Cross-Connection ControlBackflowPrep

Guide

The assembly families: RP, double check, PVB and the air gap

A field-level guide to the main backflow protection families: what each one protects against, where you meet it, why the authority assigns one over another by degree of hazard, and what a tester needs to recognize on arrival.

Walk a full testing route and you will meet the same cast of hardware over and over: reduced pressure principle assemblies guarding the serious hazards, double check assemblies on the lower-risk services, vacuum breakers standing on irrigation lines, detector assemblies on fire services, and here and there an air gap doing the oldest trick in the book. Learning to recognize each family on sight, and understanding why the water authority put that particular family at that particular connection, is the foundation the rest of the trade is built on. The test procedures differ by family, the failure conversations differ by family, and the stakes differ by family.

This guide covers each family conceptually: what it protects against, how it does it, where you encounter it in the field, and what a tester should be reading off the installation in the first minute on site. It deliberately avoids test values, procedures, and installation specifications, because those belong to your training course and your local authority. What it gives you is the framework that makes all of that material easier to absorb.

First, the logic that assigns the device

No assembly is chosen at random, and none is chosen by the property owner's budget. The assignment follows a two-part evaluation. The first part is mechanism: can this connection experience backsiphonage, where a loss of supply pressure pulls water backward, or backpressure, where downstream pressure exceeds supply and pushes water backward, or both? The second part is degree of hazard: if backflow occurred here, would the material involved be a health hazard, something that could sicken or kill, or a non-health hazard, something that would degrade the water without threatening anyone? The authority having jurisdiction makes the hazard determination, and it is their call, not the tester's, not the installer's, and not the owner's.

Cross those two questions and the family assignments follow naturally. Higher hazard pushes toward the more fail-safe families. Backpressure potential rules out the families that only answer siphonage. The result is a matching exercise between threat and hardware, and once you understand it, the hardware you find in the field stops looking arbitrary. The chemical plant has what it has because of what could flow backward there; the lawn irrigation system has what it has for the same reason.

One more distinction shapes what you see in the field: containment versus isolation. Containment protection sits at the service connection, typically near the meter, and protects the public system from the entire property, whatever happens inside it. Isolation protection sits at individual fixtures and equipment inside the building, protecting the building's own occupants from specific internal hazards. Many properties have both: an assembly at the meter containing the site, and additional assemblies inside isolating particular equipment. When you are dispatched to a property with several devices, this is usually why, and knowing which role a given assembly plays tells you a lot about why it is the family it is.

Reduced pressure principle assemblies: the heavy protection

The reduced pressure principle assembly, called an RP or RPZ in the field, is the family assigned where the hazard is highest. Conceptually it is built from two independent check valves in series with a relief valve between them. The two checks are barriers against reverse flow from either mechanism, pushed or pulled. The relief valve is the part that makes the family special: it monitors the zone between the checks, and if conditions inside the assembly ever stop being right, it discharges water out of the assembly rather than allow that zone to become part of a path backward. The design philosophy is that the assembly should fail toward dumping water on the floor instead of failing toward letting anything reach the supply.

That discharge behavior is the RP's signature, and it shapes everything about where and how you find them. An RP can and will relieve water in ordinary service, which is why they are installed where discharge can be seen and drained, and why a relief port dripping or flooding is one of the most common service calls in the trade. For a tester, the relief valve is also the tell for identification: the visible relief port between the check zones is what distinguishes an RP from a double check at a glance. Where you meet them: mechanical rooms feeding boilers and chemical treatment, medical and dental facilities, industrial process connections, irrigation systems that inject fertilizer or chemicals, mortuaries, marinas, and as containment on services the authority has judged high hazard overall. Anywhere the material that could flow backward could hurt someone, expect an RP.

The RP is the family that most rewards respect. It has the most internal components doing coordinated work, its failure modes are the most varied, and the consequences it guards against are the most serious. It is also, not coincidentally, the family where a tester's clean documentation matters most, because a failed RP on a high hazard service is exactly the situation cross-connection programs exist to catch.

Double check assemblies: the workhorse for lower hazard

The double check valve assembly is conceptually simpler: two independent check valves in series, each one a barrier against reverse flow, with no relief valve between them. Like the RP it addresses both mechanisms, backsiphonage and backpressure, because its checks physically block reverse flow however that flow is driven. What it lacks is the RP's fail-toward-discharge behavior. If both checks are compromised, nothing in the assembly announces the fact or dumps the path to the floor. That is precisely why the family is assigned to lower hazard, non-health-hazard services: connections where backflow would be objectionable, degrading water quality, but not dangerous.

Where you meet them: commercial building services the authority has judged lower hazard, fire sprinkler services without chemical additives in many jurisdictions, and a wide range of general containment applications. They ride in vaults, in mechanical rooms, and in enclosures, and because they do not discharge in normal operation, they tolerate installation environments an RP could flood.

For the tester, the double check carries a specific professional trap: because nothing about a compromised double check is visible from the outside, the periodic test is the only thing standing between a silent failure and years of unprotected service. An RP often advertises its problems by discharging. A double check never advertises anything. The test visit is the entire safety net, which is a point worth making to customers who ask why a device that looks fine needs testing at all.

Pressure vacuum breakers and their spill-resistant siblings

The vacuum breaker families protect against one mechanism only: backsiphonage. Conceptually, a pressure vacuum breaker pairs a check with an air inlet. In normal service the air inlet stays closed and water flows one way. When supply pressure is lost, the air inlet opens and admits air into the piping, breaking the siphon the way a vent hole breaks the vacuum in an inverted bottle. No siphon, no pull, no backflow. It is a simple, robust answer to the pulled-backward problem.

What a vacuum breaker cannot do, by design, is resist backpressure. Air admission is meaningless against water being actively pushed from downstream; positive pressure simply keeps coming. That is not a defect, it is the boundary of the family's job, and it is why you will never find a vacuum breaker legitimately assigned to a connection with pumps, elevated piping, or any other backpressure source downstream of it. When you do find one in that position, you are looking at a misapplication worth flagging to the authority.

Where you meet them: irrigation, irrigation, and irrigation. The pressure vacuum breaker is the signature device of lawn and landscape sprinkler systems, standing on risers outside homes and businesses in enormous numbers, which is why irrigation-heavy markets generate so much seasonal testing volume. The spill-resistant variation exists because a standard vacuum breaker can discharge some water in operation, which is unwelcome indoors and in finished spaces; the spill-resistant design accomplishes the same air-admission protection while managing that behavior, and you meet it in interior and enclosed applications where discharge would be a problem.

One practical note for the aspiring tester: because vacuum breakers are so numerous and so often owned by residential customers, they generate more customer education per device than any other family. The homeowner with one device on an irrigation line is the person most likely to ask why it exists, why it must be tested, and why it cannot simply be removed. A tester fluent in the straw explanation, supply pressure loss pulls, the air inlet breaks the pull, earns those customers' renewals year after year.

The air gap: the oldest and strongest protection

The air gap is not a mechanical assembly at all. It is a physical separation, open air between the supply outlet and the highest possible level of the receiving vessel, and it is the most absolute protection that exists. No pressure event on either side can move water across a genuine gap of open air. There are no checks to foul, no springs to fatigue, no seals to wear. Every faucet pouring into a sink above the flood rim is an everyday air gap, and where process connections can be designed with a true gap, nothing mechanical matches the protection.

So why is everything not an air gap? Because the gap has costs and fragilities of its own. It breaks the pressure of the supply, which means anything downstream of it must be repumped if pressure is needed, and that repumping equipment introduces its own considerations. It requires space and plumbing geometry that many installations cannot give. And critically, it is only as good as its preservation: a hose clamped to a faucet and dropped into a tank has just defeated the gap entirely, converting the strongest protection into none. An air gap is a condition to be maintained and verified, not a device to be installed and forgotten, which is why surveys and inspections keep an eye on gaps that testers' gauges never touch.

For a tester, the air gap mostly matters as context. You do not put a test kit on open air. But understanding the gap clarifies the whole hierarchy: every mechanical assembly is, conceptually, an attempt to approximate in a closed pipe what an air gap achieves by geometry, and the families rank by how close they come and how they fail. The RP fails toward discharge, the double check fails silently, the vacuum breaker answers only one mechanism, and the gap, properly kept, does not fail at all.

Detector assemblies: the fire line special case

Fire protection services get a family of their own. A fire line is a large, dedicated, usually unmetered connection to the public system, and it presents two problems at once. The first is the ordinary one: the stagnant water standing in a sprinkler system for years is not something anyone wants pushed or pulled back into the supply, so the service needs backflow protection like any other. The second is particular to fire lines: because the connection is unmetered, water taken from it, whether leakage, unauthorized use, or theft, would otherwise be invisible to the utility.

Detector assemblies answer both problems in one package. Conceptually, a detector assembly is a full-size backflow assembly on the main fire line paired with a small bypass line carrying a meter and its own protection. Any low flow through the service, the kind produced by a leak or an unauthorized draw, registers on the bypass meter, making unmetered use detectable while the main line stands ready to deliver full fire flow. Detector versions exist across the check-based families, matched to the hazard the authority assigns to the fire service.

For testers, fire lines come with extra field discipline. You are working on a life-safety system, which means coordination with building staff before anything is shut, awareness of alarm and monitoring implications, and absolute rigor about restoring the service and verifying it afterward. A domestic line left shut is an angry phone call. A fire line left shut is a building standing unprotected. Many testers treat fire service work as its own discipline, and a dedicated fire sprinkler credential exists in the ASSE series for exactly that reason.

What a tester reads on arrival

Put the families together and the first minutes of any test visit become a structured read of the installation. Before a hose comes off the truck, an experienced tester has usually answered a series of questions just by looking:

  • Which family is this? A relief port between the check zones says RP; checks in series without one says double check; an air inlet on a riser says vacuum breaker; a metered bypass around a full-size assembly says detector
  • Does the family fit the context? A device that only answers backsiphonage standing upstream of pumps, boilers or elevated piping is a mismatch worth documenting and reporting to the authority
  • Is this containment or isolation? Position near the meter suggests containment for the whole property; position at a piece of equipment suggests isolation of that specific hazard
  • What do the shutoffs and test cocks look like? Their presence and condition determine whether the assembly can even be isolated and tested today
  • What does the tag and record history say? Prior test tags, repair tags and serial data connect this visit to the paper trail the authority tracks
  • What are the site logistics? Vault, enclosure or mechanical room access, drainage in case of discharge, occupants who need notice, and for fire lines, who must be informed before anything is shut

That read is not busywork. It determines which procedure you will run, it catches misapplications the authority wants to hear about, and it protects you from the classic field errors: testing the wrong device, testing a device that cannot safely be isolated, or shutting a service nobody prepared the building for. The gauge work that follows is prescribed and trained; the read is judgment, and it is what field experience builds.

FamilyProtects againstWhere you commonly meet it
Reduced pressure principle (RP)Both mechanisms; designed to discharge rather than fail toward the supply; assigned to high hazardMechanical rooms, chemical and medical connections, injected irrigation, high hazard containment
Double check assemblyBoth mechanisms; no relief behavior; assigned to lower hazardCommercial services, many fire lines without additives, general lower hazard containment
Pressure vacuum breakerBacksiphonage only; air inlet breaks the siphonLawn and landscape irrigation risers in huge numbers
Spill-resistant vacuum breakerBacksiphonage only; manages discharge for enclosed locationsInterior and finished-space applications of the same protection
Air gapEverything; physical separation, no mechanism at allFixtures, tanks and process connections designed with true separation
Detector assembliesBackflow protection plus detection of unmetered flowDedicated fire protection services

Hazard calls belong to the authority

Degree of hazard, the choice of assembly family for a connection, and containment and isolation requirements are determined by the water authority having jurisdiction. Testers report what is installed and how it performed; they do not assign protection. When the installed family looks wrong for the visible hazards, document it and raise it with the authority.

Learning the families for real

Everything above is the conceptual map, and the map is genuinely useful: it tells you why the hardware is what it is, and it will make your training week dramatically easier. What it is not is the training. Each family has its own defined field test procedure, its own pass and fail criteria, and its own repair and reporting pathways, and those are taught hands-on, on real assemblies, at an ASSE Accredited School as part of the tester certification. The practical exam then requires demonstrating correct testing across the covered assembly types in front of an evaluator, which is exactly as it should be for work that stands between the public and its drinking water.

If you can already tell an RP from a double check across a mechanical room, explain to a homeowner why the vacuum breaker on their sprinklers cannot handle a pump, and say who decides which device a connection gets and why, you are ahead of most people who walk into the course. The families are the vocabulary of this trade. Learn them conceptually now, then let the school put the gauge in your hands.

See the certifications that put you on these assemblies

The three-year clock sheet

One printable page: every 5000-series requirement, the recert timeline counted back from your expiry date, and the kit checklist. Free.

No spam. One useful sheet and occasional certification notes.

The instrument this trade runs on

Confirm what your jurisdiction's test procedures require before choosing a kit.The kit guide.

Certification facts sourced from ASSE International's published requirements. The full 5000-series reference.