Hurricane and Storm Surge Risk for Data Center Sites: SLOSH Maps, Coastal Flood Zones and Grid Outages

A hurricane threatens a data center through five channels at once: wind and windborne debris, storm surge and waves along the coast, rainfall flooding that can reach far inland, loss of utility power, and loss of access for staff and fuel trucks. The National Hurricane Center (NHC) rates hurricanes on the 1 to 5 Saffir-Simpson Hurricane Wind Scale, which is based only on maximum sustained wind speed and does not take into account storm surge, rainfall flooding or tornadoes.¹ A Category 1 storm can therefore still flood a low-lying site or leave a region dark for days.

For most well-built facilities, the structure is not the weak point. The failures that have taken data centers offline are usually flooded electrical and fuel equipment, failed utility feeds and fuel supply that cannot reach the site. The grid is often the first casualty: in 2021 Hurricane Ida knocked out all eight transmission lines delivering power into the New Orleans area, and the resulting load imbalance dropped generation offline and left more than 1 million customers without power.⁸

This guide covers coastal wind, surge and the outages hurricanes cause. Tornadoes and inland thunderstorm wind are covered in tornado and high-wind risk, riverine and rainfall flooding in building in a floodplain, and the multi-hazard screen in natural hazard risk for data centers.

Storm surge is the abnormal rise of water pushed ashore by a storm, and it is the hazard most likely to end a coastal site’s candidacy. NOAA models it with SLOSH (Sea, Lake and Overland Surges from Hurricanes). For planning, NHC runs SLOSH for large sets of hypothetical storms that vary forward speed, size, intensity, landfall point, tide level and direction.² The maximum water from each group of similar storms is a MEOW (Maximum Envelope of Water), and the maximum across all MEOWs for a given category is a MOM (Maximum of MEOWs).⁹

A MOM is a worst-case snapshot for a storm category under “perfect” storm conditions, and NHC cautions that no single hurricane will produce the regional flooding the MOMs depict.⁹ That is the right frame for a long-lived critical facility: the question is not what the last storm did but whether any plausible storm of a given strength could put water on the pad.

NHC’s National Storm Surge Risk Maps merge the MOMs into seamless maps of inundation height above ground for Category 1 to 5 hurricanes. Version 4 reprocessed the Gulf and East Coasts with the latest SLOSH grids in 2025.² The maps start from high tide, are meant for planning rather than forecasting, and do not depict surge inside certain levee systems, such as Louisiana’s Hurricane and Storm Damage Risk Reduction System, so a site behind a levee needs its own review of levee performance and interior drainage.²

Surge and FEMA maps can disagree. A parcel in Zone X on the flood map may still sit inside the Category 3 or 4 surge zone, because the flood map is tied to the 1% annual chance event while the surge maps show what stronger storms can do.²³ For a data center, the stronger test usually controls the decision.

On the coast, FEMA’s Flood Insurance Rate Maps split the special flood hazard area by wave height. Zone VE covers areas where the 1% annual chance flood carries waves of 3 feet or more; Zone AE covers areas with smaller waves.³ Many coastal maps also show the Limit of Moderate Wave Action (LiMWA), the inland limit of 1.5-foot or greater breaking waves during the 1% annual chance flood.³

The band between the LiMWA and Zone VE is called the Coastal A Zone. It is not a separate flood zone in the National Flood Insurance Program regulations, but FEMA says waves as low as 1.5 feet can cause significant damage to structures not designed for them, and its coastal construction guidance has long recommended Zone VE practices where waves exceed 1.5 feet.³ FEMA does not itself require special standards based on the LiMWA, so whether Coastal A construction rules apply depends on the building code and flood standard the community has adopted.³

Data centers rarely need to be on the waterfront, so the usual answer is to keep buildings, substations and equipment yards out of Zone VE and the Coastal A Zone altogether, and to set floor and equipment elevations well above the base flood elevation elsewhere. Floodplain permitting, freeboard and map revisions are covered in can you build a data center in a floodplain.

Design wind speeds come from ASCE 7 maps, adopted through the International Building Code and state codes, and they rise toward the Gulf and Atlantic coasts. NHC’s climatology expresses hurricane frequency as a return period: how often a hurricane of a given intensity is expected within 50 nautical miles (58 statute miles) of a location, estimated with its HURISK risk analysis program.¹⁰ Those return periods are useful for comparing candidate regions before an engineer pulls site-specific design values.

The wind-borne debris region matters because it triggers protection of glazing and openings. Under ASCE 7-22, any location in a hurricane-prone region with a design wind speed of 140 mph or more is in the region regardless of distance from water. Between 130 and 139 mph, the 2022 edition replaced the old one-mile-from-the-coast trigger with one mile from any body of water that has an upwind Exposure D condition, which pulls in the shores of large inland lakes.¹¹ Florida, after adopting that language, reverted to the earlier ASCE 7-16 definition, a reminder to confirm the edition and amendments in force.¹¹

Windowless data halls make glazing less of an issue than for offices, but debris rules and wind pressures still shape louvers, doors, rooftop cooling units and generator enclosures. Owners also choose a risk category, which sets the return period of the design wind speed. The same risk category decision drives tornado loads inland; see tornado and high-wind risk and building and fire codes for data centers.

Hurricane Sandy in 2012 is the standard case study. At 75 Broad Street in Lower Manhattan, seawater flooded the basement and destroyed the fuel pumps, so diesel could not reach generators on upper floors; staff from several tenants kept one site running by carrying diesel in buckets up some 17 flights of stairs.⁵⁶ At Datagram’s building, the lobby took about five feet of water and the outage took down major news sites; the company said it would add fuel pumping and storage on a mezzanine about 65 feet above the street.⁶ The generators were high enough; the fuel system was not.

Harvey in 2017 showed the opposite pattern. Several Houston providers stayed online, but flooded streets cut off customer access and threatened diesel deliveries had utility power failed for longer.¹² Coverage credited preparation, redundancy and distance from flood areas, noting one facility sat 17 miles north of downtown outside the 500-year floodplain, and that many operators hold fuel contracts that place them behind hospitals and first responders.¹²¹³

The 2024 season showed the scale of grid exposure. EIA found the average U.S. customer was without power about 11 hours in 2024, nearly double the prior decade’s average, with Beryl, Helene and Milton accounting for 80% of those hours; South Carolina averaged nearly 53 hours after Helene’s wind and flooding damaged transmission lines, distribution lines and substations.⁴ Milton left 3.4 million Florida customers without power, and Beryl cut power to about 2.2 million in the Houston area.¹⁴¹⁵

FEMA’s guidance on emergency power for critical facilities starts from the premise that utility power may be unavailable for an extended period during severe natural hazard events, and it covers design and operation so facilities can stay up for that whole period.¹⁶ For a hurricane-exposed data center, the practical design questions are these:

• Elevation of everything that keeps generators running: fuel tanks, transfer pumps, day tanks, controls, switchgear and the utility service entrance, not only the generators. Sandy failed at the pumps.⁵⁶
• Fuel on site for the realistic outage plus road closure, and contracts with more than one supplier. See backup generators and fuel sizing and diesel fuel storage and SPCC plans.
• N+1 or better generator redundancy, with enclosures rated for the site’s wind and debris exposure.¹⁶¹¹
• Utility feeds from more than one direction. Ida showed that every line into a load pocket can fail at once.⁸ Redundant utility feeds covers the options.
• Staffing, food, water and lodging on site, and a plan for access when roads flood, as Houston operators found.¹²¹³

Some owners also add on-site generation or a microgrid for long outages, which raises its own air permit and fuel questions. Ask the utility how its substation and transmission lines serving the site are hardened and how restoration is prioritized.

Hazard lines move. NOAA projects sea level along the U.S. coastline to rise 10–12 inches on average by 2050, with the highest rise on the East and Gulf Coasts, and expects moderate, typically damaging flooding to occur more than 10 times as often as it does today.⁷ A facility built in 2027 will still be operating when that higher baseline applies, so elevations should be set with margin; climate change and future heat risk covers the wider climate picture.

1. 01Look up the parcel and its access roads on the NHC storm surge risk maps for Category 3, 4 and 5, and note any levee-protected areas.²
2. 02Pull the effective FIRM, including any Zone VE, LiMWA and base flood elevation, and confirm local freeboard rules.³
3. 03Confirm the adopted building code, ASCE 7 edition and wind-borne debris rules with the building official.¹¹
4. 04Map the utility lines and substation serving the site and ask about hardening and restoration history.⁴⁸
5. 05Size fuel and staffing for a multi-day outage with closed roads, and elevate the full fuel system.¹⁶⁶
6. 06Add a sea level margin to finished floor and equipment elevations.⁷

Hurricane findings sit alongside power, fiber and land cost in the due diligence checklist. For state context see data center site selection in Florida. If you want a coastal parcel screened, you can get a site reviewed.