KEN KIRSCHENBAUM, ESQ
ALARM - SECURITY INDUSTRY LEGAL EMAIL NEWSLETTER / THE ALARM EXCHANGE
You can read all of our articles on our website. Having trouble getting our emails? Change your spam controls and whitelist ken@kirschenbaumesq.com
******************************
Is Fire All in One in conflict with NFPA re programming and codes requiring update for 2026
December 15, 2025
************************
Fire All in One in conflict with NFPA re programming and codes requiring update for 2026
*************************
I took a lot of heat for my advice in the article on December 3, 2025 regarding turning over the programming and codes to a fire alarm system. I stated that:
"The Standard Form Fire All in One is clear that programming belongs to you; you only reveal codes if the customer has complied with all your contract terms, and then you can default to manufacturer code or give the code; you still don't give the programming."
I received several comments which caused me to research the issue in more depth. While many fire alarm companies will not reveal codes and point to the wording in the Fire All in One, the clash between the contract and the NFPA guidelines are irreconcilable.
Here are the comments, and they are all correct about the codes.
********
Ken
NFPA 72 Chapter 7 requires all codes to be given to the system owner
A provider's license could be suspended or terminated for violations, just wanted to point that out to you
I am not an Attorney but most state licenses are tied to the codes and standards adopted by the state, all states have a building and fire code based on either NFPA or IBC or both. Licensed stated require you to be licensed as well. NFPA 72 the national fire alarm and signaling code is adopted by reference in most states that have alarm systems and the requirements for code surrender of the ability to obtain them directly from the manufacturer is a requirement found in CH 7. All state adopted fire prevention codes reference NFPA 72 thus it is enforceable.
Tom Parrish, Vice President of Compliance & Training
Telgian Holdings, Inc
******
Ken,
I have often seen discussions here about withholding site specific programming passwords or software. My understanding of NFPA 72 is that if the customer owns the fire alarm (i.e.: not leased), then the customer has the right to the software and the programming passwords. In fact, according to NFPA 72 we do not even wait for the customer to ask for it. We are required to provide it in the Certification Documentation. See NFPA 72 7.2.1(13) and 7.5.7.1.1 and 7.5.7.1.2.
Yes, I acknowledge that this poses numerous problems for fire alarm companies. What if customer has someone else (qualified or unqualified) tamper with the fire alarm? What if customer wants to change vendors? What if customer is in arrears? It is not ideal, but the NFPA appears to lean towards property owner rights over the rights of the service company to withhold information.
This is why we use properly executed K&K All-In-One contracts on every single customer, no exceptions. I may not be able to withhold the passwords, but I have the best remedies and protections possible under the K&K All-In-One.
New York State Fire Code requires that NFPA 72 be followed.
NYSFC 907.6 A fire alarm system shall be installed and monitored in accordance with NFPA 72.
NFPA 72 requires that documentation be provided to Customer when an AHJ requires a fire alarm to be Certified:
NFPA 72 7.2.1 Where documentation is required by the authority having jurisdiction, the following list shall represent the minimum documentation required for new fire alarm systems, supervising station and shared communication equipment, and emergency communications systems, including new systems and additions or alterations to existing systems:
NFPA 72 7.2.1(13) For software-based systems, a copy of site-specific software, including specific instructions on how to obtain the means of system and software access (password).
NFPA 72 7.5.7.1.1 The site-specific software documentation shall include both the user passcode and either the system programming password or specific instructions on how to obtain the programming password from the system manufacturer.
NFPA 72 7.5.7.1.2 The passwords provided shall enable currently certified qualified programming personnel to access, edit, modify, and add to the existing system site-specific software.
I have always been concerned with the All-In-One language stating that Company maintains the rights to the software, programming and passwords. If I am correct, then the “password and software” clauses in the K&K would violate New York State fire code.
Name Withheld
****
Ken
Nfpa requires the code and a copy of the panel program be left in the document box on every job
If it’s asked by ahj during inspection it has to be left on site
Please double check this requirement
Scott Diamond
************
Update to the Fire All in One
************
Upon close review of the Fire All in One I do not believe the agreement conflicts with NFPA 72 section 7. There are current NFPA requirements. Keep in mind that NFPA is not law, though many jurisdictions adopt the NFPA requirements and codify them; then the requirements are the law. I am not going to go as far as Tom suggesting your fire alarm license may be suspended, but failure to comply could cause the Fire Marshal to fail your installation or issue violations for inspection failure.
There may be ways to deal with the code issue that meets the requirements of the law and yet still provides some protection to the fire alarm company. Protection from what may be your first question. Two things come to mind. One, if you are responsible for monitoring, perhaps service and inspections, you don't want anyone accessing and making program changes. Two, your continued relationship with the subscriber is likely enhanced by maintaining proprietary rights to programming and codes which would make it difficult, at least, for another fire alarm company to step in and take over the system.
I've been dragging my feet on the change to the Fire All in One on this point. I am open to hearing how you handle the issue. The continuum, and practice in the industry, ranges from full compliance to complete lack of compliance. Some ideas I am kicking around in my head at the moment are:
* prefacing the current langauge with "unless required by law, in which event Alarm Co will comply with law, ....
* imposing a charge if the program is actually accessed by anyone other than the AHJ
* figuring out how to comply while at the same time making access difficult
* maybe going so far as to state that access by anyone will, other than the AHJ perhaps, constitute a breach of the contract permitting acceleration
What ideas do you have? Get them to me this week so the Fire All in One can be updated in time for 2026.
NFPA 72 section 7 does not actually require you to reveal any codes or program information. What NFPA 72 does require is:
leave documention consisting of Owner's Manual, record as built drawings, completion form, for software based systems site-specific software, software security access, user passcode, and system programming password or instructions how to obtain them. This documentation must enable "currently certified qualifiedp programming personnel to access or edit site-specific software. The software must be stored "on-sit in nonviloatile memory".
There does not appear to be a requirement how this documentation must be provided, such as papers or disc or some other way. There is no requirement that you assist anyone seeking access and there is nothing that prohibits other provisions in the agreement that imposes charges or voids warranties or excludes repair service in the event the system is accessed by others and, in your opinion, compromising the system integrity. Also, this seems to apply to Code compliant fire alarm systems; not all systems meet those standards or requirements, though that is not something I encourage.
******
To remove any doubt about what NFPA requires, here is the current provision. What you may want to find out is whether your jurisdiction has adopted the provision. You may want to consider if your AHJ actually enforces the provision and if you want to comply or continue to take the position that contract premits, withholding programming and codes.
******************
NFPA 72
7.5.3.1
All systems, including new systems
and additions or alterations to
existing systems, shall include the
following documentation:
(1)* An owner's manual and
manufacturer's published
instructions covering all
system equipment
(2) Record (as-built) drawings in
accordance with 7.5.5
(3) A completed record of
completion form in
accordance with 7.5.6
(4) For software-based systems,
record copy of the site-specific
software in accordance with
7.5.7
7.5.7.1
For software-based systems, a copy
of the site-specific software shall be
provided to the system owner or
owner's designated representative.
7.5.7.1.1
For all software that connects to
and is part of the building life safety
network components, the software
security access or the means of
obtaining the software security
access shall be provided to the
owner or the owner's designated
representative.
7.5.7.1.2
The site-specific software
documentation shall include both
the user passcode and either the
system programming password or
specific instructions on how to
obtain the programming password
from the system manufacturer.
7.5.7.1.3
The passwords provided shall
enable currently certified qualified
programming personnel to access,
edit, modify, and add to the existing
system's site-specific software.
7.5.7.2
A copy of the site-specific software
shall be stored on-site in nonvolatile
memory.
********************
STANDARD FORM AGREEMENTS: To order up to date Standard Form Alarm / Security / Fire and related Agreements click here: www.alarmcontracts.com
***************************
CONCIERGE LAWYER SERVICE PROGRAM FOR THE ALARM INDUSTRY - You can check out the program and sign up here: https://www.kirschenbaumesq.com/page/concierge or contact our Program Coordinator Stacy Spector, Esq at 516 747 6700 x 304.
***********************
WEBINARS: https://www.kirschenbaumesq.com/page/alarm-webinars
***********************
ALARM ARTICLES: You can always read our Articles on our website at www.kirschenbaumesq.com/page/alarm-articles updated daily
********************
Wondering how much your alarm company is worth?
Click here: https://www.kirschenbaumesq.com/page/what-is-my-alarm-company-worth
***********************
THE ALARM EXCHANGE - the alarm industries leading classified and business exchange - updated daily
*************************
PODCASTS: https://podcasts.apple.com/us/podcast/ken-kirschenbaum-presents/id1794851477
*************************
Getting on our email list / Articles archived:
Many of you are forwarding these emails to friends or asking that others be added to the list. Sign up for our daily newsletter here: Sign Up.
**************************
Ken Kirschenbaum,Esq
Kirschenbaum & Kirschenbaum PC
Attorneys at Law
200 Garden City Plaza
Garden City, NY 11530
516 747 6700 x 301
ken@kirschenbaumesq.com
www.KirschenbaumEsq.com
|
