Individual hyperscale data center projects can now carry insurable values of up to $30 billion during construction — roughly three times the $5–10 billion insurance limit typical of major infrastructure projects like bridges and tunnels. No single insurer can absorb that alone. Here's what's actually driving 2026 pricing, why standard property policies keep failing this asset class, and how the market is restructuring around it.
Data center risk used to be a fairly conventional commercial property and casualty placement. It isn't anymore. The combination of AI-driven capex, extreme value concentration on single sites, novel business-interruption triggers, and — as of March 2026 — confirmed physical attacks on hyperscale infrastructure has forced underwriters to rebuild the playbook in real time, largely without the decades of loss history that price every other property class.
Why this market looks nothing like it did two years ago
Three forces are compounding at once. First, scale: average data center project values have climbed from roughly $150 million to $3 billion, and top hyperscalers are projecting on the order of $710 billion in capital expenditure for 2026 alone, according to one industry report — a separate Swiss Re–cited estimate puts total cloud-provider capex above $600 billion in 2026 (a 36% year-over-year increase), with about 75% of that tied directly to physical AI infrastructure. The two figures differ because they measure different scopes (hyperscaler capex broadly versus the five largest cloud providers specifically), but both point the same direction.
Second, concentration: insurers have deep experience with traditional data centers, but only a handful of next-generation hyperscale facilities are even fully operational yet, which leaves underwriters pricing risk with genuinely limited empirical loss data. Third, complexity: large campuses are often insured through separate programs for the building, the equipment, and the power plant, which makes it hard for any single carrier to track its total accumulation exposure — a real problem if one physical event can trigger claims across multiple policies at once.
A genuinely new premium pool
- S&P Global projects roughly $10 billion in new data-center-related premiums in 2026 — about double the global aviation insurance market
- Swiss Re estimates the global premium pool tied to data centers could more than double, from about $10.6 billion today to $24.2 billion by 2030
- Aon expanded its Data Center Lifecycle Insurance Program from $2.5 billion to $3.5 billion of capacity within four months in 2026
Coverage that hasn't caught up
- S&P Global concludes the largest hyperscale campuses have already exceeded the coverage capacity of conventional construction and property markets
- Standard commercial property policies still require physical damage to trigger business interruption — leaving operators exposed to outages with no property loss
- A March 2026 physical attack on hyperscale cloud infrastructure moved geopolitical exclusion review from theoretical to active underwriting practice
The 2026 numbers, side by side
Every figure below comes from a named research house or broker, not a blended industry average — the scale differences between a single facility and a global premium pool are the point.
What actually gets underwritten
"Data center insurance" isn't one policy — it's a coordinated stack of coverage lines that historically lived in separate programs and are now, increasingly, being deliberately linked together.
| Coverage line | What it addresses | Where it typically breaks down |
|---|---|---|
| Property / equipment | Building, power infrastructure, cooling systems, generators, servers | Accurate total insured value (TIV) tracking across fast-changing equipment schedules |
| Builders risk | Construction-phase damage to the building and installed equipment | Terminates at substantial completion — a coverage gap right when live halls and active construction share a footprint |
| Business interruption | Revenue loss following an insured physical loss | Requires physical damage to trigger — doesn't respond to outages caused by power loss or cyberattack alone |
| Contingent BI | Losses to customers who lease compute from the facility, not just the operator itself | Interconnected campus dependencies make the loss chain hard to bound |
| Cyber | Data breach and, increasingly, non-physical-damage business interruption from an outage-causing cyberattack | Policy exclusions can eliminate coverage for a cyberattack that also causes physical destruction |
| SLA / uptime insurance | Financial penalties and termination costs tied to contractual uptime commitments | Demand is currently outpacing available supply in this specific niche |
| Surety / subcontractor default | Protects against a contractor or subcontractor failing mid-project | Market capacity questioned as project counts and complexity both rise |
Real pricing: what operators pay in 2026
Data center insurance doesn't price off a flat rate — it's built from insured value, tier and redundancy, catastrophe exposure, construction type, fire-suppression and cooling design, security, claims history, and the BI limits selected. But named broker guidance gives real working ranges.
| Cost component | 2026 rate | Worked example |
|---|---|---|
| Operational property premium | $0.08–$0.25 per $100 of TIV/year (low-cat markets) | $100M TIV facility → $80,000–$250,000/year, before BI, GL, and cyber |
| Builders risk (construction phase) | $0.15–$0.50 per $100 of project value | $500M building → roughly $750,000–$2.5M/year |
| Full construction insurance program | $0.50–$2.00 per $100 of project value | Bundles builders risk, delay-in-opening, and contractor liability together |
| Cyber liability trend | Up 25–40%/year, 2022–2025 | Stabilizing in 2026 for facilities with strong security controls |
| Texas nat-cat loading | +15–30% vs. a comparable Midwest facility | Driven by ERCOT grid vulnerability, hurricane exposure, and hail frequency |
The structural gap: why standard property policies fail here
Two structural problems keep surfacing across independent reports on this market, and neither is really about pricing.
The BI trigger problem
Standard commercial property policies require physical damage before business interruption coverage responds. Data centers routinely go down without anything being physically damaged — a power utilization spike, a cyberattack that disrupts service without destroying hardware, or a dependency failure elsewhere on an interconnected campus. Swiss Re and others flag SLA exposure specifically as one of the least-addressed risks in conventional data center coverage, because uptime, availability, and latency commitments translate directly into financial exposure that a standard BI trigger simply doesn't reach.
The accumulation-tracking problem
Large campuses are often insured through separate programs for the building, the equipment, and the on-site power plant. That's administratively convenient but makes it genuinely difficult for an insurer to see its total accumulated exposure to a single physical location — and a single event (a fire, a storm, an attack) can trigger claims across all of those programs simultaneously. Rising internet connectivity of operational technology — power, cooling, security, and monitoring systems all now networked — adds a cyber-physical dimension to that same accumulation risk.
Capacity: why no single insurer carries a hyperscale campus
S&P Global estimates insured values during the construction phase of hyperscale data centers now range from $10 billion to $30 billion — up to three times the $5–10 billion insurance limit typical of major infrastructure projects like bridges and tunnels. No single balance sheet absorbs that. Munich Re, one of the larger reinsurers active in this space, offers up to $250 million of net capacity per individual construction project — a meaningful line, but a small fraction of what one major campus requires.
The result is layering: assembling $10 billion of coverage on a single project can mean stacking programs across 40-plus carriers in a structured tower, with a lead underwriter setting terms and following markets providing additional capacity beneath or above it. Aon's response has been to build a coordinated multi-line structure rather than a single policy — its Data Center Lifecycle Insurance Program grew from $2.5 billion in capacity in January 2026 to $3.5 billion by April 2026, adding scope to cover the construction-to-operations handoff, a transition point several sources flag as one of the riskiest and most commonly mishandled moments in a data center's life.
One insurance executive quoted in industry coverage estimated the overall data center insurance marketplace had expanded by roughly 50% over the prior year — and suggested buyers may increasingly trade some coverage breadth for certainty of payment, given that traditional BI claims on complex projects can take one to two years to adjust. Growing project complexity is also pushing demand into surety and subcontractor default coverage, as risk managers worry about counterparty failure across the large number of contractors and suppliers a hyperscale build now involves.
The risk that changed underwriting overnight
On March 1, 2026, drone strikes hit three Amazon Web Services facilities in the United Arab Emirates and Bahrain amid the broader Iran conflict; Iran's Islamic Revolutionary Guard Corps claimed responsibility, citing the facilities' role in supporting U.S. military and intelligence networks. Two UAE facilities were directly struck and a third, in Bahrain, was damaged by a nearby strike — causing structural damage, disrupting power delivery, and in some cases triggering fire suppression systems that caused additional water damage. Because multiple availability zones went down at once, standard cloud redundancy models didn't hold, and outages rippled into banking, payments, and consumer apps across the region.
How programs actually get structured
Across all four paths, the sources reviewed for this piece converge on one point: limits and wording matter more than headline price. An underpriced policy that silently excludes off-premises BI, non-damage cyber BI, or contingent BI on tenant losses is the expensive one once a claim actually arrives.
Frequently asked questions
Because the numbers don't fit on one balance sheet. S&P Global puts insured construction values for the largest hyperscale campuses at up to $30 billion, while a major reinsurer like Munich Re typically offers up to $250 million of net capacity per project. Covering a $10 billion tower means layering dozens of carriers together, with a lead underwriter setting terms for the group.
Usually not under a standard commercial property policy, which requires physical damage to trigger BI. That's a known gap for data centers, where outages are often caused by power supply issues or cyberattacks rather than physical destruction — which is part of why demand for separate SLA-specific and non-damage cyber BI coverage is rising faster than supply.
Total insured value, tier and redundancy level, location and catastrophe exposure (wildfire, flood, convective storm, hurricane), construction type, fire-suppression and cooling system design, security, claims history, and the business-interruption limits and indemnity period selected. There's no single flat rate across the industry.
It already has, according to broker commentary published after the event — geopolitical exclusion review moved from a theoretical policy clause to an active underwriting concern, particularly for operators with facilities in the Gulf region, and it sits alongside cyber-physical convergence as a newly prominent category insurers are actively pricing for.
Generally no. A facility's building and equipment coverage rarely extends to a tenant's own servers, business interruption, or contractual SLA exposure. Contingent BI and tenant-side property coverage exist specifically because a landlord's policy and a tenant's operational risk are not the same thing — treating them as interchangeable is one of the coverage gaps this piece keeps returning to.
Our methodology
Every figure in this article is attributed to a named research house, rating agency, broker, or news outlet, rather than blended into a single invented industry average. Where two named sources gave different numbers for what looked like the same thing, we kept both and flagged the likely reason for the gap rather than picking one.
- Capex figures in Section 01 (roughly $710B vs. above $600B for 2026) come from two different named sources measuring different scopes — broad hyperscaler capex versus the five largest cloud providers specifically — and are presented as such rather than reconciled into one number.
- The two construction insurance rate ranges in Section 04 ($0.15–$0.50 vs. $0.50–$2.00 per $100 of value) come from the same named broker and price different scopes: builders risk alone versus the full construction insurance program.
- The March 2026 AWS drone strike account in Section 07 is cross-checked against independent reporting (CNBC, Reuters, and specialist policy coverage), not a single source.
- This article does not include a per-deal total-cost worked example for a specific named facility, because no source reviewed published one with enough detail to reproduce responsibly; the rate ranges above are the honest level of specificity the public record currently supports.
- Reviewed periodically as insurers, brokers, and rating agencies update published guidance.
Sources
Data compiled from the following named sources (accessed August 2026). Links have been removed for this edition; source names are provided for attribution.
- S&P Global Ratings, via Engineering News-Record — "Report: Billions of Dollars in Data Center Construction Risk Is Uninsured," April 28, 2026
- S&P Global Ratings, via Insurance Journal — "Data Centers Offer a Potential $10 Billion Windfall for Insurers," April 14, 2026
- AM Best, via Risk & Insurance — "Data Center Boom Creates Complex, High-Stakes Insurance Challenges," June 16, 2026
- Alton Risk — "Data Center Insurance: Property, Business Interruption & Liability Coverage," June 12, 2026
- Amwins — "Insuring the Data Center Boom," July 27, 2026
- Hotaling Insurance Services — "Data Center Insurance Cost Guide: What Operators Actually Pay in 2026," April 23, 2026
- Hotaling Insurance Services — "Data Center Construction Insurance Costs," April 27, 2026
- Hotaling Insurance Services — "AI Data Center Insurance: Hyperscale Risk, Coverage Gaps," April 27, 2026
- Aon plc, via PRNewswire/Barchart — DCLP expansion to $2.5B, January 14, 2026
- Swiss Re Institute — "sigma insights 07/2026: Insuring AI: data centre value accumulation risks," July 2, 2026
- Swiss Re Institute, via Risk & Insurance — "Data Centers Powering AI Create Unprecedented Risk Accumulation Challenges," April 1, 2026
- Insurance Business — "SLA exposure is biggest operational risk for data centers," June 4, 2026
- Insurance Business — "Data center insurance's next challenges: BI, credit and power"
- Bracewell LLP — "Data Center Insurance Boom May Obscure Claims' Difficulty," May 15, 2026
- CNBC — "Banking, payments services disrupted after Amazon UAE data centers hit in drone strikes," March 3, 2026
- TechPolicy.Press — "The Legal and Policy Fallout from Data Center Strikes in the Middle East War," March 12, 2026
