What Is UL 9540 for Battery Energy Storage Systems?

Introduction: Why UL 9540 Certification Matters

Battery energy storage deployment is constrained by one factor above all others: safety certification. UL 9540 certification is the required system-level standard that determines whether a battery energy storage system can be deployed.

Battery Energy Storage Systems (BESS) are now core infrastructure across utilities, commercial facilities, and distributed energy networks. As systems grow in size and energy density, the risks associated with thermal runaway, fire propagation, and system integration become more complex.

UL 9540 exists to address that complexity. It provides a structured framework for evaluating whether a complete energy storage system can operate safely under real-world conditions, with UL engineers working directly with manufacturers to evaluate system design, testing, and performance as an integrated process. It is a combination of multiple safety inputs that together define system performance, risk, and compliance.

What Is UL 9540 Certification?

UL 9540 is a system-level safety standard for energy storage systems that certifies whether a complete BESS meets defined safety requirements as an integrated product. Instead of testing individual components in isolation, it evaluates how the entire system behaves under real operating conditions.

Scope of UL 9540

UL 9540 evaluates all major system components working together, including:

• Battery cells, modules, and racks

• Battery Management System (BMS)

• Power Conversion System (PCS)

• Enclosures and thermal management systems

• Controls and safety systems

This reflects how systems are actually deployed and operated in the field.

UL 9540 is referenced by key codes such as NFPA 855 and the International Fire Code (IFC), which require certified systems to ensure safe installation and operation.

Safety and Performance Evaluation

UL 9540 focuses on how the full system performs under both normal and fault conditions.

This includes:

• Electrical safety and protection systems

• Fire risk and thermal behavior

• Mechanical integrity under stress conditions

• Control system response during faults

Failures rarely occur at the component level alone. They emerge from how components interact within the system. UL 9540 evaluates those interactions directly, providing a more accurate representation of real-world risk.

At its core, UL 9540 determines whether a system can be deployed based on validated system-level safety performance.

What Data Is Required for UL 9540 Certification?

UL 9540 certification is not based on a single test. It integrates multiple layers of testing and analysis to define how a battery energy storage system performs under both normal and failure conditions, bringing together battery safety testing, fire testing, and system-level evaluation.

Rather than evaluating this data independently, UL 9540 integrates it to determine whether the complete system meets safety requirements as a whole and can be safely deployed.

UL 9540A Fire Test Data

UL 9540A provides the fire and explosion behavior data used to evaluate thermal runaway events at the system level.

The test quantifies key fire and explosion characteristics, including:

• Thermal runaway propagation

• Heat release rate (HRR)

• Gas generation and composition

• Explosion and deflagration risk

This data is used to understand how a fire develops and spreads within a system. It directly informs system design decisions such as spacing, enclosure configuration, and fire protection strategies, and plays a central role in permitting decisions.

UL 1973 Battery Safety Testing

While UL 9540 evaluates the full system, UL 1973 focuses on the safety of the battery subsystem itself, including cells, modules, and racks.

Testing evaluates battery integrity under stress through:

• Electrical abuse testing, such as overcharge and short circuit

• Mechanical testing, including crush and vibration

• Thermal testing under elevated temperature conditions

These tests ensure that battery components maintain structural and electrical integrity under both normal operation and stress conditions. This reduces the likelihood of internal failures that can lead to thermal runaway.

Electrical and System Integration Testing

A key part of UL 9540 is evaluating how all system components function together as a single, integrated system.

This includes:

• Integration of battery, BMS, PCS, and enclosure

• Fault detection and system response

• Wiring, grounding, and electrical isolation

Many real-world failures occur at the system level, not within individual components. This testing ensures that the system responds predictably to faults and that protective systems function as intended.

Supporting Standards and Requirements for BESS Deployment

While UL 9540 certification is built on core testing standards, additional codes, analyses, and component-level standards play a critical role in system design, safety validation, and permitting.

NFPA 68 and NFPA 69 (Explosion Protection Design)

NFPA 68 and NFPA 69 are not part of UL 9540 certification itself, but they are critical for designing safe systems that meet fire code requirements.

Both standards rely on gas data generated from UL 9540A testing to address explosion risk:

• NFPA 68 covers deflagration venting systems

• NFPA 69 covers explosion prevention through gas detection and ventilation

This data is used to size vents, define ventilation requirements, and establish safe operating conditions in enclosed environments.

Hazard Mitigation Analysis (HMA)

Hazard Mitigation Analysis is required under NFPA 855 (2026) for most energy storage installations.

HMA uses UL 9540A data to evaluate system-level risks, including:

• Failure scenarios and propagation behavior

• Gas accumulation and explosion potential

• Fire suppression system performance

• Worst-case event modeling

AHJs rely on HMA to determine whether a proposed system design meets safety requirements for installation. It serves as a bridge between test data and real-world deployment conditions.

Environmental and Enclosure Testing

In addition to core safety testing, UL 9540 evaluates how systems perform under environmental stress to ensure reliable operation in real-world conditions.

This includes exposure to environmental and physical stressors such as:

• Temperature and humidity extremes

• Fire exposure and enclosure integrity

• Protection against dust and water ingress (IP ratings)

These evaluations confirm that system performance and safety are maintained across the conditions the system will encounter in the field.

Controls and Software Safety (UL 991 / UL 1998)

Control systems are responsible for monitoring, managing, and protecting the battery system during operation.

Standards such as UL 991 and UL 1998 evaluate:

• Fault detection and response logic

• Software reliability and failure handling

• Control system behavior during abnormal conditions

These layers ensure that the system can detect issues early and respond appropriately to prevent escalation.

Power Conversion System (UL 1741)

For grid-connected systems, UL 1741 evaluates the safety and performance of the Power Conversion System (PCS), including inverters.

Testing evaluates PCS performance and safety across:

• Electrical performance and stability

• Grid interaction and synchronization

• Protection mechanisms during faults

This ensures that the system operates safely both internally and in coordination with the electrical grid.

How UL 9540 Certification Is Used in Real Projects

UL 9540 certification is typically required for project deployment and plays a direct role in whether a system can move forward. It is a key input for permitting, AHJ evaluation, and even project financing, as stakeholders rely on certification to confirm that a system meets safety and code requirements.

Impact on System Design and Deployment

Beyond approval, UL 9540 also shapes how systems are designed and implemented in practice. Certification influences:

• System layout and spacing

• Fire protection strategies

• Enclosure design and configuration

These decisions must align with validated test data and the certified system design.

Configuration Control and Ongoing Compliance

UL 9540 certification is tied to a specific system configuration. Changes to system design, spacing, or enclosure conditions can impact compliance and may require re-evaluation or additional testing.

Certification also does not end at initial approval. Systems are subject to ongoing factory inspections and production audits to ensure consistency with the tested design. Changes to components, configuration, or operating conditions may require additional testing to maintain certification.

The Relationship Between UL 9540, UL 9540A, and NFPA 855

These standards operate together as part of a layered safety framework, with each addressing a different aspect of battery energy storage system safety.

• UL 1973 (Certification): Evaluates the safety of the battery subsystem, including cells, modules, and racks under electrical, mechanical, and thermal stress conditions

• UL 9540A (Test Method): Measures fire behavior, including thermal runaway propagation, heat release, gas generation, and explosion risk

• UL 9540 (Certification): Certifies the complete energy storage system as an integrated product, using data from component and fire testing

• NFPA 855 (Installation Standard): Defines installation requirements, including system spacing, fire protection, and layout, based on UL 9540 and UL 9540A data

UL 9540A provides the fire performance data used within UL 9540 certification, and UL 9540 certification supports compliance with NFPA 855 installation requirements.

Limitations of the Current UL 9540 Framework

UL 9540 certification provides a structured approach to validating system safety, but it assumes that thermal runaway is a credible event that must be managed.

As a result, testing and certification focus on understanding how systems behave once failure begins, including propagation, heat release, and gas generation.

This framework provides the data needed to design safer systems and meet code requirements. However, it does not evaluate whether a system can prevent thermal runaway or eliminate propagation entirely.

The Future of BESS Certification and Safety Standards

Energy storage systems are increasing in size, energy density, and deployment complexity. Standards are evolving to better capture these risks and provide more accurate system-level data to support design and permitting decisions.

At the same time, the current framework remains focused on understanding and managing failure after it begins. The next phase of safety standards will require validation of prevention, not just mitigation. This creates a clear opportunity for system design to address the root causes of battery fire risk at the cell level.

EticaAG approaches safety from that foundation. LiquidShield immersion cooling eliminates BESS fire risk by removing heat at the cell level and isolating cells from oxygen, preventing thermal runaway propagation and ignition. HazGuard complements this by neutralizing hazardous gases, addressing toxic and explosion risks at the system level.

By combining LiquidShield and HazGuard, EticaAG delivers a system architecture that stops fire propagation and manages gas risk at the source.

Frequently Asked Questions