The ambulance
Earth Orbit Has an Ambulance. Nowhere Else Does.
Hours to return. Days to resupply. That is what makes the regime survivable.
The defining feature of Earth orbit as a crewed environment is proximity. A Crew Dragon can undock from the ISS and land on Earth in roughly six hours. A Progress cargo spacecraft can be launched from Baikonur and dock within hours of an emergency supply request. The entire planet’s surface infrastructure — hospitals, ground control, search-and-rescue teams, spacecraft assembly facilities — is at most a few hours away. This is not true of any other destination in the solar system.
The Moon is three days away. Mars is months. The outer system is years. No rescue mission can be launched, flown, and executed in time to save a crew facing a life-threatening emergency at those distances. Earth orbit is the only regime where the concept of “emergency return” is operationally real — and that fact shapes everything about how crewed operations are designed, from station architecture to crew rotation schedules to the number of docked spacecraft maintained as lifeboats.
The lifeboat system
The ISS Lifeboat System: How Emergency Return Works
There is no dedicated escape vehicle. The crew’s ride home is their lifeboat.
The ISS has never had a dedicated escape vehicle. NASA studied several — the Crew Return Vehicle (CRV), the X-38 lifting body, an ACRV concept — but none was built. Instead, since 2000, the lifeboat function has been served by the same spacecraft that bring crews to the station: Soyuz and, since 2020, Crew Dragon. These vehicles remain docked to the ISS for the duration of each crew’s stay, configured for rapid boarding and departure.
Current configuration (mid-2026). At any given time, the ISS has one Crew Dragon (4 seats) and one Soyuz (3 seats) docked, providing lifeboat capacity for the full 7-person crew. Each vehicle is assigned specific crew members. In the event of an emergency requiring full evacuation, crews board their assigned vehicle, seal hatches, undock, perform a deorbit burn, and reenter. Dragon splashes down in the ocean (Gulf of Mexico or off the California coast); Soyuz lands on the Kazakhstan steppe. The entire sequence from “abandon station” to undock can be completed in approximately 10 minutes if the crew is suited and ready.
The seat problem. The lifeboat system fails if a docked vehicle is damaged. When the Soyuz MS-22 capsule sprang a coolant leak in December 2022, the crew could not use it for emergency return — cabin temperatures during reentry would have exceeded safe limits. NASA reconfigured SpaceX’s Crew Dragon Endurance to carry five people (adding Frank Rubio’s seat liner from the damaged Soyuz) as a contingency measure, while Roscosmos launched an empty replacement Soyuz MS-23. For weeks, the station’s lifeboat capacity was degraded. This event demonstrated that the system has no margin: it works when everything works, and a single vehicle failure compresses the rescue architecture.
Emergency categories
ISS Emergency Categories and Response Protocols
Fire, depressurization, toxic atmosphere, medical crisis, debris strike. Each has a protocol.
The ISS recognizes several emergency categories, each with a distinct response protocol. Not every emergency requires evacuation — most can be managed by isolating the affected module, donning masks, or retreating to a safe segment.
Fire. The most immediate threat. ISS modules carry portable fire extinguishers and a caution-and-warning system with smoke detectors. The response sequence: alert, don masks (the station atmosphere can become toxic from burning electronics within minutes), isolate the affected module by closing hatches, suppress the fire, ventilate. If the fire cannot be contained, the crew retreats to their lifeboat vehicles.
Rapid depressurization. A hull breach or seal failure. The crew isolates modules by closing hatches until they identify the leaking segment. If the leak rate exceeds the station’s ability to repressurize from reserves, evacuation follows. The ISS has experienced slow pressure loss in the Russian Zvezda module’s PrK service tunnel since 2019 — an ongoing issue that has driven multiple safe-haven preparations (see Crew-12 below).
Toxic atmosphere. Ammonia from the external cooling system leaking into the cabin, off-gassing from a fire, or chemical contamination. The crew dons masks, isolates the contaminated module, and may retreat to the Russian segment (which uses a separate cooling system without ammonia) or to the docked vehicles.
Debris strike / collision avoidance. When the 18th Space Defense Squadron tracks a conjunction (close approach of debris to the ISS) and there is insufficient time for a maneuver, the crew enters their lifeboat vehicles and seals hatches — a “shelter in place” that positions them for immediate departure if the station is struck. This has occurred multiple times, including for debris from the 2021 Russian ASAT test.
Medical emergency. The ISS has a crew medical officer (CMO) trained in advanced first aid, plus a medical kit with limited surgical and pharmaceutical capability. Telemedicine with ground-based flight surgeons is available continuously. For conditions beyond onboard treatment capacity, the only option is early return (see Crew-11 below).
Crew-11: the first medical evacuation
SpaceX Crew-11: The First Medical Evacuation from the ISS
January 15, 2026. The first time an ISS mission was cut short for medical reasons.
Crew-11 launched August 1, 2025 aboard Crew Dragon for a planned eight-month stay. On January 7, 2026, NASA postponed a scheduled spacewalk due to a medical issue affecting one of the four crew members. The next day, NASA announced the entire crew would return early. On January 15, 2026, Crew Dragon splashed down off San Diego at 3:41 AM ET, ending the mission five weeks ahead of schedule.
The crew comprised NASA commander Nichole Ayers, NASA pilot Michael Fincke (veteran of three prior missions, 368+ days in space), JAXA mission specialist Kimiya Yui, and Roscosmos mission specialist Oleg Artemyev. NASA did not disclose the nature of the medical issue. The early return was described as precautionary — a non-emergency medical concern that exceeded onboard treatment capability but did not require immediate evacuation. Dragon’s reentry timeline (undock to splashdown in ~6 hours) allowed a prompt but orderly return.
Crew-11’s early return demonstrated several things. First, the medical evacuation capability works — the system functioned as designed. Second, the ISS’s onboard medical capability has limits; certain conditions simply require a hospital on Earth. Third, the crew rotation schedule has enough flexibility to absorb an early return without leaving the station uncrewed; Expedition crew remaining aboard maintained operations. The event reframed the “ambulance” capability from theoretical to tested.
Crew-12: the safe haven
Crew-12 Safe Haven: Sheltering in Dragon During Zvezda Repairs
June 5, 2026. Five astronauts suited up inside Dragon while cosmonauts used a saw on a leaking module.
Crew-12 launched February 13, 2026 aboard Dragon Freedom. On June 5, 2026, as Roscosmos cosmonauts prepared structural repairs to the Zvezda service module — the same module with the ongoing air leak that has been monitored since 2019 — NASA issued a safe-haven order. The repair work reportedly involved the use of a saw, which NASA assessed as carrying elevated structural risk.
Five astronauts — Crew-12 members Jessica Meir, Jack Hathaway, Sophie Adenot (ESA), and Andrey Fedyaev (Roscosmos), plus NASA astronaut Chris Williams (arrived via Soyuz) — entered Dragon Freedom, donned spacesuits, and prepared for a contingency undock. For approximately two hours, the crew was positioned for emergency departure while the repair proceeded in Zvezda. The repair was completed successfully, NASA lifted the safe-haven order, and the crew returned to the station.
The event illustrated the lifeboat system operating in its most operationally intense mode short of actual evacuation — crew suited, vehicle configured for departure, undock sequence on standby. It also underscored the ISS’s aging infrastructure: the Zvezda leak has been worsening for years, and structural repair work now occasionally requires positioning the crew for emergency escape as a precaution. As the station approaches its planned 2031 deorbit, these events are expected to become more frequent.
Rescue in the commercial era
Rescue Architecture for Commercial Space Stations
Every commercial station needs a lifeboat. The question is whose.
When the ISS deorbits and commercial stations replace it (see Crewed Stations), each station will need its own crew emergency return capability. The current ISS model — a docked Crew Dragon or Soyuz that doubles as lifeboat — transfers directly to any station that uses Dragon for crew rotation. But if multiple stations operate simultaneously (Haven-1, Axiom, Orbital Reef, Tiangong), each must maintain its own dedicated lifeboat vehicle.
The cost implication is significant. A Crew Dragon parked at a station as a lifeboat is a vehicle not flying revenue missions. SpaceX’s current fleet of four operational Dragon capsules rotates between ISS crew missions, cargo missions, and private missions. Adding dedicated lifeboats for two or three commercial stations would require additional Dragon production or a purpose-built emergency return vehicle — the same Crew Return Vehicle concept that NASA studied and abandoned for the ISS.
For Tiangong, China operates independently: Shenzhou capsules remain docked as lifeboats, and China has demonstrated rapid-launch capability to send an empty Shenzhou in an emergency. The Wolf Amendment means no US crew vehicle would serve as a Tiangong lifeboat, and no Shenzhou would serve a US station. Two separate, non-interoperable lifeboat systems will operate in LEO simultaneously.
Beyond LEO: no rescue
Why Rescue Does Not Exist Beyond Earth Orbit
The ambulance stops at LEO. Everything beyond is expedition.
The rescue architecture described on this page — docked lifeboats, emergency return in hours, search-and-rescue teams on standby — exists only in Earth orbit. It depends on proximity: the crew must be close enough to Earth that a vehicle can deorbit and land within hours, and that ground teams can reach the landing zone promptly.
At the Moon (three days away), rescue from Earth is theoretically possible but operationally marginal — a crew in a failing lunar habitat has to survive for days while a rescue vehicle is prepared and flown. The NASA Inspector General’s 2026 Human Landing System assessment found that NASA and its HLS providers lacked a capability to rescue a stranded crew from the lunar surface. At Mars (months away), rescue from Earth is impossible on any operationally relevant timeline. The crew must be self-sufficient for the duration of the mission, with enough redundancy to survive any single-point failure without external help.
This is the fundamental distinction between Earth orbit and everywhere else. Earth orbit is a commuter environment — you can go home if something goes wrong. Every other destination in the solar system is an expedition. The Moon and Mars pages cover the crewed presence architectures for destinations where rescue is not an option.