CLOUD
Business

10 Questions to Ask Before Choosing a Hosting Provider

CLOUD|March 19, 2026|5 min read|416 views
10 Questions to Ask Before Choosing a Hosting Provider

Where are the servers? What is the SLA? How is support? Is there backup? 10 questions — if the provider cannot answer, run.

Why Questions Matter More Than Answers

Most clients choose hosting based on price alone. They compare numbers, pick the cheapest, then discover problems later. The reason: they did not ask the right questions before choosing.

A hosting provider is a long-term technical partner. Migrating away later is costly and complex. 30 minutes of the right questions saves you months of problems.

Infrastructure Questions

1. Where Are Your Servers Actually Located?

This is the first and most important question. Not "which country" but "which city, which specific data center."

  • Why it matters: Server location determines latency, laws applied to your data, and NCA/PDPL compliance
  • Acceptable answer: Data center name + city + Tier classification
  • Warning answer: "Our servers are in the cloud" without specifics — usually means outside Saudi Arabia

2. What Is the Data Center Classification?

  • Why it matters: Tier III means maintenance without downtime. Tier II means downtime during maintenance
  • Acceptable answer: Tier III or higher with Uptime Institute certificate number
  • Warning answer: "Tier III standards" or "Tier III equivalent" without certification

3. What Type of Storage Disks?

  • Why it matters: NVMe SSD is 5-10x faster than SATA SSD. HDD is 100x slower
  • Acceptable answer: NVMe SSD
  • Warning answer: "SSD" without specifying type — may be SATA SSD

4. Are Resources Dedicated or Shared?

  • Why it matters: Shared resources mean your server performance is affected by other users
  • Acceptable answer: "Dedicated and guaranteed" for cloud servers
  • Warning answer: "Up to 4 vCPU" — the word "up to" means shared

Security and Compliance Questions

5. Are You Compliant with NCA Controls?

  • Why it matters: Any company handling government data needs a compliant provider
  • Acceptable answer: Yes, with explanation of which controls are covered
  • Warning answer: "We are secure" without mentioning NCA

6. How Do You Protect Against DDoS Attacks?

  • Why it matters: DDoS attacks take down entire websites. Protection must be at the infrastructure level
  • Acceptable answer: Automatic protection at the data center level with capacity details
  • Warning answer: "Your responsibility" or "We offer it as an add-on only"

7. What Is Your Encryption Policy?

  • Why it matters: PDPL requires data encryption in transit and at rest
  • Acceptable answer: Free SSL + additional encryption options
  • Warning answer: Paid SSL only or not available

Backup Questions

8. What Is Your Backup Policy?

Question Why It Matters
Is backup included or an add-on? Actual cost
What is the backup frequency? Daily / weekly / monthly
How long is the retention period? 7 days / 30 days
Is the backup in a different location? Protection from site disasters
How long does restoration take? RTO — time to get back to work

9. Do You Test Backups Regularly?

  • Why it matters: 37% of restoration attempts fail. An untested backup is worthless
  • Acceptable answer: Yes, with frequency details (monthly at minimum)
  • Warning answer: Silence or "We have not needed to"

Support Questions

10. What Are Your Support Hours?

  • Why it matters: Problems do not wait for business hours
  • Acceptable answer: 24/7/365 via multiple channels
  • Warning answer: "Business days only" or "Email only"

11. What Is the Guaranteed Response Time?

  • Why it matters: Difference between responding within an hour and responding within 48 hours
  • Acceptable answer: Written in SLA with severity classification
  • Warning answer: "We respond as quickly as possible"

12. Is Support Local or Outsourced?

  • Why it matters: Local support understands the context (government systems, .sa domains, Saudi payment gateways)
  • Acceptable answer: Local Arabic-speaking team
  • Warning answer: Support in a different time zone in one language

Contract and Financial Questions

13. What Are the SLA Terms and What Is the Compensation for Breach?

  • Why it matters: SLA without compensation = promise without guarantee
  • Acceptable answer: Uptime percentage + written compensation mechanism + clear cap
  • Warning answer: "99.9% uptime" without compensation details

14. What Is the Cancellation and Refund Policy?

  • Why it matters: You may need to switch providers
  • Acceptable answer: Clear policy with refund period
  • Warning answer: "No refunds" or not mentioned in the contract

15. Are There Hidden Fees?

Potential Fee Should It Be Free
Setup fee Yes — most do not charge it
Bandwidth overage Must be clarified upfront
Basic backup Depends on service type
SSL Yes — Let's Encrypt is free
Migration from previous provider Depends
Additional IP Upfront clarification

Growth and Flexibility Questions

16. How Does Upgrading Work?

  • Why it matters: Your project will grow. Upgrading must be smooth
  • Acceptable answer: Instant upgrade by paying the difference, no downtime
  • Warning answer: "Requires migration to a new server" or "Not possible"

17. Do You Have an API for Automation?

  • Why it matters: DevOps teams need automation. Without API, everything is manual
  • Acceptable answer: API with documentation
  • Warning answer: "We do not offer API" or "Coming soon"

How to Evaluate Answers

  • Specific answers with numbers: Good sign. The provider knows their infrastructure
  • General marketing answers: Warning sign. Selling without technical expertise
  • Refusal to answer: Red flag. Do not work with them
  • Written and documented answers: Best. You can refer back to them later

CLOUD: Clear Answers

CLOUD provides clear answers to all these questions: servers in Riyadh and Jeddah with Tier III standards, NVMe SSD drives, dedicated resources, a SLA عالي مع ضمان تعاقدي written and published, daily backup for managed hosting clients, local Arabic support, and transparent SAR pricing with no hidden fees.

Conclusion

Ask before you buy. The 17 questions in this guide reveal the difference between a professional provider and one selling words. The provider that welcomes your questions and answers transparently is the provider that deserves your money.


Get Started

Ready to move your business to Saudi cloud? View plans and pricing or contact us for a free consultation.

Share