The Ungoverned AI Inside Battery Energy Storage Systems

One energy storage company has moved. In March 2026, Brenmiller Energy achieved ISO 42001 certification for its AI management system covering their thermal energy storage optimization, predictive maintenance, and demand forecasting. Brenmiller uses molten rock thermal storage, not lithium-ion battery chemistry. However, their certification does not cover electrochemical battery management system (BMS) decision-making. But the move confirms the direction of travel. So, the question for Ford Energy, Tesla Energy, CATL, and every lithium-ion BESS manufacturer isn't whether ISO 42001 will be required but WHO certifies first.

Existing standards are not designed for AI governance. Applying them to AI-driven battery management systems creates dangerous gaps.

— IEC 62933. covers electrical and functional safety requirements for energy storage systems. It does not address AI model performance, training data quality, drift detection, or human oversight requirements. Passing IEC 62933 tells you the hardware meets safety thresholds. It says nothing about the AI making decisions inside it.

— UL 9540. covers safety standards for energy storage installations. The standard was designed before AI-driven BMS were the norm. It audits the physical system, not the decision-making layer.

— Internal monitoring dashboards. offered by every major BESS manufacturer, report on current performance metrics. They are backward-looking instruments. They confirm the system is operating within its current parameters. They do not detect slow divergence between model predictions and actual outcomes. They do not flag when the training distribution no longer matches operational reality.

There is no single federal AI law in the United States. What exists instead is a set of enforceable pressures building from four directions, each of which reaches directly into the BESS sector.

— NERC CIP supply chain expansion, enforceable now. FERC finalized a supply chain risk management rule extending protections to network-connected equipment. An AI-driven BMS communicating with grid control systems qualifies. Non-compliance penalties reach $1.54 million per day per violation. FERC has also directed NERC to examine predictive AI in grid operations, building the regulatory record for future binding requirements.

— NIST AI RMF Critical Infrastructure Profile, April 2026. NIST released a profile specifically guiding critical infrastructure operators on AI risk management practices. Grid-connected BESS is critical infrastructure by FERC and CISA definition. Federal contractors must demonstrate NIST-aligned AI governance. ISO 42001 maps directly to NIST AI RMF, meaning certification satisfies the federal procurement standard.

— Texas TRAIGA, enforceable January 2026. Texas enacted the Responsible AI Governance Act, effective January 1, 2026. Any manufacturer or deployer operating in the ERCOT market, the largest deregulated energy grid in the US, falls under its scope. The law provides an affirmative defense for organizations that adhere to a nationally recognized AI risk management framework. ISO 42001 satisfies that defense.

— California CPUC BESS auditing program, active 2026. The California Public Utilities Commission adopted Resolution ESRB-13 requiring BESS facilities to comply with safety rules in General Order 167-C. Twelve BESS audits are scheduled for fiscal year 2025-26. California is the largest US BESS market. AI governance is not yet on the audit checklist. It will be.

Colorado's SB 205, which referenced ISO 42001 as a safe harbor, was repealed by the Colorado legislature in May 2026 and replaced with a disclosure-based framework effective January 2027. It is no longer a compliance driver. Which means the European Union AI Act remains relevant for any organization with European deployments, customers, or supply chain exposure, but it's not the primary urgency driver for US-only operations.

Fusion Collective's BESS AI Governance Program is the first ISO 42001 certification pathway built specifically for battery energy storage manufacturers and their downstream deployers.

The program addresses the governance gap at two levels.

Fusion Sentinel, Fusion Collective's continuous monitoring product, tracks real-time performance across all six BMS drift vectors after certification. Monthly drift alerts, quarterly governance reports, and annual surveillance audit support run between ISO 42001 audit cycles. The certification recurs every three years. Sentinel operates continuously, ensuring governance reflects actual system behavior, not a point-in-time assessment.

The certification program runs in six phases. You can enter at Phase One for the full program or at the standalone readiness assessment, which is credited toward the full program on engagement.

To date, there is no comprehensive federal AI law in the United States but what does exist is more immediate. NERC CIP supply chain standards are already enforceable, with penalties reaching $1.54 million per day per violation. The NIST AI RMF Critical Infrastructure Profile, released in April 2026, explicitly names grid-connected AI as a governance priority and is the reference standard federal procurement is moving toward. Texas law provides an affirmative defense for ISO 42001-aligned organizations operating in the ERCOT market. California is auditing BESS facilities right now. Procurement teams at major utilities and data centers are adding AI governance requirements to supplier qualification. And no governance documentation at all is the worst discovery answer a General Counsel can give when a warranty claim or thermal event produces litigation.