Backup power and islanding: grid-forming, switching, and sizing
A practical guide to grid-forming versus grid-following inverters, automatic transfer switching, and correctly sizing loads for solar backup power.
A technical look at thermal runaway mechanisms, chemistry differences, siting rules, ventilation, and the IEC/EN standards governing home battery safety.
Home battery storage has moved from a niche add-on to a default component of new PV installations across Europe. With that growth has come closer scrutiny of failure modes: fires involving lithium-ion battery energy storage systems (BESS), while statistically rare, are severe enough that insurers, fire brigades, and regulators now demand documented risk assessments before installation.
This article is written for installers, specifiers, and technically literate homeowners who need to understand what actually causes battery fires, how chemistry choice changes the risk profile, and what siting and ventilation requirements exist under current standards. It is not a scare piece - the failure rate of certified systems installed correctly is very low - but the consequences of getting siting or installation wrong are disproportionate to the probability, which is why the rules are strict.
We focus on stationary storage rather than EV batteries, though the underlying electrochemistry is shared. Where relevant we note how automotive-derived chemistries (notably LFP) differ from the NMC cells more common in early residential storage products.
Thermal runaway is a self-accelerating exothermic reaction inside a lithium-ion cell. It is triggered when a cell's internal temperature crosses a threshold at which the solid electrolyte interphase (SEI) layer on the anode begins to decompose exothermically, releasing heat faster than it can be dissipated. This raises the temperature further, triggering separator breakdown (typically 130-190 degC depending on separator material), internal short circuit, and eventually electrolyte decomposition and cathode oxygen release.
The process can be initiated by several distinct root causes:
Once one cell enters runaway, the released heat and ejected hot gas (a mix of hydrogen, carbon monoxide, hydrocarbons, and electrolyte vapour) can propagate to neighbouring cells within seconds, especially in tightly packed modules without thermal barriers. This propagation, not the initial single-cell event, is what turns a contained failure into a fire that engulfs a full battery rack.
Cell chemistry has a first-order effect on runaway onset temperature and severity.
| Chemistry | Typical onset temp | Peak surface temp in runaway | Oxygen release | Typical residential use |
|---|---|---|---|---|
| NMC (nickel manganese cobalt) | approx 150-210 degC | up to 700-900 degC | Significant, cathode releases O2 | Older/higher-density residential packs |
| NCA (nickel cobalt aluminium) | approx 150-200 degC | similar to NMC, often higher peak | Significant | Automotive-derived packs (rare in stationary) |
| LFP (lithium iron phosphate) | approx 230-270 degC | typically 400-500 degC | Minimal, phosphate bond is thermally stable | Dominant in new residential/C&I storage |
LFP's iron-phosphate cathode does not release free oxygen readily under thermal stress, which is why LFP packs generally show slower propagation and lower peak temperatures than NMC in independent abuse testing (see Fraunhofer ISE and NREL cell-level abuse studies). This is the primary reason LFP has become the default chemistry for stationary storage since roughly 2021, even though it has around 20-30% lower volumetric energy density than NMC, a trade-off that matters little for a wall-mounted home battery where floor and wall space are rarely the binding constraint.
It is worth being precise here: LFP is safer at the cell level, not risk-free. LFP packs can still enter thermal runaway under severe overcharge or crush conditions, and pack-level design (busbars, BMS, enclosure) determines whether a single-cell fault stays contained.
The BMS is the first line of defense, not the standards certificate. A competent BMS enforces per-cell or per-module voltage and temperature limits, balances cells to avoid localized overcharge, disconnects on overcurrent, and logs fault history. Redundant temperature sensing and independent hardware-level cutoffs (separate from the main microcontroller) are what distinguish a system designed to fail safely from one that only works when everything else works too.
Siting rules exist because even a well-designed system can fail, and the goal of siting is to limit consequences, not just probability. Requirements vary by jurisdiction but converge on similar principles, generally derived from national adoption of IEC 62619 safety requirements combined with local fire codes.
Typical siting constraints for residential lithium-ion BESS:
Several countries (Germany via VDE guidance, UK via BS EN standards and insurer guidance) explicitly discourage siting large-format residential batteries in bedrooms or immediately adjacent to sleeping areas, given that early warning time before a fire becomes dangerous can be short once propagation starts.
Lithium-ion runaway releases flammable and toxic off-gas before any visible flame. Standing requirements for ventilation typically target two failure scenarios: local hydrogen accumulation from normal charging off-gassing (LFP cells can vent trace hydrogen during charge, particularly at end of life) and bulk gas release during a runaway event.
Practical ventilation guidance:
A 10 kWh LFP residential battery room is being assessed for passive ventilation under a code provision requiring dilution of worst-case hydrogen off-gas to below 25% of the lower flammability limit (LFL of hydrogen is 4% by volume, so the target is below 1%).
Assume the manufacturer's abuse data specifies a worst-case gas release of 1.2 Nm3 total gas per kWh of cell capacity during a full thermal event, with roughly 20% of that volume as hydrogen.
That is a substantial forced-air requirement, well beyond passive trickle ventilation, which is why most residential-scale enclosures are instead designed to contain a runaway event and vent hot gas directly outside through a dedicated pressure-relief duct, rather than relying on room dilution. Where manufacturer abuse data is unavailable, use the room ventilation figures in the enclosure's certification report rather than estimating from first principles, since real off-gas volumes vary significantly between cell formats.
Two standards dominate specification and compliance discussions for residential and light commercial storage in Europe:
IEC 62619 - Secondary lithium cells and batteries for industrial applications, including safety requirements. It defines cell- and battery-level abuse tests (external short circuit, overcharge, forced discharge, crush, thermal abuse) and is the reference most product certifications for stationary storage cite, including UL 1973 alignment for markets requiring both.
EN 62485 (series) - Safety requirements for secondary batteries and battery installations, covering stationary applications. EN 62485-2 addresses vented and valve-regulated lead-acid, while lithium-specific stationary installation guidance is increasingly folded into national wiring regulations (e.g. VDE-AR-E 2510-2 in Germany) that reference IEC 62619 certification as a prerequisite.
Installers should also be aware of IEC 62933-5-2, covering safety requirements for grid-connected electrical energy storage systems, which is becoming the reference for larger residential-adjacent and commercial systems as capacities grow past a few tens of kWh. See our glossary for definitions of the abuse-test terminology these standards use.
Most certified LFP residential systems are approved for indoor installation subject to local clearance and ventilation rules. LFP's lower runaway severity makes indoor siting more defensible than with NMC chemistry, but code clearances from escape routes still apply regardless of chemistry.
Generally no for typical 5-15 kWh residential systems; certified enclosures with passive venting and adequate clearance are usually sufficient under current codes. Larger commercial systems above roughly 50 kWh increasingly require dedicated detection and, in some jurisdictions, suppression or containment measures.
Yes. Internal short circuits from mechanical or electrical stress can develop slowly, sometimes triggering runaway hours or days after the triggering event, which is why any battery involved in an impact, flood, or fault event should be isolated and inspected before returning to service, not simply reset.
Aging increases internal resistance and can create localized lithium plating or dendrite growth, both of which raise the probability of internal short circuits. This is one reason manufacturers specify calendar and cycle life limits, beyond which warranty and safety certification no longer strictly apply. See our battery sizing calculator for realistic capacity planning over a system's service life.
Treat it as a potential precursor to thermal runaway: leave the area, do not attempt to inspect or touch the unit, and contact the installer and, if odor or heat is significant, the fire service. Off-gas before visible fire is a known early warning sign in documented lithium-ion incidents.
For system design context, see our guides on battery sizing, system sizing, and MPPT operation.
Standards are cited for orientation. Always work from the current published edition and the national annex that applies in your jurisdiction.
First published.
Technical review: worked examples re-derived, standards references checked against current editions, sources verified.
A practical guide to grid-forming versus grid-following inverters, automatic transfer switching, and correctly sizing loads for solar backup power.
A technical comparison of lithium iron phosphate and nickel manganese cobalt battery chemistries covering energy density, cycle life, safety, and cost.
How residential battery systems work, the practical differences between AC and DC coupling, a sizing method with worked numbers, and what storage really saves.