A classic cryogenic storage system is often reduced to one object: a very large vacuum-insulated dewar.
That analogy is useful, but incomplete. Human storage requires a vessel, internal patient supports, nitrogen management, monitoring and procedures that can remain dependable for an unknown period.
The central engineering move is simple: do not continuously manufacture cold. Store the patient in liquid nitrogen and make heat enter as slowly and predictably as possible.
What the vessel has to accomplish
After controlled cooldown, the patient has already reached the intended storage temperature.
The dewar is not responsible for performing that cooldown. Its job is to resist incoming heat and hold the patient near liquid-nitrogen temperature.
It must do this while allowing nitrogen to vent, be replenished and be measured. It must also support heavy patients without compromising the insulated vessel.
This distinction matters. A cooldown system is an active thermal-control machine. A classic storage dewar is predominantly a passive thermal reservoir.
The cold comes from a phase change
At normal atmospheric pressure, nitrogen boils at 77.355 kelvin, approximately -195.8°C, according to NIST reference data.
Heat constantly leaks into every real vessel. That energy causes a small amount of liquid nitrogen to become gas rather than making the remaining liquid warm rapidly.
As long as the patient remains immersed and the vessel remains properly vented, the liquid bath stays close to nitrogen's local boiling temperature.
This is passive temperature regulation by physics. The system does not need a compressor, refrigerant circuit or powered control loop to maintain the liquid bath.
The price of this stability is boil-off. Nitrogen gas leaves the vessel, and new liquid nitrogen must eventually replace it.
How heat tries to enter
Heat reaches a cold object through conduction, convection and radiation. Dewar construction reduces all three, but cannot make any of them exactly zero.
Conduction
Solid components physically connect the cold inner vessel to the warmer outer shell. Supports, pipework and the neck therefore create unavoidable conductive heat paths.
Designers reduce their cross-section, choose suitable materials and lengthen the thermal path while retaining enough strength for the filled vessel and its patients.
Convection
A vacuum annulus separates the inner stainless-steel vessel from the outer shell. Removing almost all gas suppresses convection and greatly reduces gas conduction.
The vacuum is not the cold source. It is insulation, and its performance depends on the annulus remaining sealed and at sufficiently low pressure.
Radiation
Warm surfaces also radiate energy across a vacuum. Cryogenic vessels can use reflective layers, radiation shields or other insulation systems to reduce this heat transfer.
The exact insulation stack is design-specific. What matters operationally is the resulting heat leak and its effect on measured nitrogen loss.
The neck is the difficult part
The inner vessel cannot be completely isolated. It needs an opening for patients, internal structures, inspection, nitrogen filling and boil-off gas.
That neck is a thermal bridge. It is commonly one of the most important paths by which heat enters an otherwise well-insulated dewar.
A lid or neck plug reduces heat exchange but must not trap evaporating nitrogen. A cryogenic vessel containing boiling liquid can never be treated like a sealed bottle.
Openings also complicate patient loading. A whole-body dewar is tall, heavy and accessed from above, so placement requires controlled lifting equipment and documented handling.
The vessel is more than two steel walls
The inner vessel contains the liquid nitrogen and patient-support structure. The outer shell protects the vacuum space and carries external mechanical loads.
The annulus needs its own protection. If cryogen entered a sealed vacuum space and warmed, the expanding gas could generate dangerous pressure.
Proper cryogenic designs therefore include appropriate relief paths for spaces where pressure could accumulate.
Berkeley Lab's cryogenic-safety manual requires pressure relief for every isolatable section that could contain cryogenic liquid or gas.
Materials and joints must also tolerate repeated thermal contraction. Steel at room temperature and steel near -196°C do not have identical dimensions or mechanical behaviour.
Patient geometry is part of the safety case
Tomorrow.bio's published whole-body configuration places four patients in separate compartments, with a central column available for brain storage.
Whole-body patients are stored head-down. If an exceptional interruption allowed the nitrogen level to fall, the brain would remain immersed longer than tissue positioned higher in the vessel.
This is a geometric last line of defence. It does not replace refill schedules, level monitoring, alarms or staff response.
Separate pods and compartments support identification, positioning and handling. They also prevent direct contact between the patient and vessel wall during placement or removal.
Capacity is not merely a question of empty volume. Clearance, support loads, access geometry and safe handling determine how much of a dewar can actually be used.
Boil-off is a measurement, not just a cost
Every dewar has a characteristic heat leak. That heat leak appears operationally as a rate of nitrogen loss.
Operators can track level, refill volume and time between refills. A sustained change can indicate a lid problem, vacuum degradation, changed plumbing or another new heat path.
Absolute claims such as "months without intervention" should be treated cautiously. Hold time depends on vessel design, fill level, ambient conditions and the point defined as unacceptable.
A low boil-off rate is valuable because it reduces nitrogen use and extends the response window. It does not justify running the vessel near its minimum safe level.
The operating threshold should preserve margin for detection, confirmation and corrective action before any patient-critical region approaches the liquid surface.
Storage is a maintenance process
A dewar cannot be filled once and forgotten.
At EBF, the storage dewars are replenished on a weekly operating cadence.
That schedule is only one layer. The automatic refilling system monitors liquid-nitrogen levels continuously, 24 hours a day and seven days a week.
Operators also track temperature, refill history, vessel condition, patient position and every movement affecting custody.
A serious record also includes alarms, inspections, maintenance, sensor calibration and deviations from normal operation.
Exterior frost or an unexpected rise in nitrogen consumption can indicate insulation trouble. Corrosion, damaged fittings and impaired relief devices require qualified assessment.
Berkeley Lab's dewar inspection guidance treats unusual external icing as possible evidence of vacuum loss and increased heat leakage.
A trend is often more informative than one reading. Good maintenance therefore preserves historical measurements instead of recording only whether today's value passed a limit.
Refilling is protected by several layers
The automatic system monitors nitrogen inventory and replenishes the dewars without depending solely on a person noticing a falling level.
The system can be supervised and controlled remotely, allowing abnormal readings to be investigated without waiting for the next on-site inspection.
Automation adds components that can fail: sensors, valves, controllers, transfer lines, power and software.
This is why the architecture includes redundant systems rather than relying on one sensor, one automated pathway or one method of response.
Human oversight remains part of the system. If automation reports a problem or does not operate as expected, trained staff can investigate and intervene manually.
EBF's 2024 activity report documents expansion of its automatic LN2 refill system, additional dewars and a crane system for vessel handling.
Together, weekly replenishment, continuous level monitoring, automatic refill, redundancy, remote control and manual intervention create defence in depth.
No single component has to carry the entire safety case.
What power independence really means
A classic liquid-nitrogen dewar does not need electricity to keep its bath cold while sufficient nitrogen remains inside.
A grid outage therefore does not stop refrigeration, because no active refrigerator is creating the storage temperature.
The surrounding system still uses electricity. Level sensors, alarms, oxygen monitors, ventilation, communications, pumps and automated filling may all depend on it.
A prolonged disruption can also affect nitrogen production, deliveries and staff access.
The accurate claim is narrow: the liquid inventory creates a passive thermal buffer. It gives operators time to restore supporting systems before temperature becomes the problem.
The main failure modes are slow enough to watch
The classic design is attractive because its ordinary failure trajectory is gradual. Normal heat leakage becomes measurable boil-off rather than an abrupt loss of refrigeration.
Vacuum degradation increases heat input. A damaged lid increases neck losses. A failed level sensor can hide a falling inventory, and a stuck valve can interrupt automated refill.
Nitrogen supply can also be delayed. Human inspection and independent inventory planning matter because not every failure originates inside the dewar.
Some failures are not gradual, including major mechanical damage or loss of pressure relief. These require prevention through design, access control, inspection and competent handling.
Reliability comes from layering different protections: insulation, nitrogen margin, sensors, alarms, automatic refill, manual refill, bulk supply, staff and documented escalation.
No one layer should be mistaken for the whole safety system.
Nitrogen is inert, but not harmless
Liquid nitrogen is non-flammable and chemically unreactive under ordinary storage conditions. Its physical hazards remain serious.
Contact can cause severe cold injury. Rapid vaporization can create pressure, and nitrogen gas can displace oxygen without colour, smell or warning.
This is why a storage hall needs ventilation, oxygen monitoring, controlled access and procedures for filling, spill response and alarm conditions.
The oxygen-deficiency risk depends on room volume, ventilation, nitrogen inventory and credible release scenarios. It must be assessed for the actual facility rather than assumed from vessel size alone.
These are worker and building-safety problems. They do not imply that liquid nitrogen is unstable as a patient-storage medium.
Why the classic storage system remains difficult to beat
The design uses few active components to maintain temperature. Liquid nitrogen is widely produced, and replenishment does not require warming or moving the patient.
Several patients can share one vessel and its heat leak. This lowers nitrogen and maintenance cost per patient compared with a small separate vessel for each person.
The main thermal disadvantage appears before storage. Cooling from the glass-transition region to -196°C can add thermomechanical stress to a vitrified patient.
The quality-control process can detect major fractures with CT, but it cannot make thermal stress irrelevant.
Intermediate Temperature Storage aims to reduce that stress by holding patients closer to -140°C, above liquid-nitrogen temperature but below the relevant glass transition.
That warmer target cannot be maintained by an open liquid bath at atmospheric pressure. It requires more active temperature control and therefore a different reliability argument.
The trade-off is not old technology against new technology. It is passive simplicity against lower thermal stress with greater control-system complexity.
How to evaluate a storage system
A polished stainless-steel exterior reveals almost nothing about long-term performance.
The useful questions concern measured boil-off, safe fill thresholds, vacuum performance, pressure relief, structural inspection, sensor calibration and the ability to refill manually.
Ask how alarms reach people, what happens outside working hours, how much nitrogen is available on site and how the vessel can be moved safely.
Ask whether maintenance and deviations are recorded over time. A reliable system should produce evidence of attention, not merely reassurance.
The dewar should also be evaluated inside the facility and institutional system that supplies, monitors and funds it.
A thermally excellent vessel without competent operations is not a long-term storage programme.
The honest conclusion
The classic system solves one narrow problem exceptionally well: keeping a large thermal mass near -196°C without continuous powered refrigeration.
It does not solve governance, funding, records, nitrogen supply or staff competence. Those belong to the organization surrounding the vessel.
Its strength is that an ordinary failure usually becomes a visible change in nitrogen inventory, leaving time for layered systems and people to respond.
TL;DR: Classic storage uses vacuum-insulated dewars filled with liquid nitrogen. Weekly replenishment, continuous monitoring, redundant automatic filling, remote supervision and human response keep the system secure.
Further reading