Choosing an IT provider is one of the most important decisions a small organization can make. Your IT partner affects everything — productivity, security, costs, and your ability to grow. But evaluating IT providers is difficult when everyone says roughly the same thing in their proposals.

Here are seven concrete questions that reveal what you'll actually get. Ask them of your current provider — or of the one you're considering switching to.

1. What is your SLA and response time?

An SLA (Service Level Agreement) defines what the provider commits to — and what happens if they fail to deliver. Ask specifically: How quickly do you respond to a ticket? How quickly do you start troubleshooting? What counts as critical vs. normal?

A good provider has clear, measurable SLAs — for example, 15-minute response time for critical issues and 4 hours for normal ones. If the answer is vague ("we respond as quickly as we can"), that's a red flag. Without a documented SLA, you have nothing to hold the provider accountable to.

2. How do you verify that our backups work?

Having backups is not the same as having working backups. Many organizations discover only during a crisis that their backups are corrupted, incomplete, or too old.

Ask: Do you regularly test that data can actually be restored? How often? Do we get a report? A serious provider performs regular test restores and can show documentation. They monitor backups daily and alert when something fails — not just run them in the background and hope for the best.

3. Who owns our data if we leave?

This is a question many forget to ask — until they want to switch providers. Can we export all our data? In what formats? How long does it take? Does it cost extra?

Your data belongs to you — always. A good provider has a documented offboarding process and makes it easy to move on. If the provider makes it difficult to leave, or owns systems and configurations that you don't have access to, you're in a vendor lock-in that can become expensive.

4. What's included vs. what costs extra?

A low monthly fee can become expensive if everything beyond basic support is billed by the hour. Ask: What exactly is included in the monthly fee? Are on-site visits included? Project work? New users? Hardware installation?

The best model for small businesses and schools is typically a fixed monthly fee per user that includes all support, monitoring, and management. That way, you know exactly what IT costs every month — no surprises. Ask for a clear list of what's included and what falls outside the agreement.

5. How do you handle security incidents?

It's not if but when a security incident occurs. Ask: Do you have a documented incident response plan? Who is contacted? How quickly? What happens outside business hours?

A competent provider has a clear escalation process, monitors security alerts around the clock (or has an agreement with a SOC — Security Operations Center), and can demonstrate that they've handled incidents before. They should also be able to assist you with mandatory breach notifications to your data protection authority, which is a legal requirement under GDPR.

6. Can we see a live dashboard?

Transparency is a sign of a mature provider. Ask: Can we see the status of our systems in real time? Ticket statistics? Uptime? Security status?

You shouldn't have to call your provider to find out if your servers are up or how many open tickets you have. A good IT partner offers a client portal or dashboard where you can see system status, ticket history, SLA compliance, and reports. It shows that the provider is in control — and that you get the visibility you deserve.

7. Do you have experience with our type of organization?

IT for a school is fundamentally different from IT for a law firm or a manufacturing company. Schools have unique requirements: student devices, MDM, exam platforms, federated identity, GDPR for minors. Small businesses have their own challenges: limited budgets, no internal IT staff, need for rapid scaling.

Ask: Do you have other clients in our industry? Can you show reference cases? Do you understand the specific regulations and tools that apply to us? A provider who understands your business can give proactive advice instead of just reacting to problems.

The Right Provider Makes a Difference

A good IT provider isn't just a helpdesk — it's a strategic partner that helps you make better decisions, avoid risks, and use technology effectively. Ask these questions and listen not just to what they answer, but how they answer. A provider who responds clearly and without hesitation likely has their processes in place.

At Strandholm Consulting, we specialize in schools and small businesses. We're happy to answer all seven questions — and show you exactly how we work.

Choosing the Right IT Provider — 7 Questions to Ask