Servicing a TMV, and the failsafe test that's the point of it

A thermostatic mixing valve does one awkward job. It takes water stored hot enough to keep legionella down, 60°C at the calorifier, and blends it at the point of use to something that won't scald the person under the tap. Two requirements that pull in opposite directions, resolved at one brass fitting. Servicing it means inspecting and cleaning the strainers, descaling and disinfecting the internals, freeing the moving parts, replacing the O-rings and seals, checking the non-return valves, then re-commissioning and re-verifying the temperature it was set to deliver (the standard annual content). How often: annually for most, or whatever frequency your risk assessment sets.

The cleaning is not the reason the service exists. The reason is the failsafe test. A TMV's safety claim is that if the cold supply fails, the valve shuts the flow off rather than sending stored water at 60°C onto skin. The failsafe principle is the whole point of fitting a thermostatic valve instead of a plain mixer, and a valve that no longer fails safe is a scald risk wearing a compliance sticker. The annual service is how you prove it still does.

The failsafe test itself

The in-service test is quick, and you can do it with a thermometer and a stopwatch. Run the outlet, let it stabilise, and record the mixed temperature. Then isolate the cold supply and wait around five seconds: a valve that passes shuts the flow off, or drops it to a bare trickle, while a valve that fails carries on delivering hot water and tells you the thermostatic element is no longer responding.

There is a second half to the pass mark, and here the source matters. Manufacturer commissioning instructions commonly set it at no more than about 2°C of drift from the temperature the valve was commissioned to deliver. That figure lives in manufacturer IOM documents and the healthcare D08 scheme rather than in any regulation, so treat it as the manufacturer's acceptance criterion, not a legal threshold. The principle underneath it is the useful part. A valve whose outlet temperature has crept is a valve on its way to failing, and the drift is the early warning.

Drifting outlet temperature is the classic symptom of a valve going off. Scale builds on the thermostatic element, debris collects in the strainers, the element wears or seizes, the O-rings perish, the check valves fail. Any of these moves the blended temperature, and a valve that reads two degrees warm this year is often the one that fails the shut-off test next year.

This is why the service is more than a clean. Descaling the element and clearing the strainers removes the very things that make the temperature drift, replacing the seals and checking the non-return valves closes the paths that let hot and cold cross when they shouldn't, and the thermal disinfection deals with what has grown in a valve that spends its life sitting at blend temperature. The clean and the test are the same job seen from two ends. You service the valve so it can pass, then you test it to prove the service worked.

The temperatures it's blending to

The whole exercise is about landing the outlet in a safe band. Water leaving storage at 60°C can scald fast, which is the reason a cold-supply failure has to end in shut-off rather than a warm compromise. HSE publishes the recommended maximum safe outlet temperatures, and they vary by fitting, because a bath full of hot water is a very different scald risk from a basin.

Those figures are from HSE's hot and cold water guidance. Set the valve to deliver at or below the number for the fitting it serves, verify it at commissioning, and the annual failsafe test is checking that it has held.

TMV2, TMV3, and how often

Two certification schemes, and the difference matters when you are speccing a valve or reading a spec someone else wrote. TMV2 valves meet BS EN 1111 and BS EN 1287, carry BuildCert approval, and cover general domestic and commercial use. TMV3 is the higher NHS D08 healthcare scheme, with a tighter and faster failsafe, intended for vulnerable users in care and clinical settings. Both are certified through NSF, the body formerly known as BuildCert. A TMV3 valve in a care home is doing a harder job to a harder standard than the same-looking valve in an office washroom.

On frequency, the honest answer is that there is no fixed statutory interval. The practice that flows from HSG274 and ACoP L8 is to service and failsafe-test annually, or at a frequency set by the risk assessment and the manufacturer's recommendations. New installations get a tighter start: a first in-service test around 6 to 8 weeks after commissioning, a second at 12 to 15 weeks, then the routine interval once the valve has proven stable. In healthcare the split is clearer again, with TMV2 valves tested annually and TMV3 valves six-monthly.

That early double-check exists because a valve that is going to fail early usually shows it early. Skip the 6-to-8-week test and you find out at the twelve-month service, having run a scald risk for most of a year.

Recording it so it counts

A failsafe test is only worth doing if the result survives. The numbers that matter are the reading at the moment the cold was isolated, whether the flow stopped, and the set temperature before you touched anything. All of it belongs against the specific valve, not in a general note that a TMV service happened on this site.

This is where BlueWave fits, and it is a narrow claim. The engineer app captures the failsafe result and the verified set temperature against each individual TMV on the site, on a form the engineer fills in the plant room, so next year's service opens with last year's numbers already in front of them. The drift that warns you a valve is failing is only visible if last year's figure is somewhere you can see it. The engineer runs the test and makes the call. What the software adds is the memory of last year's figure to read this year's against.

Whoever holds the duty needs to know a competent person did this, which is a real distinction with its own rules (responsible person versus competent person). And when a valve fails its test, that is an out-of-parameter result with an escalation path, the same as a failed temperature reading: the record of what you did next matters as much as the failure. The TMV service is one line in the wider monitoring cadence, but it is the line where the safety claim is either true or it isn't.

Run the test the plain way and it stays honest. Isolate the cold, count five seconds, watch the flow. If the water keeps coming, the sticker on the valve is lying, and no amount of descaling the strainers changes that until the element is replaced.