Rapid shutdown is the requirement most likely to be discovered late and paid for twice. It is not a performance feature and it does not protect equipment — it exists so that someone working on a roof during a fire is not working around live DC conductors. Because it changes what gets bought as much as how it gets installed, it belongs in the design, not in the punch list. In US installations this is codified in NEC 690.12.
This page is for installers, EPCs and the inspectors and authorities they have to satisfy, on projects where the array sits on a building. It covers what the requirement asks for, the concept that actually decides the design, the two ways to comply, what it adds to the bill of materials, and the questions worth settling with the authority before anything is ordered.
What rapid shutdown is for
A photovoltaic array is energised whenever there is light. There is no switch on the roof that makes it safe, and unlike an AC circuit, opening one conductor does not make the rest of it safe to touch. For a firefighter cutting a roof or working around an array, that is the hazard the requirement addresses.
Two things follow from that, and both cause confusion:
- It is about conductor voltage after initiation, not about shutting the plant down. The array can still be producing; the requirement is that the conductors a person might contact are brought to a low voltage quickly.
- It is not the same as anti-islanding. Anti-islanding is about the inverter disconnecting from the grid when the grid fails. Rapid shutdown is about the DC side on the building. They are tested separately and documented separately.
What the requirement asks for
In US practice the requirement sits in the electrical code for photovoltaic systems on buildings, and the commonly cited target is that controlled conductors outside the array boundary be brought to no more than 30 volts within 30 seconds of the initiator being operated.
⚠️ Two caveats that matter more than the number:
- The edition in force is decided locally. States and cities adopt the electrical code on their own timetable and sometimes with amendments, and the wording has changed between editions. The figure above is the one most often quoted, not a substitute for the text your authority enforces.
- The authority has the last word on the arrangement. Where the initiator goes, how it is labelled, and which conductors must be controlled are all questions the reviewing authority answers for that address.
Treating either of those as settled before the first conversation is how equipment gets replaced on site.
The concept that decides the design: the array boundary
Recent editions define a boundary around the array — a short distance measured outward from the module edge in any direction. Conductors inside that boundary are not required to be controlled; conductors outside it are.
This single definition is what makes two very different designs possible. If the electronics that reduce the voltage sit at the module, everything beyond the module is controlled and the boundary question is mostly settled by the equipment. If the electronics sit at the array or at the inverter, then the run from the array to that point is a controlled conductor and has to be dealt with in the design.
So the practical question is not “do we need rapid shutdown” — it is where does the controlled boundary fall on this roof, and what is between it and the inverter.
Two ways to comply
Reference table
Swipe horizontally to view all columns →
| Approach | How it works | Where it suits | What to watch |
|---|---|---|---|
| Module-level electronics | Each module has an attached device that limits its output when the initiator is operated | Residential and complex roofs; shaded or multi-orientation layouts | One device per module means more items to procure and to replace later |
| Array-level control | A listed hazard control system or rapid shutdown device at the array or inverter end | Large open commercial roofs with long, uniform strings | The conductors between modules and the device are inside the boundary — the layout has to respect that |
Both are recognised routes. The choice is usually made by roof geometry, string layout and what the reviewing authority has accepted on comparable jobs, rather than by preference.
What it adds to the bill of materials
Whichever route is taken, three items appear that would not otherwise be on the order:
- The shutdown equipment itself — module-level devices, or the array-level control device and its listing documentation.
- A listed initiator and its enclosure — with a location agreed with the authority, which is a wiring and siting item, not a formality.
- Labels and markings — at the initiator, at the service equipment and at the disconnect, as the authority specifies.
The second item is the one that gets missed in quotes, because it is a building-side item rather than an array-side one. Where it is discovered late it is a change order with a site visit attached.
Where the initiator goes, and why it is not your call alone
The initiator has to be somewhere a first responder will find without instruction — in practice at or near the service equipment or metering, at a readily accessible location. Authorities differ on the detail, and some specify it explicitly.
Confirming the location before the conduit is run is worth more than any other five minutes on the project. Moving it afterwards means relocating a device, its enclosure and its wiring.
Where projects fail inspection
The listing does not cover the configuration installed. A hazard control system or module-level device is listed for a specific arrangement. Mixing a listed device with a layout it was not evaluated for is the most common rejection, and it is not visible on a drawing.
The initiator location was never confirmed. The system works, the voltage drops within the time, and the inspection still fails because the switch is not where the authority expects it.
Labels are missing or wrong. Marking requirements are specific about text and placement, and they are checked at the same visit as everything else.
Nobody tested it under load. A rapid shutdown function that has only been operated with the array idle has not been demonstrated. It belongs in the commissioning sequence alongside anti-islanding, not after it.
What to settle before ordering
Four questions, and the design stops changing:
- Which edition is enforced at this address, and with what amendments?
- Where does the authority want the initiator, and what labelling does it require?
- Which route has it accepted on comparable roofs — module-level or array-level control?
- What documentation does it want at inspection — listing reports, a one-line, a witnessed test?
All four are answerable in one conversation, and every one of them is expensive to answer after delivery.
What to hand over at commissioning
Reference table
Swipe horizontally to view all columns →
| Item | Why it is asked for |
|---|---|
| Listing documentation for the shutdown equipment | Shows the installed configuration is the one evaluated |
| One-line showing the controlled conductors | Lets a reviewer trace what is and is not controlled |
| Photograph of the initiator and its labels | Confirms the as-built location matches what was approved |
| Record of the shutdown test, with the measured result | Demonstrates the time and voltage rather than asserting them |
The fourth row is the one that ends arguments. A recorded measurement settles it; a statement of compliance does not.
How this fits the rest of the project
Rapid shutdown is a design input, not a bolt-on, and it touches three other places on this site. The equipment it attaches to is covered by the module and inverter categories. The grid-side functions it is confused with — anti-islanding and grid support settings — are set out in the grid connection guide. And the sequence in which it has to be tested is part of the commissioning checklist.
For the roof context these requirements usually apply to, see commercial rooftop solar; the documentation set expected on US projects is listed under resources.
Requirements are edition-specific and authority-specific, and they are confirmed per project rather than assumed. If you are pricing a rooftop array, send the roof layout and the enforcing authority, and the shutdown arrangement can be specified against the code edition in force.
BUYER CHECKLIST
Buyer considerations for this scope
Which edition and which amendments, at this address?
Rapid shutdown wording has changed between code editions and adoption is local. Ask the enforcing authority which edition and which amendments apply before the design is fixed, because that answer decides which conductors have to be controlled and where the initiator goes.
Is the listing for the configuration we are actually installing?
A hazard control device or a module-level device is listed for a specific arrangement. Ask for the listing report and match it to the layout on the drawing, including string length and conductor routing. A listed device in an unlisted arrangement is the most common rejection, and it is not visible on a drawing.
Who tests it, and is the result recorded?
Rapid shutdown has to be demonstrated with the array producing, not operated while the array is idle. Put it in the commissioning sequence alongside anti-islanding, and require a recorded measurement of the time and the voltage. A recorded result settles a dispute; a statement of compliance does not.
PRACTICAL ANSWERS
Questions buyers ask about this
Is rapid shutdown the same as anti-islanding?
No. Anti-islanding is the inverter disconnecting from the grid when the grid fails, which is a grid-side function. Rapid shutdown brings the DC conductors on the building down to a low voltage so that someone working on the roof is not working around live conductors. They are tested separately and documented separately.
Which code edition applies to our project?
The one adopted by the state or city at that address, sometimes with local amendments. Editions are adopted on different timetables and the wording has changed between them, so this has to be confirmed with the enforcing authority for the specific address rather than assumed from a national edition.
Do we have to use module-level electronics?
Not necessarily. Module-level devices are one recognised route; a listed hazard control system or rapid shutdown device at the array or inverter end is the other. Which is appropriate depends on the roof geometry, the string layout, and what the authority has accepted on comparable roofs.
What causes a rapid shutdown inspection to fail?
In practice four things: a listing that does not cover the configuration actually installed, an initiator location that was never confirmed with the authority, missing or incorrect labels, and a shutdown function that was never tested with the array producing. All four are settled before ordering rather than at inspection.
EXPLORE FURTHER