{"slug":"/standards/api-651","title":"API RP 651 Cathodic Protection of Aboveground Tanks","description":"API RP 651 cathodic protection of tank bottoms: 850 mV instant-off or 100 mV polarisation shift, rectifier checks every two months, annual survey.","h1":"API RP 651: Cathodic Protection Criteria, Surveys and Records for Tank Bottoms","answer":"API RP 651 covers cathodic protection of the soil side of aboveground petroleum storage tank bottoms, using galvanic anodes or impressed current. It addresses system design, installation, protection criteria and monitoring, including the polarised 850 mV criterion measured against a copper sulphate electrode and the 100 mV polarisation shift. It does not decide whether a tank needs protection; API 653 and the applicable regulations do.","expansion":"The value of API RP 651 is that it converts a vague expectation of corrosion control into measurable evidence. Soil side corrosion is the mechanism that most often decides when a tank bottom has to be replaced, and it is the one an inspector cannot see without lifting the floor. Cathodic protection is the only continuous control available against it, so proof that the system works has to come from potentials, currents and coupon data taken on a schedule rather than from anodes shown on a drawing. The practice sets out how to design galvanic and impressed current systems for tank bottoms, how to place reference electrodes so readings represent the middle of the floor rather than the perimeter, which criteria demonstrate protection, and what must be recorded. Read alongside API 653, it is the document that turns cathodic protection into an inspection interval argument.","source":"Sources: API RP 651 Cathodic Protection of Aboveground Petroleum Storage Tanks; API 653 Tank Inspection, Repair, Alteration and Reconstruction; API 650 Annex I (undertank leak detection and subgrade protection); API RP 652 Linings of Aboveground Petroleum Storage Tank Bottoms; NACE/AMPP SP0169 Control of External Corrosion on Underground or Submerged Metallic Piping Systems; NACE/AMPP SP0193 External Cathodic Protection of On-Grade Carbon Steel Storage Tank Bottoms; 40 CFR 112 Spill Prevention, Control and Countermeasure.","table":{"caption":"Protection criteria, monitoring intervals and the errors that invalidate the record","columns":["Item","What is applied","Where it comes from","How it goes wrong in practice"],"rows":[["Primary potential criterion","Polarised potential at least 850 mV negative to a saturated copper sulphate electrode, voltage drop excluded","External corrosion control standards applied to tank bottoms through API RP 651","Reading the current on potential at the perimeter and recording it as compliance; the survey never states on, instant off or decay"],["Alternative criterion","100 mV of cathodic polarisation, by formation or by decay","Same standards; used where instant off values are impractical","Decay measured for too short a period, or measured only at the perimeter where the floor is best protected"],["Withdrawn criterion","300 mV potential shift","Removed from the governing standard years ago and no longer valid","Still written into site cathodic protection procedures that have not been revised, invalidating years of closed out surveys"],["Overprotection limit","Avoid potentials substantially more negative than about 1,100 mV to copper sulphate","Coating disbondment and hydrogen related damage on higher strength steel","Rectifier output raised until the perimeter numbers look comfortable, disbonding the bottom coating"],["Impressed current monitoring","Rectifier inspected at intervals not exceeding two months: voltage, current, hour meter","API RP 651 monitoring practice","The two month check is skipped; a tripped rectifier is discovered at the annual survey, months after protection was lost"],["Potential survey","Annual tank-to-soil survey against the commissioning baseline","API RP 651 monitoring practice","Perimeter only survey on a large diameter tank reported as full coverage of the bottom"],["Records","As-built drawing, commissioning survey, criteria used, electrode calibration, rectifier logs, annual surveys, corrective actions","API RP 651 and API 653 evidence requirements","Continuous protection claimed for an interval extension while the records cover only the most recent year"]],"note":"A survey report that does not state the measurement method, the electrode type and its calibration status is not evidence of protection, however good the numbers look."},"facets":[{"q":"Which potential criterion does API RP 651 rely on?","a":"The primary criterion is a polarised potential of at least 850 mV negative with respect to a saturated copper sulphate reference electrode, measured with the current interrupted so that voltage drop through the soil is excluded. The alternative is 100 mV of cathodic polarisation, demonstrated by formation or decay. Both come from the underlying external corrosion control standards; API RP 651 applies them to the specific geometry of a tank floor."},{"q":"Why does the 300 mV shift criterion still appear in site procedures?","a":"Because it was a recognised criterion for many years before it was withdrawn from the governing standard, and site procedures are rarely reread once approved. Auditors still find it in tank cathodic protection procedures that have not been revised in a decade. Any survey report closing out protection on a 300 mV shift is using a criterion that no longer exists, and the finding usually calls several years of records into question."},{"q":"How do you demonstrate protection at the centre of a large tank bottom?","a":"Not from the perimeter. Voltage drop and the shielding effect of the floor itself mean edge readings represent only the outer annulus. Demonstrating protection under the middle of a large diameter bottom needs permanent reference electrodes installed beneath the floor during construction, perforated monitoring tubes run across the diameter, or coupons connected to the structure. Retrofitting any of these once the tank is in service is expensive, which is why it is a construction stage decision."},{"q":"Does cathodic protection work through a release prevention barrier?","a":"No. A synthetic liner or concrete pad electrically isolates the floor from the soil, so anodes installed in the soil below deliver almost no current to the plate above. Protection has to be installed within the sand cushion between the barrier and the bottom. The same applies to a double bottom: anodes must sit between the old and the new floor, because the old plate shields the new one."},{"q":"How often must rectifiers and potentials be checked?","a":"Impressed current rectifiers are inspected at intervals not exceeding two months, recording output voltage, current and hour meter reading, while galvanic systems are checked annually alongside a full tank-to-soil potential survey. The two month check is the one sites skip, and skipping it is how a tripped rectifier goes unnoticed for most of a year until the annual survey finds the tank unprotected."},{"q":"Does API RP 651 decide whether a tank needs cathodic protection?","a":"No. That decision comes from API 653 and from the regulations applying to the site, informed by soil resistivity, the presence of a liner, the tank service and the measured bottom corrosion rate. API RP 651 tells you how to design, install, operate and monitor the system once the decision is made, and how to prove it is working. Treating it as the trigger document is a common misreading."}],"sections":[{"heading":"Scope: the soil side of the floor, not the whole tank","paragraphs":["API RP 651 addresses corrosion control of the soil side surface of aboveground petroleum storage tank bottoms by cathodic protection, using either galvanic anodes or an impressed current system. It covers whether a tank can be protected at all, how to design and install the system, the criteria that demonstrate protection, commissioning, monitoring, maintenance and the records that support all of it. The subject is the electrochemistry at the plate to soil interface and the evidence that it is under control.","What it does not cover matters as much. It is not a tank inspection code and sets no thickness, settlement or repair criteria; those live in API 653. It does not address internal corrosion or internal linings, which are the subject of API RP 652. It does not design buried process piping, does not select external coatings, and does not cover underground storage tanks. Most importantly, it does not tell an owner whether a particular tank requires cathodic protection at all.","That last exclusion is the one that trips programmes. Owners cite API RP 651 as the authority for having a system, then find at audit that nothing in the file records why this tank was assessed as needing protection while the tank beside it was not. The assessment is a separate obligation, and the evidence for it belongs in the tank record alongside the rest of the integrity history."]},{"heading":"When cathodic protection is required, and who decides","paragraphs":["The requirement to evaluate the need for soil side corrosion control comes from API 653 and from the regulations applicable to the site, not from API RP 651. Soil resistivity, drainage and pad construction, the presence and type of release prevention barrier, the age and history of the bottom, and the corrosion rate measured at the last internal inspection all feed that decision. The output should be a written assessment, not an assumption inherited from the previous integrity engineer.","New tank construction is where the decision is easiest to implement well. A bottom built on a sand cushion above a synthetic liner, with a cathodic protection system and permanent monitoring points installed before the floor is welded, is far simpler than retrofitting the same capability into an operating tank. Reference electrodes and monitoring tubes installed at construction are the difference between a defensible survey and an argument that repeats for the next thirty years.","Where a tank cannot be effectively protected, that finding is itself a valid result. Concrete or asphalt pads, oiled sand, very high resistivity foundations and heavy bonded grounding all limit achievable protection. The honest response is to record the limitation and manage the bottom through inspection interval, bottom lining, a release prevention barrier or replacement, rather than to operate a system that can never meet criteria and report it as compliant."]},{"heading":"The criteria that apply, and the one that was withdrawn","paragraphs":["Two criteria carry the weight in practice. The first is a polarised potential of at least 850 mV negative with respect to a saturated copper sulphate reference electrode, with the voltage drop through the soil excluded, normally by interrupting the current and reading the instant off value. The second is 100 mV of cathodic polarisation, demonstrated either by measuring polarisation as it forms or by measuring decay after the current is switched off. Both require the measurement method to be stated in the report.","The first criterion is the one most often misapplied, because it is easy to walk the perimeter with a half cell, see a current on value more negative than 850 mV and record protection. Under an operating impressed current system the voltage drop through the soil can account for a large part of that reading. A survey that does not state whether values are on, instant off or depolarised, and does not record the reference electrode type and its calibration, is not evidence of anything.","Overprotection has its own boundary. Potentials substantially more negative than about 1,100 mV to copper sulphate risk disbonding the bottom coating and, on higher strength steels, hydrogen related damage. Rectifier output is therefore not something to increase until the numbers look comfortable. The competent response to a failing survey is to find where the current is going, not to raise the driving voltage until the symptom disappears."]},{"heading":"Why perimeter readings do not prove protection on a large bottom","paragraphs":["The tank floor shields itself. Current from anodes outside or around the tank reaches the outer annulus first and attenuates toward the centre, and the steel plate blocks the path. On a large diameter bottom the least protected point is directly under the middle, which is exactly where no one can put a reference electrode after commissioning. Readings taken around the shell perimeter describe the annular ring and nothing else, however many of them are taken.","The provisions that solve this are construction stage decisions: permanent reference electrodes installed beneath the floor at defined radii before the bottom is welded, perforated monitoring tubes run across the diameter so a portable electrode can be pulled through, or coupons and electrical resistance probes connected to the structure to give a directly measurable representation of bottom behaviour. Each has to be documented on the as-built cathodic protection drawing so subsequent surveys use the same points.","Where none of these exist, the honest report says so. It records what was measured, states that centre bottom protection cannot be demonstrated from the available access, and recommends either installing monitoring provisions at the next bottom replacement or weighting the inspection plan accordingly. Reporting a perimeter survey as full bottom compliance is the finding that most often unravels an interval extension argument later."]},{"heading":"Galvanic or impressed current, and what liners and double bottoms do to both","paragraphs":["Galvanic systems using magnesium or zinc anodes suit smaller tanks in low resistivity soil where current demand is modest. They are simple, need no power and cannot be switched off by accident, but their driving voltage is limited and they are easily overwhelmed by a large bare bottom or a bonded grounding system. Impressed current systems provide the current a large tank needs and allow output to be adjusted, at the cost of a rectifier that has to be inspected, a supply that can trip, and interference that has to be managed.","Double bottoms change the problem completely. A new floor laid over an old one cannot be protected by anodes outside or beneath the original plate, because the old bottom shields the new one entirely. Protection must be installed in the space between the two floors, normally as anodes or ribbon within the sand or grout layer, with monitoring points brought out during construction. Systems designed as though the new bottom were still in contact with soil deliver almost nothing to the surface that matters.","Release prevention barriers behave the same way. A synthetic liner or a concrete pad isolates the floor from the soil, so any anode bed below the barrier is effectively disconnected from the steel it is supposed to protect. Protection has to sit in the cushion above the barrier. This is one of the most common design errors found when a tank that has never met criteria is investigated, and it usually traces back to a construction sequence in which two contractors never spoke to each other."]},{"heading":"Interference, grounding grids and the current that never reaches the floor","paragraphs":["A cathodic protection system that cannot meet criteria despite a healthy rectifier is usually losing its current somewhere else. Bonded copper grounding grids are the most common drain. Copper is a very efficient cathode, and a tank bonded to a substantial grid can consume most of the rectifier output protecting the grounding system rather than the floor. Electrical isolation, polarisation cells or solid state decouplers are the normal remedies, and the choice is an electrical safety decision as much as a corrosion one.","Interference from neighbouring systems runs in both directions. A large impressed current system on adjacent tankage, pipelines, or from stray current sources such as traction systems, can drive current onto and off the tank bottom, causing accelerated attack at discharge points. Interference testing at commissioning, and again whenever a new system is energised nearby, is part of the programme rather than a one off exercise.","Isolation joints on inlet and outlet piping are the other reliable culprit. When an isolating flange kit fails or is bridged during a repair, the tank cathodic protection current disappears into kilometres of connected pipework. Testing isolation is quick, it is often skipped, and it explains a surprising share of systems that quietly stopped protecting anything years before the next internal inspection revealed it."]},{"heading":"Monitoring intervals and the records that are actually asked for","paragraphs":["Impressed current rectifiers are inspected at intervals not exceeding two months, recording output voltage, output current and hour meter reading, so that a trip or a failed unit is caught within weeks rather than at the next annual survey. Galvanic systems and the full tank-to-soil potential survey are performed annually and compared against the commissioning baseline rather than judged in isolation. Deviations from the baseline are more informative than the absolute numbers, because they show the system changing.","The record set an auditor asks for is consistent: the as-built cathodic protection drawing showing anode and monitoring point locations, the commissioning survey with the criterion used, reference electrode calibration records, the rectifier log with no unexplained gaps, the annual survey reports, interference test results, and the corrective actions raised and closed when criteria were not met. Gaps in the rectifier log are read as gaps in protection, because there is no other way to read them.","Because this evidence has to support inspection decisions years later, it belongs with the tank thickness and settlement history rather than in a contractor filing cabinet. Holding cathodic protection surveys alongside the rest of the tank record in an [inspection data management system](/inspection-data-management-system) is what makes a continuous protection claim provable when the interval argument is finally made."]},{"heading":"Misreadings that produce audit findings","paragraphs":["The most damaging is the current on potential recorded as compliance. It is fast, it is easy, and under an operating impressed current system it can overstate protection substantially. The second is the withdrawn 300 mV shift criterion still embedded in a site procedure, which invalidates every survey closed out against it. The third is the perimeter survey on a large diameter tank presented as bottom wide compliance, discussed above.","The fourth is a system that was never capable of protecting the surface it is credited with: anodes below a liner, anodes outside a double bottom, or a tank bonded to a grounding grid that swallows the output. These pass a paper review because the drawings show a system and the rectifier shows current. They fail the moment someone asks which surface that current is reaching.","The fifth is administrative and appears at every audit that matters. An owner claims effective cathodic protection over a ten or fifteen year period to support an extended internal inspection interval, and produces records covering the last two years. The claim is only as long as the continuous evidence behind it, and an unexplained gap in rectifier readings during the period is fatal to it. Reconstructing that evidence retrospectively is not possible."]},{"heading":"What cathodic protection evidence does to the API 653 inspection interval","paragraphs":["API 653 sets bottom internal inspection intervals from the measured bottom corrosion rate and the remaining thickness, and allows those intervals to be extended where the conditions supporting a lower corrosion rate are demonstrated. Effective soil side cathodic protection, a release prevention barrier and a bottom lining all contribute. Where a documented risk based assessment is used the ceiling is longer than the default interval, but every extension rests on evidence that the mitigations were working continuously across the period claimed.","This is where cathodic protection stops being a maintenance activity and becomes an integrity asset. A tank with a complete rectifier log, annual surveys measured at fixed points, calibrated electrodes, closed corrective actions and a documented instant off method supports an extension argument with almost no discussion. A tank with the same hardware and patchy records supports nothing, and the difference between the two is administrative rather than technical.","Atlantis supports owners and their API 653 authorised inspectors by reviewing cathodic protection evidence against the inspection interval being claimed, and by combining it with bottom thickness data, settlement records and, where the shell geometry is in question, [3D laser scanning](/3d-scanning-services) of the tank. Where the evidence needs a Level III review before it goes into an interval justification, [request a consultation](/contact) and we will assess what you already hold before recommending any new survey work."]}],"faq":[{"q":"Is API RP 651 mandatory?","a":"API RP 651 is a recommended practice rather than a regulation, so it is not mandatory of itself. It becomes binding when a jurisdiction, an environmental permit, an insurer or a corporate standard invokes it, and it becomes practically binding whenever an owner cites it as the basis of a cathodic protection programme, because auditors then test conformance against what the site says it does. Many operators also invoke it contractually on cathodic protection service providers so that survey methods and records are consistent across a tank farm."},{"q":"Can cathodic protection be retrofitted to a tank already in service?","a":"Yes, commonly with deep anode beds, distributed anodes around the perimeter or angle drilled anodes beneath the floor, and the practical constraint is monitoring rather than current delivery. A retrofit can usually deliver enough current, but proving protection under the centre of the bottom without reference electrodes installed at construction is difficult. That limitation should be stated in the design report so that later surveys are read correctly rather than overclaimed."},{"q":"What is the difference between API RP 651 and API RP 652?","a":"API RP 651 covers external, soil side corrosion control of the bottom by cathodic protection. API RP 652 covers internal linings applied to the product side of the bottom to control internal corrosion. They address opposite faces of the same plate and are frequently used together, since a lined bottom with an effective cathodic protection system protects both surfaces and gives the strongest position when an extended inspection interval is being justified under API 653."},{"q":"Why would a tank fail the criteria when the rectifier is working normally?","a":"Because the current is going somewhere other than the tank bottom. Bonded copper grounding grids, failed or bridged isolating flange kits on inlet and outlet piping, connected pipework and interference from neighbouring impressed current systems all divert current. A rectifier delivering high output with poor potentials is a symptom of a drain, not proof of protection. Isolation testing and an interference survey normally identify the cause faster than adjusting rectifier output does."},{"q":"How long must cathodic protection records be kept?","a":"For at least as long as the period over which protection is claimed to support an inspection interval, and in practice for the life of the tank bottom. If an interval extension rests on effective protection over fifteen years, then fifteen years of rectifier logs, annual surveys and corrective actions have to exist and be retrievable. Records held only by a cathodic protection contractor tend to disappear at contract change, which is why they belong in the owner tank file."}]}