Facility Elevator Recall Software: Fire Service

By Corin Hale on September 19, 2026

facility-elevator-recall-software-fire-service

When a smoke detector trips, elevators must stop carrying passengers toward the fire and return to a safe level. That behavior is called Phase I recall, and it depends on fire alarm devices, elevator controllers, and firefighter keys all working together. Testing it regularly and recording the result is where many buildings fall behind. This guide explains Phase I and Phase II operation, what to test, and how a CMMS such as Oxmaint turns each recall test into a documented work order.

Elevator Fire Service Maintenance

Facility Elevator Recall Software: Fire Service Testing You Can Prove

Schedule monthly Phase I recall tests, capture Phase II readiness, and connect every failed result to a repair. Give fire marshals and elevator inspectors a clear record for each car in the building.
Upper floorSmoke detector activates on the fire alarm system
Middle floorsCars stop, cancel calls, and travel to the recall level
Designated levelDoors open, fire hat indicator lights, firefighters take over

Phase I and Phase II at a Glance

Elevator fire service operation is defined in ASME A17.1 and CSA B44, with the fire alarm interface described in NFPA 72. Two phases matter for maintenance teams.

Phase I

Automatic recall

  • Triggered by smoke detectors in elevator lobbies, machine rooms, and hoistways
  • Cars return to the designated level, or an alternate level if the trigger is at the designated level
  • Doors open and stay open at the recall level
  • A fire hat indicator in the car signals fire service mode
  • A lobby key switch allows manual recall
Phase II

Firefighter in-car control

  • Firefighters use a fire service key at the car operating panel
  • The car responds only to the firefighter, one call at a time
  • Doors are controlled by the firefighter, not by automatic timers
  • Firefighters can return the car to the recall level on demand
  • Correct keys and labeling must be available to responders

The Recall Sequence Step by Step

Knowing the sequence helps technicians find where a failed test broke down.

1
Detector activates
A lobby, machine room, or hoistway detector senses smoke or heat.
2
Fire alarm panel signals the elevator
Relay outputs send the recall command to the elevator controller.
3
Controller cancels calls
Hall and car calls are cleared and the car heads for the recall level.
4
Doors open at the recall level
The car parks with doors open and does not accept normal calls.
5
Indicator and reset
The fire hat lights, and the system returns to normal only after the alarm is reset and the key is restored.

Initiating Devices and Expected Elevator Response

Initiating deviceTypical locationExpected response
Lobby smoke detectorElevator lobby on a floor other than the designated levelPhase I recall to the designated level
Lobby smoke detector at recall levelDesignated level lobbyRecall to the alternate level
Machine room smoke detectorElevator machine room or control spaceRecall, with the fire hat indicator flashing in the affected elevator
Hoistway smoke detectorTop of the hoistway or as requiredRecall, with the fire hat indicator flashing in the affected elevator
Heat detector for shunt tripMachine room or hoistway with sprinklersRecall first, then power removal before sprinkler discharge where applicable

Designs vary by jurisdiction and code edition, so use your own approved drawings and sequence of operations as the authority.

Turn Every Recall Test Into a Signed Record

Give each elevator a recurring recall test, a mobile checklist, and a corrective work order path, so a missed or failed test is visible the same day.
Scheduling, inspections, and compliance records for every car

What a Monthly Recall Test Record Should Capture

Many jurisdictions, and the maintenance requirements associated with ASME A17.1, call for regular firefighter service testing, commonly monthly. Confirm the interval your inspector enforces.

Elevator identifier
Bank, car number, and state registration
Date and time
Start time and completion time of the test
Tester
Name, company, and qualification
Test method
Key switch position or detector test used
Car response
Recalled to the correct level, calls cancelled
Doors and indicator
Doors held open, fire hat indicator working
Phase II check
In-car key switch and operation confirmed
Result and follow-up
Pass or fail, deficiency notes, and linked work order

Why Recall Tests Fail

Failures rarely have a single cause. They usually sit on the fire alarm side, the elevator side, or in the gap between the two contractors.

Fire alarm side

  • Dirty or misplaced detectors
  • Relay module faults
  • Wiring damaged during renovations
  • Programming changed and never retested

Elevator side

  • Controller relay or input problems
  • Worn key switches
  • Burned-out fire hat lamps
  • Software changes after modernization

Coordination gaps

  • Nobody owns the whole test
  • Elevator and alarm contractors test separately
  • Results filed in different places
  • Missing or wrong keys

Who Owns What in an Elevator Recall Program

PartyTypical responsibilityRecord it should provide
Building owner or managerEnsures tests happen, keys are available, and deficiencies are correctedTest log, work orders, inspection certificates
Elevator contractorMaintains controllers, key switches, and in-car equipmentService reports and callback history
Fire alarm contractorMaintains detectors, panel outputs, and recall relaysInspection and test reports
Building engineerCoordinates tests, escorts contractors, verifies restorationChecklists, photos, and sign-offs
Fire department and inspectorVerifies operation and reviews documentationInspection findings and required corrections

Fire Service Keys and Phase II Readiness

A recall system does little good if responders cannot operate the car. Include key management in the same program.

  • Confirm that the fire service key is stored where responders expect it, such as a lobby key box.
  • Verify that the key operates every car in the bank.
  • Check that key switches are labeled clearly and that operating instructions are posted.
  • Update fire department pre-plans after any elevator modernization.
  • Track who holds copies of keys and log any changes.

After Renovations or System Changes

Recall problems often appear right after other work. Build retest triggers into change control.

Without change control

  • Tenant fit-out moves a detector
  • Fire alarm panel is replaced without an elevator test
  • Recall fails at the next inspection
  • Cause is unknown and blame is shared

With change control

  • Any detector or panel change creates a retest work order
  • Elevator and alarm contractors test together
  • Result is recorded against both assets
  • Failures are found before the inspector arrives

How Oxmaint Organizes the Recall Program

A
Register the assets
Add each elevator, recall detector, relay, and key set to asset management with location and documents.
B
Schedule the tests
Create recurring preventive maintenance work orders for the monthly recall test and the annual functional tests.
C
Run the checklist on mobile
Technicians record each result, add photos, and capture sign-off at the elevator.
D
Convert failures to repairs
A failed step opens a corrective work order assigned to the elevator or alarm contractor.
E
Report and audit
Dashboards and reports show overdue tests, repeat failures, and closure time for inspectors and owners.

Recall Program Measures

Test completion rate
Monthly recall tests completed for every car, on time.
Deficiency closure time
Days from a failed recall step to a verified repair.
Repeat failures
Cars or devices that fail the same step more than once.
Unsigned records
Completed tests lacking tester name or sign-off.
Days since last test
Age of the most recent successful recall test per car.

Machine Room and Hoistway Conditions That Affect Recall

Recall relies on detectors and wiring in some of the least visited spaces in a building. Conditions there change slowly and are easy to overlook.

  • Dust and construction debris can cause nuisance activations or reduce detector sensitivity.
  • High machine room temperatures can shorten the life of controllers, relays, and batteries.
  • Water in the pit or leaks from above can damage wiring and devices.
  • Storage in machine rooms can block detector coverage and access to equipment.
  • Shared spaces need clear labels so other trades do not disconnect recall wiring by accident.

Schedule a periodic walkthrough of machine rooms and pits so these conditions are recorded before they cause a failed test.

Test Procedure Outline for Technicians

Use your elevator and fire alarm contractors' procedures and the applicable code as the authority. This outline shows the coordination points a checklist should cover.

1
Plan and notify
Choose a low-traffic time, notify occupants, and tell the monitoring center that testing is under way.
2
Confirm the starting state
Check that the fire alarm panel is normal and that each car is in regular service.
3
Initiate recall
Use the key switch or a device test as the procedure directs, and observe each car.
4
Verify behavior
Check the recall level, door operation, call cancellation, and the fire hat indicator.
5
Check Phase II
Confirm the in-car key switch and firefighter operation according to the procedure.
6
Restore normal service
Return switches to normal, reset the panel, and confirm each car resumes regular operation.
7
Notify and record
Tell the monitoring center testing is complete, then log results, photos, and any deficiencies.

Older Elevators, Modernizations, and Code Editions

Requirements depend on the code edition adopted where the building stands and on when the elevator was installed or altered. Existing installations are often governed by ASME A17.3, the safety code for existing elevators.

  • Record the installation year and the last modernization date on each elevator asset.
  • Store the approved sequence of operations and wiring diagrams with the record.
  • Note which code edition your inspector uses so tests match expectations.
  • Retest recall after any controller replacement, software update, or fire alarm change.
  • Keep alteration permits and acceptance test reports with the asset file.

Common Findings and How to Prevent Them

FindingWhy it happensPreventive action
Car does not recallRelay or wiring fault, or programming changed after other workRetest after any related change and inspect relay connections
Fire hat indicator not litBurned-out lamp or failed indicator circuitInclude the lamp in each monthly checklist and stock spares
Doors close during recallDoor operator setting or controller input problemVerify door behavior at the recall level on every test
Fire service key missing or wrongKeys moved, lost, or not replaced after a changeAudit key location and fit quarterly
No test record availableRecords kept by contractors in separate systemsRequire test results to be attached to one asset record

Documentation to Keep for Elevator Inspections

  • Monthly recall test logs with tester name and result.
  • Annual fire alarm functional test reports that include the elevator interface.
  • Elevator maintenance control program and service records.
  • Deficiency reports with corrective work order numbers and closure dates.
  • Fire service key inventory and storage location.
  • Alteration records and acceptance tests after modernizations.

Talking to occupants about recall tests

  • Post notices in lobbies before scheduled tests so occupants know cars may pause.
  • Stage tests when possible so cars are empty, and check each car before starting.
  • Share results with property management so recurring problems are visible.

Sprinklers, Shunt Trip, and Elevator Power

In buildings with sprinklers in elevator machine rooms or hoistways, codes generally require coordination between heat detection, power removal, and recall. This interface deserves its own test steps.

  • Confirm which heat detectors are tied to power removal and label them on the asset record.
  • Verify that recall occurs before power is removed, as the approved design requires.
  • Test shunt trip circuits according to the contractor's procedure and record the outcome.
  • Keep the shunt trip breaker or disconnect identified and accessible.
  • Involve the sprinkler contractor when the design changes.

Tracking Reliability Car by Car

Recall tests are one data point in a wider picture of elevator health. Combining them with service history shows which cars deserve attention.

Test history

  • Pass or fail by month
  • Steps that fail repeatedly
  • Time to retest after repair

Service history

  • Callbacks and entrapments
  • Parts replaced
  • Contractor response time

Cost history

  • Repair spend per car
  • Contract scope coverage
  • Candidates for modernization

High-Rise and Multi-Tenant Considerations

  • Large elevator banks may include several designated and alternate recall levels, so document them in one place.
  • Tenant fit-outs on elevator lobbies can move detectors or change ceiling layouts and should trigger a retest.
  • Fire command centers may have status panels for elevators that also need testing.
  • Service, freight, and parking elevators often have different sequences from passenger cars.
  • Coordinate testing windows with tenants to avoid disrupting peak arrival and departure times.

Budgeting for recall-related repairs

  • Keep a small reserve for relays, key switches, indicator lamps, and detector replacement.
  • Use repeat failure data to justify modernization requests.
  • Ask contractors to itemize recall-related work so costs are visible in reports.

Questions to Ask Before Your Next Elevator Inspection

  • Do we have a signed recall test record for every car for the past twelve months?
  • Was recall retested after the last fire alarm or elevator change?
  • Is the fire service key where responders expect it, and does it fit every car?
  • Are all open deficiencies assigned, dated, and tied to a work order?
  • Can the elevator and fire alarm contractors show their results in one shared record?

Elevator Recall Software FAQs

What is the difference between Phase I and Phase II?

Phase I is automatic recall to a safe level, while Phase II lets firefighters operate a car with a key. Both need documented testing.

How often should recall be tested?

Many jurisdictions expect monthly testing, plus periodic functional tests with the fire alarm system. Confirm with your local inspector.

Who should perform the test?

Requirements vary, but a qualified person must do it, often coordinated between elevator and fire alarm contractors. Book a demo to see the checklist workflow.

What if a car fails to recall during a test?

Log the failure, open a corrective work order, notify both contractors, and retest after the repair. Keep both records together.

Can I track many elevators across several buildings?

Yes. Each car becomes an asset with its own schedule and history. You can start a free account and add sites gradually.

Be Ready When the Fire Marshal Asks for Recall Records

Replace paper logs and email chains with scheduled tests, clear ownership, and a repair trail for every elevator in your portfolio.
Preventive maintenance, mobile checklists, and audit-ready reports

Share This Story, Choose Your Platform!