An engineer’s guide to designing data centre roof access that’s compliant and fit for high risk work

Key takeaways

• Design height safety into the roof from concept stage, not after the plant layout is fixed.

• Follow the hierarchy of control: use fall restraint (walkways, guardrails and platforms) to engineer the fall risk out first, and treat fall arrest (static lines, anchors and rigid rail) as the last line of defence.
  

• Specify every component to the correct standard: AS 1657:2018 for fixed access, and AS/NZS 5532 and the AS/NZS 1891 series for anchors and fall arrest.
  

• A BIM model and certified, stamped drawings are available at concept stage, rather than reverse-engineered on site.
  

• When you inherit a fixed layout or an upgrade, the same hierarchy still applies. Modular systems can retrofit compliant access without a structural rebuild.

Can you make a data centre roof genuinely safe to work on? Yes, but only if access is designed in from concept stage, not bolted on after the plant layout is fixed. The safest design follows the hierarchy of control: engineer the fall risk out with permanent walkways, guardrails and platforms first, and treat harness-based fall arrest as the last line of defence. Every component should be certified to the relevant standard, and the whole system should sit on stamped drawings before a single bracket is ordered.

Concept stage is the cheapest place to get this right, but it is not the only place. Where you are designing into a facility that already exists, is being repurposed, or where the original team did not design access in, the same hierarchy of control applies, and modular systems let you retrofit it without tearing the roof up.

Why this lands on your drawings

A data centre roof is one of the busiest and highest-consequence work surfaces in commercial construction. It carries chillers, condensers, CRAC and CRAH units, generators, switchgear and cable trays, and that plant needs reliable maintenance for the life of the building. The people doing that work, often at night during a change window, are exposed to a fall from height. In 2024, falls from a height were the second leading cause of worker death in Australia, with 24 fatalities, behind only vehicle incidents (Safe Work Australia, Key Work Health and Safety Statistics)

Under the model Work Health and Safety framework, the duty to manage that risk sits with the people who design and commission the structure, not only the crew on the roof. Safe Work Australia’s model Code of Practice for managing the risk of falls makes the hierarchy of control the backbone of any access design. As the specifying engineer, your decisions about how the plant is reached, and how a fall is prevented, are the controls that get audited. Getting roof access right at design stage protects the maintenance crews, protects operational uptime, and protects the officers accountable for the project, including you.

1. Design the fall out first: the hierarchy of control

The most defensible roof is one where, for routine maintenance, nobody needs a harness at all. That is the top of the hierarchy of control: eliminate or isolate the fall risk with permanent, collective engineering controls. For a data centre this usually means a defined, trafficable route from the access point to every serviceable item of plant, with edge protection wherever there is a drop of two metres or more.

Kattsafe’s guardrails and walkways deliver that collective protection: guardrails to mark and protect the safe zone, and elevated walkways that keep foot traffic off the membrane and off fragile surfaces. Where rooftop equipment sits at different heights or behind upstands, modular access systems bridge those level changes with walkways, platforms and stair towers, and HVAC platforms give crews a flat, rated standing surface around condensers, ductwork and pipe runs.

Fragile roof elements are the quiet failure point. Skylights and rooflights are not designed to take body weight, and falls through them are a recurring cause of serious injury. Specifying skylight protection over every rooflight on or near a traffic route closes that gap as a permanent, passive control. Across the data centre roofs Kattsafe has worked on, level changes between plant decks and unprotected rooflights on traffic routes are the two issues that surface most often.

2. Getting onto the roof: compliant access points

Access is the first thing a maintenance crew touches and the first thing an auditor checks. In a data centre, the choice of access point also carries security and fire-compartmentation consequences, because uncontrolled roof access is a physical-security concern.

Where a fixed vertical ladder is the right answer, rung ladders provide permanent access. AS 1657:2018 changed the rules here: above the cage height threshold of 6m you can now specify a compliant vertical fall-arrest line to the AS/NZS 1891.2 approach as an alternative to a traditional ladder cage, which is often the safer and more usable option. For internal or intermittent access, fold-down ladders retract to keep plant rooms clear, and inclined step-type ladders suit frequent daily access where a vertical ladder would be a fatigue and safety risk. For internal access, roof access hatches give a weathertight, secure entry point that delivers crews straight onto the protected walkway network.

3. Fall restraint versus fall arrest: getting the system type right

This is the distinction specifying engineers most often have to defend, because the two systems are not interchangeable and the load cases are different. Fall restraint physically stops a worker reaching a position from which they could fall, so there is no free fall and loads on the structure stay low. Fall arrest allows a fall and then stops it, which generates high dynamic forces and demands fall-clearance calculations, certified anchors and a workable rescue plan.

Where collective protection is not practical, for example reaching a perimeter facade detail or an isolated plant item, static lines provide a continuous horizontal lifeline configured for restraint or arrest, and anchor points give discrete connection points for both. The manufacturing requirements for those anchors are set by AS/NZS 5532, which classifies single-point anchor devices by use, and selection, use and maintenance fall under the AS/NZS 1891 standard. Specify the system type for the task, not the cheapest hardware that fits the bracket pattern.

Facade and overside work on a tall data centre is its own design problem. Davits and needles support rope access and rescue over the edge, and rigid rail systems, overhead or underfoot, limit free-fall distance and side-loading where a flexible line would not. On a Tier IV hyperscale facility in Sydney, Kattsafe delivered rigid rail facade access and rooftop walkways on a live IT load, with no hot works permit required across the install.

4. Load ratings, corrosion grade and certified documentation

A height-safety system is only compliant if it is rated, installed and documented to match the design. AS 1657:2018 sets the loading, slip-resistance, edge-protection and clearance requirements for fixed platforms, walkways, stairways and ladders, and AS/NZS 1170 governs the structural and wind actions, which matters for screens, guardrail runs and anything exposed on a tall roof. Kattsafe systems are engineered to AS 1657 with full engineering certification, so the load path is defensible and the calculations exist when an auditor asks.

Corrosion grade quietly determines lifecycle cost. Data centre roofs combine coastal exposure on many sites with heat and condensation from plant, so material selection, aluminium, appropriate coatings and compatible fixings, should be specified for the environment, not defaulted.

For the engineer, the deliverable that settles the design is documentation: certified, stamped drawings, load data and a BIM or Revit model that drops into the federated design. Designing the access package at concept stage means those drawings and models are available to coordinate against, rather than reverse-engineered on site after the plant layout has hardened.

5. Designing access that protects uptime

A data centre is judged on availability, and modern facilities are designed to be maintained without taking the load offline. Access design has to respect that: the system has to let crews reach the plant during a change window without hot works and without breaching fire compartmentation.

Kattsafe’s aluminium systems install without hot works and offer on-site adjustability, so a live facility can be upgraded during a change window without a shutdown. The design intent is simple: maximum safe access to rooftop plant, minimum footprint on valuable space, and no disruption to the operation

6. Designing access into an existing or repurposed facility

Not every brief is a clean sheet. You will be handed roofs where the plant layout is already fixed, where the building is being repurposed into a data centre, or where the original project team did not design access in at all. The hierarchy of control does not change. What changes is the constraint: you are now solving for a live or near-live environment and a roof that already exists.

This is where modular, mechanically assembled aluminium earns its place. Because it is mechanically assembled and installs without hot works, it can be retrofitted onto an existing roof without a hot works permit while the facility stays live. Because it is modular, it adapts to a layout you did not design, and it reconfigures later as the plant changes. The deliverable is the same as for a new build: certified, stamped drawings and a model that coordinates with the existing structure, backed by a structural check of the host roof’s capacity to carry the system.

The practical rule for a retrofit is to engineer the fall out first, exactly as you would on a new build: walkways and guardrails for routine access, fall restraint where collective protection is not practical, fall arrest only as the last line of defence. The constraint is real, but it rarely forces you down the hierarchy.

Where this approach has limits

Engineered access is the right default, but it is honest to name where it stops. A permanent walkway-and-guardrail network is the better investment where maintenance is routine and repeated. For a genuinely one-off task on an otherwise low-traffic roof, a permanent fixed network can be an over-build, but the answer is rarely one-size-fits-all. There are many options, and the best one is not always a permanent system, or even a Kattsafe product: it might be an elevated work platform (EWP) from the ground, temporary site guardrail, or a solution designed specifically for that task. The goal is always the safest, most cost-effective solution for the situation. A planned retrofit is a different case again. Where a repurposed or expanding facility will see repeated maintenance, retrofitting a permanent walkway-and-guardrail network is the right investment, not an over-build.

Standards also set the floor, not the ceiling. AS 1657 and the AS/NZS 1891 and 5532 series define minimum compliant performance. They do not replace a site-specific risk assessment, a structural check of the host roof’s capacity to carry the system, or a real rescue plan for any retained fall-arrest task. And hardware does not create competence: even the best-specified system depends on trained workers, a current inspection regime and recertification over the asset’s life. Where any of those conditions are not met, the safe answer is to involve a height-safety engineer rather than rely on the catalogue.

Book a design consultation

If you own or operate a data centre and you are not sure whether your existing rooftop access is compliant, or whether it can be safely retrofitted or modified for a repurposing or capacity upgrade, book a Kattsafe site assessment. Our team will walk the roof with you, audit the existing systems against AS 1657:2018 and AS/NZS 5532, identify the gaps and scope any remediation that can be done without disrupting your live load. Call 1300 301 755.