Website Hosting for Businesses: What Actually Matters in 2026
Simon Heistermann
Owner
This article was written with AI assistance and editorially reviewed.
The most uncomfortable dependency in this business is not written into a contract, it sits in the domain register. Whoever is listed there as the holder effectively decides whether changing supplier is a form to sign or a negotiation - and that comes up far more often than any argument about server performance. So we are not starting with the technology.
In short
The hosting decision has three levels, and most comparisons only cover the bottom one. Performance sits at the bottom, resilience above it, ownership and exit at the top. Skip the top level and you are buying a dependency along with the service.
The question that comes before every technical question
Ask to be shown who is listed in the register as the holder of the domain. Not who pays for it, not who administers it, but who is registered. If your supplier's name is there, the domain is formally not yours, and moving to another provider depends on their cooperation. Where a domain was registered on a client's instruction, the legal position is usually in your favour - but arguing about it in practice costs weeks in which your site may be unreachable at the address everyone knows.
The second, far more mundane trap is the email address stored in the register. The transfer key goes to that address. If it is an old mailbox belonging to someone who left the company, an otherwise trivial move grinds to a halt. Both take minutes to check - and the time to check is before you need it, not when you need it.
Shared hosting, managed hosting, platform: the real difference
| Model | What it means in practice | Fits when |
|---|---|---|
| Shared hosting | Your site shares a server with many others. Cheap, little control over neighbours and load spikes | The site is small, traffic is steady, and a short outage is survivable |
| Managed hosting | A provider runs the environment for you, with defined resources, backups and a contact | The site brings in enquiries and should not be your problem. The sensible default for most business sites |
| Platform (Vercel, Netlify and similar) | Delivery through a global network, automatic deployment on every change, previews before going live | The site is built modern and changes regularly. A US provider in the data path has to be documented |
| Your own server | Full control, full responsibility for updates, hardening and recovery | You have an IT team already doing this. Otherwise it is a hidden headcount |
On price, German managed hosts sit mostly around 8 to 25 EUR a month for typical company sites. The platforms charge differently, per seat: Vercel currently asks roughly 20 US dollars per member per month for commercial use, and Netlify sits alongside it at about 19 US dollars per seat. This is rarely what drives a project's cost - that sits in operations, not in the base fee.
Load time and resilience: what hosting does and does not do
Hosting determines how fast the server answers. It does not determine how fast a page feels. Serve a 4-megabyte image, pull in three typefaces and embed a video above the fold, and no server package on earth will fix that. Changing servers moves the response time by milliseconds; the image moves it by seconds. Which numbers actually count is covered in the article on Core Web Vitals, and why a good test score on its own proves nothing in Lighthouse vs PageSpeed Insights.
On resilience, the advertised percentage is the least interesting figure of all. 99.9 per cent availability allows around eight hours of downtime a year, and whether those fall in one block on a Monday morning or scattered overnight makes all the difference to your business. The more useful question is: how long does recovery take when something breaks, and who notices that it is broken? An honest answer to those two is worth more than any decimal place in a brochure.
Server location and processing agreements, calmly considered
A server in the EU spares you the most laborious discussion, the one about third-country transfers. That is the practical reason for an EU location, not a legal requirement. Using a US provider is not automatically unlawful: the European Commission adopted an adequacy decision for the EU-US Data Privacy Framework in 2023, the General Court of the European Union dismissed a challenge to it in September 2025, and an appeal against that was most recently pending before the Court of Justice. The framework stands, then, but it is not uncontested - if you build on it, do so deliberately and on the record rather than by accident.
Whatever the location, three things belong to any hosting arrangement: a processing agreement with the provider, an entry in your record of processing activities, and a list of the sub-processors the provider uses. That is paperwork, not engineering, and it is an afternoon's work. What can go wrong on the site itself is covered in our GDPR website check. We supply the technical picture here; the legal assessment of your particular case belongs with a solicitor.
Not sure where your website runs or who owns the domain?
Get in touchLeaving: how to tell you can actually get out
- You are listed in the domain register as the holder, and the email address stored there is current
- You can reach domain management at any time without asking your supplier
- A complete export of files and database is available without a special arrangement
- You know which services run in the background: DNS, email, form delivery, analytics
- Your website's source code sits somewhere you can access
- No clause ties the release of those credentials to outstanding invoices
This list is not a vote of no confidence. It is the reason a move stays a few hours of work rather than a dispute. It also happens to be a good supplier test: anyone who can tick it without hesitating has nothing to hide. With us, the domain holder is your name from the start, and you can verify it yourself; what else belongs to running a site is on our page on hosting and domain.
Concrete steps for the next 90 days
- Days 1-30: check the registered holder of the domain and the email address stored with it, and have both corrected if needed
- Days 1-30: get access to domain management and log in yourself once
- Days 31-60: request the processing agreement and the sub-processor list from your host
- Days 31-60: ask about recovery time: how long until the site is back after a total failure
- Days 61-90: request a full export of files and database and keep a copy
- Days 61-90: only then decide about changing provider, if the answers did not convince you
Conclusion
Hosting is rarely the reason a website performs well or badly, and almost always the reason a move turns difficult. The technical choice between shared, managed and platform is a question of load, change frequency and recovery - for most business sites managed hosting is the right answer, and for regularly updated modern builds, a platform.
The question worth settling regardless is ownership and exit. What role the content system plays in that is set out in the article on headless CMS, and what technically travels along when an existing site moves in website relaunch in 2026. What ongoing operation costs and must include is covered in website maintenance in 2026.
You might also like
WordPress or Custom Build? Run the Five-Year Numbers
WordPress powers a large share of the web, and for good reasons. What it actually costs to run, where it wins outright, and when a custom build makes sense.
Websites for IT Service Providers: Your Own Site Is the Work Sample
An IT provider with a slow, insecure website refutes its own pitch. What an IT manager checks in the first few minutes, and what follows from it.
Website Maintenance in 2026: What It Costs and What Must Be In It
What website maintenance actually covers, what the market charges for it, and how to spot an empty maintenance contract before you sign it.
SEO Costs 2026: What Visibility Really Costs
What SEO realistically costs small and mid-sized businesses: one-off optimisation versus ongoing management, and what should be included in the price.
A GDPR Check for Your Website: The Gaps That Are Almost Always There
Fonts from someone else's server, maps without consent, analytics before agreement: the typical gaps on SME websites, as a list you can actually check.
Blog Posts That Rank: Structure, Length and Citability in 2026
How a blog post needs to be built to rank in Google and get cited by ChatGPT and Perplexity in 2026 - structure, length, schema and internal links.
Frequently asked questions

Simon Heistermann
Owner
Heistermann Solutions is the web studio run by Simon Heistermann. We build custom websites for small and medium-sized businesses that want to achieve more online.
Every article grows out of day-to-day project work and is reviewed editorially before publication.
- Borken, Münsterland region
- simon@heistermann-solutions.de
Get it for free
Enter your email address. You'll immediately receive a confirmation link - after clicking it the checklist is available right away.
Let's talk about your project
Free introductory call