Tier III, Rated-3 and DCOS-3: what data center certifications really mean

When you compare data centers, the brochures quickly fill up with acronyms: Tier III, Rated-3, ISO 27001, PCI DSS, DCOS. They are not interchangeable. Each certification answers a different question about the facility that will hold your servers, and knowing the difference helps you ask the right questions before you sign a contract.

Tier III: can the facility be maintained without switching you off?

The Tier classification, created by the Uptime Institute, ranks data center infrastructure from Tier I to Tier IV:

• Tier I — basic capacity, a single path for power and cooling.
• Tier II — redundant capacity components, but still a single distribution path.
• Tier III — concurrently maintainable: every component and distribution path can be taken out of service for maintenance or replacement without shutting down the IT equipment.
• Tier IV — fault tolerant: the site keeps running even after a single unplanned failure anywhere.

For most businesses, Tier III is the sweet spot. It means that routine work — replacing a UPS battery string, servicing a generator, swapping a cooling unit — happens while your servers keep running. Tier III facilities are commonly associated with an expected availability of about 99.98 %, which translates into less than two hours of potential downtime per year.

Rated-3: the same idea, audited against TIA-942

ANSI/TIA-942 is the telecommunications infrastructure standard for data centers. Its rating system goes from Rated-1 to Rated-4 and evaluates four areas: architecture, electrical, mechanical and telecommunications. Rated-3 also corresponds to a concurrently maintainable facility.

Why have both? Because they look at the site from different angles. Tier focuses on the topology of power and cooling; TIA-942 adds detailed requirements on the building, cabling, carrier entrance rooms and physical security. A data center that holds both has been checked twice, by two different frameworks.

DCOS-3: is the facility run well, every day?

A perfectly designed data center can still fail because of a missed maintenance window, an untrained operator or a procedure that nobody follows. That is what the Data Centre Operations Standard (DCOS) by EPI measures. It rates operational maturity from level 1 to level 5, looking at people, processes, maintenance, change management, incident handling and continual improvement.

DCOS-3 means the operation is formally defined, documented and consistently applied — not dependent on one hero engineer. For customers, operations maturity matters as much as the design: most outages in the industry are caused by human or process failures, not by the equipment itself.

Design certifications tell you what the building can do. Operations certifications tell you what the team actually does.

And ISO 27001, PCI DSS, ISO 50001?

These cover the organization rather than the building:

• ISO/IEC 27001 — an information security management system: risk assessment, access control, incident management.
• PCI DSS — required if you process card payments. A PCI DSS-compliant colocation service lets you inherit the physical and access controls in your own audit.
• ISO 9001, ISO 14001, ISO 50001 — quality, environmental and energy management. Energy management matters more every year as power prices rise.

Five questions to ask before signing

1. Which certifications apply to the exact hall where my racks will be? Some providers hold a certification for one room and market it for the whole site.
2. Are the certificates current? Ask for the certificate and its date. Most standards require periodic surveillance audits.
3. How is power delivered to my rack? Look for A+B feeds from separate UPS systems, generator backup and fuel autonomy.
4. Who operates the site at 3 a.m.? A 24/7 NOC on site or on call, with documented escalation, is the operational side of the certifications.
5. Can I visit? A good provider is proud to show you the generators, the UPS rooms and the carrier entrance rooms.

How Navégalo fits in

Our data center in San José, Costa Rica, is Tier III and Rated-3 certified, our operations are certified DCOS-3, and our Integrated Management System covers ISO 9001, ISO 14001, ISO/IEC 27001, ISO 50001, INTE/ISO 14064-1 and PCI DSS v4 for colocation. If you are comparing providers, we are happy to walk you through our certificates — or through the data center itself.