Fire watch documentation during a sprinkler impairment, showing tagged fire protection equipment and patrol verification.

Life Safety Compliance · Impairment Watch · 2026

Fire Watch Log Requirements What Fire Marshals, Insurers, and Courts Expect From an Impairment Watch

Gyula Györfi
Gyula Györfi founder of Trinity Guard®, former police commander, 26 years in law enforcement and security operations
AI Summary Ready

This article explains when fire watch is required during sprinkler impairments, fire alarm outages, and hot work, what a defensible fire watch log must record, how the Authority Having Jurisdiction sets patrol intervals and release conditions, why common paper-log gaps fail scrutiny, and how GPS and QR checkpoint verification can strengthen location and timestamp evidence without replacing AHJ requirements.

Atomic Truth: The Authority Having Jurisdiction, not the standard, sets the final patrol interval, coverage area, and reporting method for a fire watch.

When a sprinkler control valve closes or a fire alarm panel drops into a system-wide trouble condition, the building keeps operating. The protection does not. What fills that gap is a fire watch: trained personnel walking defined rounds at a defined interval until the system is restored to service.

The walking part is straightforward. The part that fails inspections, insurance claims, and depositions is the log.

I spent twenty-six years in law enforcement, rising from patrol sergeant to lieutenant colonel, part of it in command roles responsible for high-consequence sites. Police work teaches you a reflex that never fully switches off: everything you do today may have to be reconstructed by someone else years from now, and the only version that survives is the one that was written down at the time. A fire watch is the same problem in a different uniform. The watch protects the building. The log protects the owner.

This article covers what triggers a fire watch, who sets the rules, what a defensible log entry actually contains, and why the documentation problem in fire watch is the same problem physical security solved years ago with checkpoint verification.

Note on scope: fire code adoption and local amendments vary. Nothing here replaces direction from your Authority Having Jurisdiction. Confirm the interval, coverage, reporting method, and release conditions with them for the specific impairment in front of you.

Three separate rules put a fire watch on your site

Fire watch requirements do not come from one place. They arrive through three different tracks, and knowing which one applies determines what the log has to prove.

1. Water-based system impairment — NFPA 25, Chapter 15

Chapter 15 of NFPA 25 governs impairments to sprinkler systems, standpipes, fire pumps, and other water-based fire protection systems. It distinguishes between a preplanned impairment (a scheduled shutdown for maintenance, testing, or renovation) and an emergency impairment (a ruptured pipe, a failed fire pump, a valve found closed during an inspection).

Both require the same core sequence: an impairment coordinator is designated, the affected equipment is tagged with an impairment tag, the Authority Having Jurisdiction and the insurance carrier are notified, and interim measures are put in place for the duration.

Where the system is out of service beyond the threshold adopted in your jurisdiction — commonly more than 10 hours in a 24-hour period — the interim measure is either evacuation of the unprotected area or an approved fire watch. In an occupied commercial building, evacuation is rarely the practical option. The fire watch is.

2. Fire alarm and signaling impairment — NFPA 72 and NFPA 101

A fire alarm system can be impaired without anything visibly breaking. A panel in trouble condition, a monitoring account that has stopped receiving supervisory signals, a system installation still in progress, or a power outage affecting life safety all count.

The commonly adopted threshold here is shorter than for sprinklers — often more than 4 hours out of service in a 24-hour period. NFPA 101, the Life Safety Code, is what creates the underlying duty to respond to the impairment; NFPA 72 defines what constitutes the impairment and what the AHJ expects while the system is down.

3. Hot work — NFPA 51B and OSHA

Hot work follows a parallel track with its own paperwork. A hot work permit is issued by a permit-authorizing individual, and a fire watch is posted where combustible material within roughly 35 feet cannot be removed, covered with flame-resistant covers, or otherwise shielded.

OSHA 29 CFR 1910.252 covers general industry welding, cutting, and brazing; 29 CFR 1915.504 covers shipyard hot work. Both require the fire watch person to be dedicated solely to fire watch duties and to have extinguishing equipment immediately available.

The watch does not end when the torch goes off. Depending on the code edition and the AHJ, it continues for a minimum of 30 to 60 minutes after hot work concludes, and substantially longer — sometimes three to four hours — where walls, partitions, ceilings, or concealed spaces were penetrated.

The AHJ writes the final rule

The standards set a floor. The Authority Having Jurisdiction — typically the fire marshal, fire prevention bureau, or building department — sets what actually applies to your building.

The AHJ determines the patrol interval, the coverage area, how the watch reports, and when it can be released. Fifteen-minute rounds are common for high-risk hot work and open-flame operations. Thirty minutes is the most frequently required interval during a sprinkler impairment. Sixty minutes appears in lower-hazard occupancies. None of these is a universal number, and a local amendment can be stricter than the national standard.

Some jurisdictions also regulate who is allowed to stand the watch. In New York City, for example, fire watch personnel need an FDNY Certificate of Fitness (F-01). Assigning an untrained employee there is not a shortcut; it is a violation.

Your insurance carrier runs a parallel track. Property policies frequently carry their own notification and documentation conditions for impairments, and those conditions do not disappear because the AHJ was satisfied. Notify both, and record the time, method, and recipient of each notification.

What a defensible log entry contains

A fire watch log entry answers six questions. An entry missing any of them is a gap an inspector will find.

  1. Who — name of the person who walked the round, with initials or signature
  2. When — date and exact time the round started and finished
  3. Where — the specific areas, floors, and zones covered on that round
  4. What was observed — smoke, odor, unusual heat, blocked egress, panel status, active hot work, anything abnormal
  5. What was done — corrective action taken, or a note that conditions were normal
  6. Who was told — notifications made, to whom, at what time

Two additional records surround the entries themselves. At shift change, the outgoing and incoming watch both sign to establish continuity of coverage. At the end, a termination record closes the watch: the time the system was verified as restored to service, who confirmed it, and the AHJ's release.

Five gaps that get a fire watch log rejected

Retroactive reconstruction. Entries written from memory at the end of a shift are the single most common finding. They read as complete and prove nothing. Documentation has to be created during or immediately after the round.

Metronome timestamps. Rounds logged at exactly :00 and :30 for twelve straight hours are a pattern investigators know well. Real rounds vary by a few minutes. Perfectly regular entries suggest a pen, not a patrol.

Coverage gaps. Concealed spaces, roof levels, mechanical rooms, riser rooms, and zones adjacent to the impaired area are routinely left off the route. A gap in coverage is a gap in compliance, and it is easy to see in a log that never mentions the space.

Non-dedicated personnel. A maintenance tech doing fire watch "while also" running work orders invalidates the watch under OSHA and most AHJ interpretations. The log will show it, because the intervals will slip.

No closeout. The watch runs, then simply stops appearing in the record. There is no restored-to-service verification and no AHJ release. From a compliance standpoint the impairment never formally ended.

Why paper fails three different readers

The fire watch log has three audiences, and each one reads it looking for something different.

The fire marshal reads it for interval compliance and continuity. Were rounds walked at the required frequency, without gaps, for the full duration? Handwriting cannot demonstrate that the person was physically present at the location claimed.

The insurance adjuster reads it for due diligence during the impairment period. If a loss occurs while protection is down, the log is the evidence that the interim measure was real. Reconstructed or incomplete logs are a well-known reason for a claim to stall.

The plaintiff's attorney reads it for weaknesses. In litigation following a fire or an injury, the log becomes an exhibit. Entries with no location proof, no timestamps that can be independently verified, and one person's handwriting throughout do not survive cross-examination well.

The requirement all three share is the same: the round has to be provable, not merely asserted.

Where a fire watch log and a guard tour record are the same document

Read the six questions above again, then read the specification for a patrol verification system. They describe the same artifact.

A fire watch is a patrol with a life-safety scope and a short interval. Physical security has been solving "prove the round actually happened" for decades, first with mechanical watchclocks, then with RFID buttons, and now with GPS and QR checkpoint verification on a phone. The vocabulary differs. The record does not.

Fire watch termPatrol verification equivalent
Patrol area or zoneCheckpoint
Round intervalScheduled patrol task
Log entryTimestamped, location-verified scan record
ObservationIncident report with photo
Missed roundVisible gap in the patrol record
Shift change continuityRecorded shift and patrol history
Termination and restorationPatrol history and incident record for the impairment period

The advantage of borrowing the security-side method is not convenience. It is that a checkpoint scan carries something a signature cannot: independent evidence that a specific person was at a specific place at a specific time. That is exactly the element a handwritten fire watch log is missing when it is challenged.

Standing up an impairment watch on a phone

An impairment does not schedule itself. A valve fails at 11 p.m., the AHJ wants a watch by midnight, and the watch may run for six hours or six weeks. Any method that requires ordering hardware is the wrong method for this job.

A practical setup takes a few minutes:

Place one checkpoint per patrol area. The impaired zone and every adjacent zone, plus stairwells, mechanical and electrical rooms, roof access, concealed space access points, the sprinkler riser room, and the fire alarm control panel.

Use QR at the specific location, not GPS alone. GPS can place someone at the building. It cannot reliably distinguish the seventh floor from the third, and it degrades badly in basements and steel structures. A QR checkpoint fixed at the riser room door proves the riser room door. For an outdoor perimeter or a yard, GPS is the right tool. Most impairment watches need both.

Set the interval as a scheduled patrol task. The scheduled patrol structure makes missed or incomplete rounds visible in the patrol record. A supervisor reviewing the record can see where coverage slipped, and the record itself shows the same thing to an inspector later.

Capture the abnormal through an incident report. Rounds record presence and time. When the officer finds something that has to be documented — a panel in trouble, a missing or altered impairment tag, an obstruction in an egress path, evidence of hot work outside its permit window — that belongs in an incident report with photos attached. A photograph tied to a timestamped report answers questions a line of handwriting cannot.

Confirm the system captures offline. Riser rooms, sub-basements, and stairwells are exactly where signal disappears and exactly where the round matters. Rounds have to record locally and sync when the device reconnects, without the officer doing anything. See Offline Guard Tour System: How GPS Patrol Verification Works Without Signal for how that behaves in practice.

Assemble the impairment file from the patrol history. The AHJ, the carrier, and your own risk file all want the same package: every round, every observation, every notification, and the restoration verification. The patrol history and the incident reports from the impairment period supply the evidence; you compile them into the file alongside your notification records and the restoration confirmation.

If you sell fire watch as a service

For fire watch service providers, the log is not paperwork attached to the deliverable. The log is the deliverable. The client is buying documented compliance for a period of hours or days, and everything else is labor.

That has two commercial consequences.

It settles billing disputes before they start. When an invoice covers 96 hours of continuous watch, a timestamped, location-verified record of every round is a far stronger position than a stack of sign-in sheets.

It differentiates the bid. Facility managers who have been through a rejected log or a contested claim understand the difference immediately, and it is one of the few points in a fire watch proposal where a provider can compete on something other than hourly rate.

The operational requirement is unusual, though: unpredictable start times, short deployments, and sites you have never seen before. That rules out anything requiring installed hardware or a multi-week onboarding, which is why smartphone-based patrol verification fits this service line better than traditional guard tour equipment does. Our guard tour patrol system was built for exactly this pattern, and the setup guides walk through a first site end to end.

Retention: keep the whole impairment file

When the system comes back online, the record does not stop being useful. Keep the complete impairment file together:

  • Impairment classification and scope
  • All notification records with dates, times, and recipients
  • The full fire watch log for the entire duration
  • Restoration verification and the AHJ release
  • Any AHJ or carrier correspondence during the impairment

Store it permanently. A future inspection, a claim that references the impairment window, or a liability question can surface years after the valve was reopened. This is the same discipline that applies to routine patrol records generally, covered in Security Patrol Audit Trail: How Security Companies Prove What Happened.

Frequently asked questions

When is a fire watch required? When a required fire protection system is out of service and the AHJ determines that occupants would otherwise be left unprotected, and during hot work where combustibles cannot be removed or shielded. Commonly adopted thresholds are more than 10 hours in 24 for water-based systems and more than 4 hours in 24 for fire alarm systems, but the AHJ makes the final call for your building.

How often must fire watch rounds be conducted? The AHJ sets the interval. Fifteen minutes is typical for high-risk hot work, thirty minutes for most sprinkler impairments, and sixty minutes in lower-hazard occupancies. Confirm before the watch begins, and log the interval you were directed to use.

Can the fire watch person do other work? No. OSHA and most AHJ interpretations require fire watch personnel to be dedicated solely to fire watch duties. Assigning other tasks invalidates the watch for compliance purposes.

How long must a hot work fire watch continue after the work stops? A minimum of 30 to 60 minutes depending on the code edition and the AHJ, and longer where walls, partitions, ceilings, or concealed spaces were penetrated. Leaving early is one of the most frequently cited failures in post-incident reviews.

Will an AHJ accept a digital fire watch log? AHJs are concerned with content and integrity rather than format. A timestamped, location-verified digital record that captures who, when, where, what was observed, what was done, and who was notified generally exceeds what a paper sheet can demonstrate. Confirm the submission format your AHJ prefers.

Who has to be notified when a system is impaired? At minimum the AHJ and your insurance carrier, plus building occupants where required, and the monitoring company for alarm impairments. Record the time, method, and recipient of every notification.

How long should we keep a fire watch log? Permanently, as part of the impairment file. Claims and liability questions related to an impairment period can arise long after the system is restored.

Atomic truth statements

A fire watch is proven only by its log; an undocumented round is treated as a round that never happened.

The Authority Having Jurisdiction, not the standard, sets the final patrol interval, coverage area, and reporting method for a fire watch.

Fire watch personnel must be dedicated solely to fire watch duties; assigning other work invalidates the watch for compliance purposes.

A defensible fire watch log entry records six elements: who, when, where, what was observed, what was done, and who was notified.

A fire watch log and a guard tour record are the same artifact under two different names — an interval-based, location-verified record of rounds walked.

Prepare before the next impairment

Your next impairment will not schedule itself.

Set up checkpoints, intervals, and offline capture before the valve closes, so the watch starts documented from the first round.

No credit card required. No onboarding call needed.