Lithium-ion batteries entered your facility as conveniences, not chemicals. Here’s why thermal runaway is a process safety problem — and how to manage it.
Lithium-ion batteries are the most under-managed hazard in general industry right now, and the reason is simple: they never went through intake as a hazard. Solvents arrive with an SDS and a flammable cabinet. Batteries arrive inside a tool, a robot, a prototype, a pallet from the loading dock — and walk straight past every chemical management system you own. If your facility charges, stores, tests, or ships lithium-ion cells and your safety program has no battery-specific layer, you are running an energy storage operation without knowing it.
The conventional belief: batteries are a product safety issue — a fire risk we handle with extinguishers, insurance, and common sense.
My counter-position in one sentence: a lithium-ion battery is a sealed package of flammable electrolyte and stored energy, and the moment your operation aggregates enough of them, you have a process safety problem that your fire extinguisher program was never designed to answer.
“Batteries walked past every chemical management system you own.”
What actually happens when a lithium-ion battery fails?
Thermal runaway is not “a battery fire.” It’s a self-sustaining chain reaction: heat from an internal fault — mechanical damage, an internal short, overcharging, external heat — accelerates the cell chemistry, which generates more heat, which accelerates it further. The cell vents flammable gases and toxic combustion products, and in multi-cell packs, one failing cell heats its neighbors and the failure propagates through the pack.
Three properties make this operationally different from an ordinary combustible fire, and each one breaks a standard assumption in your emergency plan:
It reignites. A pack that looks extinguished can re-enter runaway minutes or hours later. “The fire is out” is a provisional statement, which means your overhaul, quarantine, and disposal procedures matter as much as your suppression.
It’s a chemical release, not just a fire. Venting cells release flammable and toxic gases, and the exposure profile includes electrolyte solvents and metal compounds for which established occupational exposure limits largely don’t exist. OSHA’s own guidance points employers toward alternative exposure limits and control banding — which is the regulator’s way of saying the toxicology hasn’t caught up to the deployment. In battery test labs and R&D spaces, that has direct implications for ventilation design and post-event re-entry decisions.
It doesn’t care about your extinguisher training. The stored electrical energy drives the reaction from inside the cell. Response is about isolation, cooling, distance, and letting the energy dissipate — a different logic than the fire response your team was trained on, and one that has to be decided before the event, not improvised during it.
Why is this a strategy–execution gap and not a knowledge gap?
Here’s the part I find most telling. Nobody disputes any of the above. Ask any founder, plant manager, or ops VP whether lithium-ion batteries are hazardous and you’ll get an immediate yes — usually with a story attached. The knowledge is universal. The translation into operational design is almost nonexistent.
This is the Strategy–Execution Gap in its purest form: the organization holds the correct belief and runs none of the controls that belief implies. Walk the floor and look for the artifacts of translation. Is there a defined charging area, or do e-bikes, drone packs, and power tool batteries charge wherever there’s an outlet — including overnight, unattended, against a wall of cardboard? Is there a quantity limit anywhere in writing? A procedure for a swollen or dropped cell, or does damaged inventory sit on a shelf next to good stock? Does the emergency action plan contain the word “battery,” or does it assume every fire is a Class A fire? Does anyone own battery intake — or is procurement buying energy storage in whatever quantity hits the reorder point, invisible to EHS because it never crossed the chemical inventory?
In most facilities I’ve seen, the honest answers are: no, no, no, no, and no one. Not because anyone decided against controls. Because batteries entered through a door no hazard review was watching.
Why does this hit hardware and deep-tech companies hardest?
A conventional manufacturer accumulates batteries incidentally. A hardware startup accumulates them structurally. If you’re building robots, drones, autonomous vehicles, energy systems, or field-deployed devices, batteries aren’t in your operation — they are your operation: cells in incoming inventory, packs in assembly, packs under test, packs cycling on chargers, finished units in staging, returns and damaged units from the field.
Now overlay the growth curve. The battery-dense operation that was three benches at seed stage is a full floor at Series B — and the safety architecture is still whatever the first three engineers improvised. Charging, cycling, and abuse testing happen in the same open bay as assembly. The “burn room” is a corner with a metal cabinet someone bought online. Field returns — the highest-risk units in the building, because they’re the ones with unknown damage histories — come back through normal receiving. This is precisely the inflection where hardware companies need EHS leadership.
The steelman objection: “We’re pre-revenue; battery infrastructure is premature optimization.” I’d take that seriously if the fix were capital-intensive. Mostly it isn’t. The gap between improvised and designed is largely decisions, not dollars: where charging happens, what quantities sit where, how damaged cells are segregated, what the response plan says. The expensive version of this problem is the retrofit after the near-miss — or the conversation with your insurer after the loss, when “we had no written battery procedures” becomes the underwriting narrative. And for a hardware company, a thermal event doesn’t just burn inventory; it burns the prototype, the test data, the lab, and the timeline your next raise is priced on.
What does a designed battery program actually look like?
Not a binder. Five design decisions, made once, enforced by layout:
Segregate by state. New stock, packs in test, charging, finished goods, and damaged/quarantined cells are five different risk categories. A designed operation separates them physically — with distance, rating, or both — and makes damaged-cell quarantine a marked, non-combustible, ventilated location, not a shelf.
Design the charging environment. Defined areas, non-combustible surroundings, no unattended overnight charging as the default, charger-to-pack compatibility controlled. This is the single highest-leverage move, because charging is where most facility events start.
Set quantities deliberately. Somebody should be able to state the maximum energy you’re comfortable holding in one place, and why. The number matters less than the existence of the decision — it forces the conversation between operations, EHS, and your carrier.
Write the battery-specific emergency plan. Isolation and cooling logic, evacuation triggers tied to gas release rather than visible flame, reignition watch, and disposal routing. Then brief your local fire department — they would rather learn your battery layout on a Tuesday visit than at 2 a.m.
Put batteries through intake. Treat cells and packs as what they are — hazardous energy and chemistry — and route them through the same review that a drum of solvent would get. Once batteries are visible to the management system, everything above stops depending on memory.
None of this requires a full-time hire. It requires senior judgment applied once, hard, at the design stage — which is precisely the work FractionalEHS does for hardware companies scaling battery-dense operations: build the architecture before the headcount, so the program is a system rather than a person.
Key takeaways
- Lithium-ion batteries bypass chemical management systems because they arrive as components and conveniences, not as chemicals — so most facilities have no battery-specific controls at all.
- Thermal runaway is a self-sustaining chemical reaction: it can reignite after apparent extinguishment, releases toxic and flammable gases with largely unestablished exposure limits, and doesn’t respond to conventional fire logic.
- The failure is a strategy–execution gap, not a knowledge gap — everyone believes batteries are hazardous; almost no one has translated that into charging zones, quantity limits, segregation, and battery-specific emergency plans.
- Hardware and deep-tech companies carry structurally higher exposure because batteries scale with the product, while safety architecture stays improvised.
- The core controls are design decisions, not capital projects: segregate by state, design the charging environment, set quantity limits, write the battery emergency plan, and route batteries through hazard intake.
