Standards & Specifications Cross-Reference Matrix

An AI data center is governed by no single document. It sits at the intersection of at least five independent standards regimes, each maintained by a different body, each answering a different question, and none of which was written with 132 kW liquid-cooled racks in mind: resilience (Uptime Institute, ANSI/TIA-942, EN 50600 / ISO/IEC 22237), thermal (ASHRAE TC 9.9), efficiency KPIs (ISO/IEC 30134), open hardware (the Open Compute Project), and security & compliance (SOC 2, ISO/IEC 27001/42001, FedRAMP, CMMC, NERC CIP). They overlap, they conflict at the edges, and practitioners routinely treat them as interchangeable when they are not.

This appendix is the reference layer for that mess. It is tables, not argument. Where a number is volatile or vendor-sourced it carries a source and an asof date; where a mapping is approximate it says so, because a common standards error is asserting that a Uptime Tier "equals" a TIA Rated level or an EN 50600 Availability Class. They are cousins, not synonyms. Read the rows; verify against the standard text before it lands in a contract.

Three regimes describe "how reliable is the facility," and they are not equivalent. Uptime Institute Tier I–IV certifies design topology and operations against a concurrent-maintainability / fault-tolerance test; it is a held trademark and the de facto global vocabulary. ANSI/TIA-942-C (revision C, May 2024) is a full-facility standard — telecom, architectural, electrical, mechanical — with its own Rated-1..4 scale (renamed from "Tier" to avoid confusion with Uptime). EN 50600 and its international twin ISO/IEC 22237 classify Availability Class 1–4 (and separate Protection Classes for physical security). The numerals loosely align — higher is more resilient — but the bodies explicitly disclaim equivalence, certify different scopes, and use different test methods. Use this table to translate intent; never to assert that a Tier III contractually is an Availability Class 3.

ASHRAE TC 9.9 (Thermal Guidelines for Data Processing Environments, 5th ed.) defines the supported environmental envelope. The legacy air classes A1–A4 set allowable inlet-air temperature and humidity; they describe a world at or below the air-cooling cliff (~41 kW/rack practical ceiling) and are increasingly a description of the past for dense AI halls. The 5th edition's liquid-cooling chapter introduced the W-classes, keyed to the maximum facility-supply-water temperature delivered to the rack/CDU; higher W-numbers mean warmer water, which unlocks more hours of free cooling and viable heat reuse, at the cost of a tighter thermal margin against the chip. The AI-relevant rows are the warm-water classes (W32/W40/W45), which is where GB200-class direct-to-chip designs and the forward 45 °C-coolant Vera Rubin roadmap sit.

ISO/IEC 30134 is the standardized KPI series — the formal home of PUE and its successors. It matters because regulators and disclosure regimes increasingly cite the standard part rather than the vernacular metric, and because the post-PUE metrics (WUE, REF, ERF, CER) are exactly the ones AI density and water scrutiny have pushed to the front. Each metric is a separate numbered part; cite the part, not just the acronym, when a number lands in a sustainability filing. → the metric stack is engineered in Chapter 15.1.

The Open Compute Project is where the open-hardware reference specs for AI-scale racks, power, and security live — and where the hyperscalers contribute the designs that OEMs then productize. These specs version quickly; the editions below are the 2025–2026 reference points. The AI-relevance column is the filter: the rows that matter for 132 kW-and-beyond racks are the rack/power and security families, not the legacy ORv2 baseline.

Which compliance regimes bind depends on who the tenants are and what data runs. A commercial neocloud lives on SOC 2 and ISO/IEC 27001; a US-government workload adds FedRAMP and, for defense contractors, CMMC; an operator that owns substation/transmission assets inherits NERC CIP as critical-infrastructure cyber regulation; and any operator productizing the AI itself increasingly faces ISO/IEC 42001, the first AI-management-system standard. These are not interchangeable — they differ in authority (voluntary attestation vs federal mandate), scope (the org vs the cloud offering vs the AI system vs the grid asset), and audit cadence. → compliance and certification governance in Chapter 11.11.