Every data center has two opening dates. Day one is the ribbon: badges print, cameras record, the operations team owns the floor. Day zero is quieter and comes weeks earlier: the day the first tray of compute crosses the fence line. Almost everything a C-level leader believes about site security applies to day one. Almost nothing of it exists on day zero.
Commissioning is a construction site legally and a treasury physically. In the final month before handover, a single AI hall can receive more deliverable value than the building cost. Yet the security posture is still the general contractor’s: temporary fencing with gaps for plant traffic, a paper visitor log, a gate guard hired for construction theft, and five hundred subcontractor badges that nobody has ever reconciled against a person standing on the floor.
The month with the most valuable deliveries is the month with the least security. That is not an oversight. It is the default.
Why the gap exists
The badge cutover is the classic seam. Construction access control ends when the contractor demobilizes; operational access control starts when the operator’s systems go live. Those two dates almost never meet. In our assessments the gap runs from four days to nine weeks, and it reliably contains the GPU deliveries, because logistics teams schedule compute as late as possible to protect warranties and refresh cycles.
Insurers have noticed. Carriers underwriting AI campuses increasingly ask for evidence of controls during transit and commissioning, not just after handover. If your risk team has not read the marine-cargo and inland-transit clauses against the delivery schedule, someone is carrying exposure they have not priced.
What good looks like
- A named security owner for the commissioning window, with authority over both contractor and operator processes. The gap persists because it belongs to nobody.
- Serialized intake at the dock: every tray checked against the manifest at the truck, by two people, before it moves. Dual custody from tailgate to hall.
- Interim detection: temporary cameras and monitored door contacts on the compute halls weeks before the permanent system is commissioned. Rented controls are cheap against the value at risk.
- A badge freeze and re-vetting pass before deliveries begin: every credential still active on site must map to a person with a current reason to be there.
The pattern we look for in a day-zero readiness review is simple to state: at no point between the public road and the rack row should custody of the hardware be ambiguous. Where custody is ambiguous, shrinkage is not an incident, it is a rounding error you will discover at audit.
We have stood post through many commissioning windows. If yours is opening soon, we can walk it with you.