1. The Data Center & Colocation Market in 2026
The US data center market has entered a period of unprecedented expansion. Driven by AI workloads, edge computing deployments, and the continued migration of enterprise infrastructure to hybrid cloud architectures, demand for colocation space has outstripped supply in nearly every primary market. Understanding the scale of this market — and the financial stakes involved — is essential context for any lease negotiation.
Vacancy rates in Tier 1 data center markets — Northern Virginia, Dallas, Phoenix, Chicago, and Silicon Valley — have dropped below 3% in 2026, giving landlords significant pricing leverage. In this environment, tenants who approach lease negotiations without a detailed understanding of power, cooling, connectivity, and SLA provisions will pay a substantial premium or, worse, sign agreements that leave them exposed to catastrophic downtime costs.
Colocation lease terms are fundamentally different from traditional commercial real estate. Your “rent” is measured in kilowatts, not square feet. Your “build-out” is measured in circuit whips and cross-connects, not drywall and carpet. And your exposure to a landlord default isn’t a temporary inconvenience — it’s a revenue-stopping, potentially business-ending event measured in minutes, not days.
Key insight: Data center leases are hybrid documents — part real estate lease, part managed services agreement, part infrastructure SLA. Reviewing them requires expertise in all three domains. A real estate attorney alone will miss the technical provisions; an IT team alone will miss the legal exposure.
2. Power Density Clauses: kW Per Cabinet
Power density is the single most important technical specification in a colocation lease. It defines how much electrical power is available per cabinet (rack), and it directly determines how much computing equipment you can deploy in your leased space. Get this wrong, and you’ll either overpay for unused capacity or hit a hard ceiling that forces an expensive and disruptive migration.
Standard vs. High-Density Allocations
Standard density (5-8 kW per cabinet) is sufficient for general-purpose servers, networking equipment, and storage arrays. Most enterprise IT deployments fall comfortably within this range. If you’re running traditional virtualized workloads, web servers, or database servers, standard density will serve you well.
High-density (15-30 kW per cabinet) is required for GPU clusters, AI/ML training infrastructure, high-frequency trading systems, and high-performance computing (HPC) workloads. These deployments generate significantly more heat per rack unit, which has cascading implications for cooling infrastructure, floor loading, and power distribution.
Watch out: Many colocation providers advertise “up to 20 kW per cabinet” in marketing materials but contractually guarantee only 5-8 kW in the lease. Always verify the contractually guaranteed power density, not the marketed maximum. The difference could mean deploying 60% fewer servers than planned.
Negotiating Guaranteed Power Per Cabinet
Your lease should specify the following power density provisions in explicit, measurable terms:
- Guaranteed minimum kW per cabinet — the contractual floor, not a best-effort target
- Power circuit type and voltage — 120V vs. 208V vs. 480V single-phase or three-phase
- Redundancy level per cabinet — A+B (dual-feed) power is standard for production workloads
- Metering methodology — how power consumption is measured and reported to you
- Scalability provisions — the process and timeline for increasing power density to existing cabinets
Exceeding Allocated Power
Every colocation lease should clearly define what happens when a tenant exceeds their allocated power draw. Common approaches include:
- Hard cutoff: Breakers trip at the allocated threshold — your equipment goes down. This is the most dangerous scenario and should be avoided through proper capacity planning.
- Soft overage with billing: The provider allows temporary overages at a premium rate (typically 1.5-2x the base per-kW rate). This is the preferred model.
- Notification and cure period: The provider alerts you when consumption approaches the threshold and gives you 30-60 days to reduce load or contract additional capacity.
Circuit Whip Costs
Adding power capacity to an existing cabinet requires a circuit whip — a physical electrical connection from the power distribution unit (PDU) to your cabinet. These are not cheap:
Circuit Whip Cost Per Drop
Standard 20A/120V circuit: $2,500 - $3,500
High-density 30A/208V circuit: $3,500 - $5,000
Installation timeline: 2-6 weeks (plan ahead)
Negotiate circuit whip costs and installation timelines into your lease upfront. Some providers will waive or discount circuit whip fees for multi-cabinet deployments or long-term commitments. If you anticipate scaling, negotiate a fixed price schedule for future circuit additions at signing — not at the time of request when you have no leverage.
3. PUE Efficiency Guarantees
Power Usage Effectiveness (PUE) is the industry-standard metric for data center energy efficiency. It measures the ratio of total facility power consumption to IT equipment power consumption. Understanding PUE is critical because it directly determines your electricity costs — and in a colocation lease, electricity is typically your largest ongoing expense.
Understanding the PUE Scale
PUE 1.0 represents theoretical perfection: every watt of electricity goes directly to IT equipment. In practice, this is impossible because some power must go to cooling, lighting, security systems, and other facility overhead.
- PUE 1.1 - 1.2: Best-in-class hyperscale facilities (Google, Microsoft, Meta)
- PUE 1.3 - 1.5: Modern, well-designed colocation facilities
- PUE 1.5 - 1.8: Industry average; older facilities or those with less efficient cooling
- PUE 2.0+: Outdated facilities; avoid unless pricing reflects the inefficiency
Why PUE Matters for Your Bill
The financial impact of PUE compounds every month. Here’s a concrete comparison:
PUE Cost Comparison: 100 kW IT Load at $0.10/kWh
PUE 1.6: 100 kW × 1.6 = 160 kW total × 8,760 hrs = 1,401,600 kWh × $0.10 = $140,160/yr
PUE 1.2: 100 kW × 1.2 = 120 kW total × 8,760 hrs = 1,051,200 kWh × $0.10 = $105,120/yr
Annual savings at PUE 1.2 vs 1.6 = $35,040/yr
Over a 5-year lease term = $175,200 saved
Over a typical 5-year colocation lease, the difference between a PUE of 1.6 and 1.2 on just 100 kW of IT load is $175,200. For larger deployments measured in megawatts, the delta runs into millions.
Contractual PUE Protections
Your lease should include the following PUE-related provisions:
- Guaranteed maximum PUE: A contractual cap on the PUE the provider can pass through in billing (e.g., “PUE shall not exceed 1.4 for purposes of calculating Tenant’s power charges”)
- PUE measurement methodology: How and when PUE is calculated — monthly average, trailing 12-month average, or real-time
- Financial credits for PUE overages: If the provider operates above the guaranteed PUE, you receive credits or reimbursement for the excess power cost
- Reporting obligations: Monthly PUE reports delivered to the tenant, with supporting metering data
Negotiation tip: If a provider refuses to guarantee PUE contractually, that’s a significant red flag. Best-in-class operators are proud of their PUE metrics and will commit to them in writing. Use competing bids from providers willing to guarantee PUE as leverage.
4. Uptime SLA: 99.999% and What It Really Means
Uptime Service Level Agreements (SLAs) are the financial backbone of any data center lease. They define the provider’s commitment to availability and establish the penalty structure when that commitment is breached. The difference between seemingly similar uptime percentages translates to dramatically different risk exposure.
| SLA Level | Allowed Downtime/Year | Tier Equivalent | Risk Level | Typical SLA Credit |
|---|---|---|---|---|
| 99.9% | 8.76 hours | Tier II | High | 5% monthly fee per incident |
| 99.99% | 52.6 minutes | Tier III | Medium | 10% monthly fee per incident |
| 99.999% | 5.26 minutes | Tier IV | Low | 20-30% monthly fee per incident |
| 99.9999% | 31.5 seconds | Tier IV+ | Minimal | 50%+ monthly fee per incident |
The Real Penalty Math
SLA credits are the mechanism by which providers compensate you for downtime. However, standard SLA credits are often grossly inadequate relative to actual business losses. Consider the gap:
- Your actual downtime cost: $400,000 per hour (financial services industry average)
- Provider SLA credit: 10% of your $25,000 monthly colocation fee = $2,500
- The gap: A 1-hour outage costs you $400,000 but nets you only $2,500 in SLA credits
This is why SLA credits alone are insufficient protection. Your lease should also address:
- Escalating credit tiers: Credits should increase with the duration and severity of the outage, not remain flat
- Termination rights: If downtime exceeds a defined threshold (e.g., 4+ hours in a single incident or cumulative SLA breach over multiple months), you should have the right to terminate the lease without penalty
- Partial outage provisions: Degraded performance — such as power fluctuations, cooling failures that force equipment throttling, or network latency spikes — should also trigger credits, not just full outages
- Root cause analysis obligations: The provider must deliver a detailed incident report within a defined timeframe (typically 48-72 hours)
Critical risk: Many SLA credit structures cap total credits at 100% of one month’s fee. This means your maximum annual recovery is limited to one month’s colocation cost — regardless of how many outages occur or how much business you lose. Negotiate for uncapped credits or, at minimum, a cap equal to 3-6 months of fees.
5. Generator & UPS Infrastructure
The generator and uninterruptible power supply (UPS) systems are the last line of defense between a utility grid failure and a catastrophic outage of your IT infrastructure. Your lease must specify the redundancy level, performance parameters, and maintenance obligations for these critical systems.
Redundancy Levels Explained
| Redundancy | Configuration | Failure Tolerance | Best For |
|---|---|---|---|
| N+1 | Minimum required + 1 spare | Single component failure | Dev/test, non-critical workloads |
| 2N | Fully duplicated system | Complete system failure | Production, enterprise workloads |
| 2N+1 | Fully duplicated + 1 spare | Complete system + component failure | Mission-critical, financial services |
Critical Timing Parameters
When utility power fails, a precise sequence of events must occur within seconds to prevent your equipment from going down:
- UPS bridge time: Battery-backed UPS systems must provide continuous power for a minimum of 10-15 minutes — long enough for generators to start and stabilize
- Generator start time: Diesel generators typically require 10-15 seconds to reach full operating speed and begin delivering stable power
- Transfer switch operation: Automatic transfer switches (ATS) must detect the outage and switch to generator power within 10-20 milliseconds for static switches, or 100-500 milliseconds for mechanical switches
Fuel Reserve Requirements
Your lease should specify minimum on-site fuel reserves, typically measured in hours of full-load operation. Industry standards vary:
- Standard: 24-48 hours of on-site diesel fuel at full load
- Best practice: 48-72 hours with contractual priority fuel resupply agreements
- Mission-critical: 72+ hours with dual fuel suppliers and pre-positioned emergency reserves
Downtime Cost Exposure by SLA Level
At $400K/hr downtime cost:
99.999% SLA (5.26 min/yr): $400K × 0.0877 hr = $35,067 max annual exposure
99.9% SLA (8.76 hr/yr): $400K × 8.76 hr = $3,504,000 max annual exposure
Difference: $3,468,933/yr — worth the premium for five-nines SLA
6. Cooling Redundancy & Raised Floor Requirements
Cooling infrastructure is the most common single point of failure in data center operations. A cooling system failure doesn’t just cause discomfort — it causes thermal shutdowns of your servers within minutes, data corruption, and potential hardware damage. Your lease must address cooling redundancy with the same rigor as power redundancy.
Cooling Redundancy Levels
N+1 cooling provides one additional cooling unit beyond the minimum required to maintain target temperatures. If four CRAC (Computer Room Air Conditioning) units are needed to cool your space, an N+1 configuration provides five. This allows one unit to fail or be taken offline for maintenance without affecting operations.
2N cooling fully duplicates the cooling infrastructure, providing 100% backup capacity. This is the standard for mission-critical deployments and should be the minimum requirement for any production workload.
Raised Floor Load Capacity
If your colocation space uses raised floor construction for under-floor air distribution, the floor’s load-bearing capacity directly limits the weight of equipment you can deploy:
- 250 lbs/sqft: Standard minimum for general-purpose deployments — supports most 1U-2U servers and networking equipment
- 500+ lbs/sqft: Required for high-density deployments — fully loaded 42U cabinets with GPU servers can weigh 2,500-3,000 lbs
- Slab floor (no raised floor): Increasingly common in modern facilities using overhead cooling — eliminates floor load concerns but requires different airflow management
Hot Aisle/Cold Aisle Containment
Modern colocation facilities use aisle containment systems to separate hot exhaust air from cold supply air, dramatically improving cooling efficiency. Your lease should specify:
- Containment type: Hot aisle containment (HAC) or cold aisle containment (CAC) — both are effective; HAC is more common in newer builds
- Temperature guarantees: Cold aisle inlet temperature maintained at 64-80°F (ASHRAE recommended range) with contractual obligations if exceeded
- Humidity control: Relative humidity maintained between 20-80% (ASHRAE A1 class) to prevent static discharge and corrosion
- Environmental monitoring: Real-time temperature and humidity monitoring with tenant access to dashboards and automated alerting
Lease language tip: Require the lease to state that the provider “shall maintain cold aisle inlet temperatures at or below 77°F (25°C) at all times, measured at the front of Tenant’s cabinets.” Vague language like “commercially reasonable cooling” gives you no recourse when temperatures spike.
7. Cross-Connect Fees & Carrier Neutrality
Connectivity is the second pillar of colocation value — after power. Cross-connect fees and carrier neutrality provisions are among the most frequently overlooked (and most expensive) elements of a data center lease. Tenants who focus exclusively on power and space costs often discover that connectivity charges add 15-25% to their total cost of occupancy.
Cross-Connect Pricing
A cross-connect is a physical cable (copper or fiber) that connects your cabinet to another tenant, a carrier, or the facility’s meet-me room. Providers charge a monthly recurring fee for each connection:
| Cross-Connect Type | Monthly Cost | Typical Use Case |
|---|---|---|
| Single-mode fiber | $200 - $350/mo | Carrier connections, high-bandwidth links |
| Multi-mode fiber | $200 - $300/mo | Short-range inter-cabinet connections |
| Cat6/Cat6a copper | $150 - $250/mo | Low-bandwidth management connections |
| Coax | $150 - $200/mo | Legacy carrier connections |
Cross-Connect Cost Example
20 cross-connects × $350/mo average = $7,000/mo
Annual cost: $7,000 × 12 = $84,000/yr
Over 5-year lease: $420,000 — often missed entirely in budgeting
Carrier-Neutral vs. Carrier-Tied Facilities
A carrier-neutral facility allows any telecommunications carrier to provide service within the building. This gives you competitive pricing leverage and redundancy options. A carrier-tied facility has an exclusive or preferred relationship with one or a few carriers, limiting your choices and often resulting in above-market pricing.
Your lease should include the following connectivity provisions:
- Carrier-neutral guarantee: The provider will not restrict which carriers can serve the facility
- Meet-me room access: Unrestricted access to the facility’s carrier interconnection point
- Cross-connect fee caps: Annual escalation limits on cross-connect pricing (CPI or 3% max)
- Volume discounts: Reduced per-connection pricing at defined thresholds (e.g., 10+, 20+, 50+ connections)
- Dark fiber rights: The right to install your own fiber between your space and the meet-me room, bypassing per-connection fees entirely
- Diverse fiber entry: The building must have fiber entering from at least two geographically separate conduit paths to protect against single points of failure
Hidden cost alert: Some providers charge “meet-me room access fees” or “carrier access fees” on top of individual cross-connect charges. These can add $500-$2,000/month to your connectivity costs. Ask explicitly about all connectivity-related fees during negotiation and ensure the lease lists them exhaustively.
8. FISMA/SSAE 18 Compliance Clauses
If your organization handles regulated data — financial records, healthcare information, government workloads, or payment card data — your colocation provider’s compliance posture is not optional. It’s a lease-critical requirement that must be contractually guaranteed, regularly verified, and immediately enforceable.
SOC 2 Type II Requirements
SOC 2 Type II is the baseline compliance standard for colocation providers. It validates that the facility’s security controls, availability mechanisms, processing integrity, confidentiality protections, and privacy practices have been independently audited over a defined period (typically 6-12 months). Your lease should require:
- Current SOC 2 Type II report delivered to tenant annually within 30 days of issuance
- Immediate notification if the auditor identifies material deficiencies or qualified opinions
- Tenant right to terminate if SOC 2 Type II certification lapses and is not restored within 90 days
FISMA Authorization for Government Workloads
Federal Information Security Modernization Act (FISMA) authorization is required for any facility hosting federal government data or systems. FISMA authorization levels — Low, Moderate, and High — correspond to the sensitivity of the data being processed. If you hold or anticipate holding government contracts, ensure:
- The facility holds current FISMA authorization at the appropriate impact level
- The provider maintains FedRAMP authorization if you plan to offer cloud services to government agencies
- Physical security controls meet NIST SP 800-53 requirements for the applicable impact level
PCI DSS for Payment Processing
If your infrastructure processes, stores, or transmits cardholder data, the colocation facility must support your PCI DSS compliance program. While PCI compliance is ultimately the tenant’s responsibility, the physical facility must provide:
- Physical access controls with multi-factor authentication and visitor logging
- Video surveillance with minimum 90-day retention
- Individual cabinet or cage locking with tenant-controlled access credentials
- Documented chain-of-custody procedures for hardware delivery and removal
Audit Right Provisions
Regardless of which compliance frameworks apply, your lease must include robust audit rights:
- Annual audit right: The right to conduct (or have a third party conduct) an annual security and compliance audit of the facility
- Ad hoc audit right: The right to conduct additional audits following a security incident or compliance concern, with reasonable notice (typically 5-10 business days)
- Audit cooperation obligation: The provider must make personnel, documentation, and systems available to support your audit activities
- Cost allocation: Routine annual audits at the provider’s cost; ad hoc audits at the requesting party’s cost unless triggered by a provider breach
9. Force Majeure for Power Grid Failures
Force majeure provisions in data center leases are uniquely consequential because the entire value proposition of a colocation facility rests on its ability to maintain power and connectivity when external infrastructure fails. A force majeure clause that excuses the provider from liability during utility grid failures essentially renders your uptime SLA meaningless during the exact scenarios when you need it most.
Grid-Level Failure vs. Facility Failure
The critical distinction in force majeure negotiations is between events the provider can and cannot control:
- Facility-level failures (provider’s responsibility): Generator malfunction, UPS failure, cooling system breakdown, internal electrical distribution failure, human error by provider staff. These should never be covered by force majeure.
- Grid-level failures (potentially force majeure): Regional utility grid collapse, natural disasters destroying transmission infrastructure, government-ordered grid shutdowns. Even these should not fully excuse the provider if they have functioning generators and UPS systems.
Non-negotiable position: Your lease should state that force majeure does not relieve the provider of its obligation to maintain power through generator and UPS systems during a utility grid failure. The entire purpose of those systems is to bridge grid outages. If the provider’s generators fail during a grid outage, that is a provider failure, not force majeure.
Utility Provider Liability
Most utility providers limit their liability through tariff provisions filed with state public utility commissions. This means you generally cannot recover losses from the utility company for grid failures. Your recovery path runs through your colocation provider’s SLA — which makes the force majeure carve-out even more critical.
Generator Fuel Priority During Emergencies
Extended grid outages (lasting days or weeks, as seen during severe weather events) create fuel supply challenges. Your lease should address:
- Priority fuel supply contracts: The provider must maintain contractual relationships with fuel suppliers that guarantee priority delivery during emergencies
- Multiple fuel suppliers: At least two independent fuel supply agreements to prevent single-supplier dependency
- Fuel storage capacity disclosure: The exact on-site fuel capacity in gallons and estimated hours of full-load operation
- Load shedding priority: If fuel becomes scarce, the provider’s policy for prioritizing power delivery among tenants must be disclosed in the lease
10. 12-Item Data Center Tenant Checklist
Before signing any data center or colocation lease, verify that every item on this checklist is addressed in the agreement:
- Guaranteed power density per cabinet — specified in kW with minimum floor, not marketing maximum
- PUE cap with financial credits — contractually guaranteed maximum PUE with credits for overages
- Uptime SLA with meaningful credits — 99.99% minimum for production; 99.999% for mission-critical workloads
- Generator and UPS redundancy level — 2N or 2N+1 for mission-critical; N+1 minimum for all other
- Cooling redundancy and temperature guarantees — N+1 minimum with contractual inlet temperature commitments
- Cross-connect fee schedule with caps — all connectivity fees listed, with annual escalation limits
- Carrier-neutral facility guarantee — no exclusive carrier relationships; unrestricted meet-me room access
- Compliance certifications maintained throughout term — SOC 2 Type II, FISMA, PCI DSS as applicable
- Force majeure excludes generator/UPS failures — provider remains liable for on-site power system failures during grid outages
- Right to audit power metering and compliance — annual audit rights plus ad hoc audit rights after incidents
- Termination rights for chronic SLA breaches — defined thresholds that trigger penalty-free lease termination
- Escalation and incident response procedures — documented escalation paths with named contacts and response time commitments
11. 6 Red Flags in Data Center Leases
Red Flag #1: PUE not guaranteed contractually. If the provider advertises a low PUE in marketing materials but refuses to commit to it in the lease, you have no recourse when your electricity bills come in higher than projected. A provider confident in their infrastructure will guarantee PUE in writing. One who won’t is hiding operational inefficiency behind legal ambiguity.
Red Flag #2: No SLA credits for partial outages. Many SLA structures only trigger credits during complete facility outages. Degraded performance — power fluctuations, cooling failures that force server throttling, intermittent network packet loss — can be just as costly to your operations as a full outage but generate zero compensation. Demand tiered credits that cover degraded performance thresholds, not just binary up/down states.
Red Flag #3: Carrier-tied facility with single provider. A facility with an exclusive carrier relationship eliminates your ability to negotiate competitive bandwidth pricing, creates a single point of failure for connectivity, and can trap you in above-market rates for the entire lease term. Always verify carrier neutrality before signing, and confirm that at least 3-5 carriers are actively present in the facility’s meet-me room.
Red Flag #4: Cross-connect fees uncapped. Without an annual escalation cap, the provider can increase cross-connect fees at any rate. Over a 5-year lease, uncapped annual increases of 8-10% (which some providers attempt) can nearly double your connectivity costs. Insist on a CPI-linked cap or a fixed maximum annual increase of 3%.
Red Flag #5: No right to audit power metering. If you cannot independently verify how the provider measures your power consumption, you have no way to validate your electricity charges. Power metering discrepancies of 5-10% are not uncommon and represent thousands of dollars annually. Your lease must include the right to audit metering equipment calibration and accuracy at least once per year.
Red Flag #6: Force majeure excludes utility grid failures. If the provider’s force majeure clause excuses them from SLA obligations during grid-level utility outages, your uptime guarantee is effectively worthless during the exact scenario that generators and UPS systems are designed to handle. This is the most dangerous red flag on this list because it creates a gap in coverage precisely when coverage matters most.
12. Frequently Asked Questions
What power density should I negotiate in a data center colocation lease?
Standard colocation cabinets provide 5-8 kW per cabinet, which is adequate for general-purpose servers and networking equipment. If you run GPU clusters, high-performance computing, or AI training workloads, negotiate for high-density allocations of 15-30 kW per cabinet. Your lease should specify a guaranteed minimum power draw per cabinet, the process and cost for requesting additional power (circuit whips typically cost $2,500-$5,000 per drop), and penalties if the provider fails to deliver contracted power. Always include a clause allowing you to scale power density upward as your needs grow without requiring a full lease renegotiation.
What does 99.999% uptime actually mean in a data center SLA?
A 99.999% uptime SLA — often called “five nines” — means the data center guarantees no more than 5.26 minutes of unplanned downtime per year. Compare this to 99.9% (8.76 hours per year) or 99.99% (52.6 minutes per year). The difference in financial exposure is dramatic: at $400,000 per hour of downtime for financial services workloads, 99.9% exposes you to $3.5 million in annual downtime costs versus just $35,000 at 99.999%. Ensure your SLA defines what counts as “downtime,” specifies meaningful service credits (not just nominal amounts), and includes partial outage provisions for degraded performance that doesn’t constitute full downtime.
How does PUE affect my data center lease costs?
Power Usage Effectiveness (PUE) is the ratio of total facility power to IT equipment power. A PUE of 1.0 is theoretical perfection; the industry average is 1.58, while best-in-class hyperscale facilities achieve 1.1-1.2. PUE directly impacts your electricity bill because you pay for total power consumed, not just IT load. For example, a 100 kW IT load at PUE 1.6 costs approximately $140,160 per year at $0.10/kWh, while the same load at PUE 1.2 costs $105,120 — a savings of $35,040 annually. Negotiate a guaranteed maximum PUE in your lease with financial credits if the provider exceeds it.
What are cross-connect fees and why do they matter in colocation leases?
Cross-connect fees are monthly charges for physical cable connections between your cabinet or cage and other tenants, carriers, or the meet-me room within the data center. Typical fees range from $200-$500 per connection per month. These fees are frequently overlooked during lease negotiation but add up quickly: 20 cross-connects at $350 per month equals $84,000 per year. Negotiate volume discounts, annual caps on fee increases, and ensure your facility is carrier-neutral so you are not locked into a single provider’s pricing. Also confirm you have unrestricted access to the meet-me room.
What compliance certifications should a data center lease require?
The compliance certifications required depend on your workloads. At minimum, require SOC 2 Type II certification, which validates security, availability, processing integrity, confidentiality, and privacy controls. If you handle government data, the facility needs FISMA authorization at the appropriate impact level (Low, Moderate, or High). For payment card data, require PCI DSS compliance. Healthcare workloads need HIPAA-compliant physical safeguards. Your lease should require the provider to maintain these certifications throughout the term, provide audit reports annually, grant you reasonable audit rights, and notify you immediately if any certification lapses or is revoked.
What generator and UPS redundancy level should my data center lease guarantee?
The three common redundancy levels are N+1 (one extra unit beyond minimum required), 2N (fully duplicated systems), and 2N+1 (fully duplicated plus one extra). For mission-critical workloads, require 2N or 2N+1 redundancy for both generators and UPS systems. Your lease should specify generator start time (typically 10-15 seconds), UPS bridge capacity sufficient to cover the generator start gap, minimum on-site fuel reserves (48-72 hours at full load is standard), and fuel resupply contracts with priority delivery during emergencies. N+1 is acceptable only for non-critical or development workloads where brief outages are tolerable.