Battery Storage Commissioning and Handover SOP

Purpose

This procedure guarantees that a storage system leaves the shop's hands with three things proven rather than assumed: the protected-loads panel contains exactly the circuits on the signed list and nothing else, the system actually transfers and carries those loads with the utility gone, and the customer has been told in plain numbers how long it lasts and what it will not run.

The failure this prevents happens months later, in the dark. A circuit nobody sized for landed on the backup bus, the whole house tries to island, the inverter trips on overload during an outage, and the customer learns on the worst night of the year that the system does nothing. A close second is the customer told "you have backup" with no number attached, who runs the range and the dryer and calls at hour six to report a defect that is arithmetic.

Scope

Covers commissioning and handover of residential and small commercial AC-coupled or DC-coupled battery storage tied to a PV system, from pre-energization inspection through customer sign-off, on systems already installed and inspected.

Does not cover installation, mounting or conductor routing, which the install SOP and the equipment manual own. Does not cover the PV array's own commissioning or module mapping, which belong to the monitoring setup and handover SOP. Does not cover the utility approval that permits parallel operation, which the inspection and permission to operate SOP owns and which gates Step 4. Where a manufacturer publishes a model-specific commissioning sequence, that sequence governs and this procedure sits around it.

Roles and responsibilities

Procedure

Step 1 - Brief the stored-energy hazard and set the isolation plan before any cover comes off. A battery cannot be switched off. Opening every breaker leaves the pack's own terminals live, so the isolation plan names which conductors go dead and which do not, and the crew treats the pack side as energized throughout. Acceptance: every person on site can state which parts stay live after shutdown. Wrong looks like a crew that answers "it is off"; stop the work and re-brief. Hazard: signs of thermal runaway are venting, hissing, swelling, an unexplained hot enclosure or an acrid smell, and the response is to evacuate everyone from the structure, call the fire department from outside, and tell them the cell chemistry and the exact location, not to open the enclosure or apply water on your own judgment.

Step 2 - Pre-energization inspection against the manual and the approved plan. Verify torque marks on every landed conductor, working clearances at the front of the equipment, ventilation and ambient temperature limits, spacing between units, and every required label. Acceptance: all terminations torque-marked to the manual's values, clearances measured and recorded, disconnect and hazard signage legible. Wrong looks like an unmarked lug; re-torque and mark it rather than assuming. Hazard: NFPA 855, in the edition your authority having jurisdiction has adopted, governs separation, location and ventilation, binds the installation and reaches you through the permit; the listing evidence behind it is UL 9540 for the system with UL 9540A fire test data for the cells.

Step 3 - Verify the protected-loads panel circuit by circuit against the signed list. With the backup panel de-energized, read each breaker position aloud against the list and confirm the conductor it feeds. Acceptance: every circuit on the list found on the backup bus, and no circuit on the bus absent from the list, both directions checked. Wrong looks like a circuit in the panel nobody can name; stop and trace it, because an unlisted load is the defect Step 6 exists to catch and it is cheaper to find here. Hazard: work inside an energized service enclosure, so isolate and prove dead using the live-dead-live sequence at NFPA 70E-2021, 120.5, under 29 CFR 1910.333(b)(2) rather than 29 CFR 1910.147, which excludes electrical utilization work at its own (a)(1)(ii)(C).

Step 4 - Energize, then set the grid profile and firmware before anything else is configured. Confirm the utility has issued permission to operate, then select the grid profile the utility requires and record its identifier and the firmware version. Acceptance: the profile identifier on the screen matches the one named in the interconnection approval, and the unit reports no grid-code fault after ten minutes online. Wrong looks like the factory default profile left in place, which produces nuisance trips the customer will call about for a year; re-select and re-record. Hazard: parallel operation before the utility authorizes it can breach the interconnection agreement, and the consequence named in that agreement is the governing one, so do not close to the grid on an unissued approval.

Step 5 - Run a charge and discharge cycle and watch the numbers, not the lights. Command a charge, then a discharge, and log power at both, plus pack temperature spread across modules where the platform reports it. Acceptance: charge and discharge power reach the manufacturer's rated figures within its stated tolerance, and no module sits outside the temperature spread the manual allows. Wrong looks like one module running noticeably hotter than its siblings; stop and raise it with the manufacturer before handover rather than logging it as a note. Hazard: this step commands real current through the pack, so nothing is opened while the cycle runs and nobody stands in front of the equipment during the first full-power discharge.

Step 6 - Run the backup transfer test with the utility genuinely removed and a second person at the panel. Open the utility disconnect, time the transfer, and have the second person walk every circuit with a receptacle tester: every listed circuit live, every unlisted circuit reading zero. Then start the largest motor load on the list. Acceptance: transfer completes inside the manufacturer's stated time, 100 percent of listed circuits energized, 100 percent of unlisted circuits at zero volts, no overload event on the motor start. Wrong looks like any voltage on a circuit not on the list, or an inverter fault at motor start. Stop rule: abort, restore the utility, correct the panel or move the load, and re-run the entire circuit walk rather than the failed circuit alone. Hazard: this test deliberately islands a live building, so the second person announces every circuit before touching it and nothing is opened at the panel while islanded.

Step 7 - Set the operating mode and reserve, then compute autonomy from measured load, not from a guess. Set the mode the customer bought (self-consumption, time of use, or backup-only) and the backup reserve, then divide usable capacity by the measured daily consumption of the protected loads. Acceptance: an autonomy figure in days with its basis written beside it, naming the load set it was measured on and stating that it assumes no solar. Wrong looks like a second derate applied on top of usable capacity; the manufacturer's usable figure already excludes the reserve floor, so subtracting a depth-of-discharge allowance again understates the system and the customer will notice. Hazard is expectation, and it is the shop's to manage: an autonomy number quoted without its load set becomes a promise the shop did not make.

Step 8 - Hand over on what it will not do, before what it will. Name the loads that are not backed up, state the autonomy figure with its load set, show where the reserve setting lives, and give the thermal-event instruction in plain words: leave the building, call the fire department from outside, tell them it is a lithium battery system and where it is. Acceptance: the customer states back the autonomy figure, one load that is not backed up, and the thermal-event action. Wrong looks like a signature on a form nobody read; slow down. Hazard: what the acknowledgement legally proves is a question for your own attorney; what the shop banks is a dated record that the customer was told.

The record this produces

One storage commissioning record on the job: unit serials and firmware versions, grid profile identifier with the interconnection approval it matches, torque and clearance verification, the signed protected-loads list with the two-direction check marked off, measured transfer time, the full circuit walk with a live or zero result per circuit, largest motor start result, charge and discharge power against rated, module temperature spread, operating mode and reserve setting, measured daily consumption of the protected loads with its window, the autonomy figure and its basis line, and the customer acknowledgement with the three items stated back.

Read later by the next tech, who needs the protected-loads list to answer "why did my office outlet not work"; by the manufacturer's technical support, which asks for firmware and grid profile before anything else; and by the service desk, which uses the autonomy basis line to answer an outage complaint with arithmetic instead of apology.

Worked pass

Two battery units, 10 kWh usable each for 20 kWh total, AC-coupled to an existing 8.8 kW PV array, with a six-circuit protected-loads panel: two lighting circuits, refrigerator, furnace controls, one bedroom receptacle circuit, and the well pump.

Steps 1 through 3 pass, with the Step 3 walk finding six circuits on the list and six on the bus in both directions. Step 4 confirms permission to operate is issued, sets the utility's required grid profile, records profile identifier and firmware, and sees no grid-code fault in ten minutes. Step 5 charges and discharges at rated power with the module temperature spread inside the manual's allowance.

Step 6 fails. The utility disconnect is opened, transfer completes inside the manufacturer's stated time, and the six listed circuits come up live. Then the second person's tester reads 120 V at a kitchen receptacle on a circuit that is not on the list. Stop rule taken: the test is aborted, the utility restored, the panel opened. A kitchen small-appliance circuit had been landed on the backup bus during the panel work, so seven circuits were on backup against six on the signed list. The circuit is moved back to the main bus and the entire six-circuit walk is re-run from the start rather than re-testing the one circuit. On the second run all six listed circuits read live, the kitchen receptacle reads zero, and the well pump starts with no overload event.

Step 7 sets self-consumption mode with the reserve the customer chose. The protected loads were logged over a seven-day window at an average of 8.4 kWh per day, so autonomy is 20 divided by 8.4, which is 2.4 days. The 20 kWh is the manufacturer's usable figure and already excludes the reserve floor, so no second derate is applied. The basis line reads: 2.4 days on the six listed circuits at 8.4 kWh per day measured over seven days, assuming no solar.

Step 8 hands over on the negative first. The range, dryer, air conditioner and garage refrigerator are named as not backed up, the 2.4 days is stated with its load set, and adding the garage refrigerator is named as something that shortens it. She states back the 2.4 days, names the dryer as unbacked, and repeats the thermal-event instruction. The service desk confirms the site is reporting before the crew leaves the neighborhood.

References

• NFPA 855, in the edition your authority having jurisdiction has adopted, which binds the installation and reaches you through the permit; UL 9540 for the system listing and UL 9540A for cell-level fire test data.
• NEC Article 706 for energy storage systems and Article 705 for interconnection, in the edition your AHJ has adopted.
• NFPA 70E-2021, 120.5, for live-dead-live verification; 29 CFR 1910.333(b)(2) for electrical work practices, with 29 CFR 1926.417 as the construction counterpart.
• The manufacturer's commissioning manual and emergency response guide for that model, which govern grid profile selection, rated power, temperature limits and incident response.
• See related: the monitoring setup and customer handover SOP, and the utility inspection and permission to operate readiness SOP, which gates Step 4.