Pitfalls, exit costs and official sources
Cloud and hosting pitfalls in Canada: recurring cost mistakes and the official sources to check
The recurring patterns behind surprise hosting and cloud bills, renewal jumps, costly migrations and weak contracts, and the Canadian official sources for each rule.
Most expensive hosting outcomes come from a small set of repeating patterns: introductory prices that renew much higher, resources left running, backups and logs that accumulate, egress nobody estimated, migrations that cost more than planned, SLAs whose credits are worth little, a misunderstood split of security duties, and tax or privacy steps skipped. Each pattern has a practical control, and where a rule is involved, an official Canadian source to confirm it. This page summarises them and links to the detailed guides.
The patterns are described generically. We do not name companies in connection with failures and we do not publish case studies; examples are composites or illustrations.
The patterns at a glance
| Pattern | What happens | Control | Guide |
|---|---|---|---|
| Renewal jump | Introductory price ends; regular price applies | Read the renewal price; diarise; compare moving | Renewal price increases |
| Runaway resources | Test servers, clusters or GPUs left on | Budgets, alerts, schedules, tags | Surprise bill patterns |
| Storage creep | Snapshots, images and logs kept forever | Retention and lifecycle rules | Surprise bill patterns |
| Egress surprise | Traffic, replication or exports billed per GB | Estimate egress; CDN; alerts | Egress costs |
| Migration overrun | Double running, data transfer and rework | Plan, pilot, budget contingency | Migration and exit costs |
| Lock-in at exit | Proprietary services, account ownership, commitments | Exit plan before entry | Migration and exit costs |
| Weak SLA | Credits small, hard to claim, many exclusions | Read measurement, exclusions, claim process | SLAs and service credits |
| Security gap | Each side assumes the other patches or backs up | Written responsibility split | Shared responsibility |
| Tax leak | Unrecoverable GST/HST from simplified registrants | Register your GST/HST number with providers | GST/HST, QST and PST |
| Privacy step skipped | No contract clauses, no notice, no Quebec assessment | Processor contract, notice, assessment | Data residency |
A composite story (illustrative)
A composite, not a real business: a design studio moved its file server and website to a public cloud. The estimate covered the servers and storage. In the first quarter the bill was about 40% higher than planned. The reasons were ordinary: a test server left running after the migration, daily snapshots with no retention limit, two unused public IPs, and large image downloads served without a CDN. A 30-minute monthly review, budget alerts and a snapshot policy brought the bill back near the estimate within two months. Nothing in the story required special expertise; it required someone to own the bill. See cost control.
Advertised prices and the Competition Act
Under the Competition Act, a representation of a price that is not attainable because of fixed obligatory charges or fees is a false or misleading representation (often called drip pricing), unless the extra amount is only a tax or charge imposed by law (section 74.01(1.1)). In hosting, that is relevant when a mandatory setup, licence or "platform" fee is added to an advertised monthly price. Optional add-ons are different, but they should be clearly presented. Concerns can be reported to the Competition Bureau.
As of October 2026 we did not find a Competition Bureau market study specific to cloud computing; the Bureau has published discussion papers on artificial intelligence and competition (2024) and algorithmic pricing (2025). Check the Bureau's consultations page for anything newer.
Consumer protection vs business contracts
Most hosting contracts for businesses are commercial contracts: provincial consumer protection laws, which give consumers rights on distance contracts and cancellation, generally do not cover purchases made for business purposes. If you are a sole proprietor buying for personal use as well, your provincial consumer protection office can tell you whether a law applies. For business disputes, the contract, its governing-law clause and, if needed, a lawyer are the route.
Official sources by topic
| Topic | Source |
|---|---|
| GST/HST, digital economy measures, ITCs, records | Canada Revenue Agency |
| QST, registration of suppliers outside Quebec | Revenu Québec |
| PIPEDA, cross-border processing guidance | Office of the Privacy Commissioner of Canada |
| Quebec Law 25, privacy impact assessments | Commission d'accès à l'information du Québec |
| BC public bodies' privacy law | BC Laws (FOIPPA) and the BC privacy commissioner |
| Cloud security guidance | Canadian Centre for Cyber Security |
| Misleading prices and drip pricing | Competition Bureau Canada |
| Federal statutes (PIPEDA, Competition Act, Excise Tax Act) | Justice Laws Website |
| Exchange rates | Bank of Canada |
When to get help
Get a lawyer to review contracts with multi-year commitments, unusual liability limits or data-location promises your clients depend on. Ask an accountant about provincial sales tax on cloud services, prepaid terms and capital cost allowance. For regulated or sensitive data, have an independent security review before go-live.
FAQ
Can I complain about a hosting company to a government body?
For misleading advertising, the Competition Bureau accepts complaints. For privacy concerns about how a business handled your personal information, the federal or provincial privacy commissioner. Billing and service disputes between businesses are generally contractual.
Do the patterns apply to small VPS and shared hosting too?
Most do: renewal jumps, backup gaps and exit difficulties are common on small plans. Metered-billing patterns (runaway resources, egress) mainly affect public cloud.
Where do I start if my bill already jumped?
Open the cost report, group by service, find the top three increases and check each against the patterns above. Then set alerts so it does not happen again.
Sources
- Competition Bureau Canada — misleading pricing complaints and consultations
- Justice Laws Website — Competition Act s. 74.01, PIPEDA, Excise Tax Act
- Office of the Privacy Commissioner of Canada — PIPEDA and cross-border processing
- Commission d'accès à l'information du Québec — Law 25
- Canadian Centre for Cyber Security — cloud security guidance
- Canada Revenue Agency — GST/HST and records
