Where should a small business website be hosted?

For most small business websites, the right host is a managed one: either managed WordPress hosting for a WordPress site, or a modern platform for a Next.js or static site, with a CDN in front. Move to a VPS or cloud account when you need control the managed option does not give. Choose by who will look after the server, not by the monthly fee.

What are the main hosting options?

Shared hosting: many sites share one server. It is the cheapest way to get online, and it is fine for a simple brochure site. Performance depends on your neighbours, you have limited control over server settings, and security is mostly out of your hands.

Managed WordPress hosting: a provider tunes servers for WordPress and handles updates, caching, backups and basic security. You give up some freedom, such as custom server software, in return for fewer things to maintain.

VPS (virtual private server): your own slice of a server with root access. You get control and predictable performance. You also become the system administrator, responsible for patches, firewall, backups and monitoring. It suits teams that have someone to do it, or that pay someone.

Public cloud (AWS, Google Cloud, Azure): maximum flexibility and many services. It is the right choice for web applications with databases, queues, scaling needs or compliance requirements. It is more than a brochure site needs, and the bill can surprise you (see where cloud spend leaks).

Application platforms: services such as Vercel, Netlify and Railway deploy code from a repository and manage servers for you. They suit modern front-end frameworks and small applications. Costs grow with traffic, and you accept the provider's conventions.

How should you choose?

Ask these questions in order.

1. What is the site built with? WordPress, Shopify, a custom Next.js build and a static site each point to different hosts. Shopify hosts itself.
2. Who will look after it? If nobody on your side wants to apply patches, pick managed hosting or a platform, or buy a care plan from the team that built the site.
3. What happens if it goes down? A brochure site that is offline for an hour is an annoyance. A booking or payment site is a loss. Match the setup to the consequence.
4. How fast must it be? Speed affects both visitors and search. Google's Core Web Vitals thresholds, published at web.dev, ask for a Largest Contentful Paint of 2.5 seconds or less. A CDN and good caching do more for this than a bigger server.
5. Where are your customers? A server far from your visitors adds delay. For customers in India and the Gulf, check which regions the provider offers and whether a CDN covers them.
6. What does growth look like? If you expect a big jump in traffic, pick something that scales without a rebuild.

Does the data need to stay in India?

Usually not by law, but sometimes by contract or sector rule. The Digital Personal Data Protection Act, 2023 allows transfer of personal data outside India except to countries the Central Government restricts by notification (section 16). Sectors can set stricter rules. The RBI's directive on storage of payment system data requires that data to be stored in India. Some enterprise customers also write data location into contracts.

If any of this applies to you, choose a host with an Indian region and ask counsel which rules bind your business. Logs matter too: the CERT-In Directions of 28 April 2022 require logs to be kept within Indian jurisdiction (see the CERT-In rule). This is not legal advice.

What should be in place whichever host you choose?

• HTTPS everywhere, with certificates that renew automatically.
• Automatic, tested backups held separately from the host (see backups for a small business).
• A CDN for images and static files.
• Uptime monitoring that alerts a real person.
• Multi-factor authentication on the hosting account and the domain registrar.
• A staging copy for testing changes before they go live.
• Domain ownership in your name, with access you control.

That last point catches many small businesses. If a developer registered your domain or created the hosting account under their own login, you do not control your own site. Ask for transfers and get the credentials into a shared password manager.

What are the trade-offs?

Cheaper hosting tends to cost you time and risk instead. A low monthly fee can be the most expensive option if the site is slow, gets hacked or goes down during a campaign.

More control means more responsibility. A VPS gives you root access and also gives you the job of keeping it patched.

Platforms are quick to start and can get costly at scale or awkward to leave. Check how you would export your site and data.

Moving hosts has a one-time cost. Choosing a host that fits the next two or three years is cheaper than moving every year.

How do you move without breaking things?

1. Take a full backup of files and database.
2. Build the new site on a temporary address and test forms, checkout and email.
3. Lower the DNS time-to-live a day or two ahead.
4. Check mail records. Email often shares DNS with the website, and a careless move can break it. The SPF, DKIM and DMARC guide lists what to keep.
5. Switch DNS during a quiet period.
6. Keep the old host running for several days and monitor both.
7. Update redirects, sitemaps and Search Console if URLs changed.

Where does TechSum fit?

We run managed hosting and server management, on our setup or in your own cloud account if you prefer to own it. We also review existing hosting for speed, cost and risk. See Digital Infrastructure and website care, or send your current setup through the free health check and the Cloud Cost Review.