Water quality and sanitation for cold plunges

CDC states that 1 in 8 routine public pool inspections and 1 in 7 routine hot tub or spa inspections end in immediate closure for a violation posing a serious threat to public health[1]. That is the base rate among facilities whose operators are on an inspection schedule, hold a permit, and mostly run a documented chemical routine. A plunge tub added to a recovery floor often has none of those things in place on the day it opens, and the water in it is recreational water in most jurisdictions that regulate recreational water at all.

So the useful first question is not what the chemistry should be. It is which code your health department has adopted, and which category that code files a chilled immersion tub under. The answer decides what you test, how often you test it, what you have to write down, who can close the room, and whether you need a permit before you fill the tub once. Every operating decision on this page sits downstream of it.

Start with the code your jurisdiction adopted, not the model code

The Model Aquatic Health Code is guidance and entirely voluntary. CDC is explicit that it becomes law only where a state, local, territorial or tribal jurisdiction adopts all of it, part of it, or a modified version of it[1]. There is no national pool code in the United States, and there is no national cold plunge code either. Two studios forty miles apart can sit under different chemical thresholds, different testing cadences, different record-retention periods and different permit requirements, and both operators can be correct about their own building.

That makes the model code useful in a limited way. It is the vocabulary your regulator probably speaks and a reasonable default where your own code is silent. It is not a defence, and quoting it to an inspector proves nothing about what you owe, because what you owe is whatever your jurisdiction wrote down.

The category question is the one that catches operators, and it is worth resolving in writing before equipment arrives. Jurisdictions have filed chilled immersion tubs in several different places: as a spa or special-purpose pool, as a therapy pool, as a single-user tub drained between users and therefore exempt, or as nothing at all because the code predates the modality. Each of those answers implies a completely different operating burden. Call the environmental health division that inspects food and pools in your county, describe the actual equipment, not the marketing name, and ask for the answer by email so it exists on paper.

• Which code has this jurisdiction adopted, and which edition or amendment is currently in force?
• Under that code, what is a chilled immersion tub used by one bather at a time and held below room temperature? Name the category and the section.
• Does it require a construction or operating permit, and does a plan review have to happen before installation, not after?
• What disinfectant residual, pH band and testing cadence apply to that category, and what record must be kept and for how long?
• What triggers a mandatory closure, who is authorised to reopen, and what must be documented before reopening?
• Does the code require a certified pool operator or equivalent credential on staff, and does that requirement reach this category?

The published CDC operator numbers, and what they were written for

CDC's operating guidance for public pools, hot tubs and splash pads publishes a compact set of targets. Pools should hold at least 1 ppm free chlorine. Hot tubs should hold at least 3 ppm free chlorine or at least 4 ppm bromine. The pH band is 7.0 to 7.8 for both. Hot tub water must not exceed 104 degrees Fahrenheit, which is 40 degrees Celsius. Disinfectant and pH should be tested at least twice a day, and hourly when the facility is under heavy use[2].

Read that list for what it is. It was written for pools and for hot tubs, and a chilled plunge is neither. The temperature ceiling has no application to a tub held near freezing. Disinfectant demand, biological growth rates and gas-off behaviour all differ between a 104 degree spa and a 40 degree tub, and none of the published residuals were derived for cold water. What does carry across is the structure rather than the specific value: a measurable residual, a pH band narrow enough to keep that residual effective, a stated testing cadence, and a written record of both. Where your own adopted code sets a value, that value governs. Where it is silent, these are the published numbers a regulator is most likely to reason from.

The cadence is the part operators underweight, because it is the part that costs staff minutes every day rather than money once. Twice daily is a floor, not a target, and CDC pairs it with hourly testing under heavy use. A studio's heavy use is a Saturday morning and the two hours after the working day ends, which is exactly when the desk has the least slack. Build the test into the shift, not into someone's good intentions, and decide in advance which staff member owns it on each shift.

• Pools: at least 1 ppm free chlorine. Hot tubs: at least 3 ppm free chlorine, or at least 4 ppm bromine.
• pH 7.0 to 7.8, for pools and hot tubs alike, because residual disinfectant loses effectiveness outside that band.
• Hot tub water must not exceed 104 degrees Fahrenheit (40 degrees Celsius).
• Test disinfectant and pH at least twice daily, and hourly under heavy use.
• All of the above are CDC's published targets for pools and hot tubs. Your obligation runs to the code your own jurisdiction adopted.

Legionella and Pseudomonas: the two organisms with operator guidance

CDC publishes an operator page for each. For Legionella, the risk from hot tubs comes from breathing in mist, which can cause Legionnaires' disease or Pontiac fever. Risk is higher for people 50 and over, current or former smokers, people with chronic lung disease, and people who are immunocompromised. The named controls are daily scrubbing of surfaces to remove biofilm, filter replacement on the manufacturer's schedule, and testing water twice a day[3]. Biofilm is the reason scrubbing appears alongside chemistry: a residual in the bulk water does not reach an organism living inside a film on a surface or in a line.

The mist route deserves a specific look at your own installation, because a plunge is not automatically a low-aerosol device. An aerating jet, a circulation return above the waterline, a filtration or chiller loop with warm sections, a fill hose left standing, and a nearby shower head all produce or harbour aerosol. Where your equipment produces mist, the mist route is live regardless of how cold the tub itself runs, and the parts of the circuit that sit at moderate temperature are the parts worth asking the manufacturer about.

Pseudomonas aeruginosa is the other named organism, and it causes the rash CDC calls "hot tub rash", which appears days after using a poorly maintained tub. The operator targets on that page are chlorine of at least 3 ppm or bromine between 4 and 8 ppm, at pH 7.0 to 7.8, and the user-side guidance is to shower with soap after getting out and to wash the swimsuit[4]. The delay is what makes this an operating problem rather than a chemistry problem. Nobody walks up to the desk with a rash three days later. You find out from a review, a cancelled membership, or a member who quietly stops booking, none of which tell you which day the residual dropped.

Frequency and severity are different axes

The best available picture of what actually goes wrong in commercial water comes from the MMWR analysis of outbreaks associated with treated recreational water in the United States between 2000 and 2014. It counted 493 outbreaks, at least 27,219 illnesses and 8 deaths. Among the 363 outbreaks with a confirmed cause, Cryptosporidium accounted for 58 percent of outbreaks and 89 percent of cases, Legionella for 16 percent of outbreaks but at least 6 of the 8 deaths[5], and Pseudomonas for 13 percent of outbreaks.

Those proportions describe two different problems that a single sanitation routine has to cover at once. Cryptosporidium is the frequency problem: it tolerates chlorine, it arrives with fecal contamination, and it spreads by swallowed water, so the defences are bather-side hygiene, exclusion of anyone with diarrheal illness, and a documented response to a contamination incident. Legionella is the severity problem: rare in the count, dominant in the deaths, and controlled by biofilm scrubbing and filter maintenance rather than by residual alone.

An operator who runs a chemistry-only routine is covered against one of those and exposed on the other.

The setting data in that same analysis is worth an operator's attention. Hotels were the leading setting, and hot tubs and spas were the primary venue within them. That is a recognisable pattern: small water volume, intermittent and unsupervised use, and no single person whose job is the water. A plunge tub tucked into a corner of a studio floor with nobody named on the roster to own it resembles that pattern far more than it resembles a municipal pool with a certified operator. CDC's own summary of recreational water illness lists the routes plainly: swallowing, contact with, or breathing in mists of contaminated water[6], producing diarrhea, skin rashes, swimmer's ear and respiratory illness.

Bather load is what makes a plunge different from a pool

The structural difference between a plunge and a pool is not temperature, it is the ratio of bathers to water. A plunge tub holds a small volume and takes an entire adult body at a time. Every gram of sweat, skin cell, sunscreen, lotion and fecal residue that enters goes into that small volume, so the organic load per gallon is higher than anything a swimming pool experiences, and the disinfectant residual is consumed faster relative to the volume available to hold it. Two people in an hour is a light day in a studio and a heavy per-gallon load in the tub.

That changes what you have to know about your own equipment rather than what chemistry you should invent. Ask the manufacturer, in writing, what turnover rate the supplied pump and filter deliver at the tub's actual filled volume, what the filter media is and on what schedule it must be replaced, whether the circulation loop can be fully drained and sanitised, and whether any part of the circuit sits at moderate temperature between uses. Those four answers determine how much of your sanitation load the equipment carries and how much lands on staff. This guide publishes no turnover figure and no chemical target for cold water, because no source verified for this corpus states one.

The single highest-leverage control is the one that reduces the load rather than chasing it. A rinse or soap shower before entry removes a large fraction of what would otherwise become disinfectant demand, and it costs a sign, a shower and a front-desk sentence. Exclusion is the second: anyone with diarrheal illness, an open wound or a skin infection does not get in the water, and that has to be a stated policy the desk can enforce without an argument, not a judgement call made by whoever is on shift.

The log is the artifact that proves the practice

Whatever your jurisdiction requires, the sanitation log is what an inspector, an insurer and a plaintiff's attorney will all read, and each of them will read a gap the same way. A missing entry is not interpreted as a busy afternoon. It is interpreted as an absence of practice, and the burden of showing otherwise falls on you at the worst possible moment. The log is cheap to keep and impossible to reconstruct afterwards.

Keep it at the tub and not in an office, because a log that requires a walk gets filled in from memory at the end of a shift. Paper on a clipboard and a tablet form both work; what matters is that the person who ran the test writes the reading, that corrective actions are recorded alongside the retest that closed them, and that nothing is ever back-filled. Retention follows your adopted code, and where the code is silent, keeping records for at least as long as your insurance policy period is a defensible floor.

• Date, time and the initials of the person who ran the test, on every entry.
• Free chlorine or bromine, pH, and water temperature, as read, not as expected.
• Any corrective action taken, and the retest reading that closed it out.
• Filter cleaning and replacement, biofilm scrubbing, drain and refill events, with dates.
• Contamination incidents, the response run, the closure duration, and who authorised reopening.
• Equipment faults, chiller or pump service visits, and anything a technician changed.

What an inspector asks for

An inspection of a small water feature is short and follows a predictable order, which makes it straightforward to prepare for and embarrassing to fail. The inspector establishes the category your tub falls in, confirms the permit, reads the log since the last visit, checks that your test kit works and its reagents are in date, and looks at whether the installation matches what was approved. Practically everything that produces an immediate closure sits in that list.

• The current operating permit, and the plan or approval the installation was built against.
• The sanitation log for the whole period since the last inspection, with no gaps.
• A working test kit with unexpired reagents, and the ability to demonstrate a test on the spot.
• Evidence that staff are trained: who is trained, in what, when, and how that is recorded.
• The manufacturer's manual and maintenance schedule, and evidence you are following it.
• Your written closure procedure, what triggers it, and the record of any closure since the last visit.
• Required signage at the tub, including capacity, supervision and health-condition notices.
• Drain, refill and filter-service records, plus the documented response to any contamination incident.

Equipment listings, and the standard that changed

In January 2025 UL Solutions announced that the scope of UL 1563, the Standard for Electrical Spas, Equipment Assemblies and Associated Equipment, had been expanded to cover electrically powered cold tubs and ice baths, as well as combination heat and cool units. The expansion added testing requirements for cooling functions, requirements for major components such as heat pumps, and marking and instruction requirements addressing the specific risks of immersion in chilled water[7]. Before that, a chilled commercial tub sat in a gap between standards written for heated spas and standards written for refrigeration equipment.

The operator action is a purchasing question, not an engineering one. Ask the manufacturer, in writing, which listings the specific model you are buying carries, to which standard and edition, which laboratory issued them, and whether the listing covers the unit as a whole assembly or only its components. Ask for the marking and instruction documentation, because that is the paperwork that tells your staff what the manufacturer requires and tells your inspector and insurer that a competent body reviewed the machine. A logo on a brochure is not a listing, and a certificate number and issuing body are reasonable things to ask for before money moves.

This page names no other equipment standard, and the omission is deliberate. Cold plunge marketing references a range of certifications, some of which apply to a component instead of to the unit, and some of which are self-declared. Nothing beyond the UL scope expansion above was verifiable for this corpus, so nothing else is asserted here. Where a supplier names a standard, ask what it covers, who certified it, and whether the certificate names your model.

What you ask members to do, and where you say it

Part of your sanitation routine is delegated to members, and it works only if you actually ask. CDC's guidance on hot tub rash tells users to shower with soap after getting out and to wash the swimsuit, and the pre-entry rinse is the same control applied earlier in the sequence. Say it at intake, print it on the sign at the tub, and put it in the confirmation message. Exclusion rules belong in the same three places: no entry with diarrheal illness, an open wound, or a skin infection.

Publishing your practice is worth more than most operators expect, because sanitation is one of the few things a prospective member privately worries about and rarely asks. Praxium runs a free public directory that lists studios by city and modality, and a profile there is one of the pages someone reads before choosing where to plunge; stating your testing cadence and your shower policy in plain language answers a question people are already asking silently. How much of that listed set is independent rather than part of a multi-location brand is counted below from our own listings, with the number of records behind it and the date it was counted. Where a location is independent the operating procedure is written by the owner rather than inherited from a brand standard, which is a real advantage in flexibility and a real exposure in consistency, and the log is what converts one into the other.