EN 12845 Annex F — Additional Reliability Measures

The standard requirements give minimum safety. Annex F is the package of additional layers you reach for when the insurer or client says "I want to eliminate every single point of failure": twin tanks, N+1 pumps, dual power, supervised valves, twin systems.

A pharmaceutical plant lost sprinkler protection during a two-hour unplanned power cut. There was a single electric pump, and the generator failed to pick up — it had just come back from maintenance without its fan belt refitted. Nothing happened, but the insurer's report recorded missing Annex F redundancy: no N+1 pump, no dual power supply. The upgrade was made a condition of renewal — a diesel pump, a separate tank and supervised valves. Adding that redundancy at design stage would have cost a fraction of the retrofit; reliability applied late costs several times as much.

Annex F — layers of reliability

Pump redundancy

• Standard: one duty pump
• N+1: one duty plus one standby, each meeting the design demand
• 2N: two separate full-capacity pumps, each independent
• 2N+1: two plus a spare, for ultra-critical facilities

The standby pump should run from a different energy source — typically mains electric duty with diesel standby. Two electric or two diesel pumps leave a shared single point of failure.

Dual water supplies

• Twin tanks, each at full design capacity
• Tank plus town main, where main pressure is adequate
• Tank plus borehole, subject to a high-yield well test
• Tank plus a second pump station in a separate shaft

Tanks are cross-connected through isolation valves, so that one stays in service while the other is cleaned or inspected.

Dual electrical supplies

• Two separate incoming supplies to the pump controller, ideally from different transformers and distribution routes
• An automatic transfer switch changing over in under 10 s
• A diesel generator on automatic start, with at least 8 hours of fuel
• A UPS for the control circuit only — it does not carry the pump load

Supervised valves

All stop, drain and alarm test valves monitored by position switches:

• Normally open; an alarm if closed
• A specific panel message such as "Z3 Stop Valve Closed"
• Mechanical locking and electrical supervision together
• Annual functional testing of the supervision circuit

Twin risers

This overlaps the high-rise requirement of Annex E, but it also applies to a high-value single-storey facility. Two risers looped together so each zone is fed from both.

Monitoring and alarm transmission

• Direct connection to the fire service
• A 24/7 monitoring centre contract
• SMS and email emergency notification
• A dual transmission path — analogue plus IP, or GSM as backup

Choosing a reliability level

Facility type	Typical Annex F level	Additional cost over standard
Standard warehouse (LH/OH)	—	0 %
Moderate-risk industry (HHP)	N+1 pump, supervised valves	15–25 %
High risk (HHS, chemical)	N+1 plus twin tanks plus dual power	30–50 %
Data centre, pharmaceutical	2N pumps plus twin risers plus supervision	50–80 %
Nuclear, critical defence	Twin system, two fully independent installations	100–150 %

Field error — N+1 pumps, but a single tank

A data centre had an N+1 pump arrangement — one electric, one diesel — but a single tank feeding both. In year five, algal contamination was found and the tank was drained for four days of cleaning. During that period there were two pumps and no water. The impairment measures were applied rigorously and nothing happened, but the insurer recorded a single-tank supply as an Annex F breach. Redundancy has to be applied to the whole chain, not one component of it.

Annex F versus extra design margin

Some designers substitute a bigger pump and a bigger tank for redundancy. That is a mistake:

• If the single pump fails, capacity is irrelevant — flow is zero
• A larger tank may take two weeks to clean, with no protection throughout
• If the single electrical supply fails, the result is again zero

Redundancy is duplication, not enlargement. Annex F sets that principle out clause by clause.

The twin system — ultra reliability

Two fully independent sprinkler installations:

• System A: tank A, pump A, riser A, sprinkler network A
• System B: tank B, pump B, riser B, sprinkler network B
• Each sprinkler fed from both networks through looped connections
• If one system fails completely, the other protects alone

Cost rises by 80–100 % over the base system. It is standard in nuclear plants, defence facilities and nationally critical infrastructure.

Insurance policies and Annex F

Highly Protected Risk policy conditions reference the Annex F provisions directly:

• 2N pumps mandatory
• Seven to ten independent tests each year
• Supervised valves throughout the system
• Direct fire service connection

HPR-rated facilities pay 20–40 % lower premiums than a standard sprinklered facility, against a 30–50 % higher initial investment. The investment typically amortises in three to five years, with net gain thereafter.

Comparison with NFPA

NFPA does not offer a single equivalent package, but each core standard has its high-risk provisions: NFPA 20 for N+1 pumps in high-rise buildings, NFPA 13 for supervised valves, NFPA 25 for standby water supplies. FM Global data sheets add the HPR requirements on top of NFPA. The overlap between Annex F and the FM Global data sheets is high, and facilities applying both attract the most favourable policy terms.

Link to Turkish regulation

BYKHY's mandatory sprinkler scope delivers baseline safety and does not itself write in the Annex F layers. However, additional redundancy is addressed for high buildings and for critical infrastructure such as airports, hospitals and government buildings. In practice the Annex F requirements enter through the contract at the insurer's or client's request. A high-risk facility in Turkey — pharmaceutical, chemical, data centre — will not have its sprinkler system accepted without an insurer audit, and how much of Annex F has been applied determines the premium.

Quick check list — assessing your Annex F level

• Pumps: single, N+1, 2N or 2N+1?
• Water supply: single tank, twin tanks, tank plus main, or twin system?
• Electrical: single supply, dual supply, plus diesel, plus UPS?
• Stop valves: mechanically locked, supervised, or both?
• Risers: single, twin looped, or twin system?
• Alarm transmission: direct fire service, monitoring centre, SMS?
• The full-year test calendar (weekly, monthly, quarterly, annual) complete.
• Insurer audit report shows no or few deviations.

Frequently Asked Questions

What is the difference between N+1 and 2N?

N+1 means one duty pump plus one standby, each meeting design demand. 2N means two fully independent full-capacity pumps, so no shared component can take both down.

Is a bigger pump a substitute for a second pump?

No. Redundancy is duplication, not enlargement. If the single pump fails, its capacity is irrelevant — the flow is zero.

Does N+1 pumping fix a single-tank supply?

No. Twin pumps on one tank leave you with no water while that tank is cleaned. Redundancy has to apply to the whole chain: supply, pumps, power and risers.

Is Annex F worth the cost?

For high-value risks, usually. HPR-rated facilities typically pay 20–40 % lower premiums against a 30–50 % higher initial investment, amortising in three to five years.

SprinkCalc — Fire Sprinkler Design Across Three Standards

SprinkCalc covers hazard classification, design density and area, K-factor selection, water demand and hydraulic calculations for NFPA 13, FM Global and BS EN 12845 in a single iOS app, and exports a professional PDF report.

Download SprinkCalc on the App Store

MEP Calc — 86+ Engineering Calculators

MEP Calc bundles 86+ engineering modules in one iOS app: 21 fire calculations plus heating, cooling, HVAC, plumbing, steam and natural gas.

Download MEP Calc on the App Store