Certifying the system, then testing how it burns
North American energy-storage safety rests on two UL documents that are routinely confused. UL 9540 is a product safety standard: it lists a complete energy storage system — the cells or other storage medium plus power conversion, controls and enclosure — as safe to install and connect. The National Electrical Code and the International Fire Code point to it when an ESS must be listed. UL 9540A is something different: a test method that deliberately drives a battery into thermal runaway and measures what happens.
How UL 9540A works
The test builds up in scale through four levels — cell, module, unit, installation — and each larger test is run only if the smaller one showed the fire propagating. A design that contains runaway at the module level can stop there and avoid the costly large-scale installation burn. Along the way the method records the vent-gas composition and volume, its flammability, the heat release rate, surface temperatures and whether the failure jumps to neighbouring cells, modules or units. The output is not a verdict but a dataset.
Why the data matters
That dataset is the input to everything downstream. Building and fire codes allow a performance-based design: instead of following prescriptive separation rules, an engineer can justify a layout with 9540A results — shorter setbacks if no unit-to-unit propagation is shown, or, conversely, mandatory explosion control (deflagration venting or prevention) if the test proves vented gas can reach a flammable concentration. UL 9540A is the only consensus test method NFPA 855 names for large-scale fire testing, which is why projects far outside North America still ask for it.
The full safety chain
UL 9540A sits in the middle of a three-layer chain. IEC 62619 makes the cells and battery safe as a product. UL 9540A measures how a failure would spread. NFPA 855 turns that measurement into the separation, ventilation, detection and suppression of the real installation. The international system series IEC 62933 frames the same safety case for grid-connected storage.