What Governs External Inspection Intervals for Atmospheric Storage Tanks

Which code governs, and who makes it enforceable

API 653 covers steel storage tanks built to API 650 and its predecessor API 12C, and provides minimum requirements for maintaining the integrity of such tanks after they have been placed in service. Its scope runs from the tank foundation through the bottom, shell, structure, roof, attached appurtenances and nozzles to the face of the first flange, first threaded joint or first welding-end connection. Where API 653 and API 650 appear to conflict, API 653 governs for tanks already in service.

The federal layer is what converts that into an enforceable schedule. For hazardous liquid pipeline breakout tanks, 49 CFR 195.432(a) requires each in-service breakout tank to be inspected at intervals not exceeding 15 months, but at least once each calendar year. Paragraph (b) requires atmospheric and low-pressure steel tanks to have their physical integrity inspected in accordance with API 653, and removes one option outright by stating that the risk-based internal inspection procedures in API 653 section 6.4.3 cannot be used to determine the internal inspection interval. Paragraph (c) sends steel aboveground tanks built to API 2510 to section 6 of API 510 instead.

For facilities under the SPCC rule, 40 CFR 112.8(c)(6) requires each aboveground container to be tested or inspected for integrity on a regular schedule and whenever material repairs are made, with the qualifications of personnel, the frequency and the type of testing determined in accordance with industry standards. The regulation names no interval of its own, which is precisely why the API 653 clocks below become the compliance answer. Clause 6.2.3 of API 653 acknowledges the point from the other direction, noting that jurisdictional regulations in some cases control the frequency and interval of inspections.

Clock one: the routine in-service inspection, capped at one month

Clause 6.3.1.1 requires the external condition of the tank to be monitored by close visual inspection from the ground on a routine basis, and permits that inspection to be performed by owner or operator personnel who are not authorized inspectors, provided they are knowledgeable about the facility operations, the tank and the product stored. Clause 6.3.1.2 fixes the ceiling: the interval shall be consistent with conditions at the particular site, but shall not exceed one month.

Clause 6.3.1.3 defines the content. The routine in-service inspection shall include a visual inspection of the tank's exterior surfaces, and evidence of leaks, shell distortions, signs of settlement, corrosion and the condition of the foundation, paint coatings, insulation systems and appurtenances should be documented for follow-up action by an authorized inspector.

That last phrase is the compliance obligation most sites drop. A monthly walkdown that records a distortion or a settlement indication and stops there has performed half of 6.3.1.3. The clause requires the finding to be routed to an authorized inspector for action, which means the routine inspection is a feeder into the formal program rather than a separate paperwork exercise. Where a settlement observation appears in a monthly log, the follow-up belongs with a settlement survey and Annex B evaluation.

Clock two: the external inspection, five years or RCA/4N

Clause 6.3.2.1 states that all tanks shall be given a visual external inspection by an authorized inspector, that this inspection shall be called the external inspection, and that it must be conducted at least every five years or RCA/4N years, whichever is less. RCA is defined in the clause as the difference between the measured shell thickness and the minimum required thickness in mils, and N as the shell corrosion rate in mils per year. The clause adds that tanks may be in operation during this inspection, which removes the outage argument entirely.

Two adjacent clauses complete the external scope. Clause 6.3.2.2 states that insulated tanks need to have insulation removed only to the extent necessary to determine the condition of the exterior wall of the tank or the roof, which is permission to open selectively rather than an exemption from opening. Clause 6.3.2.3 requires tank grounding system components such as shunts or mechanical connections of cables to be visually checked, and points to API 2003 for practices on preventing hydrocarbon ignition.

Clause 6.2.1 lists what the interval decision is supposed to weigh alongside the formula, including the nature of the product stored, corrosion allowances and rates, corrosion prevention systems, conditions at previous inspections, methods and materials of construction and repair, tank location including isolated or high-risk areas, potential risk of air or water pollution, leak detection systems, change in operating mode such as frequency of fill cycling or frequent grounding of floating roof support legs, changes in service including water bottoms, and the existence of a double bottom or release prevention barrier.

Clock three: external UT thickness, a different divisor and a different cap

Clause 6.3.3.1 describes external ultrasonic thickness measurement of the shell as a means of determining a rate of uniform general corrosion while the tank is in service and of indicating shell integrity, and leaves the extent of such measurements to the owner or operator. That discretion covers coverage, not timing.

Clause 6.3.3.2 sets the timing in two branches. Where the corrosion rate is not known, the maximum interval shall be five years, and corrosion rates may be estimated from tanks in similar service based on thickness measurements taken at an interval not exceeding five years. Where the corrosion rate is known, the maximum interval shall be the smaller of RCA/2N years or fifteen years, using the same RCA and N definitions as 6.3.2.1.

Clause 6.3.3.3 provides the only substitution in the external set: an internal inspection of the tank shell performed while the tank is out of service can be substituted for a program of external ultrasonic thickness measurement, if the internal inspection interval is equal to or less than the interval required by 6.3.3.2 b). Nothing in that clause touches the 6.3.2.1 external visual or the 6.3.1 routine inspection, so a recent internal outage clears one clock and leaves two running.

Reading the divisors: why 4N and 2N produce inverted schedules

The two formulas differ by a factor of two, and the difference is deliberate. RCA/4N consumes a quarter of the remaining corrosion life before the visual falls due; RCA/2N consumes half before the thickness survey falls due. On the same corroding shell, the visual comes around twice as often as the UT.

The caps then invert the relationship depending on how fast the tank is corroding. On a shell with 120 mils of remaining corrosion allowance losing 2 mils per year, RCA/4N is 15 years and RCA/2N is 30, so both formulas exceed their caps and the tank runs on a 5-year visual and a 15-year UT. Push the rate to 10 mils per year and the formulas take over: 3 years for the visual, 6 years for the UT. At 20 mils per year the visual falls due at 18 months.

This is why an external program built on a fixed five-year rhythm quietly goes non-compliant the moment a shell starts corroding faster than about 6 mils per year with that remaining allowance. The formula, not the calendar, is the requirement, and it has to be re-run each time new thickness data arrives. Programs that carry this correctly usually maintain the calculation per course inside their asset management system rather than in a spreadsheet, which is one of the reasons we build the interval logic into tank and equipment records rather than leaving it in the inspector's notes.

What RCA actually requires you to have computed first

RCA has two inputs and both are engineering results, not field readings. The measured shell thickness comes from the UT survey. The minimum required thickness comes from 4.3.3.1 a), which for an entire shell course is 2.6 times (H minus 1) times D times G, divided by S times E, and which the clause limits to tanks of 200 ft diameter or less. H is the design liquid level, D the nominal diameter, G the specific gravity of the stored liquid, S the maximum allowable stress from Table 4.1 and E the joint efficiency.

That dependency has a consequence people miss: a change of service changes t-min, which changes RCA, which changes both external intervals without a single thickness reading moving. Switching a tank from a 0.75 specific gravity product to water-bottom-heavy heavy fuel raises t-min and shortens the interval on the arithmetic alone.

The corrosion rate N carries a similar dependency. It requires two comparable readings at the same locations, which is why 6.3.3.2 a) exists at all: without an established rate, the tank runs on the 5-year default for both clocks, and the only way off that default is a documented rate or an estimate drawn from tanks in similar service with readings taken no more than five years apart. Recovering a defensible rate from historical reports that never repeated a measurement location is the single most common finding in a tank program gap assessment.

The clock nobody puts on the schedule: cathodic protection surveys

Clause 6.3.4.1 states that where exterior tank bottom corrosion is controlled by a cathodic protection system, periodic surveys of the system shall be conducted in accordance with API 651, and that the owner or operator shall review the survey results. Clause 6.3.4.2 adds that the owner or operator shall assure the competency of personnel performing surveys.

API RP 651, 5th edition, August 2024, is the document that carries the survey content and frequency. The obligation in API 653 is twofold and often only half met: the surveys get run by a contractor, and the results never get reviewed by the party API 653 places the duty on. A stack of unreviewed CP survey sheets is a finding.

The reason this belongs in a discussion of external intervals is arithmetical. Cathodic protection is what allows a bottom-side corrosion rate to be treated as controlled, and a controlled rate is what supports the longer internal interval that 6.4 permits. Letting the CP program lapse undermines the corrosion rate assumption on which the whole interval structure rests, without any external clock visibly changing.

What risk-based inspection can and cannot move here

API 653 places its risk-based alternative under 6.4, which is internal inspection. The alternative internal inspection interval provision permits an owner or operator to establish the internal inspection interval using RBI procedures, subject to review and approval by an authorized inspector and a knowledgeable engineer, and to re-review at intervals not exceeding ten years or sooner where service changes.

Nothing in 6.3 carries an equivalent. There is no RBI escape from the monthly routine inspection, from the five-year or RCA/4N external inspection, or from the UT thickness intervals. That is a real structural difference from API 510, where clause 6.3.1 explicitly allows an RBI assessment to exceed the five-year external limit, subject to a ten-year ceiling on RBI-derived external intervals. Tank people who move across from pressure vessel work import the wrong assumption.

For PHMSA-regulated breakout tanks the restriction goes further still, since 49 CFR 195.432(b) states that the risk-based internal inspection procedures in API 653 section 6.4.3 cannot be used to determine the internal inspection interval, and required operators who had used them to re-establish intervals under 6.4.2. An RBI program design for a mixed fleet has to keep the tank rules and the vessel rules in separate lanes for exactly this reason.

Where external programs fail audits

Three failure modes account for most findings. The first is a corrosion rate calculated from readings taken at locations that were never repeated, which makes N indefensible and drops the tank back to the five-year default for both external clocks. The second is insulation never opened, on the argument that 6.3.2.2 permits minimal removal, when the clause requires removal to the extent necessary to determine the condition of the exterior wall or roof. The third is monthly observations that never reach an authorized inspector, contrary to 6.3.1.3.

A fourth is quieter. Clause 4.5.1.1 identifies settlement, erosion, cracking and concrete deterioration as the principal causes of foundation deterioration and requires all tank foundations to be inspected periodically, cross-referencing 6.3. Foundation and anchor bolt observations are part of the external inspection, and 4.5.3 warns that distortion of anchor bolts and excessive cracking of the concrete in which they are embedded may indicate serious foundation settlement or an overpressure uplift condition. Those observations belong in the external report with dimensions, not adjectives.

The record is what carries the interval. If an auditor cannot reconstruct RCA, N and the resulting due dates from the report, the interval is undocumented regardless of whether it is correct. That reconstruction test is the core of independent report validation, and it is cheaper to pass before the report is filed than after a regulator asks.

External is not internal, and this page stops here

Everything above concerns 6.3, the inspections performed from the outside of the tank. Internal intervals run on a different mechanism entirely: 6.4 sets them from bottom corrosion rates, minimum bottom thickness projections and the safeguards in Table 6.1, with separate initial and subsequent interval rules and a separate risk-based alternative. Those rules are covered on our API 653 inspection intervals page, and duplicating them here would only confuse which clock is being discussed.

The practical link between the two is the corrosion rate. External UT readings feed the shell assessment and, under 6.4.1.1 b), the data gathered internally must take account of external ultrasonic thickness measurements made during in-service inspections. Run the external program badly and the internal interval loses its evidentiary base.

Atlantis does not sell API 653 certification. We provide outsourced ASNT Level III support to tank inspection programs, independent validation of inspection reports and interval calculations, and gap assessments against the clauses cited on this page. Facilities operating under PSM mechanical integrity obligations usually need the interval file to survive two audiences at once. Send us a tank file and we will tell you which of the three clocks is out of date.

Request a consultation