When Containment Is Invisible: How CL3 Laboratories Are Actually Tested
- A. Peat
- 12 hours ago
- 14 min read
Walk into a properly operating Containment Level 3 (CL3) laboratory and, at first glance, things may seem surprisingly calm.
The lights are on.
Equipment is humming.
Researchers are working.
Doors open and close.
Air enters through supply diffusers and disappears through exhaust grilles.
Nothing particularly dramatic appears to be happening.
And that is exactly the point.
A properly functioning CL3 facility relies on an interconnected collection of engineering controls working continuously in the background. Air must travel in the intended direction. Pressure relationships must be maintained. Exhaust air must be appropriately contained and filtered. Biological safety cabinets (BSCs) must maintain their own primary containment. Monitoring systems must detect abnormal conditions. Alarms and interlocks must respond appropriately.
Much of this protection is completely invisible.
So how do we know it is actually working?
We test it.
And perhaps more importantly, we test how the individual systems behave together.
Think of a CL3 laboratory like an orchestra. The exhaust system may be playing the bass line, the supply system the melody, the BSCs the percussion, and the control system is conducting the entire performance.
One instrument playing perfectly does not guarantee a good concert.
Containment depends on the entire orchestra staying in tune.
In Canada, the framework for demonstrating this performance is established through the Canadian Biosafety Standard (CBS), Third Edition, published by the Public Health Agency of Canada (PHAC). The CBS establishes physical containment, operational practice, and performance and verification testing requirements for facilities where regulated human and terrestrial animal pathogens and toxins are handled or stored.
For CL3 facilities, performance verification goes far beyond simply checking that a fan is running.
It asks a much more important question:
If something capable of causing infection becomes airborne inside this facility, do the systems designed to contain it actually perform as intended?
Let's take a look behind the walls.
1. First Principle: Containment Is a System
One of the easiest mistakes to make when thinking about a CL3 facility is imagining containment as a single barrier.
It isn't.
There are multiple layers.
A biological safety cabinet may provide primary containment around a laboratory procedure.
The room and containment zone provide another layer.
The HVAC system establishes directional airflow.
HEPA filtration provides another barrier between potentially contaminated exhaust air and the outside environment.
Operational procedures, PPE, decontamination systems, alarms and emergency procedures add further layers.
Think about a submarine.
Keeping the crew dry isn't dependent on one magical piece of steel. It depends on the hull, doors, seals, valves, pumps, pressure systems and operating procedures all doing their jobs.
A CL3 facility operates on a similar principle.
The Canadian Biosafety Standard defines a containment system broadly, including primary containment devices such as BSCs, HVAC and control systems, and decontamination systems.
This is an important concept.
When we verify a CL3 facility, we are not simply collecting a series of unrelated measurements.
We are gathering evidence that the containment strategy works as a system.
2. Follow the Air
If you want to understand a CL3 laboratory, follow the air.
Airflow is one of the fundamental tools used to maintain containment.
Where inward airflow is required, the HVAC system establishes pressure relationships that cause air to move toward areas of greater containment rather than outward toward less-controlled spaces.
A simplified arrangement might look something like this:
Outside Laboratory → Entry/Anteroom → CL3 Laboratory
The exact pressure values and arrangement depend on the facility design and risk assessment, but the underlying concept is straightforward:
Air should move in the direction intended by the containment strategy.
Imagine opening the front door of your house on a windy winter day.
You don't need an airflow meter to know which direction the pressure difference is driving the air. You feel the cold air rushing past you.
A CL3 facility uses the same basic physics—but in a carefully engineered and controlled manner.
The difference is that in a containment facility, we don't want to rely on someone's face to tell us which way the air is moving.
We measure it.
3. Pressure Differential: A Number With a Bigger Story
Differential pressure monitoring is commonly used as an indication that the HVAC system is maintaining the intended airflow relationship.
A pressure monitor may show a perfectly reasonable number.
But here is the important distinction:
Pressure differential and directional airflow are related, but they are not the same thing.
Pressure differential is the driving force.
Airflow is the result.
Think of pressure like the hill and airflow like the skateboard rolling down it. Measuring the slope tells us why the skateboard should move—but watching the skateboard tells us which way it actually went.
That is why performance verification should not become a simple exercise of writing down numbers from wall-mounted pressure monitors.
The real question is:
Does air actually move inward across the containment barrier?
This can be demonstrated using appropriate airflow visualization methods at critical doorways and boundaries.
Under normal operating conditions, the expected inward airflow should be clearly demonstrated.
The CBS also requires monitoring devices where inward airflow is required so personnel can verify the condition immediately prior to entry.
That little pressure display beside the door therefore has a much bigger job than simply decorating the wall with a negative number.
It is part of the facility's everyday biosafety communication system.
4. The Door Test: Where Containment Meets Reality
Doors are interesting in containment facilities because doors are simultaneously necessary and inconvenient.
People have to enter.
Equipment has to move.
Samples have to travel.
Yet every doorway represents a temporary disruption to the physical containment barrier.
When a door opens, the carefully controlled pressure relationship encounters the messy world of real fluid dynamics.
People walk through.
Another door may open nearby.
Supply diffusers continue delivering air.
Exhaust systems continue pulling air.
The person entering essentially becomes a six-foot-tall moving airflow disturbance.
This is why airflow visualization at critical doors can be so informative.
A properly operating system should demonstrate inward airflow rather than sustained outward airflow that could compromise containment.
A smoke visualization can turn something completely invisible into something everyone can immediately understand.
Release the visualization medium near the doorway and suddenly the room's pressure relationship becomes visible.
Smoke moving inward:
The containment strategy is behaving as intended.
Smoke moving outward:
Now we have a conversation.
It is one of the reasons airflow visualization remains such a powerful diagnostic tool.
Numbers tell us how much.
Smoke can show us how.
5. The Exhaust System: The Lungs of the Facility
If pressure relationships help establish containment, the exhaust system is one of the primary mechanisms keeping the facility breathing in the correct direction.
CL3 exhaust air is subject to specific containment requirements under the Canadian Biosafety Standard, including HEPA filtration.
The CBS requires CL3 exhaust air to pass through one stage of HEPA filtration.
That means the HEPA filtration system becomes an extremely important part of the facility's containment strategy.
But there is an important misconception worth addressing:
Installing a HEPA filter does not automatically mean you have a functioning HEPA filtration system.
The filter could be damaged.
The gasket could be improperly seated.
The housing could have a leak.
A sealing surface could be compromised.
There could be bypass around the filter.
The filter media itself may be perfect while the installation around it is not.
Imagine buying the world's best waterproof window and installing it with a two-inch gap around the frame.
The window isn't the problem.
The installation is.
That is why HEPA filters used for containment are tested in situ.
We aren't simply verifying what the filter manufacturer produced.
We are verifying the filter as installed in the containment system.
6. HEPA Integrity Testing: Giving the Filter an Exam
Under the CBS, applicable HEPA and high-efficiency filters are tested in situ using particle challenge testing. The standard identifies scan testing in accordance with IEST-RP-CC034.3, with probe testing acceptable when scan testing is not possible.
Conceptually, the process is straightforward.
An aerosol challenge is introduced upstream of the filter.
A known upstream concentration is established.
The downstream side of the filter and relevant sealing interfaces are then evaluated for penetration.
For accessible installations, scanning allows the technician to methodically evaluate the filter face and perimeter.
You can think of it like checking a roof with a garden hose.
Standing inside and saying: "The ceiling looks dry."
isn't much of a test.
A meaningful test deliberately challenges the roof and looks for where water gets through.
HEPA integrity testing follows the same philosophy.
Challenge it. Measure it. Verify it. Document it.
And importantly, a HEPA integrity test is not merely an "efficiency test."
The objective is to identify localized penetration or leakage that could provide a pathway through or around the installed filtration system.
That distinction matters tremendously in containment applications.
7. Don't Forget the Housing
The HEPA filter gets most of the attention.
The housing deserves some too.
The Canadian Biosafety Standard requires accessible HEPA and high-efficiency filter housings, as well as associated ductwork between the housing and containment barrier, to be visually inspected for deficiencies.
Why?
Because containment doesn't stop at the edge of the filter.
A beautiful HEPA filter sitting inside a compromised housing is like putting a bank-vault door on a cardboard wall.
During inspection, technicians may be looking for conditions such as:
damaged or deteriorated gaskets;
corrosion;
deformation;
compromised seals;
cracks;
damaged housing components;
questionable penetrations;
deterioration of associated ductwork; and
other conditions that could affect containment integrity.
The condition of these components can also provide valuable clues about the long-term health of the system.
A successful integrity test tells us something extremely important about today's performance.
A careful visual inspection may tell us something about tomorrow's problem.
8. Biological Safety Cabinets: A Room Within a Room
Inside many CL3 laboratories sits another containment system: the biological safety cabinet.
A Class II BSC essentially creates a carefully controlled air environment inside an already controlled air environment.
It is containment within containment.
Or, if we want another analogy:
It's the laboratory equivalent of wearing a raincoat while standing under an umbrella.
The BSC provides primary containment at the procedure.
The CL3 room and its associated engineering systems provide another layer around it.
Under the Canadian Biosafety Standard, Class II BSCs are to be certified under typical conditions of use in accordance with NSF/ANSI 49 where such certification is possible.
That phrase—typical conditions of use—is particularly important.
A cabinet does not operate in a laboratory vacuum.
Room supply diffusers, doors, personnel traffic and nearby equipment can all influence airflow around the cabinet.
Equipment operating inside or near the BSC can also affect its performance.
This is why certification should represent how the cabinet actually lives in the laboratory—not an imaginary perfect environment that exists only on certification day.
Testing typically evaluates critical performance characteristics such as:
inflow velocity;
downflow velocity;
HEPA filter integrity;
airflow smoke patterns; and
other applicable performance parameters and safety functions.
Smoke pattern testing is especially useful because it provides a visual representation of containment.
The front opening of a Class II BSC is essentially an invisible air curtain.
When operating correctly, room air is drawn inward through the front opening while controlled downflow moves through the work area.
That airflow pattern is doing something remarkable:
It allows a person to put their hands through an open hole in a containment device without simply allowing contaminants to escape through that same opening.
That deserves a little respect.
9. The Most Interesting Test May Be: "What Happens If We Break It?"
Testing a facility while everything is operating normally is important.
But high-containment engineering asks another question: What happens when something goes wrong?
Fans fail.
Power disappears.
Sensors malfunction.
Belts break.
Control systems experience faults.
Nothing mechanical receives a lifetime exemption from Murphy's Law.
For CL3 facilities, the CBS requires HVAC systems and controls to be verified during commissioning and every ten years through scenarios simulating failure of components including exhaust fans, supply fans and power.
The acceptance criteria include demonstrating that reversal of inward airflow is not sustained at critical doors, and that HVAC alarms and interlocks operate as intended.
This is one of the most fascinating aspects of containment testing.
We intentionally create abnormal conditions and watch what the facility does.
It is essentially a fire drill for the HVAC system.
What happens if the exhaust fan stops?
What happens if supply fails?
What happens when power disappears?
Which dampers move?
Which fans shut down?
Which alarms activate?
Does airflow briefly change direction?
More importantly, is an outward reversal sustained?
A well-designed control sequence isn't simply designed to make the laboratory work properly on a perfect Tuesday afternoon.
It should also manage the facility appropriately when Tuesday afternoon decides to become difficult.
10. B2 Cabinets and the Infamous "Puff-Back"
One particularly interesting failure scenario involves Class II Type B2 biological safety cabinets.
A B2 cabinet is directly connected to an external exhaust system.
That relationship creates an important question: What happens to the cabinet if the external exhaust suddenly fails?
If the internal supply blower continues operating briefly after the exhaust disappears, airflow can potentially reverse at the front opening.
This is commonly referred to as puff-back.
The name sounds almost cute.
The phenomenon is not.
The CBS specifically requires verification of HVAC systems and controls during commissioning and every ten years for failure scenarios involving Class II B2 BSC exhaust fans where these cabinets are present.
The goal includes demonstrating that puff-back is minimized and that associated alarms and interlocks function as intended.
This may involve coordinated control strategies such as rapid shutdown of the BSC supply blower, isolation dampers and other engineered responses.
This is an excellent example of why containment cannot be assessed one component at a time.
The BSC may be functioning perfectly.
The exhaust fan may be functioning perfectly.
The control system may be functioning perfectly.
But what matters is how all three respond together when one suddenly stops functioning.
Back to our orchestra:
It isn't enough for every musician to know their part.
They also need to know what to do when the drummer falls off the stage.
11. Alarms: The Facility's Check-Engine Light
Alarms sometimes suffer from a familiar problem.
If people hear them too often, they stop treating them like alarms.
Anyone who has repeatedly heard a car alarm going off in a parking lot understands this phenomenon.
Eventually everyone assumes:
"It's probably fine."
That mindset has no place in high containment.
Pressure alarms, HVAC alarms and BSC alarms provide information that a containment parameter may have moved outside its intended operating state.
During performance verification, alarms and associated control responses should therefore be treated as functional safety components—not annoying noises that happen during testing.
A good verification process asks:
What triggers the alarm?
At what condition?
Is the indication visible and/or audible as intended?
Does the associated interlock respond correctly?
Does the system recover appropriately?
The alarm is the messenger.
Our job is to make sure the messenger actually shows up when needed.
12. Commissioning: When the Facility Has to Prove Itself
Commissioning is the moment when engineering drawings meet reality.
A drawing may show:
SUPPLY FAN → ROOM → EXHAUST → HEPA → OUTDOORS
Beautiful.
Unfortunately, air has never read the drawings.
Real facilities contain duct resistance, leakage, doors, equipment heat loads, control delays, filter loading, imperfect balancing and hundreds of other variables.
Commissioning is therefore about demonstrating that the constructed facility actually performs according to its intended design.
For CL3 facilities, this includes specific verification requirements under the CBS.
For example, during commissioning, certain supply and exhaust ductwork and HEPA filter housings undergo in-situ pressure decay testing in accordance with ASME N511.
For CL3, the acceptance criterion specified by the CBS includes a leakage rate not exceeding 1.0% of volume per minute for the applicable ductwork and housings.
This is a fundamentally different question from HEPA integrity testing.
HEPA testing asks:
Can particles penetrate the filtration system?
Pressure decay testing asks:
Does the containment envelope itself leak?
Same facility.
Different question.
Different test.
Different evidence.
13. Annual Testing Isn't Just "Same Time Next Year"
One of the most important concepts in the Canadian Biosafety Standard is that testing frequency isn't determined solely by the calendar.
Many applicable performance and verification tests are required prior to initial use and at defined recurring intervals.
For example, the CBS requires the applicable tests described in Section 5.1 to be performed and documented prior to initial use and at minimum annually thereafter.
This includes Class II BSC certification.
For CL3 facilities, applicable additional performance and verification testing under Section 5.2 is also conducted and documented prior to initial use and at minimum annually thereafter.
But there is another important piece:
Changes matter.
Additional testing may be necessary following a change, repair or modification that may affect biocontainment.
That makes sense.
Imagine having your car professionally inspected Monday and replacing the steering system Tuesday.
You wouldn't say:
"Great. Inspection isn't due for another year."
The condition that was verified has changed.
Containment facilities work the same way.
Changes to HVAC systems, HEPA filtration, controls, BSC connections, room configuration or other containment-related systems should trigger the question:
Could this change affect biocontainment?
If the answer is yes, verification may be needed.
14. Calibration: Who Tests the Tester?
There is another layer of verification that doesn't receive much attention.
The instruments used to test the facility also need to be trustworthy.
Anemometers.
Aerosol photometers.
Pressure instruments.
Particle counters.
Temperature sensors.
The Canadian Biosafety Standard requires documentation demonstrating that calibration was valid at the time equipment was used for performance and verification testing of containment systems and essential biosafety equipment.
There is a simple reason.
A measurement is only useful if we have confidence in the instrument producing it.
If a technician reports a pressure differential of 25 Pa but the pressure instrument has quietly developed a 15 Pa error, the report may look wonderfully precise while being completely wrong.
Precision and accuracy are not the same thing.
A broken bathroom scale that reports your weight to three decimal places is still a broken bathroom scale.
Traceable, current calibration helps establish confidence that the measurements used to make containment decisions are meaningful.
15. Documentation Is Part of Containment
After testing comes something less exciting—but equally important.
Documentation.
A CL3 performance verification report should provide a clear technical record of what was tested, how it was tested, the applicable acceptance criteria, the instruments used, the results obtained and whether the system met the required criteria.
Why does this matter?
Because six months later, someone may need to answer:
What was the exhaust HEPA result?
What was the pressure relationship between these rooms?
Was this alarm tested?
Which instrument was used?
Was its calibration valid?
Was this deficiency present last year?
Did the condition change after the HVAC modification?
Without good records, containment history becomes institutional memory.
And institutional memory has a terrible habit of retiring, changing jobs or forgetting things.
Good documentation turns:
"I think we tested that."
into:
"Here is the test, method, acceptance criterion, result and date."
That is a much better sentence during an audit.
16. Passing the Individual Tests Is Not the Whole Story
Perhaps the most important lesson in CL3 verification is this:
Containment is more than a collection of passing numbers.
Consider a hypothetical facility:
The BSC passes.
The exhaust HEPA filter passes.
The room differential pressure meets the established parameter.
The alarm activates.
Every line on the checklist receives a satisfying checkmark.
But imagine that opening a particular door causes a sustained outward airflow condition.
Do we really have successful containment?
That's why experienced containment testing requires more than operating instruments.
It requires understanding how the measurements relate to one another.
A strange pressure reading might indicate an HVAC balancing problem.
An unstable BSC inflow could be related to room airflow.
An unexpected HEPA challenge concentration could reveal something about the system configuration.
An alarm response may expose an issue with the control sequence.
A technician should not simply ask: "Did this test pass?"
They should also be asking: "Does this result make sense?"
That second question catches a surprising number of problems.
17. The Invisible Safety System
Most people will never see the systems that make a CL3 laboratory work.
They won't see the pressure differential being maintained across a closed door.
They won't see particles captured by a HEPA filter.
They won't see the inward airflow at a BSC opening.
They won't see a control system waiting quietly for a fan failure that hopefully never occurs.
And that's fine.
Good containment is supposed to be boring.
The exhaust fan should run.
Air should move in the intended direction.
HEPA filters should maintain their integrity.
BSCs should maintain containment.
Alarms should sit quietly waiting for a condition that requires attention.
It is only when we intentionally challenge these systems during performance verification that the invisible engineering becomes visible.
Aerosol challenge testing shows us whether filtration integrity is maintained.
Smoke visualization shows us where air actually travels.
Pressure measurements show us the forces driving airflow.
Failure testing shows us how the facility responds when normal operation disappears.
BSC certification demonstrates the performance of critical primary containment devices.
And documentation ties all of that evidence together.
The Takeaway: Trust, but Verify
CL3 laboratories are impressive pieces of engineering.
But containment should never be based solely on the assumption that equipment is functioning because it appears to be operating.
A spinning fan is not proof of containment.
A negative number on a pressure monitor is not, by itself, proof of containment.
A HEPA filter label is not proof of installed filter integrity.
A running BSC is not proof that it is providing appropriate primary containment.
Each tells us something.
Performance verification tells us much more.
The Canadian Biosafety Standard provides the framework, but the philosophy behind the requirements is refreshingly simple:
If a system is important enough to protect people and the environment from regulated biological material, its performance should be demonstrated—not assumed.
So the next time you walk past the pressure monitor outside a CL3 laboratory, remember that the little number on the screen represents only one piece of a much larger containment puzzle.
Behind that door, air is moving.
Fans are operating.
Filters are capturing particles.
Controls are watching pressures.
BSCs are maintaining carefully engineered airflow patterns.
Alarms are waiting.
And when all of those systems work together properly, absolutely nothing exciting happens.
Which, in a CL3 laboratory, is exactly what we want.
Comments