If your GPU customer's commitment weakens, what does the lender actually hold?
Quick answer, Nov 6, 2026As of 6 November 2026, the chips are rarely the whole security. Filings this year show lenders holding the customer contract's pledged cash flows, a ring-fenced borrowing subsidiary, a payment lockbox and, where the tenant is not investment grade, a stronger party's backstop promised to the lenders. Softening offtake tests each of those.
Operators ask about the hardware. Credit committees ask about the contract. Two companies financing AI capacity at scale set out their security packages in their quarterly filings, line by line.
What the filings say a lender holds
| What the lender holds | What the filing says | Source |
|---|---|---|
| The contract's cash flows, pledged | The delayed draw term loan facilities are "collateralized with the assets underlying the contributed contracts and the pledged contractual cash flows, generally from investment grade counterparties" | CoreWeave 10-Q, quarter ended 30 June 2026, MD&A, "Liquidity and Capital Resources — Debt Financing" |
| A borrower that holds nothing else | Facilities are entered into by "bankruptcy-remote, special-purpose consolidated subsidiaries formed to hold the financed infrastructure and the related customer contracts" | CoreWeave 10-Q, Note 10, "Debt" |
| The equity in that borrower, not only its assets | DDTL 4.0 is secured by "perfected first priority pledges of and security interests in (i) the equity interests of CCAC VIII held by its direct parent and (ii) substantially all of" its assets | CoreWeave 10-Q, Note 10, "Debt" |
| A sizing test, not a fixed advance | Debt-sizing limitations are tied to eligible asset cost "based upon the depreciable cost of computing equipment, projected debt service coverage and project-level conditions" | CoreWeave 10-Q, Note 10, "Debt" |
| The account the rent lands in | The 2030 Secured Notes are secured by first-priority liens including "a designated lockbox account of Fluidstack" | TeraWulf 10-Q, quarter ended 30 June 2026, Note 10, "Debt" |
| A stronger party standing behind a thinner tenant | On a payment default or insolvency event, Google may "(i) pay the termination fee under such Fluidstack HPC Lease … or (ii) pay all rent currently due … and assume the Fluidstack HPC Lease as the tenant thereunder" | TeraWulf 10-Q, Note 8, "Leases" |
| That backstop, promised to the lenders | An affiliate of Google "unconditionally agreed with the collateral agent for the benefit of the lenders that it shall (or shall cause Google to) pay the Termination Fee"; Google separately "assigned and pledged to the collateral agent … for the benefit of the lenders" a security interest in its warrants | TeraWulf 10-Q, Note 10, "Debt" |
| Limited recourse upwards | Recourse "is limited to the assets of the applicable subsidiaries", and recourse under the parent's limited guarantees "may arise only upon specified events, such as actual fraud, willful misconduct, misappropriation of collateral" | CoreWeave 10-Q, Note 10, "Debt" |
Every quotation was read from the filing it links to on 6 November 2026.
What softening offtake actually tests
A lender financing contracted capacity is not asking whether the cluster is busy. It is asking whether contracted cash arrives, from whom, into which account, and what happens if the name on the contract stops paying.
Concentration is disclosed for that reason. CoreWeave reports one customer at 36% of revenue for the quarter ended 30 June 2026, down from 71% a year earlier, a second at 26% and a third at 10%, and two customers at 32% each of accounts receivable (Note 2, "Revenue — Significant Customers"). It reports $103.7 billion of unsatisfied remaining performance obligations, 41% expected to be recognised in the first 24 months and 39% in months 25 to 48 (Note 2, "Revenue — Remaining Performance Obligations"). Backlog is a weighted claim on future cash, not cash.
When offtake softens the structure answers before the hardware does: the lockbox keeps the loan paid while the tenant pays, the backstop decides who pays if the tenant stops, and the ring-fence sets how far the problem travels.
The same questions, smaller
At the size most operators borrow, the same tests arrive as plain terms. American Compute's lender guide states that traditional GPU loans need a three-year offtake contract, that its residual-value-insured route needs nine months instead, and that term sheets typically show an advance of 50 to 80 percent of equipment cost, with the operator raising 30 to 50 percent of that cost as equity (GPU Financing 101, updated June 2026). The reading order is in how lenders underwrite a GPU cluster loan; the lenders are in who lends against GPUs.
Where Frontier Desk fits
In the Cybernetic Age contracted compute is a credit question before it is an engineering one. The GPU financing tool on /compute reads a project the way a lender would and says what will be asked for next. As an advisor, Frontier Desk works on the structure around the contract. Start with a free first look.
Questions
My customer wants a shorter term. Does that end the financing? Not always, but it changes the instrument. A term shorter than a lender will write against pushes the project towards a lease, a residual-value-insured loan or more of your own cash.
Can my parent company guarantee the loan instead? Read what the guarantee covers. CoreWeave's limited guarantees are triggered by specified bad acts and "do not represent general guarantees of repayment of principal, interest or other ordinary debt service payments" (Note 10, "Debt"). A carve-out guarantee is not credit support for the business case.
What is a recognition agreement doing in a credit structure? It turns a thinner tenant into a stronger one on default: a creditworthy party may pay out or step in as tenant, and that promise runs to the collateral agent for the benefit of the lenders (TeraWulf 10-Q, Notes 8 and 10). If your customer is thin, the question becomes who would stand behind them.