7NOX

23/10/2026

An elevator moved with its doors open. One person died. A retrofit estimated at 44,000 elevators followed, and the next NYC deadline is 1 January 2027.

Full episode: https://7nox.com/noxtalks?utm_source=facebook&utm_medium=episode&utm_campaign=ep44&utm_content=teaser

15/10/2026

A roof sensor went into alarm on a holiday weekend. Forty-five minutes later, water was in three more zones. Nobody was on site.
Your fire panel is supervised 24/7. Your roof gets a walk-through twice a year. Chubb puts roof leaks at about 15% of commercial water-damage claims, nearly double HVAC's share.
Full episode: https://7nox.com/noxtalks?utm_source=facebook&utm_medium=episode&utm_campaign=ep43&utm_content=teaser

25/09/2026

The cheapest kilowatt at 4 p.m. might be the one your building made at 2 a.m.
That's the idea behind thermal energy storage. Chillers freeze water overnight on off-peak power, and the building melts that ice to carry the afternoon cooling load. It's decades-old technology, but it's getting a fresh look as peak electricity becomes more expensive and grids come under more strain.

In the latest NOXTalks episode, we dig into whether it actually pencils out:

🧊 Eleven Madison in Manhattan runs 64 ice tanks four levels below ground. Trane reports a 1,035 kW cut in summer peak demand and more than $730,000 a year in savings.

⚙️ Controls make or break the outcome. Research by Drees and Braun found simple chiller-priority control could cost up to 20% more than optimal. A Tsinghua University study cut energy costs by 9.9% by forecasting tomorrow's cooling load.

📑 The payback lives in your tariff. If demand charges are a small slice of your bill, storage probably won't justify itself.

The tank is simple. The brains are everything.

10/09/2026

Nobody scheduled this migration. But it's coming anyway.

BACnet has run buildings since 1995, and classic BACnet/IP still moves unencrypted UDP traffic with no protocol-level peer authentication. That model made sense on isolated networks. It makes much less sense with shared IT infrastructure, remote vendor access, and cloud connections.
BACnet Secure Connect changes the communications layer without touching your objects, points, or control logic. TLS, secure WebSockets, mutual certificate authentication. The same shift the web made from HTTP to HTTPS.
And the ground is moving: formal BACnet/SC conformance tests are now part of ASHRAE 135.1-2025, and spec language requiring Secure Connect support is starting to appear, including in US DoD facility cybersecurity specifications.
The latest NOXTalks episode covers what changes on the wire, why "we'll deal with it later" is getting expensive, and the three moves worth making this quarter: inventory your device support, write SC capability into new specs, and bring IT into certificate management early.

Not a rip and replace. A phased migration. But one that rewards the owners who start planning now.

04/09/2026

The deadliest water problem in most buildings isn't a leak. It's biological.
CDC data shows reported Legionnaires' disease case counts grew nearly nine times between 2000 and 2018 — and when the CDC investigated outbreaks, nine in ten involved problems that effective water management could have prevented.
That's not an act-of-nature risk. That's an operations risk.

And it's now a regulated one. CMS has expected documented water-management policies from Medicare-certified healthcare facilities since 2017. New Jersey's law requires written water-management programs by 12 September 2026, fully implemented by 12 December — with five years of record retention to follow. Other jurisdictions are moving in the same direction.

The latest NOXTalks episode covers the controls angle most compliance guides miss: a BAS can't replace a water-management program, but it can automate and document much of the monitoring that makes one work. Hot water temperature trending. Cooling-tower treatment supervision. Flow data that flags stagnation before it becomes a hazard.

The same trend infrastructure that demonstrates energy performance can provide timestamped evidence that your water-control parameters were monitored and maintained.

27/08/2026

Who programs your building in 2035? Not which vendor. Which person.

JLL's research puts 39% of US facilities managers over the age of 55, against 28% across all occupations. The Department of Energy calls the shortage of people entering building controls a critical need. And LBNL found that the higher-level BAS skills, the ones that actually diagnose faults, are mostly built through years of field experience, not classrooms.

So a lot of your building's operational knowledge lives in a small number of heads. Some of them are retiring. Some of them work for your integrator, not for you.
The new episode looks at this as an owner's risk rather than an industry "skills gap": integrator dependency, knowledge trapped in one person, and what happens to your contract leverage when only one firm can touch the controls.
Three things you can do without buying a new platform:

1. Make current, version-controlled programming documentation a contract deliverable, not a courtesy.
2. Solve lock-in for the people, not just the protocol. BACnet gives you interoperability. It doesn't give you serviceability.
3. Train your own team to read the sequences. Not write them. Read them.
If your building's logic lives on one vendor's laptop, you don't own your building's brain. You're renting it.

13/08/2026

Your BMS already knows how to shed load. It does it every day.
So why isn't it earning money?
This week's episode looks at the least glamorous part of grid-interactive buildings: enrollment and measurement. Not the digital-twin future vision. The plumbing.
Three things most FMs haven't done yet:
1. Asked whether their controls can receive an automated grid signal (capability and connectivity are two different questions)
2. Mapped the enrollment path for their market: direct utility participation or a curtailment service provider
3. Separated their internal IPMVP-aligned reporting baseline from the program's settlement baseline, so DR value actually shows up in financial reporting
The US DOE roadmap put system-wide savings from grid-interactive efficient buildings at one hundred to two hundred billion dollars over two decades. Your building's slice arrives as event incentives, capacity payments, and lower peak-demand costs. But only if the money is measured, documented, and reported.
Invisible money looks like zero money at budget time.
Full episode link in the comments.

02/08/2026

$25 an hour. Or $350 an hour. Both can be a perfectly fair after-hours HVAC rate.
That spread is exactly why "what should I charge?" is so hard to answer. The right number depends on your market, your building class, your plant, and what's bundled into the rate.
A few benchmarks from real lease clauses and tenant handbooks:
Most single-zone rates land between $50 and $100 per hour. High-cost metros like Manhattan run $80 to $150 per floor, and premium towers push well past that. Nearly every program carries a one or two-hour minimum.
And watch the per-zone trap: when several tenants share one plant, charging each the full rate can overcharge badly. One audit found a firm overpaying close to $175,000 a year because of it.
Full benchmark guide here, including what drives the number and how to tell if yours is fair. https://7nox.com/after-hours-hvac-cost/

After-hours HVAC typically costs $25–$150/hour per zone, $50–$100 in most markets. See real benchmark rates, what drives them, and how to tell if yours is fair.

30/07/2026

In 1994, an explosion at the Texaco Milford Haven refinery injured 26 people. The UK Health and Safety Executive's investigation found that in the final eleven minutes, two operators had to recognize, acknowledge, and act on 275 alarms.

One every two to three seconds.

The alarms weren't broken. There were simply too many of them, poorly prioritized, arriving faster than any human could respond. That incident became a defining case behind EEMUA 191, the guide that still defines healthy alarm-system performance today.

Here's the uncomfortable part: most commercial buildings run alarm systems that would fail every one of its benchmarks. The BAS ships with alarms "for free," nobody designs them, and twenty years later operators are ignoring thousands of notifications a day — rationally, because almost none of them require action.

Until one does.

The latest episode borrows the process industry's playbook for facilities teams:

➡ Alarm rationalization: every alarm needs a defined operator response, or it gets demoted or deleted. One published ISA case study reported an 84% reduction in alarm load.
➡Smart routing: only alarms requiring timely intervention should interrupt a person, and the critical ones should flow into your CMMS with an owner and an escalation trail.
➡ Alarm health as a KPI: track average alarm rate, floods, chattering points, stale alarms, and priority distribution — the way mature alarm-management programs already do.

Alarm fatigue isn't an operator failure. It's a design failure that operators absorb on behalf of everyone who never looked at the alarm summary.

23/07/2026

"It still works" and "it's still supportable" are two very different statements about a building automation system.

Mainstream Windows 10 support ended on October 14, 2025. Extended Security Updates and certain LTSC editions created exceptions, but only for owners who knew exactly which edition they were running and had a documented patching path. For everyone else, the deadline exposed a budgeting blind spot: critical building controls with no funded replacement cycle.

The IT department refreshes laptops on a planned three-to-four-year cycle. Meanwhile, some industry sources put the optimal controls refresh window around seven to ten years, yet many buildings have no formally funded controls refresh plan at all. Obsolescence arrives as an emergency instead of a line item.

The latest episode covers what a lifecycle discipline actually looks like: ASHRAE Guideline 13-2024's guidance on legacy control systems, Albireo Energy's ten-plus-year screening threshold for legacy risk, the lesson of Tridium's 2021 Niagara AX deprecation, and three practical moves. Run a legacy checklist before anything fails. Get facilities, IT, and cybersecurity working from one lifecycle plan. Build a risk-based modernization roadmap so a failed hard drive doesn't set your capital schedule for you.

Every BAS has several clocks running. The only real decision is who's reading them.