What Is NFPA 85? Boiler and Combustion Safety

Back to Blog

What NFPA 85 Covers and Who It Applies To

NFPA 85 addresses the hazards specific to combustion equipment: the risk that unburned fuel accumulates in a furnace and then ignites explosively, and the related implosion risk in large units. It applies to boilers and combustion systems above a threshold size and to specific configurations such as pulverized fuel systems and heat recovery steam generators. Smaller fired equipment may fall under a different NFPA code rather than 85, which is why identifying the governing code is the first step.

The code sets requirements for the fuel-firing controls, the combustion air, the flame monitoring, and the interlocks that must trip the equipment to a safe state. It is prescriptive about the sequence of operations because the ordering, purge before light-off, flame proven before the next fuel valve opens, is exactly what prevents an accumulation from igniting. The logic in a modern burner management system implements that sequence.

How NFPA 85 Shapes the Burner Management System

The single most recognizable NFPA 85 requirement is the pre-firing purge: before any igniter or main fuel is admitted, the furnace must be swept with a defined number of air changes to clear any accumulated fuel. The BMS enforces this by refusing to permit light-off until the purge is verified complete, which is why an operator cannot simply skip to firing on a cold start. The purge is the reset that guarantees the furnace is not already holding a combustible mixture.

Flame supervision is the second pillar. The BMS continuously proves flame with a scanner, and loss of flame while fuel is admitted triggers an immediate fuel trip, because a fuel valve open into a furnace with no flame is how an explosive accumulation forms. The interlock logic proves each fuel valve and sequences igniter and main fuel so that fuel is never present without a proven means of ignition. The wellsite burner management case shows the same principles applied to smaller fired heaters.

The trip logic is designed to fail safe. On loss of critical permissives, such as combustion air, flame, or fuel pressure outside limits, the BMS drives fuel valves closed rather than holding the last state. This bias toward tripping fuel off is deliberate: a nuisance trip that shuts down a boiler is a far better outcome than a furnace explosion, and NFPA 85 is written around that priority.

What Compliance Work Looks Like

Compliance begins with confirming the equipment falls under NFPA 85 rather than a different code, then designing the burner management logic to implement the required purge, flame supervision, valve proving, and interlocks for the specific fuel and configuration. The logic is documented in a cause-and-effect matrix or logic diagram that traces each safety input to the actions it commands, which is the artifact an assessor reviews against the code's requirements.

Beyond design, compliance requires proof testing of the safety functions on a defined interval, because an interlock that has silently failed provides no protection. The BMS safety functions are typically implemented on a rated safety controller, and where they carry a safety integrity level target, the proof test interval and diagnostics tie back to that target. Records of these tests are part of demonstrating ongoing compliance.

Operationally, the challenge is that a fired unit trips to safe state on its own logic, but the surrounding process and operators need visibility of why. A monitoring platform such as Merobix that trends the boiler's process conditions and records first-out trip causes helps operations understand and respond to a trip, while the safety-rated BMS remains the system that actually enforces the NFPA 85 sequence. The monitoring supports operations; the BMS enforces the code.

Frequently Asked Questions