ISO 10418:1993

A5.1 Description. Atmospheric vessels are used for inflow unless fill operations are con-
processing and temporary storage of liquid hydrocar- tinuously attended or Overflow is
bons. Some applications require heat input to the ves-
diverted to other process components.
sel. This discussion covers only the effects of heat input
An LSL Sensor should be provided to
to the process section of an atmospheric vessel. Heating
equipment is covered in Sections A6 and AlO. Recom- shut off the heat Source if the vessel has
an immersed heating element subject to
mended safety devices for typical atmospheric vessels
excess temperature. An LSL Sensor
used in a production process System are shown in Fig-
ure A5. Vessels such as those used for diese1 fuel and should be provided to shut off inflow as
Chemical storage which are ancillary to and not part of protection from leaks unless liquid level
is not automatically maintained in the
the production process System are not covered by this
RP. However, some of the recommendations contained vessel. A containment System to collect
in Appendix Cl, “Emergency Support Systems,” might leakage is preferable to a low level sen-
so? when normal inflow of liquids would
be applicable when installing such equipment.
preclude the sensor ’s detection of a leak.
A5.2 Safety Analysis.
(3) Temperature Safety Devices (TSH). If
a. The Safety Analysis Table (SAT) for
an atmospheric vessel is heated, a TSH
atmospheric vessels is presented in SAT
Sensor should be provided to shut off the
Table A5.1. The undesirable events that
Source of heat when process fluid tem-
tan affect an atmospheric vessel are over-
perature becomes excessive.
pressure, underpressure, overflow, leak,
and excess temperature if the vessel is
A5.3 Safety Device Location. The recommended
heated. location for safety devices is given below:
b. The Safety Analysis Checklist (SAC) for
a. Pressure Safety Devices (Vent and PSV).
atmospheric vessels is presented in SAC
The Vent and PSV should be located on the
Table A5.2.
top (highest practical elevation in the vapor
section) of atmospheric vessels.
(1) Pressure Safety Devices (Vent and
PSV). An atmospheric vessel should be b. Level Safety Devices (LSH and LSL).
protected from overpressure and under- The LSH Sensor should be located at a
pressure by an adequately-sized vent sticient distance above the highest op-
System. API Standard 2000 may be erating liquid level to prevent nuisance
used as a guide for sizing vent Systems.
shutdowns but with adequate vessel vol-
A flame arrestor should be included in
ume above the LSH Sensor to contain
the vent System to prevent flame migra-
liquid inflow during shut in. The LSL
tion back to the vessel. A pressure-
should be located at a suficient distance
vacuum relief device (PSV) or a second
below the lowest operating liquid level to
vent should be installed to protect the
avoid nuisance shutdowns. In fire tube heated
vessel in case the primary vent control
components, the LSL should be located above
device(s) fouls or otherwise obstructs
the fire tubes. The LSH and LSL Sensors
flow. The PSV or second vent is not
should preferably be located in external
required when (1) a pressure vessel not
columns for ease of testing without interrupt-
subject to collapse is used in atmos-
ing the process. However, internally mounted
pheric Service or (2) an atmospheric
Sensors are also acceptable as discussed in Sec.
vessel has no pressure sources (except
A4.3.b.
blanket gas) piped to it. A blanket gas
c. Temperature Safety Devices (TSH). The
System may be desirable to exclude air
TSH Sensors, other than fusible or skin
from an atmospheric vessel.
should be installed in
contact types,
(2) Levei Safety Devices (LSH and LSL).
thermowells for ease of removing and
Protection from liquid Overflow from
testing. The thermowell should be located
an atmospheric vessel should be pro-
for accessibility and should be contin-
vided by a LSH Sensor to shut off
uously immersed in the process fluid.
American Petroleum Institute
FIGURE A5
RECOMMENDED SAFETY DEVICES
ATMOSPHERIC VESSELS
/- FLAME ARRESTOR
VENT
PSV
rD
INLET
AT MOSPjiERIC
TANK
NOTES: -1. TSE designations are symbolic and are not intended to reflect actual location or quantity.
2. If atmospheric vessel is heated, a TSH should be installed.
44 American Petroleum Institute
TABLEA5.2
SAFETY ANALYSIS CHECKLIST (SAC)
ATMOSPHERIC VESSELS
A.5 ATMOSPHERIC VESSELS d. Low Level Sensor (LSL).
1. LSL installed.
a. Vent. 2. Adequate containment System is provided.
1. Vent installed. 3. Liquid level is not automatically maintained
b. Pressure-Vacuum relief device (PSV). in the vessel, and vessel does not have an
immersed heating element subject to excess
1. PSV installed.
temperature.
2. Vessel has second vent capable of handling
maximum gas volume.
4. Component is final vessel in a containment
3. Component is a pressure vessel, not subject to
System designed to collect and direct hydro-
collapse, which operates in atmospheric serv-
carbon liquids to a safe location.
ice and is equipped with an adequately sized
vent.
e. High Temperature Sensor (TSH).
4. Vessel has no pressure sources (except blanket High temperature Sensors are applicable only to
gas) and is equipped with an adequately sized vessels having a heat Source.
ven t.
1. TSH installed.
C. 2. (Deleted in Second Edition.)
High Level Sensor (LSH).
3. Heat Source is incapable of causing excess
1. LSH installed.
2. Fill operations are continuously attended. temperature.
3. Overflow is diverted or contained by other
process components.
SECTION A6
FIRED AND EXHAUST HEATED COMPONENTS
A6.1 Description. Fired and exhaust heated com-
shut down the exhaust Source. A
ponents are used for processing and heating hydrocar-
TSH Sensor is not required on a
bons. Included are both direct and indirect fired atmos-
fired component located in an iso-
pheric and pressure vessels and tube-type heaters
lated area not handling combustibles
equipped with either automatically controlled natura1
other than fuel.
or forced draft burners. Also included are exhaust
(2) Flow Safety Devices (FSL and FSV).
heated components which use exhaust gases from other
When a combustible medium is circu-
equipment such as turbines and engines as a heat
lated through tubes located in the firifg
Source, and which may or may not be supplementary
or exhaust heated chamber, the medium
fired. This section discusses the required protection for
flow rate should be monitored by a FSL
firing equipment of a fired component and for the heat-
Sensor to shut off the fuel supply to a
ing section of exhaust heated components. Protection for
fired component or to divert the exhaust
the process Portion of a fired or exhaust heated compo-
flow from an exhaust heated component.
nent is discussed under the appropriate component.
In this type of component, high tempera-
Recommended safety devices for a typical fired vessel
ture in the medium could occur before
equipped with a natura1 draft burner or a forced draft
being detected by a TSH (medium) sen-
burner are shown in Figures A6.1 and A6.2, respec-
sor located outside the heater. A FSL
tively. Recommended Safety Devices for a typical
Sensor is not required in other types of
exhaust heated component are shown in Figure A6.3.
heaters because the TSH (medium) sen-
sor is located in the medium section and
A.6.2 Safety Analysis.
should immediately detect the high tem-
a. The Safety Analysis Table (SAT) for fired
perature condition. A check valve (FSV)
components with natura1 draft burners is
should be located in tube outlet piping to
presented in SAT Table A6.la: for those
prevent backflow into the fired or heated
with forced draft burners in SAT Table
chamber in the event of tube rupture.
A6.lb; and for exhaust heated components
(3) Pressure Safety Devices (PSH, PSL,
in SAT Table A6.1~. The undesirable events
and PSV). The pressure in the fuel
that tan affect a fired component or sup-
supply line should be monitored by a
plementary fired exhaust heated component
PSH Sensor to shut off the fuel supply to
are excess temperature. direct ignition
the burner. On a forced draft burner, a
Source, excess fuel in the firing chambers,
PSL Sensor should be installed on the
and overpressure. The undesirable events
fuel supply; also, the air intake pressure
that tan affect an exhaust heated compo-
of a forced draft burner should be moni-
nent are excess temperature and over-
tored by a PSL Sensor to shut off the
pressure.
fuel and air supply. An air velocity
b. The Safety Analysis Checklist (SAC) for
device may be used to monitor air
fired and exhaust heated components is pre-
supply in lieu of a PSL Sensor. The PSL
sented in SAC Table A6.2.
Sensor is not required on a natura1 draft
burner because of the low air intake
(1) Temperature Safety Devices (TSH).
pressure. Flow tubes located in the fir-
(a) The medium or process fluid tem-
ing or exhaust heated chamber of a tube
perature in a fired component should
type heater should be protected from
be monitored by a TSH Sensor to
overpressure,
caused by expansion of
shut off the fuel supply and the
the medium or process fluid, by a PSV.
inflow of combustible fluids. If the
component is exhaust heated, the (4) Ignition Safety Devices.
exhaust should be diverted or the (a) The air intake of a natura1 draft
Source of exhaust shut down. A TSH
burner should be equipped with a
Sensor is not required on a steam
flame arrestor to prevent flame mi-
generator protected by a PSH Sensor
gration back through air intake. A
to detect high pressure caused by
flame arrestor is not required on a
high temperature and by a LSL sen-
forced draft burner because the air
sor to detect a low level condition
velocity through the air intake pre-
which could Cause high temperature.
vents flame migration, or the PSL
(b) The flow of combustible medium in
Sensor in the air intake and fan
a closed heat transfer System, where
motor starter interlock shuts off the
the medium is circulated through
air intake.
tubes located in the firing or exhaust (b) The Stack on a natura1 draft burner
heated chamber, should not be shut should be equipped with a Stack
off until the chamber has cooled. An arrestor to prevent spark emission.
ESD System and fire loop should When the fired component is not
immediately shut off medium flow if handling combustibles other than
an uncontrolled fire has occurred in fuel and is located in an isolated
the area or the medium is escaping area, the arrestor is not necessary. A
from a closed System. Stack arrestor is not necessary on a
(c) Temperature in the burner exhaust forced draft burner because the
Stack should be monitored by a TSH higher combustion efficiency pre-
Sensor to shut off the fuel supply and vents carbon build-up.
the inflow of combustible fluids. (c) The motor on a forced draft fan
Temperature in the exhaust heated
should be equipped with a motor
component Stack should be monitored starter interlock to sense motor fail-
by a TSH Sensor to shut off the
ure and shut off the fuel and air
inflow of combustible medium and to
SUPPlY*
(d) The flame in the firing chamber ing. The Sensor should be located in the
should be monitored by a BSL or
medium outlet line as close as practical to
TSL Sensor to detect a flame insuffi-
the heater and should monitor total flow
cient to immediately ignite combus-
through the heater. A check valve (FSV)
tibles entering the firing chamber
should be installed in the tube outlet piping.
and to shut off fuel supply.
c. Pressure Safety Devices (PSH, PSL, and
PSV). A PSL Sensor in the air intake of a
A6.3 Safety Device Location. The recommended
forced draft burner should be located down-
location for safety devices is given below:
stream of the blower. The PSH and PSL
a. Temperature Safety Devices (TSH). Tem-
Sensor in the fuel supply line should be
perature Sensors, other than fusible or skin
located between the last pressure regulator
contact types, should be installed in a
and the fuel control valve. A PSV on the
thermowell for ease of removing and test-
tubes of a tube type heater should be
ing. When the fire tube is immersed, the
located where it cannot be isolated from the
TSH Sensor should be located in the heated
heated section of the tubes.
liquid medium or process fluid. When the
liquid medium or process fluid flows
d. Ignition Safety Devices. The flame and
through tubes within the firing or exhaust
Stack arrestors on fired components should
heated chambers, the TSH Sensor should be
be located to prevent flame emission from
located in the discharge line as close as
the air intake and spark emission from the
practical to the heater and upstream of all
exhaust Stack. The BSL Sensor should be
isolating devices. located in the firing chamber.
A TSH Sensor in the Stack should be
located at the base of the exhaust Stack. A.6.4 Safe Operating Procedures. In addition to
the safety devices indicated in SAC Tables A4.2, A5.2,
b. Flow Safety Devices (FSL and FSV). In
and A6.2. the procedures shown in the Table A6.3 are
a closed heat transfer System with com-
required to safely operate a fired or exhaust heated
bustible medium, a FSL Sensor should be
component.
located in the medium circulating tube pip-
RP14C: Basic Surface Safety Systems For Offshore Production Platforms
FIGURE A6.1
RECOMMENDED SAFETY DEVICES
TYPICAL FIRED VESSEL
(NATURAL DRAFT)
INLET h
2 GAS OUTLET
STACK ARRESTOR
T V
HEATER TREATER LW
4 4
L-FLAME
ARRESTOR
- WATER OUTLET
FUEL GAS
OIL OUTLET
*Refer to Section A4.3b and A5.3b for location of LSL
Sensors in fire tube heated components.
Note: TSE designations are symbolic and are not intended to reflect actual location or quantity.
American Petroleum Institute
FIGURE A6.2
RECOMMENDED SAFETY DEVICES
TYPICAL FIRED VESSEL
(FORCED DRAFT)
\-STACK ARRESTOR
TSE
GLYCOL
TSH
INLET
q
-h
GLYCOL REBOILER
I
BSL
f
, \II I
tiLYC;UL
INLET
OUTLET
MOTOR
INTERLOCK
FUEL GAS
NOTE: TSE designations are symbolic and are not intended to reflect actual locations or quantity.
* Refer to Section A4.3b and A5.3b for location of LSL Sensors in fire tube heated components.
RP14C: Basic Surface Safety Systems For Offshore Production Platforms
FIGURE A6.3
RECOMMENDED SAFETY DEVICES
EXHAUST HEATED COMPONENT
PSV
D
TSE
MEDIUBJ l
INLET
EXHAUST
HEATED
COMPONENT
HEAT so
TURBIN EE
(
ETC.)
TSE designhms am symbolic and arc not intendd to nflect actul kation or quantity.
TABLE A6.la
SAFETY ANALYSIS TABLE (SAT)
FIRED COMPONENTS
NATURAL DRAFT
DETECTABLE PROTECTION
UNDESIRABLE
CONDITION
EVENT
CAUSE AT COMPONENT PRIMARY SECONDARY
Excess Temperature
Excess Fuel High Temperature TSH (Medium TSH (Stack)
or Process)
Low Liquid Level
Low Level LSL TSH (Medium
or Process)
Low Medium Flow Low Flow Rate
FSL TSH (Medium
or Stack)
Limited Heat Transfer High Temperature
TSH (Stack) ESS
Ignition of Medium Leak High Temperature
TSH (Medium ESS
into Firing Chamber
or Stack) and FSV
Direct Ignition Source
Flame Emission from Air Intake
High Temperature Flame ESS
Arrestor
Spark Emission from Exhaust None
Stack ESS
Stack
Arrestor
Excess Fuel in Firing Fuel or Air Supply Control
Flame Failure or BSL or PSH
Chamber
Failure
Low Temperature TSL (Fuel)
Overpressure (Flow Tubes Blocked Outlet and Vaporization
High Pressure PSV (Tube) TSH (Medium)
in Firing Chamber) or Thermal Expansion

TABLE A6.lb
SAFETY ANALYSIS TABLE (SAT)
FIRED COMPONENTS
FORCED DRAFT
DETECTABLE
PROTECTION
T-
UNDESIRARLE
CONDITION
EVENT CAUSE AT COMPONENT PRIMARY
SECONDARY
Excess Tcmpcrature Excess Fuel High Temperature TSH (Medium)
TSH (Stack)
or Process
Low Liquid Level Low Level LSL
TSH (Medium
or Process
and Stack)
Low Medium Flow Lew Flow
FSL TSH (Medium
or Stack)
Limited Heat Transfer High Temperature TSH (Stack) ESS
Ignition of Medium Leak High Temperature TSH (Medium ESS and
into Firing Chamber or Stack) FSV
Direct Ignition Source Flame Emission from Air Intake Low Air Flow PSL (Air Motor
Intake) Starter
Interlock
Excess Fuel in Firing Fuel or Air Supply Control Flame Failure or BSL or
PSL (Air
Failure
Chamber Low Temperature TSL Intake)
Motor Starter
In terlock PSH
& PSL (Fuel)
Overpressure (Flow Tubcs Blocked Ou tlet and High Pressure
PSV (Tube) TSH (Medium)
in Firing Chamber) Vaporization or
Thermal Expansion
TABLE A6.1~
SAFETY ANALYSIS TABLE (SAT)
EXHAUST HEATED COMPONENTS
PROTECTION
DETECTABLE
UNDESIRABLE
CONDITION
EVENT SECONDARY
CAUSE AT COMPONENT PRIMARY
Excess Temperature
Exhaust Gas Control High Temperature TSH (Medium) ESS
Malfunction (Medium)
Low Liquid Level Low Level LSL TSH (Medium)
Low Flow (Medium) Lew Flow FSL TSH (Medium)
Ignition of Medium High Temperature TSH (Stack) ESS
Leak into Heated (Medium or Stack) and FSV
Chamber
Overpressure (Flow
Blocked Outlet and High Pressure PSV (Tube) TSH (Medium)
Tubes in Heated
Vaporization or
Chamber) Thermal Expansion
Note: When supplemental firing is used, component should also be analyzed in accordance with SAT Table A6.la or SAT Table A6.lb
as applicable.
RP14C: Basic Surface Safety Systems For Offshore Production Platforms
TABLE A6.2
SAFETY ANALYSIS CHECKLIST (SAC)
FIRED AND EXHAUST HEATED COMPONENTS
A.6 Fired and Exhaust Heated Components. 2. Component is not a closed heat transfer type in
which a combustible medium flows through
tubes located in the firing or exhaust heated
a. High Temperature Sensor (Medium or Process
chamber.
Fluid) (TSH).
i. Motor Interlock (Forced Draft Fan Motor).
1. TSH installed.
1. Motor Interlock installed.
2. Component is a steam generator protected by a
2. Component is equipped with a natura1 draft
PSH and, if fired, by a LSL.
burner.
3. Component is an indirect water bath heater in
3. Component is exhaust heated without supple-
atmospheric Service and is protected by an LSL.
mental firing.
b. High Temperature Sensor (Stack), (TSH).
Flame Arrestor (Air Intake).
1. TSH installed.
1. Flame Arrestor installed. -
2. Component is isolated and does not handle com-
2. Component is equipped with a forced draft
bustible $medium or process fluids other than
burner.
fuel.
3. Component is located in an isolated area and not
3i Component is exhaust heated without supple-
handling combustible medium or process fluids
mental firing and medium is not combustible.
other than fuel.
c. (Deleted in Second Edition.)
4. Component is exhaust heated without supple-
mental firing.
d. Low Pressure Sensor (Air Supply) (PSL).
1. PSL installed. k. Stack Arrestor.
1: Stack Arrestor installed.
2. Component is equipped with a natura1 draft
2. Component is equipped with a forced draft
burner.
3. Forced draft burner is equipped with another burner.
type of low air supply Sensor. 3. Component is isolated SO process fluids will not
contact Stack emissions.
4. Component is exhaust heated without supple-
4. Component is exhaust heated without supple-
mental firing.
mental firing.
e. High Pressure Sensor (Fuel Supply) (PSH).
1. Pressure Safety Valve (Medium Circulating
1. PSH installed.
Tube) (PSV).
2. Component is exhaust heated without supplemen-
1. PSV installed.
tal firing.
2. Component is not a tube type heater.
f. Low Pressure Sensor (Fuel Supply) (PSL).
3. PSV installed on another component will pro-
1. PSL installed.
vide necessary protection and the PSV cannot
2. Component is equipped with a natura1 draft
be isolated from the tube section.
burner.
m. Check Valve (Medium Circulating Tube) (FSV)
3. Component is exhaust heated without supple-
1. FSV installed on each outlet.
mental firing.
2. The maximum volume of combustible
Flame Failure Sensor (BSL).
%* medium that could backflow from downstream
1. BSL installed.
equipment is insignificant, or medium is not
2. Component is eexhaust heated without supple-
combustible.
mental firing.
3. Component is not a tube type heater.
h. Low Flow Sensor (Heated Medium) (FSL).
1. FSL installed.
TABLE A6.3
SAFE OPERATING PROCEDURES
1. Assure complete fuel shut off.
2. Void firing chamber of excess combustibles Prior to Pilot ignition.
3. Limit time on trial for ignition of Pilot and main burner to prevent excess fuel accumulation in fire chamber. After
the time limit is exceeded, the fuel should be shut off and a manual reset start-up required.
4. Prove Pilot and assure fuel-air proportioning dampers and burner controls are in low fire position Prior to opening fuel
supply to main burner.
5. Manually reset start-up controls following a flame failure of either the Pilot or main burner.
6. Assure fuel is clean from all residue and foreign materials by providing adequate fuel cleaning equipment.
7. Assure that exhaust is diverted around exhaust heated component Prior to starting up heat Source, if applicable.
American Petroleum Institute
SECTION A7
PUMPS
A7.1 Description. Pumps transfer liquids within the pump is a kinetic energy type, such as a
production process and into pipelines leaving the .plat- centrifugal pump, and is incapable of
form. Pipeline Pumps transfer produced hydrocarbons generating a head greater than the max-
from the process System to a Pipeline. Pumps that occa- imum allowable working pressure of the
,sionally transfer small volumes of hydrocarbons from discharge piping. A PSV should be pro-
auxiliary equipment (swab tanks, sumps, etc.) to a pipe- vided in the discharge line of all other
line that receives the bulk of its volume from another Pumps unless the maximum pump dis-
Source are not considered Pipeline Pumps. Glycol Charge pressure is less than the maxi-
powered glycol Pumps circulate glycol within a closed
mum allowable working pressure of the
System. Other Pumps transfer produced liquids, heat line, or the pump has an internal pres-
transfer liquids, or chemicals within the production
sure relief capability. A PSV should be
process System or from the containment System to the
provided in the wet glycol low pressure
process System (booster/charge Pumps, sump Pumps,
discharge line of glycol powered glycol
Chemical injection Pumps, heating medium circulating
Pumps unless the line is rated higher
Pumps, glycol umps, etc.). Recommended safety de-
than the maximum pump discharge pres-
vices for typica P pump installations are shown in Fig-
sure or protected by a PSV on a down-
ures A7.1, A7.2, and A7.3.
stream component which cannot be iso-
lated from the pump.
A7.2 Safety Analysis.
(2) Flow Safety Devices (FSV). A check
a. The Safety Analysis Table (SAT) for Pumps valve (FSV) should be provided in the
is presented in SAT Table A7.1. The unde- pump discharge line to minimize back-
sirable events that tan affect a pump are
flow.
overpressure and leak.
b. The Safety Analysis Checklist (SAC) for AT.3 Safety Device Location. The recommended
location for safety devices is given below:
pum s is presented in SAC Table A7.2.
ressure Safety Devices (PSH, PSL, a. Pressure Safety Devices (PSH, PSL, and
(1) 8
and PSV). PSH and PSL Sensors should PSV). The PSH and PSL Sensors should be
be provided on all hydrocarbon Pipeline located on the pump discharge line upstream
pump discharge lines to shut off inflow of the FSV or any block valve. In a glycol
and shut down the pump. A PSH Sensor powered glycol pump the PSL on the wet
to shut down the pump should be pro- glycol high pressure line should be located
vided on the discharge line of other between the pump and the SDV. On Pipeline
Pumps unless the maximum pump dis- Pumps and other Pumps where it is required,
Charge pressure does not exceed 70% of the PSV should be located on the discharge
the maximum allowable working pres- line upstream of any block valve.
sure of the discharge line, or the pump b. Flow Safety Devices (FSV). The check
is manually o erated and continuously valve (FSV) should be located on the pump
attended. A P E H Sensor is not required discharge line to minimize backflow.
on glycol powered glycol Pumps. Other c. Shutdown Devices (SDV). A SDV should
hydrocarbon Pumps should also be pro- be located near the outlet of a storage com-
vided with a PSL Sensor to shut down ponent (tank, separator, etc.) which delivers
the pump, unless the pump is manually production to a Pipeline pump to prevent the
operated and continuously attended or flow of hydrocarbons through the Pipeline
adequate containment is provided. PSL pump and into the Pipeline in the event of a
Sensors should be provided on glycol Pipeline leak. When glycol powered Pumps
powered glycol Pumps to shut off wet are used, a SDV should be located near the
glycol flow to the pump. high pressure wet glycol outlet of the glycol
A PSV should be provided on all pipe- contactor to shut off flow from the contactor
line pump discharge lines, unless the and to shut down the Pumps.

RP14C: Basic Surface Safety Systems For Offshore Production Platforms
FIGURE A7.1
RECOMMENDED SAFETY DEVICES
PIPELINE PUMP
FROM STORAGE
TSE
PUMP
DISCHA RGE
TSE designations are symbolic and are not intended to reflect actual location or quantity.
56 American Petroleum Institute
FIGURE A7.2
RECOMMENDED SAFETY DEVICES
GLYCOL POWERED GLYCOL PUMP
I
t DRY GLYCOL
GLYCOL
TO CONTACTOR
CONTACTOf?
I
WET GLYCOL
FROM CONTACTOR
r
TSE
POWER PUMP
PUMP
EN0 EN0
I 1
d \
DRY GLYCOL
.
FROM REBOILER
I
PSV
WET GLYCOL L
TO REBOILER
TSE designations arc symbolic and are not intended to reflect actual location or quantity.
RP14C: Basic Surface Safety Systems For Offshore Production Platforms
FIGURE A7.3
RECOMMENDED SAFETY DEVICES
OTHER PUMP
PSV
TSE
(+&+
SUCTION
PUMP
DISCHA RGE
TSE designations are symbolic and are not intended to reflect actual location or quantity.
American Petroleum Institute
-
*
a
u
w
cn
-
Q)
Lc
Kl
t
a
c
ao
-d
x
w
tn
a
v
RP14C: Basic Surface Safety Systems For Offshore Production Platforms
TABLE AT.2
SAFETY ANALYSIS CHECKLIST (SAC)
PUMPS
A.7 PUMPS. e. Pressure Safety Valves (PSV) - Pipeline
Pum s.
a. High Pressure Sensor (PSH) - Pipeline Pumps.
1. ff SV installed.
1. PSH installed.
2. Pump is kinetic energy type and incapable of
generating a head greater than the maximum
b. High Pressure Sensor (PSH) - Other Pumps.
allowable working pressure of the discharge
1. PSH installed.
piping.
2. Maximum pump discharge pressure does not
exceed 70 percent of the maximum allowable
working pressure of the discharge piping.
f. Pressure Safet Valves (PSV)-Other Pumps.
3. Pump is manually operated and continuously
instal r ed.
1. PSV
attended.
2. Maximum pump discharge pressure is less
4. Small, low volume Pumps, e.g. Chemical
than the maximum allowable working pres-
injection ’.
sure of discharge piping.
5. Pump discharges to an atmospheric vessel.
3. Pump has internai pressure relief capability.
6. Pump is a glycol powered glycol pump.
4. Pump is glycol powered glycol pump, and the
c. Low Pressure Sensor (PSL)-Pipeline Pumps. iping is
wet gl col low pressure discharge
1. PSL installed. 0 ischarge
rated K igher than the maximum
2.
Pump does not handle hydrocarbons. ressure.
5. K ump is glycol powered glycol pump, and the
Low Pressure Sensor (PSL)-Other Pumps.
d.
ressure discharge piping is
wet glycol low
1. PSL installed
protected by a 3 SV on a downstream compo-
2. Pump is manually operated and continuously
.
nent which cannot be isolated from the pump.
attended.
3. Adequate containment is provided.
4.
Small, low volume Pumps, e.g. Chemical injec-
FSV)-All Pumps.
g. Check Valve
tion Pumps.
1. Check Va I ve installed.
5. Pump discharges to an atmospheric vessel.

American Petroleum Institute
6Q
SECTION A8
COMPRESSOR UNITS
A8.1 Description. Compressor units transfer hydro-
process inflow and fuel gas to the com-
carbon gases within the production process and into
pressor and blowdown the compressor.
pipelines leaving the platform. Recommended safety
devices for a typical compressor unit are shown in Fig-
(4) Temperature Safety Devices (TSH). A
ure A8.
TSH Sensor should be provided to pro-
tect each compressor cylinder or case.
A8.2 Safety Analysis.
The TSH Sensor should shut off all proc-
ess inflow and fuel gas to the compressor.
a. The Safety Analysis Table (SAT) for com-
pressor units is presented in SAT Table
A8.3 Safety Device Location. The recommended
A8.1. The SAT analyzes the compressor
location for safety devices is given below:
cylinder or case and the suction, discharge
and fuel gas piping of a compressor unit.
a. Pressure Safety Devices (PSH, PSL, and
Hvdrocarbon handling equipment associated
PSV). The PSH and PSL Sensors should be
with compressors, other than compressor
located on each suction line as close to the
cylinders or cases should be protected in
compressor as practical, and on each dis-
accordance with appropriate sections of this
Charge line upstream of the FSV and any
RP. The compressor -and Prime mover are
block valve. The PSVs should be located on
normally furnished with devices to prevent
each suction line as close to the compressor
mechanical darnage. The undesirable events
as practical, and on each discharge line so
that tan affect a compressor unit are over-
that the PSV cannot be isolated from the
pressure, leak, and excess temperature.
compressor. If a PSV is located inside a
building, its discharge outlet should be piped
b. The Safety Analysis Checklist (SAC) for
to a safe location outside the building.
compressor units is presented in SAC Table
A8.2.
b. Flow Safety Devices (FSV). A check valve
(FSV) should be located on each compressor
(1) Pressure Safety Devices (PSH, PSL,
unit ’s final discharge line to minimize back-
and PSV). PSH and PSL Sensors should
flow. If the compressor unit is inside a build-
be provided on each suction line of a
ing, the FSV should be located outside the
compressor unit unless each input Source
building.
is protected by PSH and PSL Sensors
that will also protect the compressor.
c. Gas Detecting Devices (ASH). Should the
Also, PSH and PSL Sensors should be
compressor unit be installed in an inade-
provided on each compressor discharge
quately ventilated building or enclosure, gas
line. The PSH and PSL Sensors should
detectors (ASHs) should be located in areas
shut off all process inflow and fuel gas to
where combustible gases tan accumulate.
the compressor. A PSV should be pro-
vided on each compressor suction line
d. Temperature Safety Devices (TSH). A
unless each input Source is protected by
TSH Sensor should be located in the dis-
a PSV that will protect the compressor.
Charge piping of each compressor cylinder
A PSV should be provided on each com-
or case as close as practical to the cylinder
pressor discharge line. A PSV is not
or case.
necessary on the discharge of a kinetic
energy type compressor if it is incapable
e. Shutdown Devices (SDV). An SDV should
of developing a pressure greater than
be located on each process inflow line and
the maximum allowable working pres-
fuel gas line so that the compressor tan be
sure of the compressor or discharge
isolated from all input sources. If the com-
piping.
pressor unit is installed in a building, SDVs
should be located outside the building. All
(2) Flow Safety Devices (FSV). A check
SDVs should be actuated by a Signal from
valve (FSV) should be provided in each
the ESD System and fire loop, and by any
final discharge line to minimize back-
abnormal pressure condition sensed in the
flow.
suction and discharge lines. A blowdown
valve should be located on the compressor
(3) Gas Detecting Devices (ASH). If a
unit final discharge line(s). The blowdown
compressor unit is installed in an inade-
valve(s) may be actuated by a Signal from
quately ventilated building or enclosure,
the compressor ’s fire loop, gas detectors, and
as defined in Section Cl.&, gas detectors
compressor ESD System.
(ASHs) should be provided to shut off all

RP14C: Basic Surface Safe@ Systems For Offshöre Production Platforms 61
FIGURE AS
RECOMMENDED SAFETY DEVICES
COMPRESSOR UNIT
ENCLOSED BUILDING
(OPTIONAL)
--
I n DC\/
I IWULUU
I
~NFL~W IY- 1 _ ,, ‘TI
I
I M m
CL-L-1 !
-
L
INTERMEDIATE
FINAL ‘- ’
PSV
In
SUCTION I
DISCHARGE
IV- 1 I -v I
- I 2k 64 4
C
L
c
- -
L
1ST STA:EkJCTION
INTERMEDIATE
1 r
DISCHARGE
I
I
TO NEXT STAGE
-7 -L l- --
L
-1-7
I I L
l YBFLOOR
.
SW n I 1
NOTES:
1. TSE designations are symbolic and are not intended to reflect actual location or quantity.
- 2 are not required if compressor is not installed in an enclosed building.
2. ASH - 1 and ASH
3. ASH - 3 is not required if compressor does not have piping or other potential Source of gas leak
below a solid subfloor.
RP14C: Basic Surface Safety Systems For Offshore Production Platforms
TABLE A8.2
SAFETY ANALYSIS CHECKLIST (SAC)
COMPRESSORS
A.8 COMPRESSORS. e. Pressure Safety Valve (PSV)-Suction.
1. PSV installed.
a. High Pressure Sensor (PSH)-Suction.
2. Esch input Source is protected by a PSV
1. PSH installed.
that will also protect the compressor.
2. Esch input Source is protected by a PSH
that will also protect the compressor.
f. Pressure Safety Valve (PSV)-Discharge.
b. High Pressure Sensor (PSH)-Discharge.
1. PSV installed.
1. PSH installed.
2. Compressor is protected by a downstream
2. Compressor is protected by a downstream
PSV, located upstream of any cooler, which
PSH, located upstream of any cooler, which
cannot be isolated from the compressor.
cannot be isolated from the compressor.
3. Compressor is kinetic energy type and in-
c. Low Pressure Sensor (PSL)-Suction. capable of generating a pressure greater
1. PSL installed. than the maximum allowable working pres-
2. Esch input Source is protected by a PSL sure of the compressor or discharge piping.
that will also protect the compressor.
g. Check Valve (FSV) - Final Discharge
d. Low Pressure Sensor (PSL)-Discharge.
1. FSV installed.
1. PSL installed.
h. High Temperature Sensor (TSH)
2. Compressor is protected by a downstream
PSL which cannot be isolated from the
1. TSH installed.
compressor.
American Petroleum Institute
SECTION A9
PIPELINES
Ag.1 Dekription. Offshore pipelines direct liquids line; or (3) input Source is a weil(s)
and gases between platforms or between a platform and having a pressure greater than the
a shore facility. Pipelines are classified as (a) incoming, maximum allowable operating pressure
(b) departing or (c) bidirectional, depending on the of the Pipeline and is equipped with
direction of flow at the platform. An incoming Pipeline two SDVs (one of which may be the
directs fluids onto the platform and a departing pipe- SSV) controlled by independent PSHs
line transports fluids from a platform. A bidirectional connected to separate relays and sens-
Pipeline tan transport fluids in either direction. Pipe- ing Points. The use of two SDVs in
lines tan be further classified according to the delivery lieu of a PSV should be approached
with caution after thorough considera-
or receiving Point as follows:
tion of other alternatives. In some
a. Incoming Pipelines.
cases, installation of a PSV in addition
(1) Delivers to platform facilities. to two SDVs might be desirable even
(2) Delivers to departing Pipeline. at locations having no containment
b. Departing Pipelines. System.
(1) Receives from platform facilities.
(2) Flow Safety Devices (FSV). A FSV
(2) Receives f rom incoming Pipeline ( s) .
is provided on an incoming Pipeline
(3) Receives from both platform facilities and
to minimize backflow to a leak or
incoming Pipeline. rupture in the Pipeline, and on a de-
C. Bidirectional Pipelines. parting Pipeline to minimize backflow
(1) Delivers to and receives from platform
to a leak or rupture in a component
facilities.
on the platform. When an incoming
(2) Delivers to and receives from another bi-
Pipeline connects only to a departing
directional Pipeline.
Pipeline, the FSV on the departing
(3) Delivers to and receives from another bi-
Pipeline also protects the incoming
directional Pipeline and receives from plat- Pipeline. A FSV may be eliminated
f orm f acilities.
on a departing Pipeline if all input
sources are equipped with FSVs lo-
Ag.2 Safety Analysis.
cated so that no significant length
Analysis Table ( S14T) for
a. The Safety
of piping is unprotected from back-
pipelines is presented in SAT Table
flow from the Pipeline. A FSV cannot
A9.1. The undesirable events that tan
be installed on a bidirectional Pipeline.
affect a Pipeline are overpressure and
leak.
Ag.3 Safety Device Location. The recommended
b. The Safety Analysis Checklist (SAC) for
ocation for safety devices is given below:
pipelines is presented in SAC Table A9.2.
(1) Pressure Safety Devices (PSH, PsL, a. Pressure Safety Devices (PSH, PSL, and PSV).
and PSV). PSH and PSL Sensors are The PSH and PSL Sensors should be located
required 6n departing pipelines to shut downstream of any platform input Source and
off all input sources. PSH and PSL upstream of a departing Pipeline FSV. If a
Sensors sie not provided on an incom- PSV is required, it should be located down-
ing Pipeline which is protected by sen- stream of all input sources and installed SO
sors provided at the upstream plat- that it cannot be isolated from inlet sources.
form. Bidirectional pipelines should be
b. Flow Safety Devices (FSV). Incoming pipelines
provided with PSH- and PSL Sensors.
delivering to a platform process Station should
Protection may be provided by PSH
have a FSV located immediately upstream from
and PSL Sensors locäted at each input
the process Station. The FSV on a departing
Source or on a parallel component
Pipeline should be located as far downstream
(looped pipelines) if the Sensors cannot
as practical, but upstream of a block valve.
be isolated from the Pipeline.
c. Shutdown Devices (SDV). Pipeline SDVs should
Esch Pipeline input Source is nor-
be located to minimize the Portion of Pipeline
mally protected by a PSV set also to
exposed on the platform. All $DVs should be
protect the Pipeline. A PSV is not
actuated by the platform ESD System, fire loop
required if (1) the Pipeline has a max-
and Sensors on any downstream component
imum allowable operating pressure
through which the Pipeline fluids flow. The
greater than the maximum pressure of
SDV on a Pipeline delivering to a departing
any input Source; (2) each input Source
Pipeline should be actuated by the departing
having a pressure greater than the.
pipeline ’s PSH and PSL Sensors, the ESD SYS-
maximum allowable operating pressure
tem and the fire loop. Bidirectional pipelines
of the Pipeline is protected by a PSV
should be equipped with SDVs on each platform
set no higher than the maximum allow-
terminus.
able operating pressure of the pipe-
RP14C: Basic Surface Safety Systems For Offshore Production Platforms
FIGURE A9
RECOMMENDED SAFETY DEVICES
PIPELINES
r0 PROCESS STATION OR
DEPARTING PIPELINE
l
FSV
I l
Q
.
H
INCOMING PIPELINE
FROM PROCESS STATION OR
PSV
INCOMING PIPELINE
Q$ *
FSV
Q
DEPARTING PIPELINE
TO 8 FROM PROCESS
PSV
STATION OR
Q$ *
BIDIRECTIONAL
PIPELINE
il
BI DIRECTIONAL PIPELINE
DENOTES PLATFORM LIMITS
c
TABLE Ag.1
SAFETY ANALYSIS TABLE (SAT)
PIPELINES
DETECTABLE PROTECTION
UNOESIRABLE - ~
CAUSE CONDITION
PRIMARY SECONOARY
EVENT
AT COMPONENT
PSV
Blocked Line High Pressure PSH
Overpressure
Low Pressure and PSL and ESS
Leak Deteriorat ion
Backf low FSV
Rupture
Acc ident
RP14C: Basic Surface Safety Systems For Offshore Production Platforms 67
TABLE Ag.2
SAFETY ANALYSIS CHECKLIST (SAC)
PIPELINES
A.9 PIPELINES. 3. Esch input Source having a pressure greater
than the maximum allowable operatin pres-
a. High Pressure Sensor (PSH).
sure of the pi eline is protected by a PS f set no
1. PSH installed.
higher than t i: e maximum allowable operating
2. Delivering Pipeline protected by PSH located
pressure of the Pipeline.
on upstream component.
4. The Pipeline does not receive input from the
3. Esch input Source is protected by a PSH
platform process.
that also protects a departing or bidirec-
tional pi eline.
5. Input Source is a weil(s) having a pressure
4. The ipe P ine is protected by a PSH located on a
greater than the maximum allowable operat-
para P lel component.
ing pressure of the Pipeline and is equipped
with two SDVs (one of which may be the
b. Low Pressure Sensor (PSL).
SSV) controlled by independent PSHs con-
1; PSL installed.
nected to separate relays and sensing Points.
2. Delivering Pipeline protected by PSL located
Other input sources having a pressure
on upstream component.
greater than the maximum allowable operat-
3. Esch input Source is protected by a PSL that
ing pressure of the Pipeline are protected by
also protects a departing or bidirectional
PSVS.
Pipeline.
4. ‘I ’he ipeline is protected by a PSL located on a d. Check Valve (FSV).
para P lel component.
1. FSV installed.
2. Departin Pipeline is equipped with a SDV
c. Pressure Safet Valve (PSV).
tontrolle f by a PSL.
1. PSV instal r ed.
3. Esch input- Source is protected by a FSV
2. Pipeline has a maximum allowable operating
located so that no significant length of Pipeline
pressure greater than the maximum pressure
is unprotected from backflow.
of any input Source.
4, Pipeline is used for bidirectional flow.
American Petroleum Institute
SECTION Al0
HEAT EXCHANGERS
(SHELL-TUBE)
A1O.l Description. Heat exchangers transfer ther-
a PSL Sensor to shut off inflow to the
mal energy from one flow stream to another while
heat exchanger when leaks large
maintaining isolation of the two flow streams. Recom-
enough to reduce pressure occur, unless
mended safety devices for a typical Shell-tube heat
PSL Sensors on other components will
exchanger are shown in Figure A1O.l. This section does
provide necessary protection and the
not apply to exchangers used with primary heat sources
PSL Sensor cannot be isolated from
such as turbine exhaust exchangers which should be
the heat exchanger section when in
analyzed under Section A.6-Fired Components. This
Service. A PSL Sensor should not be
section may be used to analyze heating or cooling coils
installed if the heat exchanger section
inserted into vessels, but the vessels themselves should
normally operates at atmospheric pres-
be analyzed under Sections A4 or A5 as ap
...