Before You Sign: IT Support Questions That Protect Your Business

Choosing an IT support provider is one of those decisions that feels routine right up until the moment something goes wrong. A server fails on a Friday afternoon, a staff member clicks something they shouldn’t have, or your Wi-Fi drops in the middle of a client presentation — and suddenly the quality of your contract matters far more than the sales pitch that sold it to you.

Most business owners in Kitchener-Waterloo are not IT specialists, and that’s exactly why the details of an IT support agreement deserve careful scrutiny. Vendors write contracts in their own favour, and the gaps tend to show up later as extra invoices, delayed responses, or vague assurances that nobody can quite pin down. The questions below are the ones worth asking before you sign, ideally in a second meeting after the first round of sales enthusiasm has worn off a little.

How Support Actually Works When Something Breaks

Almost every IT provider will tell you they offer “fast, friendly support.” What matters is what that looks like minute by minute. Start by asking who physically answers the phone. Is it a live technician at a local office, a dispatcher reading from a script, or an automated system that routes you into a queue? For a small business with ten or twenty staff, being able to reach a real person who knows your environment is often worth more than any feature list. Ask the question directly and listen for a specific answer rather than a general promise.

Next, clarify the hours. Does coverage end at 5 p.m. on weekdays, and what happens if your email goes down at 8 p.m. on a Saturday? Ask whether after-hours support is included, billed hourly, or reserved for certain severity levels, because that single clause can change your annual cost significantly. Also distinguish between response time and resolution time. A contract that promises a fifteen-minute response but says nothing about how long a fix might take is offering acknowledgement, not recovery. Ask how they prioritise competing issues when three clients call at once.

Find out how they handle on-site work. Many problems can be resolved remotely, but hardware failures, network cabling, and new workstation setups usually need someone physically present. Ask what triggers an on-site visit, how quickly it can be scheduled, and whether travel time is charged. A provider that serves the region from a staffed facility in Kitchener — rather than a call centre two hours away — will generally reach Downtown Kitchener, the Innovation District, Huron Business Park, or Belmont Village faster than one relying on third-party dispatch. If you’re comparing providers across the region, including those offering managed it services kitchener, ask each one to describe their own on-site process in plain language and see whether the answers match the marketing.

Finally, ask about ticketing and visibility. Can you see a history of every request, who worked on it, and what was done? Is there a named account manager, and how do you escalate if a ticket stalls? Good providers welcome these questions because their processes hold up to inspection.

Security, Backups, and Who Really Owns Your Data

Security and data protection are where vague contracts cause the most expensive surprises. Begin with backups, but don’t stop at “we back everything up.” Ask how frequently backups run, where the copies physically live, and — most importantly — whether restores are actually tested. A backup that has never been restored is a hope, not a plan. Ask who performs the test, how often, and whether you receive any documentation confirming it happened. Then ask how long recovery would realistically take if your main file server or Microsoft 365 tenant were compromised. A provider should be able to walk you through a recovery scenario without hesitation.

Move on to ransomware and account security. What happens if a staff member’s credentials are stolen? Ask whether multi-factor authentication is standard across email, remote access, and administrative accounts, and whether it is included in your monthly fee or treated as a paid add-on. Ask how operating system and application patching is handled, on what schedule, and who is responsible for the devices in your office versus the ones staff take home. Clarify who holds administrative access to your systems, whether you retain a break-glass account, and what happens the day an employee with privileged access leaves the company.

Data ownership is another area worth spelling out in writing. Your business records, email, and files belong to you, full stop — but ask how they would be returned or transferred if the relationship ended, in what format, and over what timeframe. Ask whether the provider uses any subcontractors or third-party tools that would touch your data, and whether those arrangements are covered by confidentiality terms. Security awareness training, phishing simulations, and incident response procedures are also fair game; a provider that builds security plans around your actual risks will be able to explain why certain controls matter for a manufacturer in Cambridge, a professional services firm in Waterloo, or a retail operation in Guelph.

Contract Terms, Costs, and Your Exit Plan

Read the commercial terms as carefully as the technical ones. Ask how long the initial term runs, whether it renews automatically, and what notice period is required to cancel. Auto-renewing agreements with ninety-day notice windows are common, and they can trap a business that has already decided to move on. Ask whether pricing is fixed for the term or subject to annual increases, and get the increase formula in writing rather than accepting a verbal reassurance. If the contract references a service schedule or acceptable use policy, request those documents before signing — they are part of the agreement even when they live in a separate PDF.

Then pin down what is included versus what is billable. Managed service plans typically cover monitoring, patching, help desk support, and backup management, while project work, new hardware, licensing, and major migrations are quoted separately. Ask for a clear list of inclusions and a clear list of exclusions. If you are considering new computers or upgrades, ask whether hardware is sold at cost plus a documented margin or bundled into the monthly fee, and whether warranty handling is included. Ask how they handle Microsoft 365 licensing — who holds the agreement, and what happens to your licences if you leave.

Exit planning deserves its own conversation. Ask what a transition would involve, whether there is an offboarding fee, how quickly credentials and documentation would be handed over, and whether the provider commits to cooperating with your new IT partner. Some firms make leaving difficult out of self-interest; a confident provider with healthy client retention will not need to. Request references from businesses of a similar size and sector, and ask those references the same questions you asked the vendor. Finally, confirm who your primary contacts will be, how often you’ll receive reporting, and when a formal business review takes place. Clear answers on all of the above mean you’re signing a partnership rather than a gamble.

Zoë Whitaker

Originally from Wellington and currently house-sitting in Reykjavik, Zoë is a design-thinking facilitator who quit agency life to chronicle everything from Antarctic paleontology to K-drama fashion trends. She travels with a portable embroidery kit and a pocket theremin—because ideas, like music, need room to improvise.