Freeze Protection Verification Standard
Purpose
Where pools run through the winter, freeze protection is the only thing between a rare cold night and a pad full of split housings, and it is the one control on the property nobody ever tests. It is invisible until the night it fails, and by then the shop is booking replacements instead of repairs.
This procedure guarantees the sensor reads true, the setpoint is right, every branch that can hold still water sees flow when the mode engages, the branches that cannot be circulated are drained and recorded, and the shop has a written answer for the case freeze protection cannot handle at all: the power outage a hard freeze arrives with.
Scope
Covers annual verification of freeze protection on residential and small semi-commercial pools that stay in service through winter, plus the dispatch rule and the return-to-service check after a freeze event.
It does not cover winterizing a pool being closed for the season, which the pool closing service owns along with line blow-out and antifreeze, nor commissioning a controller from new, which the automation setup and handover SOP owns; this re-verifies one already in service. Pump programming lives in the variable speed pump SOP, and branch circuit, bonding or disconnect work is the licensed electrician's.
Roles and responsibilities
| Role | Owns | Hands off |
|---|---|---|
| Route technician | The census, sensor check, flow verification and pad card | Calls the service manager the same day when a branch cannot be made to flow |
| Service manager | The shop setpoint, dispatch threshold and drain-down call | Decides drain-down versus circulate before the front arrives, not at 2am |
| Office | The freeze-watch call list and the customer sheet | Confirms every pool on the list was reached, and logs who was not |
What freeze protection actually does, and what it cannot
Freeze protection is one mechanism: below a set air temperature the controller runs pumps so moving water does not freeze. Everything that goes wrong is that mechanism failing at one of four points.
| Point of failure | What it looks like in February | What proves it in advance |
|---|---|---|
| The sensor | Mode never engages, or engages late | Compare the controller reading to a thermometer at the sensor |
| The setpoint | Engages at a temperature the pipe has already passed | Read the value, correct it for sensor error, write it down |
| Circuit membership | One pump runs, a second loop sits still and splits | Force the mode and watch what starts |
| Flow in the branch | Pump runs, a raised spa branch still has no movement | Watch water at every branch, not the pump display |
The fifth case sits outside the mechanism: no power, no pumps. Hard freezes bring outages, which is why this procedure ends in a drain-down plan and a customer instruction rather than in a setpoint.
Procedure
At a pad already in a freeze event, do the electrical assessment first. Accept when the pad is dry and the equipment is de-energized at the disconnect, operated from a dry standing position, before a hand goes near a housing. Wrong is stepping into slush to reach the disconnect. Stop rule: if the disconnect cannot be reached dry, or equipment is submerged, nobody touches it and the utility or an electrician is called. Hazard is water plus energized equipment, and where a meter is used the work is by a qualified person under 29 CFR 1910.333(b)(2), proving the meter on a known live source before and after per NFPA 70E-2021, 120.5, because a blown meter fuse reads a clean and believable zero.
Build the dead-leg census: every branch that can hold still water. Walk the plumbing and list the pool loop, each spa or raised-vessel loop, the spillway, every water feature, the cleaner line, the solar loop, the autofill line, the backwash run and any exposed run above grade. Accept when the list is on the pad card with each branch marked circulating or non-circulating. Wrong is a census taken off the controller menu, which knows circuits and not pipe. Hazard is the walk, so watch for frost on coping and keep off the wet tile edge at the water line.
Verify the freeze sensor against a reference thermometer at the sensor. Hold a calibrated thermometer beside it, out of sun and away from any heater flue, and read both after they settle. Accept when the controller display is within 2 F of the reference. Where the controller reads HIGH, add the full error to the setpoint: reading high engages the mode late, which is the direction that costs plumbing. Wrong is a sensor bolted in afternoon sun or above a heater vent. Stop rule: error over 2 F means the sensor is replaced or relocated before the pool is called protected. Hazard: the sensor sits at the pad, so treat the enclosure as energized and open nothing.
Force the mode and watch what starts, then restore the setpoint before you leave. Set the shop standard, 40 F on most controllers whose adjustable range runs roughly 35 to 42 F, then raise it temporarily above current air temperature so the mode engages. Accept when every circuit that must run in a freeze starts, every valve actuator moves to its freeze position, and the corrected setpoint from step 3 is restored and written on the card. Wrong is a freeze mode that starts one pump and leaves a second loop dead. Stop rule: a raised setpoint left in place runs the pump continuously and shows up on the power bill, so restoring it is an acceptance condition here, not a courtesy. Hazard is that forcing the mode starts pumps and drives actuators with no warning, so clear hands and tools off the pad first, confirm no valve is shut on a pump about to run, and tell anyone at the pool before you force it.
Verify flow at every circulating branch on the census, at the freeze speed, by watching water. Stand at each return, the spillway and each feature and confirm visible movement. Accept when every circulating branch shows flow at the programmed freeze speed, not at test speed. Wrong is a pump display reading rpm while a raised spa sits still, which is the commonest way a spa line splits on a night the controller did its job. Stop rule: a branch that will not flow means raising the freeze speed until it does and re-checking every branch at the new speed, or moving that branch to step 6 to be drained. Hazard is the pump, so never run it dry or against a closed valve while hunting for flow: a dry start destroys the mechanical seal in under a minute.
Drain and isolate what cannot be circulated, and record every plug and valve you moved. Drain the non-circulating branches, back the drain plugs out where the equipment manual directs, and isolate the autofill at its stop. Accept when each item removed or closed is written on the card with the condition that must be true again before the pool returns to normal service. Wrong is a plug pulled and pocketed with nothing written down. Stop rule: a line already split is not thawed at all, it is isolated and quoted as a repair. Hazard is the thaw itself: never use a flame or torch, because heated PVC gives off hydrogen chloride, which is an airway injury, and an open flame beside a gas heater is its own event. Ambient warming or warm water only.
Write the outage fallback and set the dispatch threshold as numbers. Accept when the customer sheet says what to do if power fails in a freeze (call the shop, and do not restart the pump when power returns until the shop clears it) and the shop threshold is on the route list. The default worth setting is a forecast low at or below 28 F for four or more consecutive hours; tune it to your climate and pipe exposure. Wrong is a threshold nobody wrote down, so the call gets made at midnight by whoever answers. Hazard: a customer restarting a pump against a frozen line dead-heads it, and a filter tank holding ice is a pressure vessel with a blocked outlet.
Return to service deliberately, and prove the protective functions you disturbed still work. Reinstall every plug and reopen every valve from the step 6 list, prime the pump, open the filter air relief until a solid stream comes out, then close it and start the system. Accept when the list is fully reversed with nothing outstanding, the tank holds normal operating pressure with no leak at any plug, and freeze mode has been forced once more with all census branches flowing. Wrong is a restart with the air relief shut and the tank full of trapped air. Hazard is the pressurization, so stand clear of the plane of the filter lid and band while pressure comes up, keep the customer off the pad, and never start with a closed air relief: a lid separating under trapped air is a fatality mechanism, not a leak.
The record this produces
- Census: every branch, marked circulating or non-circulating, with the date walked.
- Sensor and setpoint: reference reading, controller reading, the error and its direction, the correction applied, the value restored.
- Forced test: circuits that started, valve positions, and the freeze speed at which every branch flowed.
- Removed or closed: each plug, cap and valve, its restore condition, the date reversed.
- Event log: forecast low and duration, whether the threshold was met, what the technician did.
Worked pass: a pool and raised spa, one branch that will not flow
Residential pool with a raised spa, a sheer descent feature, variable speed pump, cartridge filter, gas heater and a salt cell. Mild-winter market, pool in service year round. Verification visit in late autumn, air temperature 52 F.
Step 2. Census: four circulating branches (pool loop, spa loop, spa spillway, sheer descent) and one non-circulating dead leg (the autofill line). Written on the pad card.
Step 3. Reference thermometer beside the sensor reads 40 F, controller displays 41 F. It reads 1 F high, inside the 2 F band, so the sensor stays and the correction goes on the setpoint: shop standard 40 F plus the 1 F error gives 41 F, so the mode engages at a true 40 F rather than 39 F.
Step 4. Setpoint temporarily raised to 60 F against the 52 F ambient to force the mode. Pool pump starts at the programmed freeze speed of 1,200 rpm, the spa valve actuator rotates to its freeze position, the feature valve opens.
Step 5 FAILS. Watching water rather than the display: pool returns moving, spa returns moving, sheer descent flowing, spa spillway dry. Three of the four circulating branches flow at 1,200 rpm and the spillway does not, so water standing in the weir and channel is not moving at all during freeze mode. Stop rule taken: freeze speed raised in steps, every branch re-checked at each. At 1,800 rpm the spillway wets full width and the other three still flow, so four of four pass. Freeze speed set to 1,800 rpm and written on the pad card, clamp meter read against the pump nameplate at that speed. Setpoint then restored to the corrected 41 F and written down, closing out step 4.
Step 6. Autofill isolated at its stop and the exposed run drained. Card entry: "autofill stop CLOSED 14 Nov - must be reopened and the fill valve proved to shut before the pool is called normal."
Step 7. Customer sheet left and the pool added to the freeze-watch list at the shop default of 28 F for four or more consecutive hours.
Three weeks later. Forecast low 26 F holding below 28 F for about nine hours, so the threshold is met and the pool is called. Power fails at 23:10 and returns at 08:05, about nine hours out. Freeze protection did nothing in those nine hours because there was nothing to run it, which is the failure this procedure plans for rather than prevents. The technician had drained the pump, filter, heater and cell at their plugs the evening before, on the manager's call.
Step 8. Every item on the step 6 and drain-down lists reversed: four plugs back in, autofill stop reopened, fill valve watched until it shut. Pump primed, air relief opened until a solid stream then closed, system started from a position clear of the filter lid and band. Tank came up to normal operating pressure with no weep at any plug. Freeze mode forced once more: four of four circulating branches flowing at 1,800 rpm, setpoint reading 41 F. Nothing outstanding, so the pool returns to the normal route.
References
- The controller manual for freeze protection options, hold time after the setpoint clears, and the adjustable range of the setpoint.
- The pump, filter and heater manuals for drain plug locations, air relief procedure and maximum tank operating pressure.
- 29 CFR 1910.333(b)(2) for electrical work practices by a qualified person, and NFPA 70E-2021, 120.5 for the before-and-after instrument check.
- See related: Automation Controller Setup and Handover; Variable Speed Pump Replacement and Programming; Pool Closing Service; Route Day Planning and Service Verification.