OilAuthority.com

Subsurface Safety Valve (SSSV)

A subsurface safety valve (SSSV), also called a downhole safety valve (DHSV) or simply a safety valve, is a downhole pressure-controlled device installed in the production tubing of an oil or gas well — typically 100 to 1,000 feet below the wellhead or mudline — that automatically shuts in the well in the event of a surface emergency, wellhead failure, or loss of control line pressure, providing the primary downhole barrier against uncontrolled flow from the reservoir when the wellhead and surface equipment are damaged or inaccessible; the SSSV operates on a fail-safe principle: it is normally held open by hydraulic pressure supplied from the surface through a small-diameter (typically 1/4-inch) control line that runs outside the tubing alongside the production string to the valve setting depth, and it closes automatically when that control line pressure is lost or reduced below the valve's set-point pressure — whether from a deliberate surface shutdown, a natural disaster that damages the control line, or a catastrophic event such as a vessel collision with a platform that shears the control line at the wellhead; SSSVs are classified by control method (surface-controlled, where the control line runs to the surface, versus subsurface-controlled, where the valve is actuated by the well's own production flowing pressure or differential pressure); by setting method (wireline-retrievable, which is installed and retrieved on wireline without workover for maintenance access, versus tubing-retrievable, which is an integral part of the production tubing string and requires a workover to replace); and by valve type (flapper valve, which uses a spring-loaded plate that snaps shut when pressure is lost, versus ball valve, which uses a rotating ball element for the closure mechanism); regulation requires SSSVs in offshore wells and in many onshore high-pressure wells in virtually all major oil-producing jurisdictions, with API 14A specifying the design, testing, and performance requirements that qualified SSSVs must meet.

Key Takeaways

  • The control line is simultaneously the SSSV's operational lifeline and its most vulnerable component in the field — the 1/4-inch diameter stainless steel or Inconel hydraulic control line runs outside the production tubing from the wellhead to the valve setting depth, typically 300-600 feet in surface wellheads and 100-200 feet in subsea trees, and must maintain its hydraulic integrity across years or decades of exposure to wellbore temperatures, pressures, and produced fluid chemistry; common control line failure mechanisms include corrosion at connections (where dissimilar metals create galvanic cells), fatigue cracking at the wellhead where the control line is repeatedly cycled in pressure during well shut-ins and startups, mechanical damage during tubing operations (a control line crimped during a workover trip is a common field occurrence), and hydrate plugging in deepwater wells where control line fluid can form gas hydrates in the subsea umbilical; a damaged control line that cannot maintain hydraulic pressure causes the SSSV to close and keeps it closed even when the well should be producing, effectively killing production until the line is repaired or the valve is replaced; control line inspection, pressure testing, and fluid management are the primary SSSV maintenance activities in producing wells, and their neglect is the most common cause of SSSV-related production loss.
  • Wireline-retrievable SSSVs allow the valve to be pulled from the tubing landing nipple on wireline for inspection and replacement without killing the well — this retrievability is the key operational advantage of wireline-retrievable (WR) SSSVs over tubing-retrievable (TR) valves; a WR SSSV is installed in a landing nipple that is part of the permanent tubing string, and the valve body is latched into the nipple by wireline slick-line with a standard fish-neck profile; when the valve must be pulled for inspection, replacement, or maintenance, wireline runs a pulling tool into the hole, engages the fish neck, and retrieves the valve to surface without disturbing the tubing string; while the valve is out of the nipple, the well is shut in by a wireline-set plug in the nipple below; a new or overhauled valve is then run on wireline and latched back in; this sequence takes 1-3 days on a well with wireline access versus the 3-10 week workover that a TR valve replacement requires; TR SSSVs (where the valve is an integral part of a tubing joint) are used where the expected service life and reliability of the valve does not require periodic retrieval, typically in deepwater wells where the cost of any well intervention is extremely high and valve selection favors maximum reliability over retrieval convenience.
  • SSSV testing requirements under API 14A and regulatory mandates ensure the valve functions when it is needed most — a SSSV that fails to close in a genuine emergency has no safety value, making the frequency and quality of functional testing critical to the valve's purpose; regulatory testing requirements in offshore operations (typically specified by BSEE in the US, NSTA in the UK, and equivalent agencies elsewhere) require that each SSSV be tested at intervals of 3-6 months to verify that it closes and holds pressure against a test differential, and that it opens correctly when control line pressure is restored; the test procedure involves reducing control line pressure below the valve's closure threshold while monitoring production pressure to confirm the valve closed and is holding; failure to close on demand or failure to hold pressure after closure are the two critical failure modes that trigger immediate workover for valve replacement; operators who allow testing intervals to slip, document tests incompletely, or accept marginally passing results on a valve that shows declining performance are progressively increasing the probability that the valve will fail to function in the event it is actually needed.
  • Deep-set SSSVs for high-pressure, high-temperature wells require design features that standard valves cannot provide — a SSSV in a 20,000 psi, 400 degree Fahrenheit HPHT well must provide tight shutdown against wellbore pressure while operating at temperatures that degrade standard elastomeric seals, with control line pressure high enough to open the valve against the wellbore pressure (often 5,000-8,000 psi control line pressure for a deep, high-pressure well) but calibrated precisely enough that the valve opens at the intended pressure and not before; the flapper or ball closure element must seat tightly against a metal-to-metal seal (elastomeric seals degrade at HPHT conditions) to prevent any leakage past the closed valve; the opening force required to lift the closure element against high wellbore pressure demands a large, powerful hydraulic actuator piston, which in turn requires a larger OD valve body that must fit through the smallest restriction in the tubing string; HPHT SSSV design is a specialized engineering discipline with its own qualification testing (API 14A, Annex F HPHT qualification) that requires full-scale testing at rated temperature and pressure conditions that only a handful of test facilities worldwide can achieve.
  • Deepwater SSSVs in subsea wells face a unique set of challenges from the combination of high water depth pressures, long control line umbilicals, and limited intervention access — in a subsea well at 5,000 feet water depth, the hydrostatic pressure of the water column (approximately 2,200 psi) acts on the outside of the subsea tree and control lines; the SSSV control line is part of a long umbilical running from the surface vessel or platform to the subsea tree, then down inside the tubing through the riser and wellhead to the valve setting depth; the hydraulic response time for pressure changes to travel down and back through this long umbilical is significant — pressure pulses take several minutes to propagate to a subsea SSSV at depth, creating a lag between surface control actions and valve response that must be accounted for in emergency shutdown procedure timing; deepwater SSSVs are typically designed for TR configuration (not WR) because the cost of any wireline intervention at 5,000 feet water depth through a subsea tree exceeds the cost of designing a valve for 20-year service life without retrieval, and any valve replacement requires mobilizing an ROV and intervention vessel at $200,000-$500,000 per day.

Fast Facts

The SSSV requirement for offshore oil wells in the United States dates to the Santa Barbara oil spill of 1969, where a blowout from an offshore platform released an estimated 100,000 barrels of crude oil into the California coastal waters. The spill — which covered 35 miles of coastline, killed thousands of seabirds and marine mammals, and galvanized the American environmental movement — occurred in part because there was no downhole barrier to stop the flow once the wellhead was compromised. The regulatory response included mandatory SSSVs in offshore wells, which has since been adopted by virtually every oil-producing nation. The Deepwater Horizon disaster 41 years later demonstrated that surface blowout prevention equipment alone is insufficient — and reinforced the importance of deep-set, regularly tested subsurface barriers as the last line of defense when everything above them fails.

What Is a Subsurface Safety Valve?

A subsurface safety valve is the downhole deadman switch that shuts the well if the surface goes wrong. Every offshore well and many high-pressure onshore wells have one installed hundreds of feet below the wellhead, held open by hydraulic pressure through a small control line from the surface. When that pressure disappears — from a deliberate emergency shutdown, a storm that damages the platform, a ship collision that shears the wellhead, or any of a dozen other scenarios — the spring inside the valve slams the flapper shut against the full pressure of the reservoir and holds it there. The reservoir stays where it is. The surface can be rebuilt. Without the SSSV, any event that compromises the wellhead turns a damaged well into an uncontrolled blowout. The valve is simple in concept, demanding in execution, and regulated intensively for a reason that became painfully clear every time an offshore incident showed what happens when the last downhole barrier fails to perform when it was needed most.

A subsurface safety valve is also called a SSSV, downhole safety valve (DHSV), tubing safety valve, or storm choke (an older term for surface-controlled subsurface safety valves). Related terms include control line (the hydraulic line that keeps the SSSV open against its fail-safe spring), flapper valve (the closure element type used in most SSSVs), landing nipple (the tubing profile in which a wireline-retrievable SSSV latches), API 14A (the specification governing SSSV design, testing, and qualification), fail-safe (the design principle where loss of control signal causes the valve to close), BSEE (the US Bureau of Safety and Environmental Enforcement that mandates SSSV testing frequency), wireline-retrievable (the valve configuration that allows maintenance without a workover), and HPHT (the high-pressure high-temperature environment requiring specialty SSSV design).

Why the SSSV Is the Well Barrier That Cannot Be Allowed to Fail

Well barriers exist in layers, and the SSSV is the deepest layer. The BOP is the surface barrier. The wellhead is the surface barrier. The christmas tree and its valves are the surface barriers. All of them can be damaged, sheared, or overwhelmed by a severe enough event. When they are, the SSSV is what remains between the reservoir and the open atmosphere. If it closes and holds, the event becomes manageable: the surface can be cleaned up, equipment can be replaced, the well can be re-entered and brought back into production. If it fails — because it was not tested, because the control line leaked, because the seal degraded in HPHT conditions without anyone noticing — the reservoir keeps producing with nothing to stop it. That is not a failure of an individual piece of equipment. That is a catastrophic failure of every safety protocol that allowed the valve to degrade to non-functional status in a well that was still listed as compliant on someone's maintenance spreadsheet. SSSV integrity is not optional, not a cost-reduction target, and not something that gets deferred when the workover budget is tight.

Browse the Oil and Gas Glossary