TL;DR: IEC 62619 compliance without a documented hazard identification matrix and FMEA scoring framework is a certification on paper — not a functional safety system.
TL;DR: In our review of 31 supplier safety dossiers over 18 months, only 9 included an FMEA with RPN scores above the discard threshold of 125 — the rest had blank or placeholder severity columns.
Hazard Identification Under IEC 62619 — What the Standard Actually Requires vs. What Factories Submit #
Buyers often conflate “IEC 62619 certified” with “safe product.” The standard’s Clause 5.3 on hazard identification is where those two things either converge or diverge completely. What IEC 62619:2022 actually mandates is a structured hazard identification process covering electrical, thermal, mechanical, chemical, and environmental failure modes — documented before the design is finalized, not retrofitted for the audit.
What factories typically submit: a two-page checklist with checkmarks next to generic hazard categories, zero RPN scoring, and no traceability to specific cell chemistry or pack architecture. We’ve flagged this in what our team internally tracks as the QSA-04 (Quality System Assessment, Document Tier 4) review — it’s the first thing we pull in a supplier safety audit because it reveals whether the safety system was built or assembled for appearances.
The distinction matters operationally. A hazard identification matrix built on real FMEA methodology assigns severity (S), occurrence (O), and detectability (D) scores to each failure mode, producing an RPN. Any mode scoring above 125 requires a mitigation action before sign-off. A checkbox list provides no such trigger.
For buyers sourcing LFP or NMC packs for industrial applications, the document to request first is not the certificate — it’s the hazard identification record with revision history. If it was created the week before the audit, the revision date will tell you everything.
Head-to-Head: FMEA Rigor Across Chinese Supplier Tiers #
Across our 2024 review of 14 Shenzhen and Dongguan-area pack manufacturers, FMEA documentation quality split cleanly into three tiers. The table below reflects what we actually observed, not theoretical categories.
| Criterion | Tier 1 (3 suppliers) | Tier 2 (7 suppliers) | Tier 3 (4 suppliers) |
|---|---|---|---|
| FMEA methodology | IEC 60812 / AIAG-based, full RPN | Partial scoring, S×O only | Checklist or missing entirely |
| Thermal runaway failure mode coverage | All cells + inter-cell propagation | Single-cell only | Not addressed |
| BMS failure modes documented | ≥12 modes per design | 4–6 modes | 0–2 modes |
| Mitigation actions with verification | Linked to test records | Listed, unverified | Not present |
| Revision traceability | Full revision history | First-issue only | None |
Supplier FMEA quality assessment, 14 manufacturers, Shenzhen/Dongguan region, H1–H2 2024.
Tier 2 is where most buyers land when sourcing through trading companies or mid-range pack houses — and Tier 2 is where field failures actually concentrate. Partial RPN scoring without detectability weighting systematically underestimates failure modes that are difficult to catch in QC: BMS firmware faults, cell internal resistance drift, and thermal sensor miscalibration.
For most industrial applications above 5 kWh, I’d prioritize a Tier 1 supplier even at a 12–18% unit cost premium. The premium disappears quickly against the cost of a field recall or an incident investigation. For telecom backup or off-grid residential below 3 kWh, Tier 2 suppliers with strong incoming cell inspection records can work — provided you run your own abbreviated FMEA before final design lock.
Tier 3 is not a sourcing option for any serious industrial deployment. The absence of thermal runaway propagation analysis alone creates regulatory exposure under the UN 38.3 transport safety standard and disqualifies the product from most European market certifications.
The Overlooked Variable: Emergency Response Procedure Alignment with Local Jurisdiction #
FMEA and hazard matrices get the attention. Emergency response procedures (ERPs) get treated as a compliance formality. That asymmetry is a sourcing risk that doesn’t show up on any checklist.
IEC 62619:2022 Clause 7.5 requires that system documentation include emergency procedures for thermal events, electrolyte exposure, and electrical faults. What the standard does not specify is that those procedures must align with the regulatory requirements of your deployment jurisdiction — OSHA 29 CFR 1910.120 for US industrial sites, ATEX/DSEAR for EU explosive atmosphere environments, or local fire authority requirements for battery room permitting.
A Tier 2 supplier in Dongguan will deliver an ERP written for Chinese regulatory context. That document may be technically competent under GB/T 36276 but functionally non-compliant for a German industrial facility operating under DIN EN IEC 62619 with fire authority oversight requirements.
We’ve seen this create real delays: a South American integrator sourced 48V 200Ah rack systems from a Shenzhen factory with legitimate IEC 62619 certification. Local fire authority review rejected the ERP because it referenced water-based suppression for lithium cells in a format incompatible with the jurisdiction’s mandatory dry-chemical protocol. Retrofitting the documentation and re-submitting for approval added 11 weeks to the project timeline and roughly $14,000 in consulting and translation costs.
The sourcing implication: ERP localization should be in the contract as a deliverable, not assumed from the certification. Ask the supplier specifically whether their ERP template has been adapted for your deployment region. Three of our vetted Tier 1 suppliers have jurisdiction-specific ERP variants on file. None of our Tier 3 contacts do.
This intersects directly with PPE requirements. IEC 62619 references appropriate PPE for handling but defers to local occupational safety standards for specification. A buyer deploying in the EU needs PPE requirements aligned with EN 420 (gloves) and EN 166 (eye protection) — not just a generic “wear gloves and goggles” statement. Build that specification gap into your incoming documentation review.
Implementation Notes — What to Watch for After You Select a Supplier #
Once you’ve selected a supplier on safety documentation merit, the incoming inspection phase is where paper commitments get tested against hardware reality. Three focus areas matter most in the first three shipments.
First, verify BMS protection thresholds against the FMEA. The FMEA should specify OVP, UVP, OTP, and short-circuit response times as mitigation actions for identified failure modes. Pull the BMS parameter file from the first production unit and confirm the values match. A mismatch — even 50mV on OVP — means the FMEA was written independently of the actual BMS configuration, which invalidates the hazard mitigation logic entirely.
Second, check thermistor placement against the thermal model. Thermal runaway risk analysis in a properly constructed FMEA identifies the highest-temperature cell position under worst-case discharge rate. The thermistor should be physically located at or adjacent to that position. In our incoming inspection work, we’ve found misplaced thermistors in roughly one-third of first-article units from new suppliers — the sensor is positioned for assembly convenience, not thermal worst-case coverage.
Third, request the cell-level traceability records for the first production lot. IEC 62619 Clause 6.2 requires traceability from system to cell level. A supplier who provides these records quickly and in a consistent format has a real quality system. A supplier who takes more than 5 business days to pull lot-level cell records for a 10-unit shipment is operating without functional traceability, regardless of what the certificate says.
Qualification timeline recommendation: run a 90-day acceptance window covering three shipments before scaling volume. First-shipment anomalies that aren’t corrected by shipment three are structural, not incidental.
See the related Battery Pack Design documentation for cell-to-pack traceability requirements, and review BMS Engineering resources for BMS parameter verification methods applicable to IEC 62619 compliance work.
Sourcing Guidance for Buyers #
When evaluating Chinese suppliers against IEC 62619 safety and risk assessment requirements, the first document to request is the FMEA record with RPN scoring — not the certificate itself. A certificate number can be verified through the issuing body; an FMEA cannot be fabricated convincingly without genuine engineering effort. Absence of a proper FMEA, or an FMEA that covers fewer than 8 failure modes for a multi-cell pack, indicates the safety design process was not executed to standard depth.
The qualification red flag specific to this category: any supplier who cannot identify which FMEA revision was current at the time of certification. Certification bodies audit a specific design revision. If the supplier has revised the pack design post-certification without updating the FMEA and re-submitting for delta assessment, the certificate no longer covers the product you’re buying. We’ve logged this discrepancy in 4 of the 14 suppliers reviewed in our 2024 audit cycle.
For incoming inspection, a practical first step is dimensional and parametric verification of the BMS protection thresholds against the FMEA mitigation specifications. Use a CAN bus or UART interface to pull the live BMS parameter table from at minimum 3 units per incoming lot of 20 or fewer. Compare OVP, UVP, OCP, and OTP setpoints against the FMEA table. Tolerance for deviation: zero. Any discrepancy between the FMEA mitigation specification and the deployed BMS parameters should be flagged as a nonconformance requiring supplier response before lot acceptance.
Published by compactbess.com Technical Team | Request a sourcing consultation
