2.10); open parking structures generally are not, which affects how much protection is available at the charger.

D. Where to Place Chargers

The following are common good practices, not universal code requirements:

• Cluster chargers rather than scattering them, so that protection, signage, and access can be concentrated
• Keep charging spaces away from exit stairs, exit doors, and the main egress path
• Locate them within full sprinkler coverage and near perimeter openings where smoke can vent
• Avoid placing them directly under or beside air intakes, occupied spaces, or critical equipment
• Favor ground-level or easily reached locations for fire department operations
• Provide clear separation between charging bays and storage of combustibles

Key point: Indoor installations need more protection than outdoor ones because smoke and fire are confined. Siting decisions made early cost far less than retrofits.

Pro Tip: For indoor installations, provide ventilation, detection, and suppression as a coordinated package. For parking structures with significant EV charging, use a fire protection engineer experienced with parking structures.

◆ Section 5: Ventilation

Ventilation serves two purposes: normal operation and emergency smoke and gas removal.

A. Normal Ventilation

Normal ventilation maintains air quality and removes heat. NEC 625.52 requires mechanical ventilation only for equipment listed for charging that requires it (for example, vehicles with vented lead-acid batteries). Modern lithium-ion EVs generally do not need ventilation for normal charging, but enclosed garages still need ventilation under NFPA 88A and the mechanical code to control carbon monoxide.

B. Emergency Ventilation

Emergency ventilation removes smoke and flammable gases during a fire. It may be part of a smoke control system or a dedicated exhaust system, as required by the AHJ. Ventilation cannot prevent or stop thermal runaway; its purpose is to help occupants and responders manage smoke and gas.

C. Design Considerations

Factor	Consideration
Exhaust rate	Based on expected smoke and gas generation and the applicable code
Makeup air	Adequate makeup air so the exhaust system performs
Controls	Automatic activation on detection, with manual override for firefighters
Reliability	Standby power where required
Discharge location	Away from occupied areas and air intakes

Key point: Ventilation is a critical layer for indoor EV charging. It supports occupant safety and firefighting operations.

Pro Tip: Coordinate the ventilation design with the fire alarm system so that it activates on detection and can be controlled from a location accessible to firefighters.

◆ Section 6: Detection and Alarm

Detection provides early warning of a fire or thermal runaway event.

A. Detection Types

Type	Application and Limitations
Smoke detection	General area coverage; vehicle exhaust and dust can cause nuisance alarms in garages
Heat detection	Common in garages where smoke detection is impractical; slower to respond
Air sampling or video flame/smoke analytics	Option for large or open spaces
Off-gas detection	Early warning of battery venting; well proven for enclosed stationary batteries, but less proven for vehicles that arrive and leave
Thermal imaging	Continuous monitoring of high-value or high-density charging areas
EVSE self-monitoring	Many chargers monitor temperature and faults and can stop charging automatically

B. Off-Gas Detection in Context

A failing battery vents flammable and toxic gases before ignition, and detection of that gas can provide earlier warning than smoke detection. Off-gas detection is well established for stationary battery rooms. For vehicles it is an emerging option and is not currently required by the model codes, so treat it as a supplement to, not a replacement for, code-required detection.

C. Alarm Integration

Detection should be integrated with the building fire alarm system, in accordance with NFPA 72. The alarm should:

• Notify occupants
• Activate emergency ventilation where provided
• Notify the fire department
• De-energize the charging equipment where an automatic shutdown or shunt trip is provided

D. The AHJ’s Requirements

Detection requirements depend on the AHJ and the installation. Some jurisdictions require smoke detection; others accept heat detection or other approaches.

Key point: Detection provides early warning, but the right type depends on the environment. Garages are difficult environments for smoke detection.

Pro Tip: For high-density indoor charging, discuss supplemental detection (such as thermal imaging or off-gas detection) with the AHJ and make sure it is monitored by someone who can act on it.

◆ Section 7: Suppression and Water Supply

Suppression of an EV fire is fundamentally about cooling the battery, not smothering the fire.

A. Water Is the Most Effective Agent

Water absorbs heat and can slow or stop thermal runaway from propagating to adjacent cells and vehicles. Large, sustained volumes are typically needed to cool the battery pack.

B. Sprinkler Protection

In a sprinklered building, the sprinkler system provides general protection. NFPA 13 classifies parking garages as Ordinary Hazard Group 1. NFPA 13 does not currently include a special design density for EV fires, so the system is designed as for any parking garage. Sprinklers help control fire growth and limit spread to adjacent vehicles and the structure. They are not expected to extinguish a battery fire. Any enhanced protection beyond the code minimum is a decision for the owner, insurer, and AHJ.

C. Specialized Suppression

Some installations use water mist, aerosol, or proprietary agents. Any such system should be listed or approved for the application and evaluated by the AHJ. Evidence of effectiveness on full-size vehicle battery fires is limited, so do not assume a specialized system replaces fire department operations.

D. Standpipes and Water Supply

Standpipes, hydrants, and fire department connections allow the fire department to deliver the sustained water flow an EV fire may require. Verify that the water supply, hose reach, and access routes support extended operations (NFPA 14, NFPA 24, and IFC Chapter 5 as applicable).

E. The Fire Department’s Role

The fire department is the primary resource for extinguishing an EV fire. Building fire protection features support that work by providing early detection, controlling the fire until responders arrive, providing ventilation, and providing access.

Key point: The building’s suppression system controls the fire until the fire department arrives. The fire department is the primary resource for extinguishing an EV fire.

Pro Tip: Coordinate with the fire department on EV fire tactics and water supply before an incident, not during one.

◆ Section 8: EVSE Installation, Shutdown, and Signage

A. Listing and Installation

EVSE must be listed (UL 2202, UL 2594) and installed per the NEC and the manufacturer’s instructions. Listing verifies that the equipment meets safety standards; proper installation verifies that it is connected and protected correctly. Torque on terminations, conductor sizing, and ground-fault protection are common areas where installation quality affects fire risk.

B. Disconnecting Means and Emergency Shutdown

The NEC requires a disconnecting means for larger EVSE (above 60 A or above 150 V to ground). The disconnect, and any emergency shutoff provided, should be:

• Readily accessible to responders
• Clearly labeled
• Located in a place that does not require entering a hazardous area

If the AHJ requires or the owner provides an emergency shutoff for a charging area, make sure it is tested and shown on the pre-incident plan.

C. Cable Management and Physical Protection

Keep cables off the ground and out of egress paths when not in use, and protect equipment from vehicle impact. Damaged cables and connectors should be removed from service immediately.

D. Signage

Each charging station or group of stations should identify:

• The equipment rating
• Emergency contact information
• Shutdown procedures and disconnect location
• Instructions for users to report damage or abnormal operation

Key point: The charging equipment is a code-regulated electrical installation. It must be listed, installed correctly, labeled, and maintained.

◆ Section 9: EV Charging with Energy Storage and Bidirectional Charging

EV charging is increasingly paired with stationary battery storage to buffer demand, provide backup power, or support grid services. Bidirectional charging (UL 9741) lets vehicle batteries serve similar roles.

A. The Interaction

A stationary battery paired with charging creates two lithium-ion hazards in the same location: the vehicles and the stationary battery. The hazards are similar (thermal runaway, propagation, gas generation), but the systems are separate and governed by different requirements.

B. NFPA 855 and IFC 1207

Where the stationary battery is a significant installation, NFPA 855 and IFC Section 1207 apply. Requirements include detection, suppression, explosion control, spacing, and separation from vehicles and exposures.

C. Bidirectional Systems

Bidirectional charging introduces interconnection requirements (NEC Article 625 and the interconnection provisions of Article 705). Isolation, anti-islanding, and shutdown behavior must be verified so that responders are not exposed to an unexpectedly energized system.

D. The Fire Risk

A fire in the stationary battery can involve nearby vehicles, and a vehicle fire can involve the stationary battery. The fire safety design must address both.

Key point: EV charging paired with stationary storage introduces additional hazards. Design for both the vehicles and the storage system.

Key Article: Article 151 — Lithium-Ion Battery Fire Safety and Energy Storage Systems

◆ Section 10: Fire Department Response and Pre-Incident Planning

EV incidents require tactics and planning beyond conventional vehicle fires.

A. Response Considerations

• Identify the vehicle. Manufacturer emergency response guides explain how to identify the vehicle, locate high-voltage components, and de-energize it. Responders should treat high-voltage cables (typically orange) as energized.
• Sustained water application. Cooling a battery fire can take large volumes of water, often thousands of gallons, and extended operating time.
• Monitoring. Thermal imaging cameras help responders track battery temperature and detect reignition risk after the visible fire is out.
• Containment. Some departments use fire blankets or other containment tools to limit spread. These are not a substitute for cooling the battery.
• Gas and smoke. Responders should expect toxic and flammable gases and use appropriate respiratory protection and ventilation.

B. After the Fire

• A damaged or burned EV can reignite hours or days later. It should be moved to an open area away from buildings, other vehicles, and combustibles, and monitored.
• Tow operators and storage yards should be told that the vehicle is an EV involved in a fire.
• Remove damaged vehicles from parking structures and garages as soon as it is safe to do so.

C. Pre-Incident Planning

The pre-incident plan for a property with EV charging should include:

• The location of chargers, disconnects, and any emergency shutoff
• Water supply and standpipe locations
• Ventilation controls and how to operate them
• Locations of any stationary battery systems
• Facility contacts and the charging network operator’s emergency contact
• Access routes and staging areas

Key point: Fire department familiarity with the installation before an incident is one of the most effective and least expensive safety measures.

Pro Tip: Invite the local fire department to walk the charging area and review the plan. Offer to share the equipment’s shutdown procedures.

◆ Section 11: Operations, Maintenance, and Training

A. Maintenance Program

Include EVSE in the building’s inspection and maintenance program:

• Inspect cables, connectors, and housings for wear, heat damage, or contamination
• Verify signage, labels, and disconnect accessibility
• Test GFCI and ground-fault protection per the manufacturer
• Have a qualified electrician perform periodic thermographic scanning and verify terminations, where the facility’s program calls for it
• Test ventilation and detection controls on the same schedule as other life safety systems

B. User Guidance

Post simple instructions: do not use damaged cables or connectors, do not charge a visibly damaged or flooded vehicle, and report unusual smells, smoke, or sparks immediately.

C. Vehicle Restrictions

Consider a policy against charging or parking vehicles with known battery damage or that have been flooded, especially in enclosed structures.

D. Fire Safety Plan and Training

Update the building fire safety plan to include EV charging: who calls the fire department, how to shut down chargers safely, how to evacuate, and who meets responders. Train facility staff on the plan.

Key point: EV charging safety depends on ongoing maintenance and operations as much as on the original design.

◆ Section 12: Common Challenges and Solutions

Challenge or Mistake	Why It Happens	Solution
Treating an EV fire as a conventional vehicle fire	Hazard is not recognized	Plan for lithium-ion battery behavior
No consolidated IFC section	Requirements are distributed	Engage the AHJ early and use multiple code sections
Only normal ventilation	Emergency conditions not considered	Add emergency ventilation where required or advised
Detection too late or nuisance alarms	Smoke detection in a garage environment	Select detection suited to the space; consider supplemental options
Assuming sprinklers will extinguish the fire	Misunderstanding of sprinkler role	Plan for control, then fire department cooling
Parking structure requirements overlooked	NFPA 88A not considered	Engage a fire protection engineer
Stationary battery not addressed	NFPA 855 not considered	Evaluate and apply NFPA 855 and IFC 1207
Disconnect not accessible or labeled	Overlooked	Verify location, labeling, and responder access
Signage missing	Overlooked	Install at each station
Fire department not informed	No pre-incident planning	Coordinate and share the plan
Maintenance not performed	EVSE not in the maintenance program	Add periodic inspection
No fire safety plan	EV charging not addressed	Develop and implement a plan

Key point: Most EV charging fire safety failures come from not recognizing that the hazard differs from conventional vehicle fires and that the requirements are spread across multiple documents.

◆ Section 13: Design Checklist

Item	Status	Notes
Adopted IFC and NEC editions confirmed	☐	IFC 2021 or 2024; NEC 2023 or 2026
Installation type identified	☐	Indoor, outdoor, parking structure, fleet
AHJ pre-submittal meeting held	☐	Confirm requirements
EVSE listed and installed per NEC	☐	UL 2202, UL 2594, UL 2231
Disconnecting means provided	☐	Accessible and labeled
Charger locations reviewed	☐	Away from egress, within sprinkler coverage, protected from impact
Ventilation provided (indoor)	☐	Normal and emergency as required
Detection provided	☐	Suited to the space
Suppression provided	☐	Sprinkler per NFPA 13; water supply verified
NFPA 88A applied (parking structure)	☐	Ventilation, fire protection, construction
NFPA 855 and IFC 1207 applied (stationary battery)	☐	If applicable
Bidirectional charging reviewed	☐	UL 9741, interconnection, shutdown
Signage installed	☐	At each station
Fire department coordinated	☐	Pre-incident plan
Fire safety plan updated	☐	Include EV charging
Maintenance program includes EVSE	☐	Periodic inspection

◆ Section 14: Conclusion

EV charging station fire safety is a distinct discipline. The hazard is the lithium-ion battery in the vehicle, not the charging equipment. The charging equipment is the connection point, and the location determines the exposure.

The regulatory landscape is evolving. The IFC addresses EV charging in multiple sections, the NEC governs the electrical installation, NFPA 88A governs parking structures, and NFPA 855 governs stationary battery storage. The AHJ determines which requirements apply to a specific installation.

The critical elements are:

• Recognition: EV fires are lithium-ion battery fires
• Code compliance: IFC, NEC, NFPA 88A, NFPA 855
• Siting: away from egress and exposures, within sprinkler coverage
• Ventilation, detection, and suppression: designed as a coordinated package for indoor installations
• Equipment: listed, correctly installed, labeled, and maintained
• Fire department coordination: pre-incident planning and response
• Operations: maintenance, user guidance, and training

The most common failure is treating EV charging as a conventional electrical installation. The fire hazard is different, and the protection must be designed for it.

Key Takeaways:

• The fire hazard of EV charging is the lithium-ion battery in the vehicle, not the charging equipment.
• EV fires involve thermal runaway, gas generation, and the potential for reignition.
• The IFC addresses EV charging in multiple sections; the AHJ determines which apply.
• The NEC governs the electrical installation; NFPA 88A governs parking structures.
• Indoor installations need coordinated ventilation, detection, and suppression.
• Sprinklers control an EV fire; sustained water cooling by the fire department extinguishes it.
• Off-gas detection is an emerging supplement for vehicles, not a replacement for code-required detection.
• NFPA 855 applies where charging is paired with stationary battery storage.
• Pre-incident planning, maintenance, and training keep the installation safe over time.

Take Action Today:

• Confirm the adopted IFC and NEC editions and hold a pre-submittal meeting with the AHJ.
• Identify the installation type and review charger locations against egress and sprinkler coverage.
• Verify EVSE is listed, installed per the NEC, and has an accessible, labeled disconnect.
• Provide ventilation, detection, and suppression appropriate to the hazard.
• Apply NFPA 88A and NFPA 855 where they are relevant.
• Install signage, coordinate with the fire department, and update the fire safety plan.
• Add EVSE inspection to the maintenance program.

Continue Reading from Our Series:

• Related guide: Article 152 — Solar Panel and PV System Fire Safety
• Related guide: Article 151 — Lithium-Ion Battery Fire Safety and Energy Storage Systems
• Read more: Article 154 — Hydrogen Fuel Systems and Fire Safety (planned)

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and a qualified fire protection engineer for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references the International Fire Code (IFC), including the solar photovoltaic power systems section (Section 1204 in the 2018 and 2021 editions, renumbered Section 1205 in the 2024 edition) and Section 1207 (Electrical Energy Storage Systems); the International Building Code (IBC), including Sections 1505.8 and 1505.9 (PV fire classification), 1510.7 (rooftop-mounted PV panels and modules) and Section 3111 (Solar Energy Systems); the National Electrical Code (NEC / NFPA 70), including Article 690 (Solar Photovoltaic Systems) and Section 690.12 (Rapid Shutdown); NFPA 1, Fire Code; NFPA 101, Life Safety Code; NFPA 70B (electrical equipment maintenance); NFPA 855 (energy storage systems); UL 61730 and UL 1703 (PV module safety); UL 1741 (inverters); UL 1699B (DC arc-fault protection); UL 2703 (mounting systems and PV system fire classification); and UL 3741 (Photovoltaic Hazard Control). PV requirements vary by jurisdiction, roof type, occupancy, and adopted code edition, and rapid shutdown and pathway requirements have changed between editions. Section numbers cited here follow the model codes and may differ in your adopted edition. Local amendments and the edition adopted by your Authority Having Jurisdiction (AHJ) always control. This guide is a starting point only. Always verify the requirements applicable to your project with your AHJ and a qualified fire protection engineer.

Rooftop solar is now a standard feature of commercial buildings. It reduces energy costs, supports sustainability goals, and is increasingly required by energy codes and incentive programs. But a rooftop PV array changes the fire safety profile of the building. It introduces a source of electrical energy that cannot be switched off at the panel during daylight, it occupies the roof surface that firefighters may need for access and ventilation, and it can complicate firefighting operations.

Solar PV fire safety is the discipline of understanding these hazards and applying the codes that address them. The most important concepts are rapid shutdown, which reduces conductor voltage to a level firefighters can manage, and firefighter access pathways, the clear areas on the roof that allow firefighters to move, ventilate, and fight fires. Both are governed by the IFC and NEC, and both have changed in recent code cycles.

This article covers how PV systems fail, the applicable codes, rapid shutdown, access pathways, roof classification, arc-fault and ground-fault protection, labeling, firefighting operations, carports and ground mounts, PV with energy storage, and how to commission and maintain a PV system that is safe for the building and for the firefighters who may need to operate around it.

◆ Section 1: Why PV Systems Are a Fire Safety Concern

A PV system is not a conventional electrical system. It generates electricity whenever light reaches the modules, regardless of whether the building is occupied, the main breaker is open, or the fire department has shut off power to the building. The DC conductors between the modules and the inverter remain energized while the array is illuminated.

Factor	Conventional Electrical System	PV System
Power source	Can be disconnected at the main	Modules keep producing power while illuminated
DC hazard	Limited DC exposure	Extensive DC wiring on the roof
Firefighter access	Roof accessible	Roof partly occupied by panels and racking
Ventilation	Roof available for vertical ventilation	Panels obstruct ventilation openings
Arc hazard	AC arcs (zero-crossing helps extinguish)	DC arcs (sustained, difficult to extinguish)
Emergency shutdown	Main breaker	Rapid shutdown (NEC 690.12)

A. The DC Arc Hazard

PV systems produce direct current. A DC arc has no zero-crossing point like an AC arc, so it can sustain itself and is difficult to extinguish. DC arcs can occur at connectors, junction boxes, and damaged conductors, and they can ignite surrounding materials.

B. The “Off at Night” and “Off with the Main” Misconceptions

Two misconceptions cause most of the danger to responders. The first is that opening the main breaker de-energizes the system. It does not: the array continues to produce power on the DC side, and conductors between the array and the inverter stay live. The second is that the array is harmless at night. Output drops to zero in full darkness, but modules can produce hazardous voltage under artificial light, including fire-scene lighting, and a system with energy storage can remain energized after dark.

Key point: A PV system cannot be fully de-energized by conventional means while the modules are illuminated. Rapid shutdown reduces the hazard to a level firefighters can manage. It does not eliminate it.

Key Article: Article 151 — Lithium-Ion Battery Fire Safety and Energy Storage Systems

Pro Tip: Never assume a PV system is “off” because building power is off. Treat all PV conductors as energized until rapid shutdown has been verified.

◆ Section 2: Codes and Standards Snapshot

PV fire safety is spread across several codes. Knowing which document governs which topic avoids gaps.

Topic	Primary Reference
Rapid shutdown, arc-fault, grounding, wiring	NEC Article 690 (Section 690.12 for rapid shutdown)
Roof access, pathways, setbacks, marking	IFC solar section (1204 in 2018/2021; 1205 in 2024)
Roof fire classification	IBC 1505.8, 1505.9, 1510.7; UL 2703
Structural loads, wind, rooftop installation	IBC Section 3111 and Chapter 16
PV module safety and fire performance	UL 61730 (replacing UL 1703)
Mounting and racking, system fire class	UL 2703
Inverters	UL 1741
DC arc-fault protection equipment	UL 1699B
Hazard control systems	UL 3741
Energy storage paired with PV	NFPA 855, IFC Section 1207, NEC Article 706
Maintenance of electrical equipment	NFPA 70B

Key point: The NEC governs how the system is wired and shut down. The IFC governs how it is arranged on the roof and marked for responders. The IBC governs roof classification and structure. All three must be satisfied.

Pro Tip: Confirm the adopted edition of each code at the start of design. The 2018, 2021, and 2024 IFC and the 2020, 2023, and 2026 NEC differ in ways that change layouts and equipment.

◆ Section 3: Rapid Shutdown (NEC Section 690.12)

Rapid shutdown is the most important PV fire safety requirement. It requires that PV system conductors be reduced to a lower, safer voltage within a specified time after the shutdown initiator is operated. It applies to PV systems on or in buildings. Ground-mounted arrays that are not on buildings are generally outside its scope.

A. How the Requirement Evolved

NEC Edition	Requirement
2014	Conductors more than 10 feet from the array, or more than 5 feet inside a building, reduced to 30 V within 10 seconds
2017	Array boundary defined (1 foot from the array). Conductors outside the boundary, or more than 3 feet inside a building, reduced to 30 V within 30 seconds. Conductors inside the boundary reduced to 80 V within 30 seconds (enforced from January 1, 2019), which in practice requires module-level power electronics
2020	Added the option of a listed PV Hazard Control System (UL 3741) inside the array boundary, a single initiation device for the PV system, and equipment requirements for rapid shutdown devices
2023	Retained the 30 V outside / 80 V or PV Hazard Control System inside structure, with refinements to initiation, equipment, and marking
2026	Reorganized the rapid shutdown provisions for clarity; voltage and time targets are unchanged

In current editions, controlled conductors outside the array boundary must be at or below 30 V within 30 seconds of initiation. Inside the boundary, they must be at or below 80 V within 30 seconds, or the system must be a listed PV Hazard Control System.

B. The Initiation Device

The rapid shutdown initiation device must be:

• Clearly labeled
• Readily accessible to firefighters, typically at or near the service disconnect or at another approved location
• Capable of initiating rapid shutdown for the whole PV system

The building’s main disconnect often serves as the initiator, but not always. Some systems use a dedicated switch, so the label must say which device does the job.

C. UL 3741 and PV Hazard Control Systems

UL 3741 evaluates the array as a complete system: modules, racking, wiring, and shutdown equipment, installed exactly as listed. It provides an alternative to module-level shutdown inside the array boundary. Because the listing relies on protected wiring and a prescribed installation, some listed systems may allow higher voltages inside the array than the 80 V limit. Responders must therefore read the labels and not assume every array is at 80 V or less after shutdown.

D. The Practical Gap

Rapid shutdown controls the conductors. The modules themselves still produce voltage whenever they are illuminated, so a module, a module-level device, or the wiring within a module string remains a shock hazard. Rapid shutdown also does not stop a fire from starting at a connector or in an inverter, and it cannot work if the shutdown equipment has failed.

Key point: Rapid shutdown reduces the DC hazard to a level firefighters can manage. It does not eliminate it.

Pro Tip: Test the initiation device and confirm the voltage drop at commissioning and periodically after, and verify that the initiator is labeled and reachable without a ladder or key.

◆ Section 4: Firefighter Access Pathways (IFC Solar Section)

The IFC solar section (1204 in the 2018 and 2021 editions, 1205 in the 2024 edition) establishes roof access, pathway, setback, and smoke ventilation requirements. These allow firefighters to move across the roof, access ventilation points, and escape.

A. Typical Pathway Requirements

The requirements depend on occupancy and roof configuration. The following are representative of the IFC; confirm the exact dimensions in your adopted edition.

Occupancy / Condition	Representative Requirement
Group R-3 (one- and two-family dwellings)	At least two 36-inch pathways on separate roof planes from the lowest roof edge to the ridge, plus ridge setbacks that vary by edition and by whether the building is sprinklered
Other than R-3 (commercial buildings)	Perimeter pathway to the roof edge: 6 feet wide where either roof axis exceeds 250 feet, or 4 feet where both axes are 250 feet or less
Interior pathways	4-foot-wide pathways that divide large arrays into sections (arrays are commonly limited to 150 by 150 feet) and that lead to roof access points and hatches
Smoke ventilation	Provisions such as wider pathways or ventilation cut-outs so firefighters can vent without cutting through panels
Low-slope roofs	Commonly treated separately from steeper roofs, and many jurisdictions modify this section locally
Ground-level marking	Newer editions require roof pathways and access to be identified so responders can find them from the ground

B. The Purpose of the Pathways

• Access: allow firefighters to move across the roof and reach stairs, hatches, and ladders
• Ventilation: provide clear areas for vertical ventilation
• Setback: keep panels away from roof edges, ridges, and valleys where firefighting operations occur
• Egress: give firefighters a clear route off the roof

C. The Edition Question and Exceptions

Pathway and setback requirements have changed between editions (for example, older editions required 3-foot ridge setbacks). Many jurisdictions allow exceptions where the fire code official determines that rooftop operations will not be employed, and many adopt local amendments. Some jurisdictions add requirements such as two roof access points or continuous maintenance of pathways and labels.

Key point: Firefighter access pathways are a life safety requirement for firefighters. They must be maintained. Storing equipment or materials in the pathways, or adding rooftop units, conduits, or panels later, defeats their purpose.

Key Article: Article 69 — How to Design Firefighter Access and Building Features for Rescue Operations

Pro Tip: Show the pathways on the roof plan submitted with the permit, and re-check them whenever rooftop equipment is added.

◆ Section 5: Roof Classification and Roof Interaction

A rooftop PV array changes the way the roof performs in a fire.

A. The Classification Requirement

IBC Section 1505.9 requires rooftop-mounted PV panel systems to be tested, listed, and identified with a fire classification in accordance with UL 2703 (with modules listed to UL 61730 or UL 1703). The fire classification must comply with IBC Table 1505.1 based on the construction type of the building. The 2012 and earlier approach, where the PV system simply matched the roof assembly’s classification, has been superseded.

B. The Nuance

The required PV classification comes from the building’s construction type. The PV system must be installed exactly according to its listing, so the listing must permit the roof slope, mounting height, and module type chosen. A listing for a different configuration may not apply.

C. Building-Integrated PV (BIPV)

BIPV products installed as the roof covering must be tested, listed, and labeled for fire classification like any other roof covering (IBC Section 1505.8).

D. How PV Interacts with the Roof

• Combustible roof materials: Heat or an arc beneath modules can ignite membranes, insulation, or debris, and the shaded, enclosed space under an array can hold heat and debris.
• Penetrations and conduit: Roof penetrations and conduit runs that cross the roof can carry fire into the building. Penetrations must be sealed and fire-stopped where they pass through rated assemblies.
• Ballasted and flush-mounted systems: Low-profile or ballasted systems leave little air gap, so heat and debris are harder to dissipate and detect.
• Structural load: Panels, racking, and ballast add dead load, and a fire-weakened roof can fail sooner under that added load.

Key point: The PV system has its own fire classification, separate from the roof assembly. Both must comply with their respective requirements.

Key Article: Article 137 — Roof Assemblies and Fire Classification

Pro Tip: Require the UL 2703 listing for the specific PV system and mounting configuration, and verify the roof type and slope are covered by it.

◆ Section 6: DC Arc-Fault and Ground-Fault Protection

A. DC Arc-Fault Protection

NEC Section 690.11 requires listed DC arc-fault circuit protection for PV systems on or in buildings with DC circuits operating at 80 volts or more. The protection must detect and interrupt series arcs in the DC conductors. Equipment is evaluated under UL 1699B, and inverters are listed under UL 1741.

DC arc-fault detection is more complex than AC detection because the DC arc has no zero-crossing point. Nuisance tripping has been an issue, and the technology has evolved over NEC editions.

B. Ground-Fault Protection

Ground faults in PV arrays are a recognized ignition source. A fault current path that is not detected can heat conductors or burn at a damaged point for a long time. Listed inverters include ground-fault detection and interruption, and this protection must be verified and kept enabled.

C. The Fire Risk

A DC arc or sustained ground fault can ignite roof materials, wiring insulation, and debris. Arc-fault and ground-fault protection are critical layers of PV fire safety.

Key point: Arc-fault and ground-fault protection are code requirements and critical fire safety layers. They should be verified at commissioning and kept active.

Pro Tip: Verify that the inverter or arc-fault device is listed for the application, that protection is enabled, and that any nuisance tripping is investigated and not simply disabled.

◆ Section 7: PV System Components and Failure Points

PV system fires often originate at specific components. Understanding the failure points focuses inspection and maintenance.

Component	Failure Mode	Fire Risk
Modules	Hot spots, cell failure, cracked glass, bypass diode failure	Localized heating; potential ignition of the roof
Connectors	Loose connections, corrosion, incompatible mating	DC arc; ignition of connector and surrounding material
Junction boxes and combiners	Water ingress, loose terminals	DC arc; fire within the box
DC conductors	Damage, UV degradation, abrasion, rodent damage	Short circuit; arc; ground fault
Inverters	Component failure, overheating, blocked ventilation	Fire within inverter; propagation to surrounding materials
Rapid shutdown devices	Failure to operate	Loss of rapid shutdown function
Mounting system	Corrosion, loose hardware	Module displacement; conductor damage

A. The Connector Problem

Connectors are one of the most common failure points. Loose connections, corrosion, poor crimps, and incompatible mating (mixing different manufacturers’ connectors) create resistance and heat, leading to arc faults and fire.

B. Environmental Damage

Rodents, birds nesting under arrays, falling debris, hail, and wind can damage conductors and modules and create short circuits and arc hazards. Conduit, cable management, and critter guards are important preventive measures.

C. Installation Quality

Many failures trace back to installation: wiring pinched under modules, conductors lying on the roof surface, incorrect torque, and damaged insulation.

Key point: PV fires often start at connectors, junction boxes, and inverters, not at the modules. Inspection and maintenance should focus on these components.

Pro Tip: Specify connectors from a single manufacturer, require proper crimping tools, and inspect cable routing at commissioning.

◆ Section 8: Marking, Labeling, and Information for Responders

A responder can only act on a system they can identify. Marking is therefore a core fire safety feature, and the labeling requirements come from both the NEC and the IFC.

A. Typical Marking Requirements

• Rapid shutdown label at the service equipment indicating that the building has a PV system with rapid shutdown and showing the type of shutdown
• Label at the rapid shutdown initiation device
• Labels on DC conduit, raceways, enclosures, and junction boxes warning of PV circuits
• Labels on disconnects, inverters, and combiners
• Marking of roof pathways and access points, where required by the adopted IFC

Labels must be durable, weather-resistant, and legible, and must be maintained for the life of the system.

B. Emergency Information

Provide responders with a site plan or placard showing the array layout, conductor routes, location of the initiation device, the inverter and disconnect locations, and the location of any battery system. Where batteries or multiple arrays exist, the plan should state which shutdown actions control which equipment.

Key point: Labels that are missing, faded, or incorrect are a failure of the safety system, not a cosmetic issue.

Pro Tip: Include a label audit in every annual inspection, and re-label after any alteration, reroof, or addition.

◆ Section 9: PV Systems and Firefighting Operations

Firefighters face specific challenges when a building has a rooftop PV array.

A. The Firefighter’s Perspective

Challenge	Why It Matters
Live DC conductors	Cannot be fully de-energized while illuminated
Roof access	Panels obstruct movement and ventilation
Weight	Panels and ballast add load to a fire-exposed roof
Falling and trip hazards	Damaged panels, conduit, and racking
Smoke and visibility	Panels and smoke obscure the roof surface
Water on energized equipment	Risk of shock if water contacts live conductors
Delayed restart	Modules can re-energize when light returns

B. Firefighter Safety Measures

• Locate the system and activate rapid shutdown before operations, but still treat conductors and modules as energized
• Avoid cutting, breaching, or walking on panels
• Follow the department’s guidance on water application and distance to energized equipment
• Do not rely on covering modules to stop them producing power, because light still reaches the cells
• Coordinate with the building owner or PV contractor for system information

C. After the Fire

A damaged array can remain hazardous after the fire is out. Damaged modules, wiring, and shutdown devices may still produce voltage, and the array can re-energize at sunrise. Overhaul, salvage, and demolition crews should treat the system as live until a qualified electrician has isolated it.

D. Pre-Incident Planning

The fire department should have pre-incident plans that identify the PV system location and extent, the rapid shutdown initiator location, DC conductor routes, inverter and disconnect locations, roof access points and pathways, and any battery system.

Key point: Firefighter safety depends on rapid shutdown, access pathways, labeling, and pre-incident planning. All four must be in place.

Pro Tip: Provide the fire department with a PV system diagram and walk the roof with the responding company before the system goes into service.

◆ Section 10: Carports, Ground Mounts, and Other PV Configurations

Not every PV system sits on a roof. Other configurations raise additional fire safety questions.

A. PV Carports and Canopies

Parking canopies put PV directly above vehicles, which are a significant fire source. A vehicle fire can damage the canopy and modules, and burning debris can fall. Key considerations include the classification of the canopy as a structure under the IBC, whether sprinkler or other protection is required under the adopted code, clearance for fire apparatus, rapid shutdown applicability (a canopy that functions as a building roof may trigger it), and the interaction with EV charging equipment.

B. Ground-Mounted Arrays

Ground-mounted arrays are generally outside the scope of rapid shutdown, but they still need defined access for responders, a clearly identified disconnect, and a perimeter of cleared vegetation. In wildfire-prone areas, vegetation management under and around the array is a primary fire control measure, and many jurisdictions regulate fencing, gates, and access roads.

C. Building-Integrated PV and Façades

BIPV roofs and façade-mounted PV act as the weather barrier and roof covering. They must meet the fire classification and, for façades, the exterior wall fire propagation requirements of the code. Rapid shutdown and marking still apply.

Key point: The same hazards apply to every configuration: energized conductors, arc and ground faults, and responder access. Only the rules and the access conditions change.

Key Article: Article 153 — Electric Vehicle Charging Station Fire Safety (planned)

Pro Tip: Treat a carport array as a building system, not just a canopy: coordinate the structural, fire protection, and electrical requirements with the AHJ early.

◆ Section 11: PV Systems and Energy Storage

PV systems are increasingly paired with battery energy storage systems (BESS). The combination introduces additional fire safety considerations.

A. The Interaction

A PV system paired with a BESS can generate and store energy. The BESS introduces the hazards described in Article 151: thermal runaway, propagation, and gas generation. The BESS can also keep a system energized after dark or when the grid is down.

B. Code Requirements

• NFPA 855 governs BESS installation
• IFC Section 1207 governs electrical energy storage systems
• NEC Article 706 governs energy storage systems, with interconnection requirements in Article 705 and Article 690
• PV rapid shutdown and BESS disconnection must be coordinated

C. The Fire Risk

A BESS fire is complicated by the PV system continuing to produce power. Rapid shutdown of the PV system and isolation of the BESS are both necessary for firefighting, and one does not substitute for the other.

Key point: PV and BESS are separate systems with separate hazards, but they interact. The fire safety design must address both.

Key Article: Article 151 — Lithium-Ion Battery Fire Safety and Energy Storage Systems

Pro Tip: Coordinate the PV rapid shutdown with the BESS emergency shutdown, and label so that firefighters see a single, clear shutdown procedure.

◆ Section 12: Commissioning, Inspection, and Maintenance

PV systems require commissioning and ongoing inspection, testing, and maintenance to remain safe.

A. Commissioning

• Verify rapid shutdown operation and voltage reduction
• Verify arc-fault and ground-fault protection are enabled
• Verify labeling and signage
• Verify firefighter access pathways and ground-level markings
• Verify connector compatibility and torque
• Verify grounding and bonding
• Verify UL 2703 and UL 3741 listings match what was installed
• Deliver the as-built diagram and emergency information to the owner and fire department

B. Maintenance and Inspection

• Visual inspection of modules, racking, and roof penetrations
• Inspection of connectors, junction boxes, and conductors for damage
• Infrared (thermographic) scanning of modules, connectors, and equipment for hot spots
• Inverter maintenance per the manufacturer and NFPA 70B
• Arc-fault and ground-fault protection testing
• Rapid shutdown testing
• Removal of debris, vegetation, and nests from under and around arrays

C. The Monitoring Opportunity

Many PV systems include monitoring that detects performance issues, such as a string producing less power than expected, ground-fault alarms, or inverter faults. Performance issues can indicate a failing component, which may be a fire risk, so alarms should trigger inspection and not be ignored.

D. Changes to the Building

Reroofing, rooftop equipment additions, and building alterations affect PV systems. The array may need to be removed and reinstalled, and the pathways, labels, and listings must be re-verified afterward.

Key point: PV systems are not maintenance-free. They require inspection, testing, and maintenance to remain safe.

Pro Tip: Include the PV system in the building’s annual fire safety inspection, and verify rapid shutdown, labeling, and access pathways each time.

◆ Section 13: Common Challenges and Mistakes

Challenge / Mistake	Why It Happens	Solution
Assuming PV is off when building power is off	DC conductors stay live	Treat as energized; use rapid shutdown
Rapid shutdown not labeled or labels removed	Missed at commissioning or lost in later work	Verify labeling at commissioning; audit annually
Rapid shutdown not tested	No commissioning test or ITM program	Include in commissioning and ITM
Pathways obstructed	Equipment or materials stored on the roof	Include in roof inspections; enforce
Pathways reduced by later additions	New rooftop units or arrays added without review	Re-check pathways with any roof change
Connectors incompatible or poorly made	Mixed manufacturers; poor crimping	Specify matching connectors; inspect at commissioning
Arc-fault protection disabled	Nuisance tripping	Verify enabled; investigate the cause
PV not in fire safety plan	Not treated as a fire safety feature	Add to the fire safety plan and pre-incident plan
Fire department not informed	No pre-incident planning	Coordinate with the fire department
Roof classification not verified	Overlooked at permit	Verify UL 2703 listing against the roof
PV and BESS not coordinated	Separate designers	Coordinate shutdown procedures

Key point: Most PV fire safety failures are not module failures. They are failures of the safety features (rapid shutdown, labeling, pathways, and arc-fault protection) that are installed but not maintained.

Pro Tip: Add the PV system to the building’s fire safety management system, with defined inspection, testing, and maintenance requirements.

◆ Section 14: Design Checklist

Item	Status	Notes
Adopted IFC, IBC, and NEC editions confirmed	☐	Check local amendments
Rapid shutdown system specified	☐	NEC 690.12 compliant
Initiation device labeled and accessible	☐	At service disconnect or approved location
UL 3741 listing documented (if used)	☐	Installed exactly as listed
Firefighter access pathways specified	☐	IFC solar section for the adopted edition
PV system fire classification verified	☐	UL 2703 per IBC 1505.9
Roof type and listing compatibility verified	☐	Slope, mounting height, module type
DC arc-fault and ground-fault protection specified	☐	NEC 690.11; UL 1699B
Connectors and cable management specified	☐	Compatible, same manufacturer
Labeling and signage specified	☐	Rapid shutdown, DC conductors, disconnects, pathways
Roof penetrations fire-stopped	☐	Where through rated assemblies
Carport, ground-mount, or BIPV requirements checked	☐	If applicable
Pre-incident plan and emergency diagram delivered	☐	With fire department
Fire safety plan updated	☐	Include PV system
Commissioning requirements specified	☐	Rapid shutdown, arc-fault, pathways
Maintenance requirements specified	☐	Annual inspection, IR scan
BESS coordination (if applicable)	☐	Shutdown procedures

◆ Section 15: Conclusion

Rooftop PV systems are a standard feature of commercial buildings, and they introduce fire safety considerations that must be addressed. The DC conductors remain energized while the array is lit, the roof surface is occupied by panels, and firefighters face specific challenges in accessing and ventilating the roof.

The critical elements are:

• Rapid shutdown: reduces conductor voltage to a level firefighters can manage
• Firefighter access pathways: allow firefighters to move, ventilate, and escape
• Roof classification: the PV system has its own fire classification
• Arc-fault and ground-fault protection: detect and interrupt faults before they ignite
• Component quality: connectors and junction boxes are common failure points
• Marking and responder information: firefighters must be able to find and understand the system
• Commissioning and maintenance: verify that safety features are installed and keep working

The most common failure is not a module failure. It is a failure of the safety features that are installed but not maintained.

Key Takeaways:

• PV systems generate electricity whenever the modules are illuminated, regardless of building power status.
• Rapid shutdown (NEC 690.12) reduces conductors to 30 V or less outside the array boundary, and to 80 V or less inside it (or a listed UL 3741 system), within 30 seconds.
• The modules themselves stay energized after rapid shutdown.
• The IFC solar section (1204 in 2018/2021; 1205 in 2024) establishes roof pathways and marking.
• PV systems have their own fire classification per UL 2703 (IBC 1505.9).
• DC arc-fault (NEC 690.11) and ground-fault protection are required and must be kept enabled.
• Connectors, junction boxes, and inverters are common failure points.
• Labeling, emergency diagrams, and pre-incident planning are essential for responders.
• Carports, ground mounts, and BIPV have additional considerations.
• PV paired with BESS introduces additional hazards and requires coordinated shutdown.
• Commissioning and periodic inspection verify that safety features function.

Take Action Today:

• Confirm the adopted IFC, IBC, and NEC editions.
• Verify rapid shutdown is installed, labeled, and tested.
• Verify firefighter access pathways are clear and correctly marked.
• Verify PV system fire classification per UL 2703.
• Verify DC arc-fault and ground-fault protection is enabled.
• Verify connectors are compatible and conductors are properly routed.
• Add the PV system to the fire safety plan.
• Provide the fire department with an emergency diagram and coordinate pre-incident planning.
• Include PV inspection and infrared scanning in the annual inspection.
• Coordinate PV and BESS shutdown procedures.

Continue Reading from Our Series:

Related guide: Article 151 — Lithium-Ion Battery Fire Safety and Energy Storage Systems

Related guide: Article 137 — Roof Assemblies and Fire Classification

Related guide: Article 69 — How to Design Firefighter Access and Building Features for Rescue Operations

Read more: Article 153 — Electric Vehicle Charging Station Fire Safety (planned)

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and a qualified fire protection engineer for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references NFPA 855, Standard for the Installation of Stationary Energy Storage Systems (2023 and 2026 editions); NFPA 1, Fire Code; NFPA 101, Life Safety Code; NFPA 13; NFPA 72; NFPA 69; NFPA 70 (National Electrical Code); the International Fire Code (IFC), including Section 320 (Lithium-Ion and Lithium Metal Battery Storage) and Section 1207 (Energy Storage Systems); the International Building Code (IBC); UL 9540; UL 9540A; UL 1973; UL 1642; UL 2054; UL 2271; and UL 2849. Battery chemistries, testing standards, code editions, and AHJ requirements vary significantly. Adoption of IFC Section 320 and NFPA 855 varies by jurisdiction, and the IFC may reference an earlier NFPA 855 edition than the newest one published. State of charge thresholds, separation distances, and protection requirements cited here follow the model codes and standards and may differ in your adopted edition. Local amendments and the edition adopted by your Authority Having Jurisdiction (AHJ) always control. This guide is a starting point only. Always verify the requirements applicable to your project with your AHJ and a qualified fire protection engineer.

Lithium-ion batteries are everywhere in the built environment: laptops, phones, power tools, e-bikes, scooters, electric vehicles, backup power systems, and grid-scale energy storage. They are also one of the fastest-growing fire hazards in commercial and residential buildings. A lithium-ion battery fire is not a conventional fire. It can generate its own heat, release flammable and toxic gases, reignite hours or days after being extinguished, and propagate from one cell to the next in a chain reaction that is difficult to stop.

The codes have struggled to keep up. Until the 2024 code cycle, the International Fire Code did not contain storage-specific requirements for lithium-ion batteries. NFPA 855 was first published in 2020 and has been revised twice since, with the 2026 edition bringing some of the most significant changes yet. The result is a regulatory landscape that is evolving rapidly, varies by jurisdiction, and requires careful coordination with the AHJ.

Lithium-ion battery fire safety is the discipline of understanding the unique hazards of these batteries, applying the applicable codes and standards, and designing protection that addresses thermal runaway, gas generation, propagation, and reignition. It cannot be solved with conventional fire protection assumptions.

This article covers how lithium-ion batteries fail, where the hazard shows up in buildings, the codes that govern it (NFPA 855, IFC Section 320, IFC Section 1207), state of charge, testing and hazard mitigation analysis, detection and system safeguards, suppression, explosion control and prevention, separation and installation arrangements, micromobility and charging, emergency response, commissioning and maintenance, and how to approach a project involving battery storage.

Section 1: Why Lithium-Ion Batteries Are Different

A lithium-ion battery fire is a thermal runaway event: an exothermic reaction within the cell that generates its own heat and, depending on chemistry, can sustain itself without outside oxygen. The electrolyte is flammable, and the cell vents gases that can ignite or accumulate.

Factor	Conventional Fire	Lithium-Ion Battery Fire
Oxygen source	Ambient air	Ambient air plus oxygen released by some cathode materials inside the cell
Fuel	External combustible material	The cell itself (electrolyte, separators, cell materials)
Suppression	Water, foam, dry chemical	Sustained cooling is effective; smothering alone is not
Reignition	Possible but uncommon	Common; can occur hours or days later
Gas generation	Smoke	Flammable and toxic gases (hydrogen, CO, hydrocarbons, HF, electrolyte vapors)
Propagation	Fire spreads through fuel	Thermal runaway propagates cell to cell and module to module
Detection	Smoke and heat	Off-gas detection can provide earlier warning; smoke may come too late

A. Thermal Runaway

Thermal runaway occurs when a cell’s internal temperature rises faster than it can be dissipated. Causes include:

• Internal short circuit (manufacturing defect, damage, degradation, lithium plating)
• Overcharging or over-discharging
• External heat exposure
• Mechanical damage (crush, penetration)
• Cell degradation over time
• Failure of the battery management system (BMS) or charging equipment

Once thermal runaway begins, the cell vents flammable and toxic gases, which can ignite and heat adjacent cells.

B. Propagation

The defining risk of lithium-ion battery storage is propagation. One cell failing can heat adjacent cells, causing them to fail, which heat more cells. The result is a cascading event that can involve an entire module, rack, or installation. Testing such as UL 9540A is designed to characterize whether and how propagation occurs.

C. Chemistry Matters

Not all lithium-ion batteries behave alike. Common chemistries include lithium iron phosphate (LFP), nickel manganese cobalt (NMC), nickel cobalt aluminum (NCA), and lithium cobalt oxide (LCO). In general, NMC, NCA, and LCO cells release more energy and more oxygen during runaway, while LFP cells tend to be more thermally stable but still produce large volumes of flammable gas, including hydrogen, and can still be involved in deflagrations. Chemistry affects heat release, gas composition, and the protection strategy, so it should be identified early and tested data should be specific to the actual product.

Key point: Lithium-ion battery fire safety is not only about extinguishing a fire. It is about preventing thermal runaway, detecting it early, cooling the cells, managing flammable gas, and preventing propagation.

Pro Tip: Treat a lithium-ion battery fire as a hazardous materials event, not a conventional fire. The gases are toxic, the fire can reignite, and the water runoff may be contaminated.

Section 2: Where the Hazard Shows Up in Buildings

The applicable code path depends on what the batteries are and how they are used. Identify which of these applies before anything else.

Category	Examples	Primary Reference
Stationary energy storage systems (ESS)	Battery rooms, outdoor BESS enclosures, rooftop and garage installations, residential wall units, UPS	NFPA 855, IFC Section 1207, UL 9540
Battery storage (warehouse, retail, back-of-house)	Pallets of batteries, e-bike and tool stock, recycling collection	IFC Section 320
Batteries in equipment and devices	Phones, laptops, power tools, e-bikes, scooters, mobility devices	Product listings (UL 2054, UL 2271, UL 2849); IFC and NFPA 1 for charging and storage areas
Vehicle charging with storage	EV chargers with integrated ESS	NFPA 855, NFPA 70, local requirements

Many buildings contain more than one category. A distribution center may have forklift battery charging, stocked consumer batteries, and a rooftop BESS, each with a different code path.

Pro Tip: Build a battery inventory before design or inspection. List location, chemistry, kilowatt-hours, state of charge, and intended use for each battery area.

Section 3: The Codes — NFPA 855 and IFC Sections 320 and 1207

Two primary documents govern lithium-ion battery storage and energy storage systems: NFPA 855 and the IFC.

A. NFPA 855

NFPA 855 establishes requirements for the design, installation, commissioning, operation, maintenance, and decommissioning of stationary ESS. It covers fire detection and suppression, explosion control, ventilation, gas detection, thermal runaway, separation distances, hazard mitigation analysis (HMA), signage, and emergency planning. It applies based on technology type and energy thresholds, and the 2026 edition expanded the number of technologies it addresses.

B. IFC Section 320

The 2024 IFC added Section 320, Lithium-Ion and Lithium Metal Battery Storage. It applies to storage of batteries in warehouses and other occupancies, and it establishes requirements based on the following factors (verify exact thresholds in your adopted edition):

Factor	Typical Requirement
Operational permit	Required above a threshold quantity where adopted by the AHJ
Fire safety plan	Must address emergency response for battery incidents
State of charge (SoC)	Protection requirements tied to SoC; lower SoC (about 30% or less) reduces requirements
Technical opinion report	May be required to evaluate deflagration potential and establish the sprinkler design basis
Separation	Fire-resistance-rated separation may be required
Sprinklers	Automatic sprinklers required
Detection and alarm	Automatic detection and alarm required
Explosion control	May be required depending on SoC and quantity

C. IFC Section 1207

IFC Section 1207 governs stationary energy storage systems and references NFPA 855 for most technical requirements. It is the path for installed battery energy storage systems rather than stored inventory.

D. Exceptions

IFC Section 320 has exceptions that typically include:

• Batteries installed in the equipment they power
• Batteries packed with equipment
• Retail packaging at or below stated size limits (for example, not more than 300 Wh for lithium-ion or 25 grams of lithium metal)
• Temporary storage during manufacturing

E. Other Related Documents

• NFPA 1 and NFPA 101: Fire code and life safety provisions that reference NFPA 855
• NFPA 70 (NEC): Electrical installation requirements, including Article 706 (energy storage systems) and Article 480 (storage batteries)
• NFPA 72: Detection and alarm; the 2026 edition of NFPA 855 aligns detection provisions more closely with NFPA 72
• UL 9540 and UL 1973: Product listing of the ESS and its batteries

Key point: The regulatory landscape is evolving. The 2024 IFC still references the 2023 edition of NFPA 855, while the 2026 edition of NFPA 855 has already been published. Confirm the adopted edition and local amendments before design.

Pro Tip: For any project involving more than incidental battery storage, engage a fire protection engineer with specific experience in NFPA 855 and IFC Section 320. The requirements are too complex and too new for a generalist approach.

Section 4: State of Charge — The Critical Variable for Storage

State of charge (SoC) is the single most important variable for stored batteries. A battery at 100% SoC holds more energy and is more hazardous than a battery at 30% SoC.

A. The SoC Threshold

IFC Section 320 recognizes that at roughly 30% SoC or lower, the hazard is significantly reduced. Typical differences:

Requirement	SoC above 30%	SoC at or below 30%
Technical opinion report	May be required	Generally not required
Fire-resistance-rated separation	May be required	Generally not required
Explosion control	May be required	Generally not required
Automatic sprinklers	Required	Required
Fire alarm and detection	Required	Required

The reduction is not a loophole. It reflects the physics: a battery at low SoC has less energy available for thermal runaway and propagation.

B. Managing SoC in Practice

For storage occupancies, SoC can be managed by:

• Storing batteries at the manufacturer’s shipping SoC (typically 30% or lower)
• Discharging batteries before storage
• Limiting charging in storage areas
• Separating charged and discharged batteries
• Verifying SoC at receiving

For operating ESS, SoC is a function of the system’s operational state and cannot be managed this way. Protection is designed for the system at full charge.

Key point: SoC is a design variable, not only an operational one. For stored batteries, the lower the SoC, the lower the hazard and the fewer the protection requirements.

Pro Tip: If the AHJ allows reduced requirements at low SoC, document the SoC management procedure in the fire safety plan and verify it periodically. The reduction is contingent on SoC being maintained.

Section 5: Testing and Analysis — UL 9540A, Large-Scale Fire Testing, and the HMA

A. UL 9540A

UL 9540A is the test method for evaluating thermal runaway fire propagation in battery energy storage systems. It is not a pass/fail standard. It is a data-generating test that informs installation design.

Level	What Is Tested
Cell	Thermal runaway characteristics of a single cell, including gas generation
Module	Propagation from cell to cell within a module
Unit	Propagation from module to module within a unit
Installation	Propagation from unit to adjacent units under specific installation conditions

The data helps determine whether propagation occurs, what separation is needed, what protection is required, and how much flammable gas may be generated.

B. Large-Scale Fire Testing

Modern codes increasingly rely on large-scale fire testing (LSFT), sometimes called fire and explosion testing, to justify exceptions to prescriptive requirements such as spacing, sprinkler design, and explosion control. Cell-, module-, and unit-level data from UL 9540A is often supplemented by installation-level testing that reflects the real configuration. The 2026 edition of NFPA 855 tightened what qualifies as acceptable large-scale testing, so confirm with the AHJ what level of testing it expects for your project.

C. Edition Questions

Check which edition of UL 9540A your adopted code references. Newer editions of test standards may be published before the codes adopt them. Equipment tested to the edition referenced by the adopted code is generally what the AHJ will review, but confirm with the AHJ.

D. Hazard Mitigation Analysis (HMA)

An HMA is a site-specific engineering analysis that evaluates the failure modes of the ESS and the effectiveness of the protection. It addresses fire and explosion hazards, deflagration potential, separation, fire protection adequacy, and emergency response considerations. Earlier editions of NFPA 855 required an HMA only in certain cases. The 2026 edition expands the role of the HMA, with a documented analysis expected from the design stage for more installations. Confirm requirements for your project and who is qualified to prepare it, since the 2026 edition emphasizes qualified design professionals.

Key point: UL 9540A data, large-scale testing where required, and the HMA are the technical basis for the protection design. Without them, the design rests on assumptions rather than tested performance.

Pro Tip: Require the test report for the specific equipment being installed. A report for a different product, configuration, or firmware may not be applicable.

Section 6: Detection and System Safeguards

Detection is the most important active layer because the event develops faster than conventional detection can respond.

A. Why Conventional Detection Alone Is Insufficient

Smoke detection may not activate until thermal runaway is well underway. Heat detection is slower still. For battery rooms and enclosures, earlier indicators are needed.

B. Off-Gas Detection

Lithium-ion cells vent flammable and toxic gases before they ignite. Off-gas detection (also called electrolyte vapor or gas detection) can identify a failing cell before thermal runaway is fully established.

Detection Type	What It Detects	Response
Off-gas detection	Electrolyte vapor, CO, hydrogen, VOCs	Earliest warning
Smoke detection (including aspirating)	Smoke particles	Later
Heat detection	Temperature rise	Latest
Radiant energy / flame detection	Flame	At ignition

C. Detection Requirements

IFC Section 320 requires automatic detection and alarm for indoor battery storage. NFPA 855 requires fire detection for ESS, and the 2026 edition aligns detection requirements more closely with NFPA 72. Gas detection requirements and the response to a gas alarm (for example, ventilation activation, shutdown, and notification) depend on the system and the HMA.

D. Battery Management System (BMS) and Electrical Safeguards

The BMS is part of the fire protection strategy. It monitors voltage, current, and temperature, and it can isolate a failing module, stop charging, or trigger alarms. Safeguards include:

• Overcharge, over-discharge, and overcurrent protection
• Temperature monitoring and thermal management
• Ground-fault and arc-fault protection where applicable
• Remote monitoring and alarm communication to a constantly attended location
• Emergency disconnects and clear shutdown procedures for responders

The BMS is not a substitute for fire protection. It reduces the likelihood of failure but does not eliminate it.

Key point: Detection is the first line of defense, and the BMS is the first layer of prevention. Off-gas detection gives the earliest warning of a failing cell.

Pro Tip: Do not rely on smoke detection alone for battery storage. By the time smoke is detected, the event may be beyond simple intervention.

Section 7: Suppression and Cooling

Suppression of lithium-ion battery fires is fundamentally about cooling, not smothering.

A. Water Is the Most Effective Agent

Water is generally the most effective agent because it absorbs heat and cools cells below the thermal runaway threshold. Smothering agents such as CO2 and clean agents may knock down flame but do not stop the thermal runaway reaction inside the cell and may allow reignition.

B. Sprinkler Design

For ESS rooms, NFPA 855 and IFC Section 1207 have commonly specified automatic sprinklers designed to at least 0.3 gpm/ft² over a 2,500 ft² area (or the room, whichever is less), unless the design is justified by large-scale fire testing or the HMA to be different. This exceeds a conventional ordinary hazard design and reflects the higher heat release rate. For storage occupancies under IFC Section 320, automatic sprinklers are required, and the design basis may be established through the technical opinion report. Verify the exact design basis in your adopted edition.

C. Specialized Suppression Systems

Some ESS installations use water mist, aerosol, clean agent, or proprietary systems, often in combination with off-gas detection. These must be listed or tested for the application and evaluated in the HMA. For outdoor containers and enclosures, suppression is often paired with exterior water supply and firefighter access to the enclosure.

D. Water Supply and Runoff

Cooling an ESS fire can require sustained water flow. Confirm available water supply and fire department connections, and plan for containment and treatment of contaminated runoff.

E. Reignition

Batteries can reignite hours or days after the initial fire appears out. The fire watch must continue until the battery is confirmed stable, which may require thermal imaging and extended monitoring.

Key point: Suppression is about cooling. Water is the most effective agent for most lithium-ion fires. Reignition is a real risk and requires extended monitoring.

Pro Tip: Plan for extended fire watch after any lithium-ion battery fire. The fire department may not consider the event resolved until the battery is cooled and stable.

Section 8: Explosion Control and Prevention

Lithium-ion batteries generate flammable gases during thermal runaway, including hydrogen, carbon monoxide, and hydrocarbons. In an enclosed space, these gases can accumulate and create a deflagration hazard. Several well-documented ESS incidents have involved explosions after gas accumulated in an enclosure.

A. Explosion Control and Prevention

NFPA 855 and IFC Section 320 require explosion control for certain installations, depending on SoC, quantity, enclosure characteristics, and ventilation. The 2026 edition of NFPA 855 shifted the language from explosion control to explosion control and prevention, with more emphasis on preventing flammable gas accumulation and on performance-based justification. Strategies include:

• Deflagration venting (explosion relief panels) designed per NFPA 68
• Explosion prevention systems designed per NFPA 69
• Gas detection tied to active ventilation or other mitigation
• Limiting enclosure volume and fuel loading

B. Ventilation

Ventilation serves two purposes:

1. Normal operation: Maintaining temperature and removing minor off-gassing
2. Emergency: Removing or diluting flammable gases during a thermal runaway event

The design must account for the worst-case gas generation scenario and must remain reliable under fire conditions. Note that ventilation alone is not necessarily sufficient for explosion prevention and should be evaluated in the HMA.

C. Responder Hazard

Explosion risk also affects emergency response. Firefighters should not open doors to a battery enclosure that has experienced thermal runaway without first understanding the gas conditions. The emergency response plan should address this (see Section 11).

Key point: Explosion control and prevention is a critical layer for enclosed lithium-ion installations. The gases generated during thermal runaway are flammable and can accumulate to dangerous concentrations.

Pro Tip: Coordinate explosion control with the HVAC design. The ventilation system may serve both normal cooling and emergency gas removal, but the emergency function must be reliable under fire conditions.

Section 9: Separation, Location, and Installation Arrangements

Separation and siting are passive strategies that limit propagation and protect people and neighboring property.

A. Indoor Storage

IFC Section 320 may require fire-resistance-rated separation for indoor battery storage depending on SoC and quantity. This limits the fire to the compartment of origin and protects adjacent areas.

B. Outdoor Storage

Outdoor storage requirements are based on separation distance, pile area, and storage height. IFC Section 320 generally requires outdoor storage to be separated from buildings, lot lines, and public ways by a minimum distance (commonly 20 feet in the model code). Verify the distance in your adopted edition.

C. Warehouse Storage

For warehouse storage, separation requirements depend on SoC, commodity classification, storage height, and sprinkler protection. The technical opinion report may establish alternative arrangements based on test data.

D. Stationary ESS Location and Spacing

NFPA 855 limits where ESS may be located and how large individual units and groups can be. Typical considerations include:

• Indoor rooms: Dedicated rooms with fire-resistance-rated separation, limited unit size and group size, and restrictions on locating ESS near exits and in occupied spaces
• Outdoor installations: Minimum spacing between arrays and from buildings, property lines, exposures, and combustible vegetation, which may be reduced where supported by testing
• Rooftops and parking structures: Additional structural, access, and exposure restrictions
• Residential installations: Limits on energy per unit and aggregate energy per dwelling, and restrictions on locations such as sleeping rooms and habitable spaces; garages and utility closets are common allowed locations
• Exposure protection: Protection of adjacent structures, vehicles, and egress paths

Specific thresholds in kilowatt-hours differ between editions and technologies, so confirm them in the edition your AHJ enforces.

E. Signage, Access, and Disconnects

Signs must identify the hazard, the chemistry, and the location of disconnects. Firefighter access, clear approach paths, and accessible emergency shutdown controls are part of the installation design.

Key point: Separation limits the consequences of a thermal runaway event and works best when combined with detection and suppression.

Pro Tip: Separation distances are based on the tested propagation characteristics of the specific system. Do not reduce them without a technical basis.

Section 10: Micromobility, Chargers, and Occupant-Owned Batteries

Some of the most frequent lithium-ion fires in buildings do not involve stationary ESS at all. E-bikes, e-scooters, mobility devices, and power tools are commonly charged indoors, in apartments, corridors, lobbies, and storage rooms, and fires from them have caused fatalities and injuries, particularly in residential occupancies.

A. Typical Risk Factors

• Damaged, modified, or counterfeit batteries
• Non-listed or mismatched chargers
• Charging unattended or while sleeping
• Charging in egress paths or near exits
• Storage of many units in one room, such as bike rooms, shops, and delivery hubs

B. Practical Controls

• Require products and chargers to be listed to applicable standards (for example UL 2849 for e-bike systems and UL 2271 for light electric vehicle batteries)
• Designate charging areas away from exits, corridors, and sleeping areas
• Limit the number of units charged at once and provide fire-rated or sprinklered rooms where needed
• Prohibit charging of damaged batteries and provide safe storage and disposal
• Provide smoke detection and sprinkler protection in charging and storage rooms
• Adopt tenant and employee rules, signage, and education
• Check whether local law or the AHJ has specific rules for e-bike charging or storage

C. EV Charging With Storage

EV charging systems that include integrated energy storage may fall under NFPA 855. Confirm the applicable code path with the AHJ, and coordinate with NFPA 70 for electrical requirements.

Key point: Occupant-owned batteries are often the more likely ignition source in a building. Policies, listed products, and designated charging areas matter as much as engineered protection.

Pro Tip: If a building allows e-bike charging, write a policy before an incident forces one.

Section 11: Emergency Response, Fire Watch, and Post-Incident Actions

A battery fire is one of the incidents where emergency response planning has the greatest effect on outcomes.

A. Emergency Response Plan (ERP)

The 2026 edition of NFPA 855 adds an emergency response plan requirement for covered ESS. The plan typically addresses mitigation, preparedness, response, and recovery, and it is reviewed periodically, with refresher training for responders and facility staff. Confirm the review frequency, notification requirements, and AHJ involvement in your adopted edition.

The plan should cover:

• Facility description, hazards, chemistry, and quantities
• Site and building layout, including access, utilities, and water supply
• Shutdown and isolation procedures, including DC disconnects
• Gas hazard, explosion risk, and re-entry precautions
• Evacuation and shelter-in-place considerations for nearby occupants
• Roles for facility personnel and the fire department
• Contact information for the system manufacturer and operator

B. Coordination With the Fire Department

Early coordination matters. Invite the fire department to tour the installation, provide site plans and safety data, and agree on what they will and will not do. In many incidents with large installations, the safe response is defensive: protect exposures, cool where safe, and allow the system to burn out under controlled conditions.

C. Fire Watch and Post-Incident Monitoring

After an event, the battery remains hazardous. Continue a fire watch until the system is confirmed stable, use thermal imaging to check for hot spots, and treat damaged batteries as unstable. Coordinate with the manufacturer on removal and handling.

D. Runoff, Air Quality, and Cleanup

Water runoff may contain contaminants, and smoke may contain toxic gases such as hydrogen fluoride. Plan for runoff containment, air monitoring where appropriate, and environmental notifications required by local rules.

E. Damaged, Defective, and Recalled Batteries

Have a written procedure for isolating damaged or recalled batteries, storing them in non-combustible containers or separated areas, and arranging safe disposal or recycling through authorized handlers.

Key point: Response planning is part of the design. The best protection systems still rely on informed responders and a plan for the hours and days after the event.

Pro Tip: Do not wait for an incident to learn where the disconnects are. Walk through the plan with the fire department.

Section 12: Commissioning, Inspection, Testing, and Maintenance

Protection that is not commissioned and maintained will not perform when needed.

A. Commissioning

NFPA 855 requires commissioning of ESS, and the 2026 edition strengthened these requirements. Commissioning should verify:

• Detection, alarm, and gas detection function and signal to a monitored location
• Ventilation and explosion control operate as designed
• Suppression systems are installed and tested per their standards
• BMS and safety functions operate, including shutdown and alarm responses
• Integrated sequence of operations works together
• Documentation, signage, and ERP are complete

A qualified party independent of the installer should witness or review commissioning where required by the AHJ.

B. Inspection, Testing, and Maintenance (ITM)

NFPA 855 requires ongoing operation and maintenance. Maintain the fire alarm per NFPA 72, sprinklers per NFPA 25, and the ESS per the manufacturer’s instructions and NFPA 855. Keep records of inspections, battery health, and alarms. Review the HMA and ERP when the system, quantity, chemistry, or use changes.

C. Management of Change

Replacing modules, adding capacity, changing firmware, or changing chemistry can invalidate test data. Review changes against the listing, the HMA, and the AHJ approval.

D. Decommissioning and Disposal

NFPA 855 addresses decommissioning. Plan for safe de-energizing, transportation of used batteries (damaged batteries have special shipping rules), and recycling or disposal through authorized handlers.

Key point: Commissioning proves the system works on day one. ITM keeps it working.

Pro Tip: Include battery protection systems in the building’s regular ITM program and impairment procedures.

Section 13: The 2026 NFPA 855 Changes at a Glance

The 2026 edition of NFPA 855 introduced significant revisions that affect ESS design, review, and operation. Verify the details against the published standard and your adopted edition.

Topic	Change
Organization	Continued reorganization, with general requirements consolidated and technology-specific requirements separated
Scope	Expanded coverage of additional energy storage technologies
Hazard mitigation analysis	Broader use; more installations expected to have a documented HMA from the design stage
Large-scale fire testing	Clearer expectations for fire and explosion testing used to justify designs
Explosion control and prevention	Revised approach with more emphasis on preventing gas accumulation and performance-based justification
Detection	Alignment with NFPA 72 and allowance for other suitable smoke detection technologies
Emergency response plan	New or expanded requirement, with periodic review and responder training
Commissioning	Strengthened commissioning requirements
Emergency power	New provisions for emergency power supply systems and stored emergency power supply systems
Other technologies and use cases	New or expanded content on flow batteries, EV charging with storage, and other applications

The IFC does not automatically follow NFPA 855 editions. The 2024 IFC references the 2023 edition of NFPA 855, so some jurisdictions will apply 2023 requirements while others amend to the 2026 edition.

Key point: The 2026 edition is a significant revision. Projects designed to earlier editions should be reviewed against the new requirements.

Pro Tip: Confirm which edition the AHJ has adopted, and ask whether the AHJ will accept design to the newer edition.

Section 14: Common Challenges and Mistakes

Challenge or Mistake	Why It Happens	Solution
Treating lithium-ion as a conventional fire hazard	Familiar assumptions applied to a different hazard	Design for thermal runaway, gas, and propagation
Code adoption lag	IFC Section 320 and NFPA 855 are new and editions differ	Verify adopted edition; ask the AHJ about the newer edition
SoC management not documented	Treated as an operational detail	Document the procedure and verify in the fire safety plan
Test data not applicable	Report for a different configuration	Require product-specific data
Detection too late	Smoke detection only	Add off-gas or gas detection
Suppression inadequate	Conventional design density or smothering agent	Design to NFPA 855 or tested design; use water cooling
Explosion hazard overlooked	Gas hazard not recognized	Evaluate deflagration in the HMA; provide control and prevention
Separation reduced without basis	Space constraints	Require a technical basis for any reduction
Fire watch ended too early	Reignition not understood	Extended fire watch with thermal imaging
No commissioning or ITM	Project closed out without verification	Commission, then maintain
Occupant batteries ignored	Focus on engineered ESS only	Adopt charging and storage policies
AHJ or fire department unfamiliar	New codes and technology	Pre-submittal meeting; provide documentation and tour
Insurer requirements not met	Not aware of them	Obtain insurer requirements in writing early

Key point: Most failures are not technical failures. They are failures to recognize that lithium-ion batteries are a different hazard requiring a different approach.

Pro Tip: Assume the AHJ will require more, not less, protection for lithium-ion battery storage. The codes are evolving toward stricter requirements.

Section 15: Design Checklist

Item	Status	Notes
Adopted IFC edition confirmed	☐	2024 or later for Section 320
Adopted NFPA 855 edition confirmed	☐	2023 or 2026
Battery inventory completed	☐	Location, chemistry, kWh, use
Code path determined	☐	Stationary ESS, storage, devices, charging
State of charge determined	☐	About 30% or less reduces storage requirements
UL 9540A and large-scale test data obtained	☐	Product-specific
Hazard mitigation analysis (HMA)	☐	Qualified preparer
Technical opinion report	☐	Required by IFC 320 for certain storage
Fire and gas detection specified	☐	Off-gas preferred; smoke minimum
BMS and electrical safeguards verified	☐	Shutdown and alarm functions
Sprinkler design specified	☐	Per NFPA 855 or tested basis
Explosion control and prevention evaluated	☐	Venting, NFPA 69, ventilation
Separation and spacing determined	☐	Rated construction or approved alternative
Signage, access, and disconnects	☐	Responder-friendly
Fire safety plan updated	☐	Battery incidents
Emergency response plan	☐	Required by NFPA 855 2026
Commissioning and ITM plan	☐	Integrated testing
E-bike and charger policy	☐	Where applicable
AHJ and fire department meeting	☐	Confirm requirements
Insurer requirements obtained	☐	In writing

Section 16: Conclusion

Lithium-ion battery fire safety is a distinct discipline. The batteries are not conventional combustibles, and the fires they produce are not conventional fires. Thermal runaway, gas generation, propagation, and reignition are the defining hazards, and the protection must address them.

The regulatory framework is evolving. IFC Section 320 (2024), IFC Section 1207, and NFPA 855 (2023 and 2026) are the primary documents, supported by UL 9540A and large-scale fire testing, the hazard mitigation analysis, commissioning, and emergency response planning.

The critical elements are:

1. Recognition: lithium-ion batteries are a different hazard
2. Code path: stationary ESS, storage, or devices, and the adopted editions
3. State of charge: the critical variable for stored batteries
4. Testing and HMA: the technical basis for protection design
5. Detection and BMS: early warning and prevention
6. Suppression: water cooling, not smothering
7. Explosion control and prevention: flammable gases can accumulate
8. Separation and siting: passive protection against propagation
9. Emergency response and fire watch: planning and extended monitoring
10. Commissioning and maintenance: proof and persistence
11. AHJ coordination: the codes are new; engage early

The most common failure is treating lithium-ion batteries as a conventional fire hazard. They are not. The protection must be designed for the specific hazard, using the specific standards and testing data.

Key Takeaways

• Lithium-ion battery fires are thermal runaway events, not conventional fires.
• Thermal runaway can generate heat, flammable gas, and toxic vapors, and reignition can occur hours or days later.
• Propagation is the defining risk; UL 9540A and large-scale testing evaluate it.
• Chemistry matters; verify the actual product.
• State of charge is critical for stored batteries; about 30% or less reduces requirements.
• IFC Section 320 governs battery storage; IFC Section 1207 and NFPA 855 govern stationary ESS.
• The 2026 NFPA 855 expanded HMA, explosion control and prevention, emergency response, and commissioning.
• Off-gas detection gives the earliest warning of a failing cell.
• Water cooling is the most effective suppression; smothering alone is not.
• Occupant-owned batteries such as e-bikes need policies and listed equipment.
• Commissioning, ITM, and an emergency response plan are part of the protection.
• Verify the adopted edition and engage the AHJ early.

Take Action Today

1. Confirm the adopted IFC and NFPA 855 editions.
2. Inventory the batteries in the building, with chemistry and quantity.
3. Determine the state of charge and document SoC management.
4. Obtain product-specific UL 9540A and fire test data.
5. Determine whether an HMA or technical opinion report is required.
6. Specify off-gas or gas detection for battery areas.
7. Verify sprinkler design and water supply.
8. Evaluate explosion control and prevention for enclosed installations.
9. Verify separation distances or obtain a technical basis for alternatives.
10. Establish an e-bike and charging policy where applicable.
11. Prepare an emergency response plan and walk it through with the fire department.
12. Plan commissioning and ongoing ITM.
13. Obtain insurer requirements in writing.

Continue Reading From Our Series

• Related guide: Article 150 — NFPA 25 Inspection, Testing, and Maintenance of Water-Based Systems
• Related guide: Article 149 — Insurance Requirements and Fire Protection Credits
• Read more: Article 152 — Solar Panel and PV System Fire Safety (planned)

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and a qualified fire protection engineer for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references NFPA 25, Standard for the Inspection, Testing, and Maintenance of Water-Based Fire Protection Systems (including the 2023 and 2026 editions); NFPA 13 (sprinkler systems); NFPA 14 (standpipe and hose systems); NFPA 20 (stationary fire pumps); NFPA 22 (water tanks); NFPA 24 (private fire service mains); NFPA 72 (fire alarm and signaling); NFPA 291 (fire flow testing and marking of hydrants); the International Fire Code (IFC), including §901.6 (Inspection, Testing, and Maintenance) and §901.7 (Systems Out of Service); and insurer requirements that may exceed NFPA 25. NFPA 25 sets minimum ITM requirements; the property owner or designated representative is responsible for compliance. Frequencies and task requirements vary by system type, edition, and local amendments. Section numbers and requirements cited here are summarized for education and may differ in your adopted edition. The edition adopted by your Authority Having Jurisdiction (AHJ), local amendments, and your insurer’s requirements always control. Verify the 2026 edition changes described in Section 11 against the published text before relying on them.

Water-based fire protection systems (sprinklers, standpipes, fire pumps, water storage tanks, private mains) are the most common form of automatic fire protection in commercial buildings. They are also the systems most often taken for granted. A sprinkler system that has never been inspected is not a sprinkler system that will work. It may have a closed valve, a corroded pipe, a painted head, or a water supply that no longer delivers the design pressure. The system exists; its performance does not.

NFPA 25 is the standard that establishes the minimum inspection, testing, and maintenance (ITM) requirements to keep water-based systems ready to perform. It is not a design standard; that is NFPA 13, 14, and 20. It tells the owner what to do, how often, and with what evidence, to verify that the system that was designed and installed will function on the day it is needed.

This article covers what NFPA 25 requires, the ITM frequencies for each system type, the owner’s responsibilities, hydrants and underground mains, backflow preventers, special systems, internal corrosion and obstruction, records, deficiencies and impairments, the 2026 edition changes, working with ITM contractors, and how to build a program that keeps the system ready.

◆ Section 1: What NFPA 25 Is, and What It Is Not

NFPA 25 is the ITM standard for water-based fire protection systems. It is distinct from the design and installation standards.

Standard	Purpose
NFPA 13	Design and installation of sprinkler systems
NFPA 14	Design and installation of standpipe and hose systems
NFPA 20	Design and installation of stationary fire pumps
NFPA 22 / 24	Water tanks / private fire service mains
NFPA 25	Inspection, testing, and maintenance of water-based systems after installation
NFPA 72	Fire alarm and signaling (including monitoring of waterflow and supervisory signals)

A. The Scope of NFPA 25

NFPA 25 covers sprinkler systems (wet, dry, preaction, deluge), standpipe and hose systems, private fire service mains and hydrants, fire pumps, water storage tanks, water spray fixed systems, foam-water systems, water mist systems, common components and valves (including backflow preventers and pressure-reducing valves), internal piping condition and obstruction investigation, and impairments.

B. What NFPA 25 Does Not Cover

NFPA 25 does not cover design adequacy (whether the system suits the current occupancy or hazard), installation accuracy, fire alarm systems (NFPA 72), portable extinguishers (NFPA 10), or fire doors (NFPA 80). The standard assumes the system was designed and installed correctly. The ITM program verifies that it remains functional, not that it was correct in the first place.

Key point: NFPA 25 verifies that the system works, not that it was designed correctly. Design adequacy is a separate question that may require a fire protection engineer.

Pro Tip: If the building’s occupancy or storage has changed since the system was designed, NFPA 25 ITM will not catch the design inadequacy. Commission a design review whenever use, storage height, or commodity changes.

Key Article: Article 149: Insurance Requirements and Fire Protection Credits

◆ Section 2: The Owner’s Responsibility

NFPA 25 places responsibility for ITM on the property owner or designated representative.

A. What the Owner Must Do

Responsibility	Detail
Ensure ITM is performed	At the frequencies and to the methods in NFPA 25
Use qualified personnel	Qualified for the specific ITM tasks
Maintain records	Inspection, testing, and maintenance records
Correct deficiencies	Repair or replace deficient components
Manage impairments	Follow the impairment process when systems are out of service
Maintain the water supply	Verify supply status and adequacy
Notify	Notify the AHJ, insurer, and monitoring company as required

B. Who Can Perform ITM

NFPA 25 does not prescribe one qualification for all tasks. It requires personnel qualified to perform the specific ITM tasks, with the determination of qualifications left to the local jurisdiction. Some tasks (such as fire pump flow testing or trip testing) need specialized competence and often a license; others (such as visual inspection of gauges and valves) can be performed by trained building staff. Many jurisdictions require licensed contractors or certified technicians for testing and maintenance.

C. The Designated Representative

The owner may designate a representative to fulfill ITM responsibilities. The designation should be in writing and specify the scope.

Key point: The owner is responsible for ITM compliance, even if a contractor performs the work. The owner can delegate the task, not the responsibility.

Pro Tip: Designate ITM responsibility in writing. An undocumented delegation is no delegation.

◆ Section 3: ITM Frequencies for Sprinkler Systems

Sprinkler systems have the most extensive ITM requirements. Frequencies are layered: weekly, monthly, quarterly, annually, and at multi-year intervals.

A. Common Sprinkler ITM Frequencies

Task	Frequency	Notes
Gauges, wet pipe systems	Monthly	Verify normal supply pressure; replace or recalibrate every 5 years
Gauges, dry/preaction/deluge systems	Weekly (monthly if low-air-pressure supervised)	Verify air/nitrogen and water pressure
Control valves	Weekly if sealed; monthly if locked or electrically supervised	Verify open, accessible, secured, with no leaks
Control valve operation	Annually	Operate through full range; test tamper switches
Waterflow alarm devices	Quarterly (mechanical); semiannually (vane and pressure-switch types)	Verify alarms and supervisory signals; notify monitoring company before testing
Main drain test	Annually; quarterly where supply passes through a backflow preventer or pressure-reducing valve	Compare static and residual pressure to previous results
Sprinklers	Annually (visual)	Corrosion, damage, paint, loading, obstruction, storage clearance
Spare sprinklers and wrench	Annually	Correct number, types, and temperature ratings
Hangers, bracing, piping, fittings	Annually	Secure, undamaged, no leaks or corrosion
Hydraulic placard / system signs	Quarterly	Legible and attached
Dry-pipe partial trip test	Annually	Verify valve trips and system functions
Dry-pipe full-flow trip test	Every 3 years	Verify water delivery time and performance
Preaction and deluge valve trip test	Annually (full flow tests at longer intervals per the edition)	Verify actuation and release
Antifreeze solution test	Annually	Verify freeze protection concentration
Internal piping obstruction investigation	Every 5 years	Corrosion, scale, MIC, foreign material

In cold climates, also inspect valve rooms and enclosures during freezing weather, and drain low points on dry systems before winter.

B. Sprinkler Sampling and Replacement

NFPA 25 requires testing of representative samples, or replacement, of sprinklers based on time in service. The sample is sent to a recognized laboratory; if any sprinkler in the sample fails, the standard requires corrective action up to replacing all sprinklers represented by the sample.

Sprinkler type	Testing or replacement interval (typical)
Standard-response sprinklers	50 years, then every 10 years
Fast-response sprinklers	25 years, then every 10 years
Sprinklers in harsh environments	5 years (longer intervals may apply to listed corrosion-resistant types)
Dry-type sprinklers	Shorter intervals apply; confirm in your edition
Sprinklers manufactured before 1920	Replace

The 2026 edition reportedly adds requirements for sprinklers in dwelling units more than 50 years old (see Section 11).

Key point: Sprinkler sampling is not optional. Sprinklers that fail testing are replaced.

Pro Tip: Maintain a sprinkler inventory recording installation date, type, and environment for each area. It makes sampling and replacement scheduling straightforward.

Key Article: Article 23: Commercial Building Code Requirements for Fire Sprinkler Systems

◆ Section 4: ITM Frequencies for Standpipe Systems

Standpipes give the fire department a water supply for firefighting. Their ITM requirements are lighter than sprinklers but include critical performance tests.

A. Common Standpipe ITM Frequencies

Task	Frequency	Notes
Hose connections and hose valves	Quarterly (inspection); annually (test)	Operate, no leaks, caps and handwheels in place
Fire department connections (FDC)	Quarterly	Accessible, caps in place, clappers function, no obstruction or damage
Piping and supports	Annually	Corrosion, damage, leaks
Pressure-reducing and control devices	Quarterly (inspection); annually (test)	Verify settings and operation
Cabinets, hose, and racks	Annually	Hose condition, nozzles, accessibility
Hydrostatic test	Every 5 years where required (such as dry systems, FDC piping, altered sections)	Verify integrity
Flow test	Every 5 years	Verify pressure and flow at the hydraulically most remote connection

B. The Five-Year Flow Test

The five-year flow test verifies that the system can deliver the required pressure and flow at the hydraulically most remote hose connection, accounting for friction loss, pressure-reducing valves, and fire pumps. A partial test (opening a single hose valve) does not satisfy the requirement. Where the system relies on the fire department connection or a fire pump, the test confirms the whole supply chain.

Key point: The standpipe flow test is a performance test, not a visual inspection.

Pro Tip: Coordinate the five-year flow test with the fire department and drainage. It discharges a large volume of water and may need street closure or temporary drainage.

◆ Section 5: ITM Frequencies for Fire Pumps

Fire pumps are the heart of the water supply for many buildings. A pump failure can mean a complete loss of supply.

A. Common Fire Pump ITM Frequencies

Task	Frequency	Notes
Pump house conditions, controller, and indicators	Weekly	Ventilation, heat, alarms, power-on lights
No-flow (churn) test, diesel-driven	Weekly	Run for the required time; record pressures and temperatures
No-flow (churn) test, electric-driven	Monthly	Run for the required time; check packing and leakage
Diesel battery, fuel, and engine checks	Weekly (fuel level, batteries, fluid levels); per manufacturer for service	Keep fuel tank at least two-thirds full
Automatic transfer switch test (where provided)	Monthly	Verify alternate power operation
Annual flow test	Annually	Test at 0%, 100%, and 150% of rated flow, with readings at each point
Alarm and supervisory signals	Annually	Verify pump running, phase reversal, power failure signals

B. The Annual Flow Test

The annual test verifies that the pump delivers its rated flow at rated pressure and that the driver, controller, and power supply perform under load. Compare results to the acceptance test curve and the previous year’s test. A pump that no longer matches its curve has a developing problem even if it still starts.

Key point: The weekly or monthly churn test verifies that the pump starts. The annual flow test verifies that it performs. Both are necessary.

Pro Tip: Keep a fire pump log of every start. It is the evidence of maintenance and the first document an insurer will request.

◆ Section 6: Water Supply, Storage Tanks, Hydrants, and Underground Mains

The water supply is the foundation of the system. If it is inadequate, no amount of sprinkler maintenance will make the system perform.

A. Water Supply ITM

Task	Frequency	Notes
Water supply control valves	Per valve type (weekly, monthly)	Same rules as other control valves
Water supply flow test	Annually via main drain; full flow tests per standard and when changes are suspected	Compare static and residual to baseline
Private fire service main flow test	Every 5 years	Verify flow and pressure; check for obstruction
Hydrants	Annually (inspect, flush, operate); after each use	Verify drainage, outlet caps, operation, and accessibility
Mainline strainers	Per standard, after each operation or flow event	Inspect and clean

B. Water Storage Tanks

Tank ITM covers water level, temperature, and heating in cold weather (frequent, often weekly to monthly depending on supervision), exterior, vents, and supports (periodic), and internal inspection (typically every 3 to 5 years depending on corrosion protection). Tanks also require verification of antifreeze or heating where required, and of tank overflow and level devices. Confirm intervals for your tank type in the adopted edition.

C. Hydrants and Underground Mains

Private hydrants and underground mains are often forgotten because they are outside the building. NFPA 25 requires hydrant inspection and flushing, valve exercise, and periodic flow tests of the main. Pressure and flow data from NFPA 291 flow tests help detect tuberculation, closed valves, and supply degradation.

Key point: A closed or partially closed underground valve can silently reduce the supply for years.

Pro Tip: Verify that the water supply has not changed since design. New construction upstream, changes in the municipal system, or a closed valve can reduce supply without anyone noticing.

Key Article: Article 113: Water Supply and Storage for Fire Protection

◆ Section 7: Backflow Preventers, Pressure-Reducing Valves, and Special Systems

A. Backflow Preventers and Pressure-Reducing Valves

Backflow preventers protect the public water supply and add friction loss to the system. NFPA 25 requires periodic inspection and testing; many jurisdictions also require annual backflow testing by a certified tester. Typical items include verifying valves are open, checking for leakage, annual forward-flow testing, and periodic internal inspection. Pressure-reducing valves require inspection and annual testing to confirm they hold settings under flow. A fouled or partially failed backflow preventer can reduce available pressure below design.

B. Preaction and Deluge Systems

These systems depend on a detection and release system that must work with the fire alarm system (NFPA 72). ITM includes valve and release testing, detector and releasing circuit checks, supervisory air or gas integrity, and coordination with alarm vendors. The ITM provider and the alarm contractor must test together.

C. Foam-Water, Water Spray, and Water Mist Systems

These special hazard systems have additional ITM: discharge device and nozzle inspection, foam concentrate sampling or testing at intervals, proportioning tests, and strainer cleaning. Water mist systems follow manufacturer requirements and the standard. Do not assume a standard sprinkler contractor can service them; verify qualifications.

Key point: Systems with release logic, foam concentrates, or specialized components need qualified specialists, not general maintenance staff.

◆ Section 8: Internal Condition, Corrosion, and Obstruction

Internal condition is one of the largest hidden risks. Pipe walls can lose thickness, scale and sediment can accumulate, and microbiologically influenced corrosion (MIC) can cause pinhole leaks and blockages. Dry and preaction systems are especially prone to corrosion from trapped moisture, and nitrogen inerting or corrosion-inhibiting technology may be used to reduce it.

NFPA 25 requires an internal assessment of piping at regular intervals (every 5 years), with an obstruction investigation when indicators appear, such as discolored water, foreign material at main drain tests, repeated leaks, or heads plugged with debris. Findings that show significant corrosion or blockage may require flushing, replacement, or a broader investigation.

Key point: Pinhole leaks and repeated leak repairs are warnings of internal deterioration, not isolated incidents.

Pro Tip: Keep photographs and records of internal inspection results. Trending the condition over time supports capital planning and insurer discussions.

◆ Section 9: Records and Documentation

NFPA 25 requires records of all ITM activities. Records are the evidence that the system was maintained and the basis for insurance credits and AHJ compliance.

A. Required Records

Record	Content
Inspection records	Date, task, findings, person performing
Test records	Procedure, results, pass/fail, comparison to baseline
Maintenance records	Work performed, parts replaced, date
Impairment records	Extent, duration, compensating measures, restoration
Deficiency records	Deficiency identified, corrective action, closure
Water supply records	Flow test results, static and residual pressure
Sprinkler sampling records	Sample date, laboratory results, replacement
Baseline documents	Acceptance tests, hydraulic calculations, pump curves, as-built drawings

B. Retention

NFPA 25 ties retention to the inspection and test cycle (records are kept until at least the next inspection or test of the same type, and many jurisdictions and insurers require longer). As a practical standard, retain ITM records for at least 3 years, aligning with IFC §901.6.3, and keep baseline documents for the life of the system. Records related to a fire, incident, or litigation should be retained until the matter is resolved.

C. Records and Insurance

Insurers frequently request NFPA 25 records to verify sprinkler credits. Missing records may result in the credit being denied.

Key point: Records are not paperwork. They are the evidence that the system was maintained.

Pro Tip: Maintain records electronically with backup. Paper binders are easily lost; electronic records can be searched and trended.

◆ Section 10: Deficiencies and Impairments

NFPA 25 distinguishes between deficiencies and impairments. The distinction determines the urgency of the response.

A. Deficiency Classification

Classification	Definition	Response
Noncritical deficiency	Does not materially affect system performance	Correct in a reasonable time
Critical deficiency	If not corrected, can materially affect performance	Correct promptly
Impairment	System or portion is out of service and will not function in a fire	Impairment process applies

The classification can depend on the occupancy. A waterflow alarm failure might be a critical deficiency in a warehouse but an impairment in a hospital.

B. Corrective Action

Deficiencies must be corrected by qualified personnel. The correction should be documented, and the record should verify that the system was returned to service and retested where required.

C. Impairments

When a system is impaired, the impairment process applies (see Article 143). It includes notification of the AHJ, insurer, and monitoring company as required, tagging, fire watch or other compensating measures, work planning to minimize outage time, and restoration verification.

Key point: The classification determines urgency. When in doubt, treat the condition as an impairment.

Pro Tip: Track deficiencies in a log with closure dates. An open deficiency log is the first thing an auditor will ask for.

Key Article: Article 143: Impairment Management and Fire Watch Procedures (NFPA 25)

◆ Section 11: The 2026 Edition Changes

The 2026 edition of NFPA 25 introduced several changes that affect building owners and ITM providers. The items below summarize reported changes; confirm each against the published 2026 text and your AHJ’s adopted edition.

A. Inspector Qualifications

The 2026 edition removed prescriptive qualifications from the body of the standard in favor of a requirement to use personnel qualified for specific ITM tasks. Qualification guidance resides in the annex, and the determination is left to the local jurisdiction.

B. Sprinkler Sampling

New requirements address sprinklers in dwelling units that have been in service more than 50 years.

C. Corrosion-Inhibiting Systems

New ITM requirements address corrosion-inhibiting technologies. NFPA 13 now allows a higher C factor (120) for dry and preaction systems that incorporate such technologies. The technology must be maintained for the life of the system, or the system may no longer meet its design basis.

D. Internal Inspection of Valves

A requirement was added that valves that can be reset externally must still be internally inspected at the stated interval.

E. FDC Inspection in Lieu of Hydrostatic Test

An allowance was added to perform an internal inspection of the fire department connection in lieu of a hydrostatic test for short sections (less than 10 feet).

Key point: The changes affect both the ITM provider and the owner. Verify that your contractor is aware of them and that the ITM program reflects them.

Pro Tip: Ask your contractor which edition they follow. If the AHJ has adopted the 2026 edition, the program should reflect it.

◆ Section 12: Working with ITM Contractors

Most owners rely on contractors for testing and maintenance. The relationship works best when expectations are written down.

• Verify credentials. Required licenses, certifications, and insurance; experience with your system types (pumps, preaction, foam).
• Define scope. The contract should list each system, task, and frequency, with the edition of NFPA 25 and local requirements.
• Require reports. Reports should identify deficiencies and impairments clearly, with classification, location, and recommended action, not just “pass” or “fail.”
• Review every report. Track deficiencies to closure and obtain quotes promptly for repairs.
• Coordinate notifications. The contractor should notify the monitoring company before alarm tests and the owner before any shutdown.
• Protect the building during work. Require impairment tags, fire watch coordination, and restoration verification.

Key point: The lowest bid often buys the least thorough inspection. Evaluate scope and qualifications, not just price.

Pro Tip: Do an annual walk-through with the contractor so building staff learn what the system looks like and what warning signs to report.

◆ Section 13: Building an ITM Program

An ITM program is the documented system by which the owner ensures that NFPA 25 requirements are met.

A. Program Elements

Element	Content
Inventory	All water-based systems, components, and installation dates
Schedule	ITM calendar with tasks, frequencies, and responsible parties
Contracts	Service agreements with qualified ITM providers
Records	System for maintaining and retrieving records
Deficiency log	Tracking and closure of deficiencies
Impairment procedure	Process for managing impairments
Training	Training for staff who perform ITM tasks
Audit	Periodic review of the ITM program

B. The ITM Calendar

Frequency	Typical tasks
Weekly	Diesel fire pump churn test and checks; control valves (if sealed); dry/preaction gauges
Monthly	Electric fire pump churn test; locked/supervised control valves; wet-system gauges; transfer switch
Quarterly	Mechanical waterflow alarm test; FDC and hose connection inspection; hydraulic placard; main drain test (where required)
Semiannually	Vane and pressure-switch waterflow alarm tests
Annually	Main drain test; sprinkler, hanger, and pipe inspection; pump flow test; control valve operation; dry-pipe partial trip test; standpipe tests; hydrant flushing; backflow test; antifreeze test
3 years	Dry-pipe full-flow trip test
5 years	Internal piping assessment; standpipe flow test; private main flow test; tank internal inspection (where applicable); gauge replacement or recalibration
10 to 50 years	Sprinkler sampling and replacement by type and environment

Key point: The ITM program is the owner’s system for ensuring NFPA 25 compliance. Without it, ITM is ad hoc and inconsistent.

Pro Tip: Use a computerized maintenance management system (CMMS) to schedule and track ITM. Automated reminders prevent missed tasks. Treat the program as an element of the fire safety management system (Article 141), a risk management activity rather than a maintenance chore.

◆ Section 14: Common Challenges and Mistakes

Challenge	Why it happens	Solution
Assuming ITM is the contractor’s responsibility	Responsibility is the owner’s	Designate responsibility in writing
ITM not performed or tasks missed	No schedule or responsible party	ITM calendar with assigned owners
Records missing	No records system	Electronic records with backup
Deficiencies not corrected	No tracking	Deficiency log with closure verification
Impairments unmanaged	No procedure	Impairment process per Article 143
Unqualified contractor	Lowest bid selected	Verify credentials and scope
Sprinkler sampling missed	No inventory	Maintain sprinkler inventory
Fire pump tests skipped	No schedule	Weekly, monthly, and annual calendar
Water supply assumed adequate	No periodic testing	Periodic flow tests and valve checks
Internal corrosion ignored	Focus on external inspection	Five-year internal assessment; investigate leaks
2026 changes not implemented	Contractor unaware	Confirm edition awareness
Insurance credit denied	Records not submitted	Submit records to insurer annually
Program not audited	No review	Annual review

Key point: Most ITM failures are program failures (no schedule, no records, no tracking). The technical tasks are well understood; the management system is what fails.

◆ Section 15: ITM Program Checklist

Item	Status	Notes
NFPA 25 edition confirmed	☐	2023 or 2026; AHJ-adopted edition
System inventory maintained	☐	All water-based systems and components
ITM calendar developed	☐	Weekly through multi-year tasks
Responsibilities assigned in writing	☐	Staff and contractors
ITM contractor qualified	☐	Aware of 2026 changes
Records system established	☐	Electronic with backup
Deficiency log established	☐	With closure verification
Impairment procedure established	☐	Per Article 143
Sprinkler inventory maintained	☐	Installation dates and types
Fire pump log maintained	☐	All starts recorded
Water supply verified	☐	Flow tests and valve checks on file
Hydrants and underground mains included	☐	Flushing and 5-year flow test
Backflow preventers and PRVs tested	☐	Annual
Records submitted to insurer	☐	Annually
Staff trained	☐	Visual inspections, gauge checks
Program audited	☐	Annual review

◆ Section 16: Conclusion

NFPA 25 keeps water-based fire protection systems ready to perform. It sets the minimum ITM requirements for sprinklers, standpipes, fire pumps, water supply, and related components, and it places responsibility for compliance on the property owner or designated representative.

The critical elements are responsibility, schedule, qualified personnel, records, deficiency correction, impairment management, water supply verification, internal condition, sprinkler sampling, awareness of 2026 edition changes, and periodic program audit.

The most common failure is not technical. It is a program failure: no schedule, no records, no tracking. The system exists; the program that keeps it working does not.

Key Takeaways:

• NFPA 25 establishes minimum ITM requirements for water-based fire protection systems.
• The property owner or designated representative is responsible for compliance.
• ITM frequencies are layered: weekly, monthly, quarterly, annually, and multi-year.
• Sprinkler sampling and replacement are required based on time in service.
• Standpipe systems need a flow test every 5 years.
• Diesel fire pumps need weekly churn tests, electric pumps monthly, and all pumps an annual flow test.
• Hydrants, underground mains, backflow preventers, and tanks are part of the program.
• Internal corrosion and obstruction are hidden risks that need periodic investigation.
• Records are the evidence of ITM and the basis for insurance credits.
• Deficiencies must be corrected; impairments require the impairment process.
• The 2026 edition changed inspector qualifications, sampling, and corrosion-related requirements.
• The ITM program is a management system, not just a maintenance activity.

Take Action Today:

1. Confirm the adopted edition of NFPA 25.
2. Designate ITM responsibility in writing.
3. Verify the system inventory is complete, including hydrants, mains, and backflow preventers.
4. Build or update the ITM calendar and assign responsibility for each task.
5. Verify the contractor is qualified and aware of 2026 changes.
6. Confirm records are maintained and retrievable.
7. Review the deficiency log for open items.
8. Confirm the impairment procedure is in place.
9. Verify the sprinkler sampling schedule and fire pump logs.
10. Submit ITM records to the insurer annually and audit the program annually.

Continue Reading from Our Series:

• Related guide: Article 149: Insurance Requirements and Fire Protection Credits
• Related guide: Article 143: Impairment Management and Fire Watch Procedures (NFPA 25)
• Read more: Article 147: Annual Fire Safety Inspections: A Complete Guide

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and your property insurer for project-specific requirements.

IMPORTANT DISCLAIMER: This guide references ISO (Insurance Services Office, a Verisk business) Public Protection Classification (PPC), the Fire Suppression Rating Schedule (FSRS), and the Building Code Effectiveness Grading Schedule (BCEGS); FM Global Property Loss Prevention Data Sheets; NFPA 101, Life Safety Code; NFPA 1, Fire Code; NFPA 13 (sprinkler systems); NFPA 14 (standpipe systems); NFPA 20 (stationary fire pumps); NFPA 25, Standard for the Inspection, Testing, and Maintenance of Water-Based Fire Protection Systems; NFPA 51B (hot work); NFPA 70B (electrical equipment maintenance); NFPA 72, National Fire Alarm and Signaling Code; NFPA 80 (fire doors); NFPA 96 (commercial cooking); NFPA 10, Standard for Portable Fire Extinguishers; NFPA 291 (hydrant flow testing); the International Fire Code (IFC); and the requirements of individual property insurers and reinsurers. Insurance rating methodologies, credit schedules, policy forms, and underwriting requirements vary by insurer, by jurisdiction, and by property type. ISO PPC classifications are community-level ratings; individual commercial property ratings depend on building-specific characteristics. This guide is educational and is not insurance, legal, or engineering advice. It is a starting point only. Always verify the specific requirements and available credits with your property insurer, your broker, and your Authority Having Jurisdiction (AHJ).

Fire protection and insurance are inseparable. The systems that protect a building from fire also help determine what the building costs to insure. A building with a complete, maintained, and verified fire protection system is a better risk than a building without one, and insurers price that difference into premiums, deductibles, and coverage terms.

Fire protection credits are the mechanism by which insurers recognize the presence and quality of fire protection. They take many forms: a reduction in premium for a sprinklered building, a discount for a monitored fire alarm, a better rate for a building in a community with a strong fire department. But credits are not automatic. They depend on the system being installed correctly, maintained properly, and documented convincingly. A sprinkler system with no inspection records may earn little or no credit.

Fire protection is also more than a pricing matter. Many property policies make the continued operation of specific protective systems a condition of coverage, so a neglected system can affect not only the premium but also whether a fire loss is paid in full. This article therefore covers how insurers evaluate fire risk, the ISO Public Protection Classification and related community ratings, FM Global data sheets, the credits available for specific systems, the policy conditions that tie coverage to protection, the documentation insurers require, how to prepare for insurer surveys, and how to maximize credits while maintaining the underlying fire safety that the credits are meant to recognize.

◆ Section 1: How Insurers Evaluate Fire Risk

Insurers evaluate commercial property risk through a framework known as COPE: Construction, Occupancy, Protection, and Exposure.

Factor	What Insurers Evaluate
Construction	Building materials, fire-resistance ratings, roof assembly, exterior walls, concealed spaces, age of building
Occupancy	What the building is used for; hazard classification; combustible loading; processes, storage, and ignition sources
Protection	Sprinklers, alarms, extinguishers, water supply, public fire department, private fire brigade
Exposure	Adjacent buildings, wildfire risk, flood and other natural hazards, external hazards

A. The Underwriter’s Perspective

The underwriter is not evaluating code compliance. The underwriter is evaluating the probability and severity of loss. A building that meets code but has poor maintenance records is a worse risk than a building that exceeds code with documented maintenance.

Insurers typically consider two loss measures: the probable maximum loss (the large loss expected if protection performs as intended) and the maximum foreseeable loss (the large loss expected if protection fails or is impaired). Fire protection credits mostly reflect confidence in the first measure. Documentation, impairment control, and maintenance determine whether the insurer believes the first measure or the second.

B. The Role of Fire Protection Credits

Fire protection credits reduce the premium to reflect reduced risk. The logic is straightforward: a building with automatic sprinklers is less likely to suffer a total loss than a building without them. The credit reflects that reduced probability and severity.

Credits are only one input to the premium. Pricing also reflects loss history, limits and deductibles, location and catastrophe exposure, the insurer’s own rating plan (which may apply schedule credits and debits for building features and management), and market conditions. A strong fire protection program improves the insurer’s view of the risk, but it does not by itself guarantee a lower premium in a hardening market.

C. Credits Are Not Guaranteed

Credits are not automatic. The insurer must be satisfied that the system is:

• Designed for the occupancy and hazard
• Installed correctly
• Maintained per applicable standards
• Documented with current records
• Monitored where required

Key point: Fire protection credits recognize risk reduction. The system must actually reduce risk, not just exist on paper, to earn the credit.

D. Accurate Submissions Matter

The insurer’s view of the risk starts with the information supplied by the owner and broker: the application, the statement of values, and the COPE data. Describing protection that is not installed, not working, or not maintained can lead to denied credits, a reduced or denied claim, or, in serious cases, rescission of coverage. Describe the protection as it actually exists, and update the insurer when it changes.

Pro Tip: Ask your insurer for a written breakdown of the credits applied to your premium. Understanding what you are receiving helps you protect it and identify credits you may be eligible for but not receiving.

◆ Section 2: ISO Public Protection Classification and Related Community Ratings

The ISO Public Protection Classification (PPC) is a community-level rating that insurers use to help set premiums. It is one of the most widely used fire protection rating systems in the United States. It is produced by evaluating a community against the Fire Suppression Rating Schedule (FSRS).

A. What the PPC Measures

The PPC evaluates the community’s fire protection capability, not the individual building’s. The FSRS assigns up to 105.5 points across four areas:

Category	Points (Approximate)	What Is Reviewed
Fire department	50	Engine and ladder/service company distribution, equipment, staffing, training, response
Water supply	40	Supply capacity, hydrant condition and spacing, hydrant inspection and flow testing
Emergency communications	10	Call receipt, alarm dispatch, telecommunicator staffing and training
Community risk reduction	5.5 (additional)	Fire prevention code adoption and enforcement, public education, fire investigation

The score is converted to a class from 1 to 10, where Class 1 (90 or more points) is the best and Class 10 indicates the community does not meet minimum criteria. Always confirm the current scoring details with ISO or your broker, as the schedule is updated periodically.

B. What the PPC Does Not Measure

The PPC does not evaluate:

• The individual building’s construction
• The building’s sprinkler system
• The building’s fire alarm
• The building’s housekeeping or maintenance

These are evaluated separately by the insurer through the commercial property rating process. For large, sprinklered, individually rated risks, the PPC often has a smaller influence on the premium than it does for small, unsprinklered buildings, because the building’s own protection dominates the loss expectation.

C. Building Code Effectiveness Grading (BCEGS)

A second ISO community-level rating, the Building Code Effectiveness Grading Schedule (BCEGS), grades a community’s adoption and enforcement of building codes on a scale of 1 to 10, with 1 the best. Insurers may consider the BCEGS grade alongside the PPC, because a community that enforces modern codes tends to have buildings that perform better in fire, wind, and other events. Like the PPC, the BCEGS grade is a community rating that the building owner cannot change directly.

D. Split Classifications

Some communities have split classifications (for example, 5/9 or 5/5Y). The first number applies to properties within five road miles of a responding fire station and within 1,000 feet of a creditable water supply (typically a fire hydrant). The second number applies to properties within five road miles of a station but beyond 1,000 feet of a creditable water supply. Properties more than five road miles from a responding station are generally Class 10. Classification letters and details vary, so verify the exact meaning with ISO or your broker.

E. What You Can and Cannot Control

You cannot change your community’s PPC or BCEGS grade. You can:

• Verify your property’s classification (some properties may qualify for a better split classification, for example when a hydrant is within 1,000 feet)
• Understand how the PPC affects your specific premium
• Participate in community fire protection planning where appropriate
• Focus on the building-specific protections you control

Key point: The PPC is a community rating. The building-specific protections (sprinklers, alarms, maintenance) are the part you control.

Key Article: Article 147 — Annual Fire Safety Inspections: A Complete Guide

Pro Tip: Ask your broker how the PPC affects your specific premium. In some cases, the building-specific credits matter more than the community classification.

◆ Section 3: FM Global and Property Loss Prevention Data Sheets

FM Global is a mutual insurance company that publishes Property Loss Prevention Data Sheets, which are detailed engineering guidelines for preventing property loss. Many insurers, not just FM Global, reference these data sheets in their underwriting.

A. What the Data Sheets Cover

FM Global data sheets are organized by numbered series:

Series	Subject	Example Topics
1	Construction	Roof and wall assemblies, wind, fire-resistive construction
2	Fire protection	Sprinkler installation, fire safety inspection (DS 2-0, DS 2-81)
3	Water supply	Hydraulics, fire pumps, nonstorage occupancies (DS 3-7, DS 3-26)
4	Extinguishing equipment	Special protection systems, portable extinguishers
5	Electrical	Electrical equipment, automatic fire detection (DS 5-48), energy storage
7	Hazards	Flammable liquids, process hazards
8	Storage	Commodity classification and storage arrangements (DS 8-9)
10	Human element	Hot work management (DS 10-3), pre-incident planning, contractor control

Series topics and data sheet numbers are updated over time. Obtain the current versions from FM Global or your insurer rather than relying on a list in an article.

B. How the Data Sheets Differ from Codes

FM Global data sheets are not codes. They are engineering guidelines that often exceed code requirements. They focus on preventing property loss and business interruption, not just life safety.

A building that meets code may not meet FM Global recommendations. A building that meets FM Global recommendations typically exceeds code.

C. FM Approval

FM Global also operates FM Approvals, which certifies products and services that meet FM Global standards. Products that are “FM Approved” have been tested and verified to perform as intended. Many insurers require FM Approved or equivalent listed equipment for certain applications.

D. When FM Global Data Sheets Apply

• When the property is insured by FM Global
• When the insurer references FM Global data sheets in the policy or underwriting requirements
• When the owner chooses to follow them as best practice
• When a lender or investor requires them

E. Recommendations and Risk Quality

FM Global and other insurers with strong loss-control programs typically evaluate each location, assign a risk-quality assessment, and issue written recommendations for improvement. Some insurers market “highly protected risk” (HPR) programs that expect protection and management well above code minimums. The value of these programs lies in lower expected loss; the price benefit comes from the insurer’s confidence that recommendations are completed.

Key point: FM Global data sheets are a benchmark for property loss prevention. Even if your insurer does not require them, following them can reduce risk and may improve your insurability.

Pro Tip: Ask your insurer whether they reference FM Global data sheets. If they do, obtain the relevant data sheets for your occupancy and verify compliance.

◆ Section 4: Credits for Specific Fire Protection Systems

Insurers offer credits for specific fire protection features. The specific credits and their value vary by insurer, but the categories are consistent.

A. Automatic Sprinkler Systems

Sprinklers typically carry the largest credit. The credit depends on:

Factor	Why It Matters
Coverage	Full coverage earns more credit than partial; unsprinklered areas, concealed spaces, and exterior canopies are noted
Design adequacy	Design must match the current occupancy, storage height, and commodity class (NFPA 13; FM Global DS 8-9)
Type	Wet pipe, dry pipe, pre-action, deluge
Maintenance	NFPA 25 inspection and test records
Water supply	Reliable supply with adequate flow and pressure for the hazard
Monitoring	Waterflow and valve supervisory alarms to a central station

A sprinkler system with no inspection records may earn no credit, or may be treated as if the building were unsprinklered, depending on the insurer’s rating approach. A system that was adequate when installed but not re-evaluated after storage or occupancy changes can also be judged inadequate.

B. Fire Alarm Systems

Factor	Why It Matters
Monitoring	Central station or other supervising station monitoring earns more credit than a local alarm
Detection	Smoke and heat detection throughout, as required for the occupancy
Supervision	Valve supervision, signal circuit supervision
Certification	UL certificate of central station service or equivalent
Maintenance	NFPA 72 inspection and testing records; deficiencies corrected

A monitored alarm with a UL certificate is the proof many insurers require.

C. Water Supply

Factor	Why It Matters
Hydrant proximity	Closer hydrants earn more credit (the 1,000-foot distance is a key threshold in ISO rating)
Water main capacity	Adequate flow and pressure, verified by a flow test (NFPA 291)
Reliability	Looped or multiple-source supplies are more reliable than a single dead-end main
On-site storage	Tanks or reservoirs where municipal supply is inadequate
Fire pump	Booster pump where pressure is insufficient

D. Construction and Exposure Credits

Factor	Why It Matters
Fire-resistive construction	Reduces severity of loss
Fire walls and compartmentation	Limits the area exposed in one fire
Roof classification	Class A roof earns credit; roof-mounted equipment and PV arrays are considered
Setback	Distance from adjacent buildings reduces exposure
Exposure protection	Protection of openings, walls, and roofs
Wildfire defensibility	Defensible space and ember-resistant features in wildfire-prone areas

E. Other Credits

• Portable extinguishers (basic code compliance, NFPA 10)
• Special hazard suppression (clean agent, foam, CO2)
• Commercial cooking suppression (NFPA 96 and the listed hood system)
• Electrical maintenance program with periodic infrared thermography (NFPA 70B)
• Lightning protection (NFPA 780) where the exposure warrants
• Security, arson prevention, and vacancy control
• Emergency lighting and exit signage
• Hot work permit program (Article 142)
• Housekeeping and maintenance programs
• Private fire brigade or emergency response team with documented training

Key point: The largest credits are typically for sprinklers and alarms. But all credits depend on documentation. A system that cannot be verified earns no credit.

Key Article: Article 23 — Commercial Building Code Requirements for Fire Sprinkler Systems

Pro Tip: Request a copy of your insurer’s rating worksheet. It shows exactly which credits are applied and which are missing.

◆ Section 5: Policy Conditions That Tie Coverage to Protection

Credits affect price. Policy conditions affect whether a loss is paid. This distinction is easy to miss, and it is one of the most important points in this article.

A. Protective Safeguards Endorsements

Many commercial property policies include a protective safeguards endorsement (for example, the ISO Protective Safeguards endorsement, which uses codes such as P-1 for automatic sprinkler systems and P-2 for automatic fire alarms). The endorsement lists protective systems that the insured agrees to maintain. Typical wording provides that the insurer will not pay for fire loss if, before the fire, the insured knew of a suspension or impairment in a listed safeguard and failed to notify the insurer, or failed to maintain the safeguard in complete working order.

The practical effect is that a sprinkler or alarm system listed in the endorsement is no longer just a source of credit. It is a condition of coverage. A closed valve, a lapsed monitoring contract, or an out-of-service alarm panel can jeopardize a claim.

B. Impairment Notification

Policies and insurer requirements commonly expect prompt notice when a protective system is out of service. A sound impairment program, consistent with NFPA 25 Chapter 15, includes:

• An impairment coordinator with authority to approve and track impairments
• Impairment tags at the control valve or panel
• Notification of the fire department, the monitoring company, and the insurer (as required by the policy and the insurer)
• Interim measures, such as a fire watch or temporary protection, when a system is out of service for an extended period (NFPA 25 addresses outages longer than 10 hours in a 24-hour period)
• Prompt restoration and a documented return to service, with a confirming test

See Article 143 for a full discussion of impairment management and fire watch.

C. Other Conditions and Warranties

Policies may contain additional conditions that relate to fire protection:

• Maintenance of specified fire protection equipment or services
• Requirements for hot work, cooking, or process controls
• Limits on coverage when a building is vacant or unoccupied for an extended period
• Requirements for alarm response, security, or watchperson services
• Notice requirements when occupancy, storage, or protection changes

Read these provisions with your broker. A condition you did not know about cannot be met.

D. Beyond Premium: Deductibles, Sublimits, and Terms

Insurers use more than premium to respond to protection quality. A weaker risk may see higher deductibles, sublimits for certain perils, restricted business interruption terms, or required improvements as a condition of renewal. A stronger risk may negotiate broader terms, lower deductibles, or more stable renewals. These effects are real even when they are not labeled as “credits.”

Key point: Credits are a price benefit. Protective safeguards and other conditions determine whether coverage responds. Protect both.

Pro Tip: Ask your broker for a plain-language list of every policy condition that depends on fire protection, and assign an owner to each one.

◆ Section 6: Insurer Expectations Beyond the Installed Systems

Insurers rate management as well as equipment. A property with the same sprinklers and alarms can be a better or worse risk depending on how the building is operated. Insurers commonly look at the following.

A. Hot Work

Hot work (welding, cutting, brazing, torch-applied roofing) is a leading cause of large property fires, particularly during construction and renovation. Insurers commonly require a written hot work permit program with fire watch, consistent with NFPA 51B, and many require contractors to follow it. See Article 142.

B. Vacancy and Unoccupied Buildings

Standard commercial property forms often reduce or restrict coverage when a building has been vacant beyond a stated period (60 consecutive days is typical in common forms). A vacant building has no occupants to detect or report a fire, and fire protection is more likely to be neglected. Check the vacancy provisions in your policy and tell your insurer before a building becomes vacant.

C. Construction, Renovation, and Change of Occupancy

Renovation work often impairs sprinklers and alarms, introduces hot work, and adds temporary heat and combustible materials. NFPA 241 and the IFC require fire safety planning during construction. A change in occupancy, storage arrangement, or process can also make an existing sprinkler design inadequate without anyone noticing. A management of change procedure (Article 141) that includes notification of the insurer is the reliable control.

D. Electrical Maintenance

Electrical failure is a common ignition source. Insurers look for periodic infrared thermography, switchgear and panel maintenance, and an electrical maintenance program consistent with NFPA 70B.

E. Housekeeping, Smoking, and Storage Controls

Clear aisles, controlled combustible storage, storage clearances below sprinklers, controlled smoking areas, and waste handling reduce fire load and fire spread. Insurers often observe these on a site visit and treat them as an indicator of overall management.

F. Cooking, Process, and Special Hazards

Kitchens, dust-producing processes, flammable liquids, and similar hazards carry specific requirements (for example, NFPA 96 for cooking exhaust, NFPA 652 for combustible dust). Insurers often review these separately from general building protection.

G. Emerging Hazards

Insurers are paying increasing attention to lithium-ion battery storage and charging, stationary energy storage systems (NFPA 855), rooftop photovoltaic arrays, combustible exterior wall assemblies, and mass timber construction. If your property includes any of these, discuss them with your insurer early. Requirements are developing quickly and can differ significantly between insurers.

Key point: Insurers credit a well-run building. Written programs, assigned responsibility, and records are the evidence.

Pro Tip: Give your insurer a short written summary of your fire safety management programs (impairments, hot work, housekeeping, management of change). Programs that are not described are often not credited.

◆ Section 7: The Documentation Insurers Require

Documentation is the bridge between the installed system and the insurance credit. Without documentation, the insurer cannot verify the system and may not apply the credit.

A. Required Documentation by System

System	Documentation
Sprinkler	NFPA 25 inspection, testing, and maintenance reports; design drawings; hydraulic calculations; contractor’s material and test certificate from installation
Fire alarm	NFPA 72 inspection and test reports; record of completion; UL certificate; monitoring contract
Fire pump	NFPA 25 annual flow test; weekly or monthly churn run logs, as applicable to the driver type
Standpipe	NFPA 25 inspection reports; periodic flow and hydrostatic test records
Extinguishers	Monthly inspection records; annual maintenance records and tags; hydrostatic test records where due
Fire doors	Annual inspection records (NFPA 80)
Commercial cooking	Hood and duct cleaning certificates; extinguishing system semiannual inspection (NFPA 96, NFPA 17A)
Water supply	Hydrant flow test (NFPA 291); water main capacity data; tank and valve inspection records
Impairments	Impairment tags, notifications, fire watch logs, and return-to-service records
Hot work and housekeeping	Permits, fire watch logs, inspection checklists
Management programs	Written programs, training records, corrective action log

B. The UL Certificate

For monitored fire alarm systems, a UL certificate (such as a certificate of central station service) is often the proof insurers require. Such certificates are issued through a UL-listed alarm service company for a specific protected property, and they remain valid only while the required service, inspection, and monitoring arrangements stay in place. Some insurers accept equivalent evidence, such as an FM-approved supervising station or a documented NFPA 72 compliant monitoring and testing program. Confirm what your insurer accepts.

C. NFPA 25 Records

Sprinkler credits depend heavily on NFPA 25 records. Depending on the insurer’s rating approach, a sprinklered property can be rated as if it had no sprinklers when the owner cannot show current inspection, testing, and maintenance. Reports should identify the system, the date, the technician, the results, and any deficiencies, along with the corrective action taken.

D. Records Retention

Retention requirements come from several places, and the longest applicable period governs:

• NFPA 25 and NFPA 72 require inspection, testing, and maintenance records to be kept for at least one year after the next test of that type
• The IFC (§901.6.3) requires inspection, testing, and maintenance records to be kept on the premises for at least three years and provided to the fire code official on request
• Initial acceptance test records, design documents, and hydraulic calculations should be kept for the life of the system
• Insurers may require longer periods under the policy; keep records longer for high-value or high-hazard properties

E. Records After a Loss

After a fire, the insurer will often ask for inspection, testing, impairment, and monitoring records for the protective systems. Complete, organized records support a prompt claim. Missing records, an unreported impairment, or an unmaintained system can slow or complicate a claim, particularly where a protective safeguards condition applies.

F. Organizing the Records

A single, indexed records system (paper or electronic) that is accessible to the facility manager, the broker, and the insurer’s risk engineer makes annual submission routine. Electronic reporting from the inspection contractor is common and reduces the risk of lost reports.

Key point: Documentation is not a formality. It is the evidence that the system exists, functions, and is maintained. Without it, the credit may be denied.

Pro Tip: Submit inspection records to your insurer proactively. Do not wait for the insurer to ask. Proactive submission demonstrates good management and protects your credits.

◆ Section 8: Insurer Surveys, Recommendations, and Preparing for the Visit

Most commercial property insurers send a risk engineer to evaluate significant locations, at inception and periodically thereafter. The survey is the point where the written submission meets the actual building.

A. What the Risk Engineer Reviews

• COPE: construction, occupancy, protection, and exposure as actually found
• Protective systems: sprinkler valves open and sealed or supervised, gauges reading normal, alarm panel normal, pump controller in automatic
• Records: NFPA 25 and NFPA 72 reports, impairment log, monitoring contract, UL certificate
• Management programs: hot work, impairment handling, housekeeping, management of change, emergency response
• Changes since the last visit: storage height, commodity, process, occupancy, or protection

B. Recommendations

The engineer issues written recommendations for improvement, often with a priority and a target completion date. Insurers track completion. Recommendations that are not addressed, or not even acknowledged, can lead to higher premium, restricted terms, or non-renewal. If a recommendation is not practical, respond in writing with a reasoned alternative rather than ignoring it.

C. Preparing for the Visit

• Assemble the records in one place, with a summary of current status
• Walk the building beforehand: valves, panels, storage clearances, blocked exits, obstructed sprinklers
• Correct visible deficiencies first, then document the corrections
• Prepare a list of changes since the last survey
• Assign someone knowledgeable to accompany the engineer
• Prepare a status report on open recommendations, with dates and owners

Key point: The survey is an opportunity, not an audit to endure. A prepared site with organized records earns confidence, and confidence is what the credits and terms reflect.

Pro Tip: Treat each recommendation like a work order: assign an owner, a due date, and a closure record, and report status to the insurer before it asks.

◆ Section 9: Common Reasons Credits Are Denied or Reduced

Credits are frequently denied or reduced for reasons that are preventable.

Reason	Why It Happens	Prevention
No inspection records	Records not maintained	NFPA 25/72 records system
Lapsed monitoring	Contract expired, bill unpaid	Calendar reminders; automatic renewal
Impaired system	Valve closed, system drained, no notification	Impairment procedure (Article 143)
Design mismatch	Occupancy changed, storage increased	Management of change (Article 141)
Unrepaired deficiencies	Deferred maintenance	Corrective action log
Open insurer recommendations	No owner or deadline	Recommendation tracking
No UL certificate	System not under a qualifying service agreement	Service agreement with UL-listed provider
Records not submitted	Not proactive	Submit records to insurer annually
Contractor not qualified	Unlicensed or unregistered	Verify contractor credentials
Policy conditions not understood	Policy not reviewed	Annual policy review with broker
Insurer or FM Global requirements missed	Not aware	Obtain requirements in writing; verify compliance
Unchanged classification data	PPC or split class never verified	Verify with ISO or broker

A. The Sprinkler Credit Loss

A sprinkler system that is not maintained per NFPA 25 may earn no credit. Depending on the insurer’s rating method, a system that cannot be verified may be treated as nonsprinklered. The building then pays a premium reflecting an unsprinklered risk despite having a sprinkler system installed. In an impairment or protective safeguards situation, the consequence can extend to the claim itself.

B. The Monitoring Lapse

A lapsed monitoring contract means the alarm is no longer monitored. The insurer may deny the monitoring credit and may also question the overall risk management of the property. If the alarm is a listed protective safeguard, the lapse may also be a condition breach.

Key point: Credits are lost through neglect, not through deliberate action. The most common causes are missing records, lapsed contracts, and unrepaired deficiencies.

Pro Tip: Conduct an annual insurance credit review. Verify that every credit is still being applied and that the documentation is current.

◆ Section 10: Maximizing Credits While Maintaining Compliance

The goal is not to maximize credits at the expense of safety. The goal is to ensure that the safety that is actually present is recognized and credited.

A. The Right Sequence

1. Install the right protection for the occupancy and hazard
2. Maintain it per applicable standards
3. Document it with current records
4. Submit it to the insurer
5. Verify the credits are applied
6. Review annually to maintain

B. Credits That Require Investment

Investment	Potential Credit	Consideration
Sprinkler system	Highest credit	Capital cost; NFPA 25 maintenance
Monitored fire alarm	Significant credit	Monitoring contract; UL certificate
Fire pump or on-site storage	Credit where water supply inadequate	Capital and maintenance cost
Roof replacement (Class A)	Moderate credit	Capital cost; useful life
Setback or exposure protection	Moderate credit	Limited by site constraints
Special hazard suppression	Credit for the protected hazard	Design, listing, and maintenance
Housekeeping and electrical maintenance programs	Indirect credit (management)	Low cost; high impact

C. Credits That Require No Investment

Action	Benefit
Submit inspection records to insurer	Protects existing credits
Renew monitoring contract	Protects alarm credit
Repair deficiencies	Protects existing credits
Close insurer recommendations	Improves terms and renewal outlook
Document housekeeping and management programs	May improve underwriting
Verify PPC classification	May reveal a better classification

D. Evaluating an Upgrade: A Simple Illustration

Before funding a protection upgrade, compare the expected insurance benefit with the cost. The numbers below are hypothetical and are shown only to illustrate the method.

Item	Hypothetical Value
Annual property premium	$200,000
Insurer’s estimate of premium reduction after upgrade	$30,000 per year
Upgrade cost	$150,000
Added annual maintenance and monitoring	$5,000 per year
Net annual insurance benefit	$25,000
Simple payback	6 years

A simple payback calculation is only a starting point. The justification for protection also includes reduced expected loss, lower business interruption exposure, code compliance, and lender or investor requirements. Ask the insurer for a written estimate of the credit before committing capital, because the actual change depends on the insurer’s rating plan and market conditions.

Key point: The easiest way to increase credits is to protect the ones you already have. Most credit losses are preventable through documentation and maintenance.

Pro Tip: Ask your broker to conduct a credit review before renewal. The review identifies missing credits and documentation gaps while there is still time to correct them.

◆ Section 11: The Limits of Credits

Fire protection credits are not the goal. They are a recognition of risk reduction. Three limits are important to understand.

A. Credits Do Not Replace Compliance

A building that earns insurance credits but does not meet code is still non-compliant. The AHJ can require corrections regardless of what the insurer credits. The reverse is also true: code compliance does not guarantee that the insurer will give credit.

B. Credits Do Not Guarantee Coverage

An insurer may decline coverage, impose higher deductibles, add sublimits, or exclude certain perils regardless of the fire protection in place. Credits affect the price of coverage; they do not determine whether the insurer will offer coverage or pay a particular claim. Policy conditions such as protective safeguards endorsements can condition payment on the continued operation of the protection.

C. Credits Do Not Prevent Loss

The best credit is worthless if a fire occurs. The purpose of fire protection is to prevent loss, not to earn a discount. The credit is a byproduct of good protection, not a substitute for it. Insurance also does not cover everything: uninsured losses such as lost customers, lost market position, and disruption of operations can exceed the insured amount.

Key point: Fire protection credits are a financial recognition of risk reduction. They are not the reason to install fire protection, and they are not a substitute for compliance or safety.

Key Article: Article 141 — Fire Safety Management Systems and ISO 31000 Alignment

Pro Tip: Do not make fire protection decisions solely based on insurance credits. Make decisions based on life safety and property protection; the credits will follow.

◆ Section 12: Design and Compliance Checklist

Item	Status	Notes
Insurer’s fire protection requirements obtained	☐	In writing
Policy conditions and protective safeguards endorsements identified	☐	With broker; owner assigned to each
FM Global data sheets reviewed (if applicable)	☐	For occupancy and systems
Sprinkler system designed for current occupancy and storage	☐	NFPA 13; re-evaluate after changes
Sprinkler system maintained per NFPA 25	☐	Records current
Fire alarm monitored	☐	Central station; UL certificate
Fire alarm maintained per NFPA 72	☐	Records current
Fire pump maintained per NFPA 25	☐	Annual flow test
Water supply adequate	☐	Hydrant flow test (NFPA 291)
Extinguishers maintained	☐	Monthly inspection; annual maintenance
Fire doors inspected	☐	Annual per NFPA 80
Commercial cooking maintained	☐	NFPA 96
Impairment program in place	☐	Coordinator, tags, notification, fire watch
Hot work permit program in place	☐	NFPA 51B
Electrical maintenance program	☐	NFPA 70B; infrared thermography
Housekeeping program	☐	Documented
Management of change includes insurer notice	☐	Occupancy, storage, process changes
Records submitted to insurer	☐	Annually
Insurer recommendations tracked to closure	☐	Owner and due date
Credits verified	☐	Rating worksheet reviewed
PPC classification verified	☐	With broker or ISO
Annual credit review scheduled	☐	Before renewal

◆ Section 13: Common Mistakes and How to Avoid Them

Mistake	Why It’s a Problem	How to Fix
Assuming credits are automatic	Credits require documentation	Submit records; verify
Not maintaining sprinklers	Credit may be denied; claim may be affected	NFPA 25 maintenance
Letting monitoring lapse	Alarm credit lost; possible condition breach	Automatic renewal
Not notifying the insurer of impairments	Protective safeguards condition may be breached	Impairment procedure with insurer notice
Not repairing deficiencies	Credit reduced or denied	Corrective action
Not submitting inspection records	Insurer assumes worst	Annual submission
Ignoring insurer recommendations	Terms worsen; renewal at risk	Track to closure or respond in writing
Not telling the insurer about changes	Protection may no longer match hazard	Management of change with insurer notice
Choosing lowest-bid contractor	Unqualified work; no records	Verify credentials
Ignoring FM Global or insurer data sheet requirements	Credit may be reduced	Obtain and verify
Not reviewing the policy	Conditions not understood	Annual policy review
Not verifying PPC	May qualify for better classification	Verify with broker
Making decisions solely for credits	Safety may be compromised	Prioritize life safety

◆ Section 14: Conclusion

Fire protection credits are the financial recognition of risk reduction. They are earned through the presence, quality, and documentation of fire protection systems. They are lost through neglect, missing records, and lapsed maintenance. In many policies, the same systems are also a condition of coverage, which makes their maintenance more than a pricing matter.

The critical elements are:

1. Understand the framework: COPE, ISO PPC and BCEGS, FM Global data sheets, and your policy conditions
2. Install the right protection: sprinklers, alarms, water supply, construction
3. Maintain it: NFPA 25, NFPA 72, NFPA 10, NFPA 80
4. Control impairments and changes: impairment procedure, hot work, management of change
5. Document it: inspection records, test reports, UL certificates
6. Submit it: proactively provide records to the insurer
7. Verify it: review the rating worksheet and credits annually
8. Protect it: correct deficiencies, close recommendations, renew contracts, maintain records

The most common credit failures are documentation failures. The system may be in place, but the insurer cannot verify it.

Key Takeaways:

• Insurers evaluate fire risk through COPE: Construction, Occupancy, Protection, Exposure.
• Fire protection credits recognize risk reduction; they are not automatic.
• ISO Public Protection Classification and BCEGS are community-level ratings; building-specific credits are separate.
• FM Global data sheets are property loss prevention guidelines that often exceed code.
• Sprinklers and monitored alarms typically carry the largest credits.
• Protective safeguards endorsements and other policy conditions can make maintained protection a condition of coverage.
• Impairments should be controlled, tagged, and reported to the insurer as required.
• Insurers rate management too: hot work, housekeeping, electrical maintenance, vacancy, and change control.
• Documentation is the evidence that the system exists, functions, and is maintained.
• NFPA 25 records are critical for sprinkler credits; missing records may result in reduced or no credit.
• A UL certificate is often required for monitored alarm credits.
• Insurer surveys and recommendations should be prepared for and tracked to closure.
• Credits are lost through missing records, lapsed contracts, and unrepaired deficiencies.
• The easiest way to increase credits is to protect the ones you already have.
• Credits are a byproduct of good protection, not a substitute for it.

Take Action Today:

• Obtain the insurer’s fire protection requirements in writing.
• Ask your broker to identify every policy condition and protective safeguards endorsement tied to fire protection.
• Review FM Global data sheets if your insurer references them.
• Verify the sprinkler system is maintained per NFPA 25 with current records.
• Verify the fire alarm is monitored and has a current UL certificate.
• Confirm your impairment procedure includes notification of the insurer.
• Confirm inspection records are submitted to the insurer annually.
• Review the insurance rating worksheet for credits applied and missing.
• Verify the community’s PPC classification and your property’s split classification.
• Correct any deficiencies and close open insurer recommendations.
• Renew monitoring contracts automatically.
• Verify contractor credentials before engaging them.
• Conduct an annual credit review before renewal.
• Treat insurance credits as a fire safety management metric.

Continue Reading from Our Series:

• Related guide: Article 148 — Third-Party Fire Safety Audits and Peer Reviews
• Related guide: Article 147 — Annual Fire Safety Inspections: A Complete Guide
• Related guide: Article 143 — Impairment Management and Fire Watch Procedures (NFPA 25)
• Related guide: Article 142 — Hot Work Permit Programs and Procedures
• Read more: Article 150 — NFPA 25 Inspection, Testing, and Maintenance of Water-Based Systems

About This Guide: This article is part of a series on commercial building fire safety, written for facility managers, architects, and code officials. It references model codes and standards for educational purposes. Always consult your local AHJ and your property insurer for project-specific requirements.