Battery Energy Storage System Safety: NFPA 855, UL 9540/9540A, and the Engineering of Code-Compliant Installations

Published: June 2026 Technical Level: Advanced Category: Safety Standards


Abstract

NFPA 855, Standard for the Installation of Stationary Energy Storage Systems, is the installation standard that governs how battery energy storage systems (BESS) are sited, enclosed, protected, and documented for fire and life safety purposes. This paper explains how NFPA 855 shapes engineering decisions for stationary BESS installations: the capacity and spacing thresholds that determine when additional fire protection is required, the role of UL 9540 as a product listing standard and UL 9540A as a large-scale fire test method central to hazard characterization and AHJ decisions, the fire protection and ventilation requirements tied to thermal runaway hazards, and the documentation and design process that enables successful permitting. The paper draws on NFPA 855's 2023 edition and addresses the full design team — electrical, mechanical, and fire protection engineers — because compliant BESS installation is a joint product of all three disciplines working from a shared understanding of the standard's requirements and their physical basis.


1. Introduction

Stationary battery energy storage systems have grown from megawatt-hour demonstration projects to multi-hundred-megawatt-hour utility-scale deployments in less than a decade. The economic drivers — falling cell costs, grid ancillary service revenues, and co-location with variable renewable generation — have produced an installation rate that fire protection code development has struggled to match. The first edition of NFPA 855 was published in 2019; prior to that, BESS installations were governed by a patchwork of NFPA 1 provisions, local building department interpretations, and manufacturer-submitted fire test data with no standardized format or evaluation procedure.

The specific fire hazard that prompted dedicated code development is thermal runaway: an exothermic decomposition reaction in lithium-ion cathode materials that, once initiated, generates its own oxygen and sustains combustion independent of external fuel or ignition sources. Thermal runaway releases toxic gases — carbon monoxide, hydrogen fluoride, and volatile organic compounds — and can produce flammable gas concentrations sufficient to create deflagration hazards in confined enclosures. The consequence is that a BESS fire is not analogous to a conventional electrical equipment fire, which typically requires an external ignition source and ceases when the ignition source is removed. A BESS fire must be addressed as a chemical fire with self-sustaining energy release, re-ignition potential after apparent extinguishment, and toxic product generation that affects both firefighter safety and off-site air quality.

NFPA 855 is the installation standard that defines the minimum conditions under which these hazards are adequately controlled. It does not design the BESS electrically — that is the domain of NEC Article 706 and the equipment manufacturer's UL 9540-listed system design. It does not define the fire protection system in detail — that is the domain of NFPA 13 (sprinklers), NFPA 2001 (clean agents), and NFPA 72 (fire alarm). What NFPA 855 does is establish the interface between the BESS installation and the fire protection disciplines: the capacity thresholds above which protection is required, the separation distances and enclosure requirements that limit fire spread, the ventilation requirements that control off-gas accumulation, and the documentation obligations that allow the authority having jurisdiction to evaluate the installation.

Three other standards and codes are essential context for NFPA 855. NFPA 1, Fire Code, Chapter 52, and the International Fire Code (IFC) Chapter 1207 both reference NFPA 855 as the governing installation standard for ESS; an AHJ enforcing either of these fire codes is, in effect, enforcing NFPA 855. NEC Article 706, Energy Storage Systems, governs the electrical installation requirements — conductor sizing, disconnecting means, overcurrent protection, grounding, and interconnection — and operates independently of NFPA 855's fire protection scope. UL 9540, Standard for Energy Storage Systems and Equipment, is the product listing standard that NFPA 855 requires for ESS installations; a system that is not listed to UL 9540 cannot be installed under NFPA 855. UL 9540A, Test Method for Evaluating Thermal Runaway Fire Propagation in Battery Energy Storage Systems, is the fire test method through which the thermal runaway characteristics of a specific system are quantified and the AHJ's decisions on spacing, venting, suppression, and capacity limits are justified.


2. Code and Standard Framework

2.1 Regulatory Stack

The regulatory structure governing a BESS installation involves at minimum four layers. The adopted fire code — typically NFPA 1 or the IFC, depending on the jurisdiction — establishes the overall fire safety framework and explicitly references NFPA 855 for ESS installations. NFPA 855 then governs the installation from design through decommissioning: the standard's scope statement in Section 1.1 confirms that it applies to the design, construction, installation, operation, maintenance, and decommissioning of stationary ESS above specified capacity thresholds. NEC Article 706 governs the electrical installation in parallel — the two standards address different disciplines and are both enforced by the AHJ at inspection, typically by the electrical inspector under NEC and the fire marshal or building department under NFPA 855. UL 9540 listing and UL 9540A test data inform AHJ decisions throughout; they are not separately enforced but are prerequisite documents for the NFPA 855 compliance pathway.

The interplay between these layers has practical consequences for the design timeline. A project that secures electrical plan approval under NEC Article 706 before the fire protection and ventilation design is complete is almost certainly going to require design revisions, because the NFPA 855 requirements for suppression, ventilation, separation, and egress will constrain the equipment layout in ways that affect the one-line diagram, conduit routing, and disconnecting means locations. Best practice is to initiate NFPA 855 compliance review in parallel with NEC Article 706 design, not sequentially.

2.2 What NFPA 855 Does and Does Not Require

A common source of confusion in pre-design discussions is the assertion that "NFPA 855 requires sprinklers" for BESS installations. This is an oversimplification that can lead to incorrect cost estimates and scope misunderstandings. What NFPA 855 actually establishes is a tiered structure in which the required protection level depends on the installed capacity, the chemistry (technology class), the installation type (indoor vs. outdoor, dedicated room vs. general occupancy), and — critically — the results of UL 9540A testing for the specific system being installed. For smaller capacities below the threshold values specified in NFPA 855 Chapter 5, automatic fire suppression is not required. Above those thresholds, sprinkler systems or clean agent systems are among the acceptable protection options, but the specific requirement depends on the installation type and the AHJ's review of the Hazard Mitigation Analysis and UL 9540A data. Similarly, the characterization of UL 9540A as simply "a test you run if you want more capacity" understates its centrality: UL 9540A test results are the technical basis for AHJ determinations on spacing, venting, explosion control, and suppression adequacy, regardless of whether the installation is seeking to exceed default capacity limits.


3. Siting, Zoning, and Capacity Limits

3.1 ESS Unit Grouping and Separation

NFPA 855 Section 15.5 (referencing indoor BESS installation) organizes multiple ESS units into groups with defined energy limits per group and required separation between groups. The 50 kWh grouping threshold — the maximum stored energy in a single group for certain chemistry classes in occupied buildings without additional fire protection — is a key design parameter that determines how many groups are required for a given installation capacity and therefore how much floor area the installation occupies. The minimum separation between ESS groups, and between groups and walls or other combustibles, is 3 feet; this separation is required to limit fire spread from a thermal runaway event in one group to adjacent groups or building elements before suppression activates.

The practical consequence of the grouping and separation requirements is that a 600 kWh NMC installation in an occupied building without fire suppression requires twelve 50 kWh groups with 3-foot clearances around each, which typically occupies more floor area than the same installation in a protected enclosure with NFPA 13 sprinklers that allows 2 MWh per room. For most commercial-scale installations, the economics strongly favor providing fire suppression and working within the larger capacity-per-room limits rather than subdividing the installation to stay below the no-suppression threshold. The threshold energy stored per fire enclosure for a specific chemistry and installation type can be expressed in terms of the installed capacity and the applicable NFPA 855 capacity limit:

Nenclosures=EtotalEmax,enclosureN_{enclosures} = \left\lceil \frac{E_{total}}{E_{max,enclosure}} \right\rceil

Where: NenclosuresN_{enclosures} is the minimum number of fire enclosures required. EtotalE_{total} is the total installed energy in kWh. Emax,enclosureE_{max,enclosure} is the maximum stored energy per enclosure for the applicable chemistry class, installation type, and fire protection level per NFPA 855 Chapter 5 in kWh.

3.2 Indoor vs. Outdoor, Occupied vs. Unoccupied

The most consequential siting decision for BESS fire protection purposes is whether the installation is indoors or outdoors, and whether the indoor space is occupied. Occupied indoor installations — office buildings, hospitals, data centers, or any space where workers are present during normal operations — are subject to the most restrictive NFPA 855 requirements, including the lowest default capacity limits, the most prescriptive separation and egress requirements, and the tightest ventilation criteria. Unoccupied dedicated equipment rooms with three-hour fire separation from occupied spaces receive somewhat more relaxed capacity limits because the life safety exposure is limited to the responding fire department rather than building occupants.

Outdoor containerized installations in metal enclosures with factory-integrated fire suppression are subject to the least restrictive per-unit capacity requirements because the metal enclosure provides inherent containment, the factory integration ensures suppression system compatibility with the specific chemistry, and the outdoor location eliminates the occupied-building exposure. NFPA 855 Section 15.6 governs the setback distances between outdoor ESS units and property lines, buildings, and other ESS units, with distances that scale with the installed energy and the results of UL 9540A testing for the specific system.

For data centers, which represent a growing BESS host application due to behind-the-meter energy management requirements, the combination of high occupancy, continuous operation requirements, and sensitivity to water damage from sprinkler activation makes the suppression system selection particularly important. Clean agent suppression systems (NFPA 2001) are preferred over water-based systems in data center environments, but the capacity limits associated with clean agent protection under NFPA 855 are lower than for sprinkler protection in some installation configurations, requiring careful coordination between the BESS capacity targets and the fire protection design.


4. Fire Protection, Detection, and Ventilation

4.1 Fire Suppression

NFPA 855 does not independently specify the design parameters of fire suppression systems; it requires that suppression systems comply with the applicable NFPA standard for the system type and that they be adequate for the specific ESS hazard. Sprinkler systems must meet NFPA 13 design density requirements, which for BESS applications involve hazard classification that reflects the elevated heat release rate of lithium-ion fires. Clean agent systems must meet NFPA 2001 design concentration requirements for the agent selected. Water mist systems, which have become increasingly common for BESS applications due to their effectiveness in reducing cathode temperature and limiting re-ignition risk, must meet the performance requirements of the relevant testing standard for the specific nozzle and application configuration.

The selection of suppression technology is not solely a cost decision. As discussed in the thermal runaway context of Section 5, lithium-ion cell fires have a re-ignition characteristic that clean agent suppression does not fully address: suppressing the surface flame does not stop the subsurface cathode decomposition, and the cell can re-ignite after the agent concentration dissipates. Water-based systems — sprinklers or water mist — are more effective at reducing the cell temperature below the re-ignition threshold. For installations where equipment protection from water damage is a priority, the engineering analysis must weigh the re-ignition risk (and the associated extended firefighting water supply demand) against the equipment damage cost, with NFPA 855 Annex B providing the technical basis for re-ignition risk characterization.

4.2 Early Warning Detection and Integration with FACP

NFPA 855 requires that ESS installations above the no-suppression capacity thresholds be provided with multi-criteria detection systems that integrate with the building's fire alarm control panel (FACP). The detection system must be capable of detecting the early precursors of thermal runaway — specifically the off-gas products that precede visible smoke or flame by minutes to tens of minutes — rather than relying solely on conventional smoke or heat detectors that respond to fully developed fire conditions.

The required detection components include smoke detection using aspiration-type (VESDA) or addressable spot detectors inside the ESS enclosures, heat detection at the enclosure level, and gas detection for carbon monoxide and combustible gases at levels that indicate cell off-gassing prior to thermal runaway. The gas detection is integrated with the ventilation system control: when the gas detection alarm threshold is reached, the ventilation system must be commanded to exhaust mode to dilute the off-gas concentration below the lower flammable limit (LFL), preventing the accumulation of a flammable atmosphere within the enclosure.

The control logic linking the detection inputs to suppression activation, ventilation commands, disconnecting means operation, and fire department notification must be engineered — not default-configured — for the specific installation. The appropriate threshold for suppression activation differs from the threshold for ventilation escalation, which differs from the threshold for BMS fault response. These thresholds must be established by the design engineer based on the UL 9540A off-gas characterization data for the specific system chemistry and not simply taken from generic detector manufacturer defaults.

4.3 Ventilation and Explosion Control

The ventilation design for an ESS room or enclosure serves two distinct functions that must be addressed simultaneously: continuous background ventilation to remove normal off-gas from cells during charge-discharge cycling, and emergency ventilation to dilute the elevated off-gas concentrations that accompany thermal runaway initiation before an explosive atmosphere develops. NFPA 855 requires that the ventilation rate be sufficient to maintain the off-gas concentration below 25 percent of the LFL under the conditions characterized by UL 9540A Level 1 or Level 3 testing.

The design ventilation rate to maintain off-gas concentration below the LFL threshold depends on the off-gas generation rate from the UL 9540A test data and the enclosure volume:

V˙vent=Q˙gasCLFL×LFL\dot{V}_{vent} = \frac{\dot{Q}_{gas}}{C_{LFL} \times LFL}

Where: V˙vent\dot{V}_{vent} is the required ventilation flow rate in m³/s. Q˙gas\dot{Q}_{gas} is the off-gas generation rate from UL 9540A testing in m³/s. CLFLC_{LFL} is the design concentration limit as a fraction of LFL (0.25 per NFPA 855). LFLLFL is the lower flammable limit of the off-gas mixture in volume fraction (approximately 0.04 for hydrogen-dominated mixtures).

When UL 9540A testing indicates that the specific ESS system can generate off-gas volumes sufficient to create a deflagration hazard in the enclosure volume even with mechanical ventilation, NFPA 855 requires deflagration venting per NFPA 68, Standard on Explosion Protection by Deflagration Venting. The deflagration vent area is sized based on the enclosure volume, the design internal overpressure, and the combustible gas properties from UL 9540A data. The vent must be directed away from occupied areas, egress paths, and adjacent ESS equipment.


5. UL 9540, UL 9540A, and the Hazard Mitigation Analysis

5.1 UL 9540: System Listing

UL 9540, Standard for Energy Storage Systems and Equipment, is the product listing standard that NFPA 855 requires for all ESS installations within its scope. A UL 9540 listing confirms that the complete ESS — including cells, modules, battery management system, inverter, disconnecting means, and enclosure — has been evaluated as a system against the safety requirements of the standard, including electrical, fire, and environmental hazard criteria. The listing does not establish installation-specific fire protection requirements; it establishes that the product is fit for installation under a standard like NFPA 855 and that its thermal runaway characteristics have been characterized.

The UL 9540 listing is the prerequisite for NFPA 855 compliance, but it is not sufficient by itself. The listing confirms the product; NFPA 855, informed by UL 9540A test data and the Hazard Mitigation Analysis, determines whether the specific installation of that product at a specific site with a specific configuration is compliant with the standard's fire and life safety requirements.

5.2 UL 9540A: Large-Scale Thermal Runaway Testing

UL 9540A, Test Method for Evaluating Thermal Runaway Fire Propagation in Battery Energy Storage Systems, is the test method through which the fire behavior of a specific ESS product is quantified at scales relevant to real installations. The test protocol is organized in four levels that proceed from individual cell behavior to full installation-scale response. Level 1 testing characterizes cell-level thermal runaway parameters: onset temperature, peak temperature, heat release rate, gas generation rate, and gas composition. Level 2 testing evaluates module-level propagation — whether a single-cell thermal runaway will propagate to adjacent cells, and at what rate. Level 3 testing characterizes the behavior of a complete ESS unit (typically a containerized enclosure) under a module-level thermal runaway event, measuring fire spread, off-gas generation and composition, explosion potential, and suppression system effectiveness. Level 4 testing evaluates the installation-scale response to a Level 3 event in one unit.

The UL 9540A test data is the technical foundation for AHJ decisions that go beyond the prescriptive defaults in NFPA 855. When a project team submits UL 9540A Level 3 results showing that thermal runaway is contained within a single module with no unit-level fire spread, the AHJ has a technical basis for approving reduced unit-to-unit spacing from the NFPA 855 default. When Level 3 results show that off-gas generation is below the LFL threshold at a given ventilation rate, the AHJ has a basis for accepting a reduced ventilation capacity. When Level 3 results show that the integrated suppression system extinguishes the fire without re-ignition, the AHJ has a basis for approving the installation without supplemental suppression measures. In each case, it is the specific UL 9540A data for the specific product — not a generic assessment of the chemistry class — that drives the AHJ determination.

5.3 Hazard Mitigation Analysis

Recent editions of NFPA 855 have introduced the Hazard Mitigation Analysis (HMA) as a required submittal element for installations above specified capacity thresholds. The HMA is an engineering document — prepared by a qualified fire protection engineer or equivalent — that systematically identifies the thermal runaway hazards of the specific installation, evaluates the likelihood and consequence of initiating events, and documents the mitigation measures (detection, suppression, ventilation, spacing, BMS response) that reduce the residual risk to an acceptable level. The HMA relies directly on UL 9540A data for the quantitative characterization of thermal runaway heat release, off-gas generation, and explosion potential, and it documents the basis for each mitigation measure in terms of that data.

The HMA serves two functions: it is the primary technical document for AHJ review and approval, and it is the operational reference that the facility maintenance team uses to understand what protective measures must remain in service for the installation to remain compliant. Any modification to the installation that changes the thermal runaway hazard characteristics — replacing the ESS product with a different chemistry or configuration, changing the enclosure geometry, modifying the ventilation system, or disabling any detection or suppression component — invalidates the HMA and requires a revised submission to the AHJ before the modification is placed in service.


6. Design Process and AHJ Interface

A complete NFPA 855 submittal for a commercial-scale BESS installation typically includes the following elements: the UL 9540 listing certificate for the installed ESS product; a summary of the UL 9540A Level 3 (and ideally Level 4) test results for the specific product and configuration; a site plan showing all ESS units with separation distances, setbacks from property lines and buildings, egress paths, and fire department access routes; the one-line electrical diagram showing the NEC Article 706 disconnecting means, overcurrent protection, and grounding system; the fire protection layout showing sprinkler head or clean agent nozzle locations, design area, and density; the ventilation system design showing exhaust rates, interlocking logic with gas detection, and deflagration vent locations if required; and the Hazard Mitigation Analysis tying all of the above together into a coherent risk characterization.

The AHJ review process for BESS installations is more iterative than for conventional construction because the technology is recent, the code is still evolving, and individual AHJs vary in their familiarity with UL 9540A methodology and NFPA 855's tiered structure. Early engagement with the AHJ — presenting the UL 9540A data, explaining the HMA methodology, and identifying the specific NFPA 855 provisions being invoked — reduces the probability of stop-work conditions or late-stage redesign. Projects that treat the AHJ submittal as a paperwork exercise at the end of the design phase rather than a technical dialogue throughout the design process consistently incur higher costs and longer approval timelines than projects that engage the AHJ as a technical stakeholder from the pre-design phase.

Particular attention should be given to documenting the assumptions embedded in the HMA. If the HMA assumes a specific BMS response time to thermal runaway detection, that response time must be demonstrated by the BMS commissioning test. If it assumes a specific ventilation exhaust rate, that rate must be verified by commissioning airflow measurements. If it assumes that suppression activates within a specific time of detection, the detection and suppression system integration must be tested to confirm that timing. Assumptions that are not verified by commissioning create gaps between the HMA-documented risk profile and the as-built installation risk profile that the AHJ, the insurer, and the operator have no visibility into.


7. Operational and Maintenance Considerations

NFPA 855 Section 10 establishes ongoing inspection, testing, and maintenance obligations for ESS installations that parallel the pre-occupancy requirements in scope and rigor. The installed fire protection system — sprinklers, clean agent, ventilation interlocks, gas detectors, smoke and heat detectors, and the FACP integration — must be tested at intervals conforming to the applicable referenced standard: NFPA 13 for sprinklers, NFPA 2001 for clean agents, NFPA 72 for the detection and alarm system. The ESS-specific elements — gas detector calibration, ventilation interlock function, BMS alarm integration, and deflagration vent condition — must be tested at intervals established in the HMA and the manufacturer's maintenance requirements.

The BMS is the operational nerve center of BESS safety management. NFPA 855 requires that the BMS be capable of detecting thermal runaway precursor conditions — cell voltage deviation, cell temperature elevation, off-gas generation — and initiating the response sequence documented in the HMA: alerting operators, commanding ventilation escalation, and, if the condition progresses, activating the disconnecting means and signaling the fire alarm system. The BMS alarm thresholds and response logic must be set consistently with the HMA assumptions and must not be modified without re-evaluating the HMA. Recordkeeping for BMS alarm events is required, both for operational trend analysis and for post-incident investigation.

Periodic AHJ review is recommended, not merely at the time of initial installation approval, but following any modification, after any BMS alarm event indicating thermal runaway precursor conditions, and at intervals consistent with the facility's fire inspection schedule. Operators who maintain a proactive relationship with the AHJ — providing annual summary reports of BMS alarm events, maintenance records, and any deviations from the approved HMA — are consistently better positioned to manage the approval process for future modifications than operators who interact with the AHJ only at times of code enforcement.


8. Conclusion

The most consequential point is that NFPA 855 does not design the BESS — it establishes the minimum life-safety envelope (capacity limits, spacing, suppression, detection, ventilation, explosion control, emergency response) inside which the electrical, mechanical, and fire-protection designs must fit. Compliance is therefore a joint product across four disciplines, and the Hazard Mitigation Analysis is the document that ties the NEC Article 706 electrical design, the NFPA suppression and detection design, and the UL 9540A-derived ventilation design into one defensible whole. No single discipline can deliver it alone.

The most common implementation failure is sequencing: treating NFPA 855 as a permitting checklist applied after the design is complete, and UL 9540A test data as a post-design justification rather than a design input. Installations that take this path incur the remediation costs and approval delays that characterize the majority of non-compliant projects, because the spacing, ventilation, and explosion-control requirements that the test data should have driven are discovered only when the authority having jurisdiction reviews a design that cannot accommodate them.

The engineer should next move the compliance analysis to the pre-design phase and maintain the protective systems — battery management, suppression, detection, ventilation — in the exact condition the Hazard Mitigation Analysis assumed, because the next problem after achieving compliance is keeping it through the operational lifecycle, where a degraded suppression system or an unmaintained ventilation path quietly voids the analysis that permitted the installation.


Related Work

The analysis in this paper connects to several companion studies in this library. Readers concerned with the upstream and downstream engineering will find Battery Energy Storage for Backup Power develops a closely related aspect of the same problem, while Battery Energy Storage Systems extends the treatment into an adjacent domain. For the broader methodological context, Lightning Protection Systems provides complementary depth.


References

[1] NFPA 855, Standard for the Installation of Stationary Energy Storage Systems, 2023 edition. National Fire Protection Association, 2023. Code development history available at nfpa.org/codes-and-standards/nfpa-855.

[2] NFPA 1, Fire Code, Chapter 52, "Energy Storage Systems," 2021 edition. National Fire Protection Association, 2021.

[3] International Fire Code (IFC), Chapter 1207, "Energy Storage Systems." International Code Council, 2021.

[4] NFPA 70, National Electrical Code, Article 706, "Energy Storage Systems," 2023 edition. National Fire Protection Association, 2023.

[5] UL 9540, Standard for Energy Storage Systems and Equipment, 4th edition. Underwriters Laboratories, 2023.

[6] UL 9540A, Test Method for Evaluating Thermal Runaway Fire Propagation in Battery Energy Storage Systems, 2nd edition. Underwriters Laboratories, 2023.

[7] NFPA 2001, Standard on Clean Agent Fire Extinguishing Systems, 2022 edition. National Fire Protection Association, 2022.

[8] NFPA 13, Standard for the Installation of Sprinkler Systems, 2022 edition. National Fire Protection Association, 2022.

[9] NFPA 68, Standard on Explosion Protection by Deflagration Venting, 2023 edition. National Fire Protection Association, 2023.

[10] NFPA 72, National Fire Alarm and Signaling Code, 2022 edition. National Fire Protection Association, 2022.

[11] Electric Power Research Institute, Energy Storage Safety Strategic Plan for DOE, EPRI Technical Report 3002010086, EPRI, 2022.

[12] R. Friedman, "NFPA 855: What Electrical Engineers Need to Know About the New ESS Installation Standard," IEEE Industry Applications Magazine, vol. 28, no. 3, 2022.

[13] G. Ceder and M. S. Whittingham, "Rechargeable Lithium Batteries: from Basic Science to Application," MRS Bulletin, vol. 43, pp. 884–893, 2018. (Chemistry basis for thermal runaway hazard classification.)

[14] Texas State Fire Marshal's Office, FAQ: Battery Energy Storage Systems and NFPA 855/NEC 706, Austin, TX, 2024. (State-level AHJ implementation reference for NFPA 855 and NEC 706 co-enforcement.)