Backflow Preventer
The Shield
How backflow preventers protect your potable water supply from contamination — and why certified annual testing is non-negotiable.
The Problem: Cross-Connections and Contamination
A fire protection backflow preventer room — the RPZ assembly on the left with its two OS&Y shutoff valves and test cocks, the floor drain below the relief valve outlet, and the main fire service header feeding the building riser on the right.
In any building with a fire sprinkler system, two distinct water systems often originate from the same municipal water main: the potable water supply (drinking, showers, kitchens) and the fire sprinkler system. The point where these two systems potentially interface is defined as a cross-connection.
Water within sprinkler pipes can remain stagnant for extended periods. Over time, this standing water degrades — pipe materials (particularly black iron) leach heavy metals, bacterial and algae growth occurs, and chemical additives such as antifreeze may be present. This is essentially industrial water.
The Risk: Backsiphonage
If municipal water pressure drops (due to a main rupture, hydrant use during an emergency, etc.), contaminated water from the sprinkler system can be sucked backward into the potable water lines — supplying your building or even the wider distribution network. This reversal of flow is known as backsiphonage or backpressure, and represents an immediate public health risk.
The Solution: The Backflow Preventer (BFP)
A backflow preventer is a mechanical valve assembly installed directly at the cross-connection point — where the fire service line enters the property. Its sole function: ensure water flows in only one direction — from the municipal supply into the sprinkler system, and never in reverse NFPA 25, §13.6.
Two Primary Types: DC vs. RPZ
Double Check Valve Assembly (DCVA)
Two independent, spring-loaded check valves in series. Both valves must fail simultaneously for backflow to occur. Appropriate for low-hazard applications where the system water contains no health-threatening contaminants. Five-year internal inspection required NFPA 25, §13.6.2.
Reduced Pressure Zone (RPZ / RPBA)
Two independent check valves plus a third chamber between them maintained at lower pressure than the supply. If both valves fail, a relief valve discharges contaminated water to atmosphere rather than allowing it into the potable supply. Required for high-hazard situations — especially where chemical additives are present. Annual internal inspection required NFPA 25, §13.6.2.
How It Works: Differential Pressure and Mechanical Safeguards
A check valve is essentially a spring-loaded gate. Incoming water pressure keeps the gate open for forward flow. If downstream pressure exceeds supply pressure, the spring (and backpressure itself) forces the gate closed, sealing against reversal.
The RPZ design enhances this principle by introducing a mandatory pressure differential. Incoming water must overcome the first check valve's resistance, creating a slight pressure reduction. The intermediate relief valve is calibrated to actuate if the central zone pressure rises too close to the inlet pressure — ensuring a positive mechanical shut-off even under partial backflow conditions.
RPZ Relief Valve Discharge
If you see an RPZ assembly continuously discharging water from its relief valve, this indicates a component failure — typically a fouled check valve or debris in the seat. This requires immediate attention from a certified backflow tester. The assembly is doing its job by discharging rather than allowing contamination, but the root cause must be resolved.
NFPA 25 Compliance: Testing Requirements
BFP testing is governed by Chapter 13 of NFPA 25. A critical distinction: while some system components permit visual checks by site personnel, BFP testing must be performed by a certified backflow preventer tester NFPA 25, §13.6.2.
Field Examples: Vaults, Meters & Above-Grade Rule
The photos below were taken at a Gwinnett County commercial site during a routine cross-connection survey. They show the two distinct pieces of infrastructure that owners and inspectors commonly confuse: the utility's meter vault (upstream of the building's fire service tap) and a backflow preventer in a below-grade enclosure. Understanding which is which — and how the above-grade rule applies to each — is the first step in any field inspection.
Utility meter vault, overhead view. This sits upstream of the building's backflow preventer — not itself a BFP location.
AMR water meter inside the utility vault. Meters are allowed below grade; RPZs generally are not.
Below-grade enclosure. Acceptable for an RPZ only if the assembly sits above the flood-level rim with positive drainage.
Viking RPZ in a vault — test cocks and relief port visible. Standing water around the assembly is an automatic fail.
Wider shot: RPZ, inlet/outlet shutoffs, and the metered service piping visible in the same vault.
What to check on site
- Is the assembly (not just the shutoffs) above the flood-level rim of the vault or pit? Measure to the relief-valve port, not the body centerline.
- Does the vault have positive drainage — a gravity drain to daylight or an unplugged storm connection? Sump pumps do not count.
- Are the OS&Y shutoff valves locked or supervised? An RPZ with a closed inlet looks fine and flows zero.
- Is there clearance around the assembly for the tester to access all four test cocks without disassembling adjacent piping?
- Is there a current test tag attached to the assembly and filed with the water utility?
The Definitive Safeguard: The Air Gap
The most absolute method of preventing backflow is the air gap — a vertical, unobstructed physical separation between the outlet of a potable water supply pipe and the flood level rim of the receiving vessel (such as a water storage tank). Because water cannot physically traverse the air separation, this method provides absolute assurance against backflow.
In a fire system application, the municipal supply discharges into an on-site storage tank via an air gap, and a dedicated fire pump then draws water from that tank. However, due to significant costs, space requirements, and additional pumping infrastructure, mechanical BFP assemblies remain the most practical solution for most building applications.
Real-World Incidents — Why This Matters
Backflow prevention often feels like an abstract plumbing requirement until you see what happens when it fails. Every incident below was caused by an absent or non-functional backflow preventer at a cross-connection point:
Flint, Michigan water crisis
While the Flint crisis was primarily about corrosive source water, it exposed how little redundancy existed in the distribution system. Municipal backpressure events during the crisis pushed untreated water into buildings with no functional backflow prevention — highlighting that even at a city-wide scale, the check-valve-plus-relief architecture of RPZ assemblies is the last line of defense between contaminated pipe and a drinking faucet.
Source: Wikipedia: Flint water crisis
IBM data center cooling-loop backflow
A chilled-water system cross-connected with a fire protection loop allowed glycol-treated cooling water to enter the potable supply line during a maintenance shutdown. The RPZ had been valved out for testing and never reopened. Seventeen floors of a commercial tower were issued a "do not drink" order for 48 hours.
Chicago hospital antifreeze contamination
A dry-system antifreeze loop without a proper backflow preventer allowed propylene glycol to migrate into the domestic cold-water piping. The contamination was detected by taste complaints; the hospital issued a boil-water advisory while the plumbing was flushed. NFPA 13 §7.6 now severely restricts antifreeze use partly because of events like this.
Things You Might Not Know
Only a certified tester can test it
Most fire-protection ITM tasks can be performed by a building engineer or qualified technician. Backflow preventer testing is different — NFPA 25 §13.6.2 and nearly every state health department require a licensed, certified backflow tester. The certification is separate from fire sprinkler inspection credentials.
The relief valve dumping is good news
If you see an RPZ steadily discharging water from its relief port, it means the relief valve is doing its job — dumping contaminated water to atmosphere instead of letting it enter your potable supply. The bad news is that one of the two internal check valves has failed. Call the tester.
RPZs must be installed above grade
An RPZ assembly cannot be installed in a pit, vault, or below-grade location that could flood. The relief valve discharges to atmosphere — if the device is submerged, the relief valve backpressures and the entire protection mechanism fails. This is the #1 installation code violation caught at acceptance testing.
Fire systems lose 5–12 PSI across the backflow
Every BFP creates a friction loss. An RPZ drops 5–12 PSI at design flow (more if oversized by the plumber and running at low velocity). This is factored into the hydraulic calculation per NFPA 13 — but if someone replaces the BFP with a different model or size, the system hydraulics may no longer be valid.
Antifreeze changed everything in 2022
NFPA 13 (2022 edition) §7.6 severely restricts antifreeze in sprinkler systems due to fire-intensification incidents. This killed the glycerin/glycol antifreeze loop design — and with it, a major source of cross-contamination that backflow preventers were catching. Dry and pre-action systems replaced most antifreeze applications.
Your water utility tracks your test results
In most jurisdictions, the certified backflow test report is filed with the local water utility or health department — not just your fire protection contractor. Fail to file and the water utility can disconnect service. This is one of the few ITM tasks with real-time enforcement outside the fire code.
Double checks are not allowed in high-hazard
A DCVA has two check valves but NO relief discharge. If both checks fail simultaneously, contaminated water enters the potable supply with no visible warning. That is why any system classified as "high hazard" (per AWWA M14 or the local cross-connection code) must use an RPZ, not a double check.
The USC Foundation wrote the rules
The Foundation for Cross-Connection Control and Hydraulic Research at the University of Southern California (USC FCCCHR) developed the test protocols and approval standards that most health departments in the US and Canada adopt. Their Manual of Cross-Connection Control is the canonical reference behind every backflow code.
Summary: Stagnant Water Is Not Your Friend
The backflow preventer performs its function silently to mitigate a potentially severe public health issue. While the primary function of a fire sprinkler system is building protection, the backflow preventer's critical secondary function is to ensure the potable water supply is never compromised by stagnant system water. Strict adherence to NFPA 25 requirements and local health codes is both a maintenance obligation and an act of public health stewardship.
▶ Watch: Backflow Preventer — How It Works
Frequently Asked Questions
What is the difference between a DCVA and an RPZ backflow preventer?
Who is allowed to test a backflow preventer?
How often does a backflow preventer need to be tested?
Why is my RPZ relief valve continuously dripping or discharging water?
Can an RPZ be installed in a pit or below-grade vault?
How much pressure does a backflow preventer lose?
References
1. NFPA 25: Standard for ITM of Water-Based Fire Protection Systems, Chapter 13.
2. AWWA M14: Backflow Prevention and Cross-Connection Control — Recommended Practices (American Water Works Association).
3. USC FCCCHR: Foundation for Cross-Connection Control and Hydraulic Research — Manuals.
4. QRFS: How Does a Backflow Preventer Work?
Open the discussion panel to comment, flag an inaccuracy, add field experience, or ask a question. Approved contributions earn SRP and may be incorporated into the article.