What thermal runaway actually is
Almost every serious battery fire starts the same way: thermal runaway. Inside a lithium cell, if one spot gets too hot — from overcharging, a manufacturing defect, physical damage or a cooling failure — the chemistry begins to break down and release its own heat. That heat pushes neighbouring material past its own tipping point, which releases more heat, and so on. Once it starts, it feeds itself, which is why “runaway” is the right word: the reaction no longer needs an outside source of energy to keep going.
A cell in runaway vents hot, flammable gas, and if that gas ignites or spreads to the next cell, a single faulty unit can cascade into a module fire and then a whole-container fire. Modern BESS (battery energy storage system) safety is, at its heart, a set of layered barriers designed to stop that chain at the earliest possible link — and, if it does start, to contain it without letting the container explode.
The first line of defence is the chemistry
The single biggest safety decision is made before any sensor is fitted: the cell chemistry. Almost every stationary system today uses LFP (lithium iron phosphate) rather than the NMC chemistry common in EVs, and for good safety reasons. LFP cells only enter thermal runaway at a much higher temperature, and when they do fail they release very little oxygen — so a bad cell is far less likely to feed a spreading fire. We explain that difference in detail in LFP vs NMC. Choosing LFP does not make a battery fireproof, but it makes every layer above it easier.
Watching, detecting, suppressing
Above the chemistry sit three active layers, each designed to work even if the one before it fails.
- The battery management system (BMS) continuously monitors voltage, temperature and current at cell, module and rack level. If any reading drifts out of its safe band — an overcharge, a deep discharge, a short, or a temperature excursion — it raises an alarm and can shut down and isolate the affected string before a problem grows.
- Early detection is the layer that has advanced most. Before a cell ever smokes or flames, it releases faint “off-gases” — hydrogen, carbon monoxide, hydrocarbons and, from lithium cells, hydrogen fluoride. Off-gas sensors can pick these up minutes earlier than a smoke detector, buying time to shut the system down while intervention is still cheap. Heat, smoke and flame detectors back them up.
- Suppression is the response of last resort inside the box: automatic fire-suppression systems in each container, designed to cool the affected cells and knock down flame.
Containing what you cannot prevent
The final layer accepts that a cell might still fail and focuses on stopping a fire — and, critically, an explosion. When cells vent, they fill an enclosed container with flammable gas; if that gas is allowed to build up and then ignites, the result is a deflagration (a fast pressure blast). So modern containers use deflagration vents and explosion panels that release pressure safely, forced ventilation and louvers to keep gas below explosive concentration, and physical spacing between containers so a fire in one cannot jump to the next.
This is exactly what the international standards test for. UL 9540A is a test method that measures whether thermal runaway in one cell will propagate to its neighbours, and NFPA 855 is the installation standard that turns those results into rules on suppression, ventilation, explosion control and separation distances — with the 2026 edition leaning further on large-scale fire testing. These sit alongside the certification framework we cover in BESS safety standards explained, and they inform how our own containerised systems and C&I cabinets are engineered.
India’s own rules are now catching up
For a long time Indian projects leaned on international standards by choice. That is changing. India’s CEA (Central Electricity Authority) has notified a dedicated safety framework for battery storage — reported as the CEA (Measures relating to Safety and Electric Supply) Amendment Regulations, 2026 — coming into force on 1 April 2027, applying to installations operating above 650 volts. Its headline requirements track the layered approach above:
- Two-fault tolerance — systems must stay safe even if two independent failures occur at once.
- Mandatory hazard detection for smoke, gas, heat and flame, plus automatic suppression in every battery container.
- Continuous BMS monitoring of voltage, temperature, current and thermal-runaway signals, with automatic alarms and shutdown on abnormal conditions.
- Explosion protection — deflagration venting, forced ventilation and automated louvers, with mandatory HVAC and automatic shutdown if ventilation fails.
- Separation of roughly 7.5 metres from exterior walls and roof overhangs, or large-scale fire testing to justify a tighter layout.
- Independent third-party fire-safety audits, with the first due within three months of the rules taking effect.
What this means for you
If you are buying or specifying storage in India, fire safety is no longer a “nice to have” you can leave to the EPC contractor — from April 2027 much of it is law for larger systems. Ask any supplier to show you, in writing: LFP cells, UL 9540A propagation test results, off-gas detection (not just smoke), automatic suppression per container, deflagration venting, and a layout that meets the CEA spacing rule or is backed by fire testing. Confirm the BMS actively monitors and can shut down, and that the system is designed for the two-fault-tolerance and third-party-audit requirements coming into force. Note that safety codes are updated by notification, so verify the current CEA regulations and applicable standards before you finalise a design. To pressure-test a supplier’s safety design against your own site and load, talk to our team and we will help you separate genuine engineering from a spec sheet.
Technical and regulatory snapshot as of July 2026. Standards and CEA rules are updated by notification; verify current requirements and certifications before financial or design decisions.