What this is
What is an ammonia system safety review?
What is an ammonia system safety review?
It is a yearly engineering review of an ammonia refrigeration system, covering detection and alarm, the machinery room, plant condition, and emergency response. It is carried out by engineering with a refrigeration specialist and is built against ISO 45001 cl.8.1.
Why is ammonia treated as the single largest process hazard on a food site?
Ammonia refrigeration charges on a food site can run into tonnes, and a significant release is toxic, can ignite at higher concentrations, and forces an immediate evacuation of the surrounding area. Few other single systems combine that scale of inventory with that consequence if the containment or emergency controls fail.
What triggers a review outside the yearly cycle?
A recurring leak, a failed alarm test, a change to the plant charge, or a near-miss involving the machinery room should all trigger an out-of-cycle review rather than waiting for the annual date, because the yearly interval is a floor, not a ceiling.
Scope
When is an ammonia system safety review required?
This review covers the ammonia system as a whole — detection, the machinery room, plant condition and emergency response. It is not the place for pressure vessel examinations, boiler operation or the general gas cylinder store, even though all sit in adjacent programmes.
Use this template when
- The system is being reviewed at its yearly interval, or after a trigger event such as a recurring leak or failed alarm test
- The workspace is being set up for a new or newly acquired ammonia plant
- You are running the Emergency Preparedness or Pressure Systems and Refrigeration programme and this is one of its steps
- A linked refrigerant leak record or the site emergency plan needs this review to exist
- The ammonia charge or plant configuration has changed and the review needs re-running against the new baseline
Do not use it for
- Pressure System Written Scheme, which sets out which parts of a pressure system are examined, how, and at what interval.
- Steam System Safety Check, which checks boiler operation, water treatment, blowdown, relief devices and steam trap condition.
- Compressed Gas Cylinder Check, which is a monthly store check for welding and process gas cylinders, not an engineering review of a fixed ammonia plant.
- Refrigeration Plant Log, which records routine operational readings between reviews rather than the yearly safety position.
- Anything outside KnowSafe, which belongs in the workspace that owns that process
Compliance mapping
Which ISO 45001 cl.8.1 requirements does this satisfy?
The review maps to one operational controls clause, but each section verifies a different layer of the same control chain — detect, contain, isolate, respond.
| Clause | Requirement | Where it lands |
|---|---|---|
| ISO 45001 cl.8.1 | Operational controls for a significant hazard must be established, implemented and verified as effective | Detection and alarm |
| ISO 45001 cl.8.1 | Controls must reflect the hierarchy of controls, with engineering controls such as ventilation and interlocks preferred over reliance on procedure alone | Machinery room |
| ISO 45001 cl.8.1 | Equipment condition relevant to the hazard must be verified, including statutory examination status | Plant condition |
| ISO 45001 cl.8.1 | Emergency preparedness arrangements must be established, tested and kept current for the hazards identified | People and response |
| ISO 45001 cl.8.1 | Nonconformities identified during operational monitoring must be recorded and progressed to closure | Findings |
| ISO 45001 cl.8.1 | Performance against operational controls must be evaluated, reported and used to drive corrective action | Result |
What it does not cover
- Emergency isolation outside the room, which is answered 'Yes' because a switch exists somewhere nearby, without confirming it is reachable without entering the affected space.
- Alarm distinct from fire alarm, which passes on the basis that two alarms technically sound different, without checking whether staff can actually tell them apart under stress and act on the correct response.
- Detector coverage adequate, which is marked 'Yes' against the original design intent rather than the current layout, after storage or partitions have been added to the space since installation.
- Emergency ventilation interlocked to detection, which is recorded as automatic when it is in fact a manual switch someone has to remember to operate during a release.
- Trained responders on all shifts, which is confirmed against a training register rather than against who is actually rostered on the shift least likely to be checked.
Global
Ammonia System Safety Review requirements by country
Ammonia refrigeration is regulated as a major hazard almost everywhere it is used at scale, but the instrument that drives the specific controls this review checks differs sharply by region.
OSHA Process Safety Management standard, 29 CFR 1910.119
Federal standard triggered once a covered chemical, including anhydrous ammonia, is held above its threshold quantity
Sites above the threshold must run a formal process hazard analysis and mechanical integrity programme; this yearly review functions as a recurring check against that programme.
COMAH Regulations 2015 (Control of Major Accident Hazards)
Implements the EU Seveso framework for sites holding ammonia above notification or top-tier thresholds
A top-tier site must maintain a safety report and demonstrate that detection, isolation and emergency arrangements are tested, not just documented — this review is the evidence base for that.
Seveso III Directive (2012/18/EU)
EU-wide framework classifying establishments by hazardous substance inventory and setting major-accident prevention duties
Member states implement Seveso through national law, but the underlying duty — demonstrated, tested control of a major ammonia inventory — is the standard this review satisfies across EU sites.
How to complete it
How to complete an ammonia system safety review, step by step
Most fields here are pass or fail by design, because ammonia system controls either work under alarm conditions or they do not — but a handful of judgement calls decide whether the review actually tested that.
Confirming an emergency isolation exists outside the machinery room is not the same as confirming someone can operate it in the dark, in a hurry, untrained on that specific switch. The judgement call is whether the reviewer had someone actually operate it or only pointed at it.
Partial coverage is not a middle ground to round up to acceptable — it means a volume of the room would go undetected until a release reached an adjacent zone. The reviewer's job is to identify where that gap is, not just note that coverage is partial.
A generic site evacuation drill does not satisfy 'drill held in last 12 months' for an ammonia-specific emergency plan. The judgement call is confirming the scenario rehearsed an ammonia release response, breathing apparatus included, not a fire evacuation with an ammonia label attached.
A specialist signing off from a summary conversation is materially different from one who walked the plant and reviewed relief and pipework condition directly. Where involvement was limited, the reviewer should say so rather than let 'Yes' imply a full walk-through occurred.
What auditors find
Most common ammonia system safety review findings
The deficiencies this review surfaces most often are less about missing equipment and more about controls that exist but do not perform under real conditions.
| Finding | Clause | What fixes it |
|---|---|---|
| Emergency isolation switch located inside the machinery room it is meant to isolate | ISO 45001 cl.8.1 | Relocate the isolation to an external point reachable without entering the affected space, and confirm reachability during the next drill. |
| Ammonia alarm tone similar enough to the fire alarm to cause response confusion | ISO 45001 cl.8.1 | Reprogram or replace the ammonia alarm to a distinct tone, and retrain staff on the difference before the next drill. |
| Detector coverage gaps where storage or partitions have changed the room layout since installation | ISO 45001 cl.8.1 | Commission a coverage survey against current layout, not original design intent, and add detectors to close the gap. |
| Recurring leak points identified in prior reviews with no corrective action closed out | ISO 45001 cl.8.1 | Raise a CAPA against each recurring point individually, since repeat leaks at the same fitting usually indicate a design or material issue, not random wear. |
| Trained ammonia responders absent from the shift with the fewest daytime staff | ISO 45001 cl.8.1 | Cross-check training against the actual shift roster, not the nominal one, and train replacement responders before the gap shift runs unstaffed. |
| Pressure vessels or relief valves overdue their statutory examination interval | ISO 45001 cl.8.1 | Quarantine or de-rate the affected vessel until examined, and escalate to the written scheme owner rather than treating it as a finding to close later. |
Case in point
Case in point: an isolation switch that worked on the drawing
A dairy site's ammonia machinery room had an emergency isolation shown on the P&ID at the external wall, satisfying the review question for three years on the strength of the drawing and a walk-past. What the drawing did not show was that a later expansion had moved the external wall, and the switch that used to sit outside now sat two metres inside the extended room.
The gap surfaced only when a review brought in a refrigeration specialist who insisted on physically operating the isolation rather than confirming its location against the drawing. Standing inside the room to reach it was the finding — the exact failure mode this field exists to catch, signed off as compliant every year the drawing was trusted over the room.
The template
The template, field by field
The form exactly as it installs. Every field, option, score and conditional rule is editable, and the links to other templates come with it.
7 sections
- Reference
- SAF-167
- Archetype
- Review
- Record ID
- ASR-2026-000
- Scoring
- Findings open
- Direction
- Low is good
- Singleton
- Yes
- Basis
- ISO 45001 cl.8.1
- Links
- Links Refrigerant leaks, Emergency plan
- Tags
- Pressure, Ammonia
- Sections
- 7
- Fields
- 68
- Follow up fields
- 9
- Repeating sections
- 1
- Links out
- 4
Header
15 fieldsReview ID*
Auto sequence. Format ASR-2026-000.
The record's own ID. Other templates point at this value.
Status*
Drives who this goes to next.
- Planned2 pts
- In progress2 pts
- Complete3 pts
- Deferred0 pts
- Open0 pts
- Closed3 pts
- Overdue0 pts
Date and Time*
Completed By*
Site*
Site ID*
Format SITE-000.
Links to FDN-001 Site ID
Area
The area within the site.
Exact Location
Drop a pin for anything hard to find.
The Largest Process Hazard On Site
An ammonia release can kill people, empty the building and destroy a week of product at the same time. This review is the yearly hard look at whether the controls are real.
System Reference*
Ammonia Charge Kilograms*
Above Regulatory Threshold*
- No3 pts
- Yes1 pt
Reviewed By*
Refrigeration Specialist Involved*
- Yes3 pts
- No0 pts
Last Review Date
Detection and alarm
8 fieldsFixed Detection Fitted*
- Yes3 pts
- Partial1 pt
- None0 pts
Detector Coverage Adequate*
- Yes3 pts
- Partly1 pt
- No0 pts
Detectors Calibrated*
- Yes3 pts
- Overdue1 pt
- Never0 pts
Alarm Levels Set Correctly*
- Yes3 pts
- Uncertain1 pt
- No0 pts
Alarm Audible Across Affected Areas*
- Yes3 pts
- Partly1 pt
- No0 pts
Alarm Distinct From Fire Alarm*
An ammonia release and a fire need opposite responses. The alarms must not sound alike.
- Yes3 pts
- Similar0 pts
Remote Alarm Out Of Hours*
- Yes3 pts
- No0 pts
Alarm Tested In Last 12 Months*
- Yes3 pts
- No0 pts
Machinery room
9 fieldsRoom Ventilation Adequate*
- Yes3 pts
- Marginal1 pt
- No0 pts
Emergency Ventilation Interlocked To Detection*
- Yes3 pts
- Manual only1 pt
- None0 pts
Room Sealed From Occupied Areas*
- Yes3 pts
- Partly1 pt
- No0 pts
Emergency Isolation Outside The Room*
An isolation you can only reach by walking into the release is not an emergency isolation.
- Yes3 pts
- Inside only0 pts
Doors Open Outwards And Are Not Locked*
- Yes3 pts
- Partly1 pt
- No0 pts
Room Free Of Storage*
- Confirmed3 pts
- Some1 pt
- Significant0 pts
Electrical Equipment Suitable*
- Yes3 pts
- Uncertain1 pt
- No0 pts
Lighting And Emergency Lighting Working*
- Yes3 pts
- Partly1 pt
- No0 pts
Water Supply For Dispersion Available
- Yes3 pts
- No0 pts
Plant condition
6 fieldsRelief Valves In Date*
- Yes3 pts
- Some overdue1 pt
- Overdue0 pts
Relief Discharge Routed Safely*
- Yes3 pts
- Marginal1 pt
- No0 pts
Pressure Vessels Within Examination Interval*
- Yes3 pts
- Some overdue1 pt
- Overdue0 pts
Pipework Condition And Insulation*
- Good3 pts
- Fair1 pt
- Poor0 pts
Leak History Reviewed*
- Yes3 pts
- No0 pts
Recurring Leak Points Identified*
- None3 pts
- Some1 pt
- Several0 pts
People and response
9 fieldsEmergency Plan Specific To Ammonia*
- Yes3 pts
- Generic only1 pt
- None0 pts
Plan ID
Links to SAF-067 Plan ID
Drill Held In Last 12 Months*
- Yes3 pts
- No0 pts
Escape Breathing Apparatus Available*
- Yes3 pts
- Partly1 pt
- No0 pts
Trained Responders On All Shifts*
- Yes3 pts
- Partly1 pt
- No0 pts
Emergency Services Familiar With Site*
- Yes, visited3 pts
- Plan shared1 pt
- No0 pts
All Workers Have Ammonia Awareness*
- Yes3 pts
- Partly1 pt
- No0 pts
Contractors Briefed*
- Yes3 pts
- Partly1 pt
- No0 pts
Product Contingency Planned*
- Yes3 pts
- Partly1 pt
- No0 pts
Findings
Repeats7 fieldsResult*
- Pass3 pts
- Pass with conditions2 pts
- Fail0 pts
Severity
- Minor3 pts
- Moderate1 pt
- Serious0 pts
Element Tag
Groups deficiencies by hazard type across every template.
Deficiency Detail
Photo Evidence
Fixed On The Spot
Finding ID
Raise a finding record where this needs tracking to closure.
Links to FDN-015 Finding ID
Result
14 fieldsItems Assessed*
Excludes anything marked N/A.
Items Failed*
Score Percent*
Calculated on submission. High is good. N/A items leave the denominator.
Result Band*
- Pass3 pts
- Caution1 pt
- Fail0 pts
Completeness Percent*
How much of the template was actually answered. A high score on a half completed form is not a high score.
Action Required*
Raise the action record, then enter its reference here.
- No2 pts
- Yes0 pts
Priority
- High0 pts
- Medium1 pt
- Low3 pts
CAPA ID
Format CAPA-2026-00000.
Links to FDN-014 CAPA ID
Action Owner
Next Due*
Engineering Manager*
Signature*
Site Manager*
Second Signature*
SAF-167 · record IDs look like ASR-2026-000 · Links Refrigerant leaks, Emergency plan
Open in KnowellaRun it with agents
From a document you fill in to a programme that runs itself
The review itself is a once-a-year event — the risk sits in the eleven months between reviews where a plant change or a repeat leak quietly reopens a finding nobody is tracking.
Holds the ammonia review against the site's refrigerant leak records and emergency plan, tracks recurring leak points across cycles, and keeps the specialist's evidence trail together.
Tracks relief valve and pressure vessel examination intervals alongside the plant's other statutory dates, so an overdue examination surfaces on the same calendar the rest of engineering already watches.
Rolls this review into the site's major-hazard regulatory position, whether that is OSHA PSM or COMAH, so an inspector-facing audit can pull the review history rather than reconstructing it under time pressure.
Coordinates the crew across these workspaces, surfaces findings still open past their due date, and holds every write for your approval before it touches a record.
This template lives in KnowSafe — safety and compliance. Incidents, hazards, permits, inspections and the critical controls behind them.
Meet KnowSafe→Glossary
Ammonia System Safety Review definitions and key terms
- Machinery room
- The enclosed space housing ammonia compressors and associated plant, subject to specific ventilation, sealing and emergency isolation requirements because it is where a release is most likely to originate and concentrate.
- Emergency ventilation interlock
- An automatic connection between gas detection and the machinery room's emergency-rated ventilation fans, so a detected release triggers dilution and extraction without requiring a person to act first.
- Process Safety Management (PSM)
- The OSHA framework, 29 CFR 1910.119, requiring formal hazard analysis, mechanical integrity and emergency planning for sites holding covered chemicals above threshold quantities.
- COMAH top-tier site
- A UK site holding hazardous substances, including ammonia, above the higher COMAH threshold, subject to the most stringent safety report and inspection regime under the regulations.
- Relief discharge routing
- The engineered path a pressure relief valve directs released gas to, designed to route a discharge away from occupied areas, ignition sources and building air intakes rather than simply venting locally.
FAQ
Frequently asked questions about ammonia system safety review
What is the ammonia system safety review template based on?+
It is built against ISO 45001 cl.8.1, the operational controls clause, and reflects the practical expectations of major-hazard frameworks such as OSHA Process Safety Management and the UK COMAH Regulations for sites holding significant ammonia inventories.
What sections does the ammonia system safety review contain?+
There are seven sections: header, detection and alarm, machinery room, plant condition, people and response, findings, and result. Together they hold 68 fields, 53 of which are required.
How many ammonia system safety review records should we have?+
This is a singleton. One live record per workspace, set up once and maintained yearly, with the refrigerant leak record and site emergency plan referring back to it.
Which programme does the ammonia system safety review belong to?+
It sits in both Emergency Preparedness and Pressure Systems and Refrigeration. Emergency Preparedness targets tested evacuation, fire, spill, medical and ammonia release arrangements; Pressure Systems and Refrigeration targets a position that stands up to a regulator visit.
How is an ammonia system safety review scored?+
Scoring is findings open, where low is good. Unlike a pass-rate checklist, the target is zero unresolved findings rather than a percentage, because a single unresolved emergency isolation issue outweighs a dozen minor housekeeping passes.
Can the ammonia system safety review template be changed?+
Yes. Every field, option, score and conditional rule is editable, and the links to the refrigerant leak record and emergency plan come with it. Most sites install it as it is, run one full cycle with their refrigeration specialist, then adjust the area list to match their plant layout.
Keep going
Related templates and programmes
Industries this is written for
Programmes this belongs to
Used together in Emergency Preparedness
Contractor Emergency Drill Participation
Records contractor involvement in an evacuation or emergency drill, including whether they were accounted for
Site Resilience and Continuity Plan
Sets out how the site keeps operating or recovers after loss of power, refrigeration, water, IT, key equipment or people
Business Continuity Exercise Record
Records a test of the continuity plan, what worked and what did not
Environmental Spill Drill Record
Records a practice spill response, timed from discovery to containment
Emergency Response Plan
Sets out what happens in a fire, medical emergency, spill, power failure or evacuation, including who does what
Evacuation Drill Record
Records a practice evacuation, including clearance time, headcount and anything that went wrong
More in Pressure Systems
Pressure System Written Scheme
Sets out which parts of a pressure system are examined, how, and at what interval
Steam System Safety Check
Checks boiler operation, water treatment, blowdown, relief devices and steam trap condition
Boiler Attendant Log
Records the periodic checks a boiler attendant makes through a shift, with readings and any action taken
Compressed Gas Cylinder Check
Checks cylinder storage, securing, segregation, valve protection and test dates
Written and reviewed by
Siddarth Singh
Founder & Chief Executive Officer, Knowella
Certified Safety Professional and industrial and systems engineer with more than a decade inside food supply chain, freight and manufacturing operations. This page was written against the current text of the standards it cites, not against secondary summaries of them.
- Certified Safety Professional (CSP), Board of Certified Safety Professionals
- MBA, University of Chicago Booth School of Business
- MS and BS, The Ohio State University, Industrial and Systems Engineering
- Six Sigma Black Belt
Sources and last review. Reviewed 16 August 2026 against:
- ISO 45001:2018 cl.8.1 — Operational planning and control
- OSHA 29 CFR 1910.119 — Process Safety Management of Highly Hazardous Chemicals
- COMAH Regulations 2015 — Control of Major Accident Hazards
- Seveso III Directive (2012/18/EU)
This page is general guidance, not legal advice. Confirm requirements with your jurisdiction’s regulator.