A board of directors at a custodian bank decides the risk of a public cloud breach is too high for the core pension ledger. They mandate bringing the data back in-house. They want to point to a room and know the data is there. The IT team is handed a budget and a floor plan. The structural engineer’s report is the first document that tells them whether they are building a data center or just repurposing an office.

Commercial real estate is engineered to keep humans comfortable and evacuate them during a fire. It is not designed to dissipate massive heat loads or support tons of dead weight. A densely packed storage array weighs as much as a parked car, resting on four caster wheels. An office floor rated for 50 pounds per square foot live load will fail under the concentrated point load of a fully populated rack.

Before signing the purchase order for the racks going into the secure server room on the fourteenth floor, measure the freight elevator doors. A fully populated rack on a pallet might fit through the doors but not turn inside the cab. If the elevator weight limit is too low once you add the pallet jack and the rigging crew, the engineering team spends the weekend on the loading dock unboxing servers and moving them up the passenger elevator on utility carts.

You can control who badges into your server room. You cannot control the contractor drilling into the ceiling slab on the floor below, or the plumbing fixtures in the corporate kitchen two floors up. Water always finds the cables. It follows the conduit, pools at the slab penetrations, and drops predictably onto the most expensive routing equipment in the room.

The infrastructure illusions compound once the hardware is in the building.

The building’s backup generator is there to get people out of the elevators, not to keep your databases online. Commercial building generators are sized and wired exclusively for life-safety systems. If the grid fails, the servers power down. Even if you install a dedicated generator, the one that tests fine at 40 percent load is not the one that carries the room at 100 percent when the transfer switch is exercised under full strain.

Core ledgers require dense compute. The building’s central chilled water system usually shuts down on weekends. You need dedicated computer room air conditioning. This means negotiating roof rights for the dry coolers, routing coolant pipes through shared building risers, and reinforcing the roof.

When it comes to the network, ask for two routes on a drawing, not two providers on an invoice. Two carriers quoting service to the building often enter through the exact same concrete conduit in the basement parking garage before splitting at the telecom demarc. A single errant backhoe in the street severs both connections.

The decision is not cloud versus on-premises. It is what operating model gives you the control you need at a cost and risk you can defend. There are three physical options.

The Office Server Room

Consider an office server room when the workload can tolerate the building’s failure modes, the equipment footprint is limited, and facilities can demonstrate adequate structure, power, cooling, and delivery routes. Require the same evidence before approving it that you would request from an external operator.

If the room is in the basement to solve the floor loading issue, you accept the flood risk. You will need raised floors, water detection cables, and redundant sump pumps. If it is on the top floor to avoid water, you depend on a single freight elevator that may be unavailable during a building incident.

The Institution-Owned Facility

Favor an institution-owned, purpose-built facility when absolute control of the premises is a strict regulatory requirement and the institution is prepared to fund facility engineering, 24/7 staffing, maintenance, and periodic replacement.

Control is a property of the operating model, not the deed. But ownership means you own the outage caused by deferred generator maintenance or a cooling plant that has reached end of life. The hidden cost is not the construction. It is the facilities team you now have to hire, train, and retain. A data center without a 24/7 facilities team is just a room with servers in it.

Colocation

Favor colocation when the institution needs dedicated equipment and clear physical-access controls but does not want to build or operate a resilient facility.

Colocation is not giving up control. It is buying someone else’s control—their generator maintenance schedule, their diverse fiber paths, their pre-action fire suppression, their 24/7 remote hands. Data sovereignty is about controlling access, not pouring concrete. Leasing a private, locking cage where your staff holds the keys and biometric access is logged meets strict isolation requirements without the capital expenditure of building facility infrastructure. You own the hardware; you rent the concrete, power, and cooling.

Verify the contract and the site. Check access logs, escort rules, remote-hands permissions, carrier options, power architecture, and incident response. A contract is not proof that every promised redundant path is independent. Walk the fiber paths.

What to Check Before Procurement

If the decision is made to retrofit the office, the project team needs to answer specific physical questions before procurement orders go out.

  • Floor capacity: Get the structural engineer the loaded weight of each rack, its footprint, and the delivery route. A floor that accommodates the total weight spread across a room may not accommodate it at four points beneath one cabinet.
  • Power redundancy: Trace each proposed path to its source. Dual power supplies and separate rack PDUs do little if both circuits depend on the same panel, transformer, or building entry.
  • Fire suppression: Standard office wet-pipe sprinklers destroy everything they touch. Data centers require pre-action dry-pipe systems or clean agent systems. Clean agent systems are expensive to recharge and cause downtime on a false discharge. The fire suppression system is the only system in the room that can destroy everything it protects.
  • Seismic isolation: Building code protects people by keeping racks from falling on them. Equipment protection is a separate spec. Racks must bolt to the structural slab or sit on base-isolation platforms.

The board wants to point to a room and know the data is there. A locked cage in a colocation facility gives them a room to point to, and leaves the generator maintenance to someone else.