Data centers spent years as a fairly quiet corner of commercial real estate, but AI workloads have changed that dramatically. Denser computing means more power and more cooling, and the risk profile has shifted with both. An operating facility now touches professional lines, property and casualty, environmental, and energy coverage at once, so it’s important to review these accounts with specialists from each practice for a more cohesive picture.
Consider a short outage. Forty-five minutes is long enough for service credits at a 100 MW data center to hit $24 million and potentially wipe out more than 40% of annual cash flow, per a 2026 Parametrix modeled analysis. Depending on the cause, that outage can pull in Tech E&O and Cyber before anyone files a property claim. Good data center risk management starts with knowing what each specialist looks for.
Tech E&O responds to financial loss from a technology service that didn't perform as promised, whether that's a missed uptime commitment, negligent maintenance, or a failure of hosted-cloud or managed services. Cyber responds to a security breach, and on these accounts the bigger exposure is business interruption, so the policy needs proper business interruption and dependent business interruption coverage behind it.
Concentration makes limits hard to set, because one error or breach can reach every company relying on the facility. "I'm going to recommend as high as you can get or afford,” says Deb Dioguardi, Professional Lines National Practice Leader at Jencap, “But that's a hard limit to put a value on right now, especially when you haven't seen the claims come in yet.”
When an outage hits, which policy responds? Reviewing data center cyber insurance and technology E&O insurance side by side sorts that out, and a specialist may recommend writing both with the same carrier on the same form. Check how each treats AI, because some forms exclude it, some endorse it back, and some say nothing (which leaves its own open question).
D&O deserves a fresh look as well. Hyperscalers are planning more than $700 billion in capital expenditures in 2026, and directors approving that spend face questions about cybersecurity oversight and energy use, plus how both get disclosed, that older policies may not anticipate. Round out the review with EPLI for the facility's own workforce, and find out what uptime obligations the insured has accepted in customer contracts.
Valuation is the first snag. Hardware values move fast enough that last year's estimate may already be stale, while a standard building estimate often misses the electrical and cooling systems, so accurate data center property insurance pricing starts with values that reflect what's actually built. Engineering assessments at construction and again at completion catch most of what a desk review misses. Loss drivers are the second snag. Fire accounts for more than half of the roughly $800 million in data center claims it reviewed, even though water damage shows up more often, and more than a quarter of US data center capacity is in high-hail zones.
Coverage attorneys predicted in 2025 that neighbor complaints about data center noise would turn into lawsuits. They did. Six class actions were filed against operating facilities in 2026, five over noise from generators and cooling equipment. General Liability (GL) is the obvious place for those claims to land, but GL forms typically carry pollution exclusions, and some carriers argue that noise and vibration qualify. Ask about endorsements that carve out the operation's own discharges, such as generator exhaust, and line up pollution liability for whatever GL won't pick up.
Contracts raise a separate issue. Colocation agreements usually cap the provider's liability and push additional insured and waiver requirements onto tenants, so confirm the insured's GL and umbrella match what it actually signed.
Backup generators mean large volumes of diesel on site, and battery storage brings its own release and disposal questions. Cooling adds another layer. The systems run on chemicals that have to be stored safely and eventually disposed of, and drawing water from a river can reduce downstream flow and stress the habitat it supports.
On-site generation is less settled. Some facilities may use small modular nuclear reactors for primary or backup power, and the market hasn't decided whether that risk belongs with environmental or energy underwriters. Jencap's environmental and energy team leans toward the energy marketplace, given the environmental field's general aversion to nuclear. Placement ultimately depends on which carrier has the expertise and reinsurance treaty support to write it.
What insurance coverage does a data center need?
Most operations need Tech E&O, Cyber, D&O, EPLI, Property, General Liability and Umbrella, and Environmental coverage at minimum.
How do cyber and Tech E&O coverage differ for data centers?
Cyber responds to a security breach. Tech E&O responds when the facility fails to deliver a contracted technology service. A single outage can trigger both.
How should agents evaluate data center property values?
Use values that reflect what's actually built, including electrical and cooling systems, confirmed by engineering assessments.
What catastrophe exposures affect data center insurance capacity?
Hail is a major one, since more than a quarter of US capacity sits in high-hail zones. Limited loss history also makes aggregation harder for carriers to estimate.
Why should data center risks be reviewed across multiple insurance lines?
A single technology failure can raise cyber and governance questions alongside a property claim, and policies reviewed one at a time tend to leave gaps.
If you've got a data center insurance account on your desk, bring Jencap in early so our professional lines, property, casualty, and environmental and energy specialists can review it together. Reach out today to start a conversation.