Field Safety

Field reference for grid scale battery storage technicians. 8 entries, taken from the StoreWatt app.

These notes come from StoreWatt

Reference notes from StoreWatt, the offline field toolkit for grid scale battery energy storage technicians. It works with no cell signal, because the sites do not have any.

Get StoreWatt on the App Store

Stored and stranded energy: the battery is always on

A battery cannot be switched off. Unlike a solar array at night or a feeder with an open breaker, every cell holds its charge and every terminal presents voltage at all times. Opening contactors and disconnects isolates sections of bus, but energy remains stranded behind every contactor, fuse, and connector in the system. Standard lockout tagout therefore does not fully de energize a BESS. LOTO isolates the AC feeds and the controllable DC paths; the racks stay live. The only defensible practice: plan work as energized work unless a specific conductor has been proven dead, and prove it at the point of work with a CAT III or CAT IV DC rated tester, testing the tester before and after.

Safe response

Treat every terminal and conductor as live. Verify absence of voltage at the point of work with a CAT III or CAT IV DC rated meter. ESS work requires an ESS qualified person.

Lockout tagout on a BESS

The ESS lockout sequence isolates what can be isolated and proves the rest: isolate AC feeds, open the DC disconnects and contactors the design provides, apply locks and tags at every point, then verify zero energy at the specific conductors to be touched with a DC rated CAT III or CAT IV tester. Note residual hazards on the permit: stranded energy behind contactors, charged capacitor banks in the PCS, and control power from separate sources. Capacitors in the PCS DC link hold lethal charge after isolation; respect the manufacturer bleed down time and verify, never assume, discharge.

Safe response

Locks and tags at every isolation point, one lock per worker, verification at the point of work, and a permit that names the residual hazards. The LOTO ESS Permit form in this app walks the full sequence.

DC arc flash

DC arcs are worse than their AC cousins for one physical reason: no zero crossing. An AC arc gets 120 chances a second to extinguish; a DC arc, fed by a massive battery with almost no impedance, burns continuously until something opens the circuit or the gap grows too long. The result is sustained, high energy arcs. High energy DC systems can require Category 4 arc rated PPE, above 40 calories per square centimeter, plus insulated DC rated tools and face and body protection. Arc flash boundaries and PPE levels apply at DC isolators and battery terminals, not just at AC switchgear. The numbers for a specific location come from the site arc flash study, never from an app.

Safe response

Work to the site arc flash study labels. Missing or illegible labels are a stop work condition. Energized DC work requires an Energized Electrical Work Permit and a qualified person per NFPA 70E.

Thermal runaway

Thermal runaway is the defining fire hazard of lithium storage: a cell fails, heats, vents flammable and toxic gas, and can drag its neighbors into a self sustaining cascade. It does not need external oxygen to keep going, and it can reignite hours or days after appearing controlled. The rule with no exceptions: never open or approach an enclosure suspected of thermal runaway. Confinement is protection; an opened door feeds oxygen to accumulated gases and exposes people to an explosive atmosphere. The response is the site Emergency Response Plan: evacuate to the planned distance, ventilate where the design provides it, apply defensive cooling to protect exposures, and let the event run its course under the fire department's pre incident plan, which should be informed by the site's UL 9540A data: what gases, how much, how long.

Safe response

Do not approach. Evacuate, notify, follow the Emergency Response Plan, and defer to the fire department. No exceptions, including for equipment worth saving. Equipment is replaceable.

Off gassing and gas detection

Before and during thermal runaway, cells vent a hazardous gas mixture: hydrogen, carbon monoxide, hydrocarbons, and hydrogen fluoride among others. The mixture is flammable, and in a closed container it can reach explosive concentrations; hydrogen fluoride is severely toxic at small concentrations. Off gas detection is the early warning layer: dedicated sensors can catch the first vent event before runaway spreads, which is why gas detection alarms deserve immediate, serious response. A gas alarm plus any temperature anomaly is a thermal event until proven otherwise.

Safe response

On a gas detection alarm: do not enter or open the enclosure, treat the atmosphere as explosive and toxic, evacuate per the Emergency Response Plan, and let ventilation systems run. Re entry follows gas measurement by qualified responders, not a timer.

Fire suppression and detection systems

BESS fire protection is layered. Detection: smoke and heat detection plus off gas sensing inside enclosures. Suppression: sprinklers per NFPA 13 where buildings apply (baseline density around 0.3 gallons per minute per square foot over 2500 square feet), or internal agents in containerized designs. Water is the preferred agent overall because cooling is the real objective: protecting neighboring cells, racks, and containers. Explosion control matters as much as fire control: deflagration venting or prevention per the design keeps a gas event from becoming a structural event. Signage and clear responder access complete the package, and every element here is inspection and verification territory for commissioning and O&M.

Safe response

Impaired detection or suppression is an operational risk decision for the owner and AHJ, not something to work around quietly. Document impairments and follow the site impairment procedure.

The Emergency Response Plan

NFPA 855 requires an Emergency Response Plan built for the specific site, informed by the UL 9540A data for the installed product: which gases, what volumes, what durations, whether propagation was observed. A good ERP names the evacuation distances, the ventilation strategy, the defensive cooling approach, utility disconnection steps, and the notification chain, and it exists as a physical document the fire department has seen before the first alarm. The fire department pre incident plan is the companion piece: hydrant locations, access routes, disconnect locations, and the agreed tactical approach. Technicians should know where the ERP lives, what their role is in it, and what the muster point is, before any alarm, on every site.

Safe response

If you cannot locate the site ERP or your role in it, raise that as a finding today. The ERP Field Reference and Drill Log form in this app captures drills and keeps the key numbers at hand.

The standards map in one minute

NFPA 855 says how ESS gets installed and operated safely, and its 2026 edition ties the qualified person concept to ESS and strengthens ERP and testing expectations. UL 9540 certifies the system; UL 9540A characterizes thermal runaway so designs and response plans rest on data. NEC Articles 706 and 480 govern the electrical installation. NFPA 70E governs how people work on it. IEEE 1547 governs the grid interface. The IFC section 1207 is the fire code enforcement hook. OSHA sits over the whole workplace. When a question starts with can we or must we, the answer usually lives in one of these documents plus the site's stamped design, and the AHJ arbitrates.

These notes come from StoreWatt

Reference notes from StoreWatt, the offline field toolkit for grid scale battery energy storage technicians. It works with no cell signal, because the sites do not have any.

Get StoreWatt on the App Store

These notes are a field aid, not a substitute for the governing codes, the stamped drawings, the authority having jurisdiction, or manufacturer manuals. Verify against the current documentation for your installed equipment.