Transfer under pressure is the mating between the bell and the chamber complex that lets divers move from one to the other without decompressing. It's a routine procedure and, at the same time, the point where a sequencing error has immediate and irreversible consequences. That's why it's protected by mechanical interlocks.
The whole concept of saturation diving rests on one idea: the diver is compressed once, lives for weeks at that pressure, and is decompressed once, at the end. For that to work, they have to be moved between the chamber where they sleep and the bell that takes them to the bottom without the pressure changing at any point. That movement has its own name: transfer under pressure, TUP.
What a transfer under pressure actually is
A vessel's saturation system is a set of interconnected chambers: living chambers, a service or transfer chamber, a medical and stores lock, and a trunking where the bell mates. The whole assembly is kept at the storage pressure corresponding to the working depth.
When the bell comes back, it positions itself over the trunking and is held by a mating clamp. The annular space left between the bell's hatch and the chamber door — the trunking itself — is at atmospheric pressure at that point. The sequence is to pressurise that gap until it matches the internal pressure, confirm the difference is zero, and only then open the doors. The divers pass — or more like crawl, since the hatches are narrow — from the bell into the chamber.
At the end of the shift the reverse happens: the hatches are closed, the trunking is vented in a controlled way down to atmospheric pressure, and the clamp is released. The bell is then free to volver a lanzarse.
Why it's the critical point
The reason is physical, and it isn't up for debate. At the pressure of a deep saturation, the system stores an enormous amount of energy. If that pressure is released all at once, the decompression is explosive and there's no treatment possible: gas dissolved in the blood and tissues turns to gas phase instantly. It isn't a medical emergency; it's an immediate outcome.
And the only point in the whole system where a human action can open a direct path between the pressurised interior and the atmosphere is, precisely, the mating interface. That's why the transfer concentrates more procedure, more interlocks and more cross-checking than any other routine operation on the system.
The accident that changed everything
On 5 November 1983, on the semi-submersible platform Byford Dolphin, in the Norwegian sector of the North Sea, the mating clamp was released while the system was still pressurised. The resulting decompression killed the four divers in the chambers and one of the tenders operating the coupling from outside instantly, and seriously injured another. Subsequent investigations pointed to a sequencing failure and a design that physically allowed that manoeuvre to be carried out out of order.
That event is the reason no modern system today allows the clamp to be released while the trunking is under pressure. It's the same lesson left by Piper Alpha a few years later in a different context: when an out-of-sequence action can kill people, training the operator well isn't enough — the machine itself has to make it impossible to do.
The interlocks
A modern saturation system protects the transfer with several layered safeguards:
- Mechanical interlock on the clamp: it can't be released while there's residual pressure in the trunking. The pressure itself locks the mechanism.
- Valve sequencing: venting the trunking and releasing the coupling follow a physically enforced order, not a free choice by the operator.
- Redundant pressure indication on both sides of each door, with independent gauges.
- Differential-pressure-sealed doors: the hatches open towards the higher-pressure side, so the pressure itself keeps them sealed and it's impossible to open them against a differential.
- Two-person confirmation and the checklist read aloud before every step.
None of those barriers is enough on its own, and that's the point. The design assumes someone will get it wrong at some point, and it stacks layers so the mistake never reaches the end. It's exactly the same reasoning applied by IMCA's guidance to the rest of the operation.
What it's like from the inside
For the diver, the transfer is a couple of minutes' routine repeated twice a shift for weeks on end. You hear the trunking pressurising, the pressure equalises, the hatch opens and you go through. That routine character is, paradoxically, the hardest residual risk to manage: familiarity erodes attention.
Serious teams offset that by keeping the checklist read aloud even when everyone knows it by heart, rotating responsibilities, and logging every cycle. The life support technician and the supervisor don't delegate the confirmation, even when someone else does the physical action. How that responsibility is shared is described in the chain of command on a diving operation.
Transfer and evacuation
The same interface serves more than just the daily cycle. In an emergency that forces the crew to abandon the vessel, the team can't simply leave: they're still under pressure. The solution is to transfer into the hyperbaric evacuation unit, a self-contained capsule that mates to the same system and that can be launched into the water or lowered onto a rescue vessel, with the divers inside and under pressure, to be taken to a facility where decompression can be completed.
That scenario, rare but heavily drilled, explains why the mating geometry is standardised across the industry: a capsule has to be able to connect to a system that isn't its own. It also explains why, when someone asks what happens if there's a fire on board while the crew is in saturation, the answer isn't improvised. It can be read in detail in how an emergency is managed inside saturation, and the sector's general context, in where the work is and in the company directory.
The locks: transferring things, not people
Alongside the mating trunking, every saturation system has smaller locks through which material passes in and out without decompressing anyone: food, clean clothes, medication, tools, samples, waste. They work on the same principle — pressurise, equalise, open — but at a much smaller scale and several times a day.
Managing them has its own rules. Sealed packs and rigid containers with air inside deform or burst when pressurised, so they're opened or pierced before being sent through. Aerosols are banned. Flammable products are severely restricted, because an atmosphere with controlled partial pressure of oxygen but very high total pressure behaves differently around fire. And hot food goes through fast, because helium cools it at a speed that surprises anyone seeing it for the first time.
The medical lock
There's a lock dedicated to medical supplies, sized and positioned to allow a full resuscitation kit or the drugs needed in an emergency to pass through. Its operation is drilled periodically like the rest of the emergency procedures, because the scenario where it's needed is exactly the one where nobody has time to read a manual.
All of that is part of the everyday work of the life support technician, who operates the locks and keeps the log of what goes in and out of the system.
Frequently asked questions
What does TUP mean?
Transfer Under Pressure. It's the passage of divers between the diving bell and the chamber complex of the saturation system without the pressure changing at any point.
Why is this manoeuvre so dangerous?
Because it's the only point in the system where a human action can open a direct path between the pressurised interior and the atmosphere. An explosive decompression at those pressures allows no subsequent treatment.
What happened on the Byford Dolphin?
On 5 November 1983 the mating clamp was released with the system still pressurised. Four divers and a tender died, and another was seriously injured. The case is what led to the interlocks that now prevent that sequence.
What is an interlock and how does it protect the transfer?
It's a device that makes it physically impossible to carry out an action out of sequence. In a modern system the clamp can't be released while pressure remains in the trunking, and the valves follow an enforced sequence.
Why do the hatches open towards the higher-pressure side?
Because that way the internal pressure itself keeps them sealed against their frame. It's impossible to open them while a differential exists, which removes the risk of accidental opening at the root.
Does the transfer also serve for evacuating the system?
Yes. The same interface allows the hyperbaric evacuation unit to be mated on, a self-contained capsule in which the crew can abandon the vessel while keeping their pressure and complete decompression at another facility.
Published 24 August 2026 · By Arthur More, professional saturation diver
Photo: navalunderseamuseum · CC BY via Openverse