Choosing a hosting provider used to be a fairly simple decision: find something reliable, keep the price sensible, move on. That’s changed.
Where your data lives, who owns the company hosting it, and how many other businesses share a server with you have all become genuine business risks, not just technical details.
This guide is written for small and medium-sized UK businesses, not enterprises with an in-house IT department negotiating colocation contracts. If you run a business where nobody’s job title is “IT,” and you need hosting to just work without becoming a project, this is for you.
It outlines what to check before you commit to a managed hosting provider, along with a few warning signs to take seriously if you spot them.
1. Who actually owns the provider, and where
Server location isn’t the whole story. Ownership determines which country’s laws apply to your data, and who can be compelled to hand it over.
A UK-owned, UK-incorporated provider running UK data centres gives you the clearest position: your data is subject to UK law. Providers owned by an overseas parent company, even if your data physically sits in a UK data centre, can still fall under that parent country’s legal jurisdiction. This matters most if you handle client data, financial records, or anything covered by a compliance obligation.
Ask directly: who owns the company, and where is it legally incorporated?
2. How many other websites are on your server
This is one of the most overlooked factors in hosting quality, and one of the easiest to hide. Many budget providers keep prices low by placing thousands, sometimes hundreds of thousands, of websites on a single server.
The problem isn’t just performance, though that’s real: too many sites competing for the same resources leads to slow load times and instability during traffic spikes. It’s also a security and reputation issue. A compromised site can become a stepping stone to attack others sharing the same server, and a shared mail server means one bad neighbour can get your legitimate emails flagged as spam.
Ask directly: roughly how many websites share a server with mine?
3. What happens when you need to move
Migrating hosting providers is where many businesses get stuck, either because they fear downtime or because a provider makes leaving deliberately difficult. A provider confident in their service should make migration straightforward, ideally handling the technical work themselves with minimal disruption.
Ask directly: Will they handle the migration for me, and what’s the expected downtime?
4. How backups actually work, not just whether they exist
Almost every provider will tell you backups are included. Fewer will tell you how often they run, where they store them, or whether they’ve actually tested a restore recently. A backup that’s never been tested is a hope, not a safeguard.
Ask directly: how often do backups run, where are they stored, and when was a restore last tested?
5. Whether support is proactive or purely reactive
Some providers wait for you to notice a problem and raise a ticket. Others monitor infrastructure continuously and catch issues before they become outages. The difference often shows up exactly when you need it most.
This matters more, not less, if you don’t have your own IT person. A provider who only reacts once you’ve noticed a problem leaves you carrying the risk of noticing it first.
Ask directly: is my server actively monitored, or does support only respond once something’s already gone wrong?
6. What security is actually built in
Firewalls, malware scanning, and encrypted connections should be standard, not an upsell. Ask what’s included by default versus what costs extra, and whether security updates for the platform itself (WordPress core, plugins, and so on) are part of the service or left to you.
Red flags worth taking seriously
- Vague or evasive answers about server density or company ownership
- No clear migration process, or reluctance to discuss it
- Backups mentioned only in passing, with no detail on testing or storage
- Pricing that seems unusually low compared to the rest of the market, with no explanation of what’s different
Where this leaves you
None of this means the cheapest option is automatically wrong, but it does mean price alone isn’t a safe way to compare providers. A clear answer to each of the questions above tells you far more about what you’re actually buying than a features list does, and it matters more when you don’t have the internal expertise to spot problems yourself.
If you want to see how we answer these questions ourselves, our approach to data sovereignty and managed hosting goes into more detail, and our UK sovereign managed hosting for SMEs service covers what’s included as standard. We work specifically with SMEs, so if any of this feels like it’s describing a headache you’d rather not own, that’s exactly the conversation we’re happy to have.
