The first American BMS with total cybersecurity

An American-made 3-level battery management system that monitors, protects and optimizes stationary storage — with active cell balancing, high reliability and seamless integration into Fractal EMS.

The BMS is the brain of every BESS

It monitors cell health, balances charge and discharge, enforces safety limits, and prevents thermal runaway or fire. A compromised BMS doesn't just expose data — it can cause physical damage, grid instability, revenue loss, or widespread outages. Fractal BMS was engineered from the ground up for domestic control and total cybersecurity.

The only fully American-designed & manufactured BMS

Over 90% of global lithium-ion battery and BMS components are foreign-sourced, often tied to adversarial nations. Fractal uses American chips, sources the PCBA in the USA, is handled only by Fractal (never a FEOC), loads Fractal-controlled software before shipping, and offers chip authentication on delivery.

Fractal BMS secure lifecycle: design, software development, chip and board manufacturing, assembly, encryption and authentication, shipping and testing

Closing the gaps foreign BMS leave open

Five vulnerabilities common to traditional BMS — and exactly how Fractal BMS eliminates each.

✕ Hidden backdoors & supply-chain tampering

Foreign-made BMS can carry pre-installed backdoors, malicious firmware, or hidden remote-access mechanisms embedded during manufacturing, transit, or at ports.

✓ Fully U.S.-sourced & built

U.S. chips, PCBA and assembly with domestic software development — no overseas dependencies, and no hidden access points.

✕ NTP timing manipulation

Attackers spoof or disrupt NTP servers to desynchronize systems, execute timed commands, inject false data, or coordinate fleet-wide attacks.

✓ Hardened, secure time sync

Built-in secure time synchronization and hardened NTP handling keep timing accurate even under attack.

✕ Little or no device encryption

Unencrypted communications expose data to interception — enabling DoS, ransomware, man-in-the-middle, false data injection, and eavesdropping on voltage, current and SOC.

✓ Full device-to-device encryption

Encryption across all device communications protects data integrity and confidentiality, blocking interception and tampering.

✕ Weak or absent authentication

Poor authentication allows unauthorized access and control — leading to overcharge/overdischarge, safety bypasses, or operational sabotage.

✓ Multi-factor, role-based access

Multi-factor, role-based authentication and secure credential management ensure only authorized personnel can access or alter the system.

✕ No firmware integrity checks

Traditional BMS can't verify firmware versions or detect tampering during manufacturing, shipping, or service — letting adversaries insert malicious code.

✓ Secure boot & version integrity

Secure boot, digital signatures and version-integrity validation confirm that only approved, untampered firmware runs.

Three layers of protection

A true 3-layer architecture — where other American BMS providers offer only system level.

Fractal BMS three-layer architecture: system, rack and module level BMS

System level (SBMS)

One SBMS per battery storage container · up to 60 racks · 10.1" TFT LCD

Monitors & displays

Cell voltage & temperature
Rack voltage, current, SOC/SOH & isolation
System SOC/SOH
Contactor & breaker status

Protection

Cell over/undervoltage
Rack over/undervoltage, short-circuit & overcurrent
Over/under-temp, temp- & voltage-difference
Online insulation & fault detection, thermal management

Alarms & settings

Rack voltage, current & isolation alarms
Cell temperature & low-SOC alarms
Inter-BMS communication
Rack & system parameters, TCP/IP

Rack level (RBMS)

One RBMS per rack · Ethernet connection to the SBMS

Data & control

Real-time processing & management of modules and racks
Charge/discharge control

Sensing

Terminal voltage detection (isolation collection)
Terminal current detection (hall sensor)

Estimation & safety

Insulation & fault detection per config
SOC/SOH/SOE/SOP estimation
Active thermal management
Node outputs, relay control, current-fault isolation

Module level (MBMS)

One MBMS per battery module · daisy-chain connection to the RBMS

Measurement

Cell-level voltage & temperature
NTC (10K) temperature points
Digital signal I/O detection

Balancing & thermal

Passive balance control
Fan speed control, feedback & speed detection

Alarms & detection

Power, voltage, temperature & comms faults
Balancing-fault detection
Wire-harness drop detection

Fractal BMS HMI dashboards on dual monitors

Remote & on-site interface

Real-time system, rack and cell data through remote and on-site HMIs — designed, built and maintained by an in-house team of software, cybersecurity and IT specialists.

Traceability

US-made chipboards authenticated across their lifecycle via a proprietary serial-number encryption process.

Remote updates & version control

Push critical firmware and software updates across all devices immediately, with continuous hardware and software version tracking.

Seamless EMS integration

Works hand-in-hand with Fractal EMS for unified monitoring, control and analytics across the asset.

Technical specifications

System BMS (SBMS)▸

CPU	ARM, 4-core, 2.0 GHz
RAM	4 GB LPDDR4
OS	Linux
Data interval	< 1 s
Racks	Up to 60
Display	10.1" TFT LCD
Event log	>100,000 events, lifetime storage
Communication	3× LAN, 3× CAN (isolated), 5× RS485 (isolated)
Power supply	DC 9–32 V, < 10 W
Environmental	−10 to +60 °C, < 95% RH non-condensing

Rack BMS (RBMS)▸

Power supply	9–32 Vdc, 2.4 W (0.1 W dormant)
Terminal voltage	0–2 channels, 0–1500 Vdc, ±0.2% FS
NTC temperature	0–4 channels, −40 to 125 °C, ±1 °C
Current	0–3 channels, 0 to ±1,000 A, ±0.2–0.5%
Insulation resistance	0–10 MΩ
DO / DI	8 / 8
Communication	3× CAN, 1× LAN, 1–2× RS485

Module BMS (MBMS)▸

System voltage	1,500 Vdc
Power supply	9–32 Vdc, 1 W
Cell channels	6–60, 0–5 Vdc, 3–5 mV
NTC temperature	14–60 channels, −40 to 125 °C, ±1 °C
Balancing	100 mA passive
DO / DI / CAN	1 / 1 / 1
Standards	GB/T 34131, GB/T 36276, UL/IEC 60730, UL/IEC 60950, IEC 62477

See the first American BMS with total cybersecurity

Schedule a demo