Microsoft 365 & Cloud

Cloud vs on-premise servers for SMEs: which should you choose?

Cloud vs on-premise servers for UK SMEs: a decision matrix, realistic cost context, hybrid options and the cases where a local server still earns its place.

By Dig IT SolutionsUpdated 8 September 20268 min read

Short answer

For most UK SMEs the cloud can replace on-site servers for email, files and collaboration, and Microsoft 365 already does this for many. A local server still earns its place where you run latency-sensitive line-of-business software, have slow internet, or need data kept physically on site. Many businesses land on a hybrid of the two.

Most small and medium-sized businesses across Hertfordshire and London now run at least part of their IT in the cloud, usually starting with email. The harder question is whether the server in the comms cupboard can go too. This guide sets out where the cloud genuinely replaces on-premise hardware, where it does not, and how to make the decision for your own business without guesswork.

What the cloud replaces, and what it does not

When people say "the cloud" in an SME context they usually mean one of three things. Software as a service such as Microsoft 365 or a hosted accounts package. Hosted infrastructure such as a virtual server in Microsoft Azure. Or simply cloud file storage such as SharePoint and OneDrive.

An on-premise server in a typical SME does a handful of jobs. It holds the shared drives, runs Active Directory so staff can log in, hosts one or two line-of-business applications, and perhaps runs a database, print services or a CCTV recorder. The cloud can replace each of these, but not always with the same product and not always at the same cost.

The file server and the identity role are the easiest to move. SharePoint and OneDrive take over the shared drive, and Microsoft Entra ID handles sign-in and device policy. The line-of-business application is where the decision gets real. Some vendors offer a hosted edition, some only support a local install, and some run poorly across a broadband connection.

Where the cloud wins for SMEs

Remote and hybrid working. Cloud files and apps are reachable from home, a client site or a depot without a VPN. Access is controlled by identity and multi-factor authentication rather than by which building you are sitting in.
No hardware refresh cycle. A server is typically replaced every five to seven years, and its operating system has a separate end-of-support clock. Windows Server 2016 extended support ends in January 2027 and Windows Server 2019 in January 2029, according to Microsoft's lifecycle pages. With Microsoft 365 that clock is Microsoft's problem.
Scaling in both directions. Adding a user or another terabyte of storage is a licensing change rather than a purchase order and a site visit. Removing a leaver's licence is equally quick.
Platform resilience. Microsoft and Google run their services across multiple data centres. A power cut, a burst pipe or a stolen server in your office does not take your email down.
Predictable operating cost. Subscription billing is easier to budget than a five-figure capital outlay every few years.
Security features you would not buy separately. Conditional access, device compliance checks and audit logging come with the higher Microsoft 365 plans. Building the equivalent around a local server is expensive and rarely done well.

Where an on-premise server still earns its place

Latency-sensitive applications. Practice management systems, CAD, some accounting and ERP packages, and anything with a large local database can be slow and unreliable when the data sits at the far end of a broadband line. If the vendor only supports a local install, the server stays.
Poor or single internet connections. Rural Hertfordshire and Essex sites, industrial estates and older buildings sometimes have limited connectivity. If everything is in the cloud and the line fails, work stops.
Large files and local throughput. Video, design and survey data move much faster across a gigabit office network than across an upload link. Local storage with cloud sync often suits these teams better than cloud-only storage.
Data that must stay on site. Some contracts, and some risk appetites, require physical control of particular data. The ICO does not prohibit cloud storage under UK GDPR, but you remain the controller and must know where data is processed and who can reach it.
Specialist hardware. Door entry, CCTV recorders, machine controllers, label printers and older print systems often need a local host.
Recent investment. A server bought two years ago on a supported operating system is not a reason to stay on-premise forever, but it is a reason not to rush.

Decision matrix: cloud, on-premise or hybrid

Use this table to score your own situation. Where most of your answers sit in the cloud column, the cloud will usually serve you well. Where two or more sit firmly in the on-premise column, look seriously at hybrid.

Criterion	Cloud (Microsoft 365, Azure)	On-premise server	Hybrid
Upfront cost	Low, mainly migration and setup	High, hardware, licences, installation	Moderate, smaller server plus migration
Ongoing cost	Per-user subscriptions, predictable	Support, power, backup, eventual replacement	Both, but the server is smaller and does less
Remote working	Built in, identity-based access	Needs VPN or remote desktop, more to secure	Cloud apps remote, local app via VPN
Internet dependency	High, plan a second connection	Low for local work	Medium, core work continues locally
Latency-sensitive apps	Depends on vendor, can be poor	Best performance on the LAN	Keep the sensitive app local
Compliance and data residency	UK or EU regions available, you remain controller	Full physical control	Sensitive data stays local, everything else cloud
Backup responsibility	Still yours, third-party backup needed	Entirely yours, local plus off-site copy	Both, one policy covering both
Hardware refresh	None, provider's responsibility	Every five to seven years plus OS end of support	Smaller refresh, less often
Scaling	Minutes, per user or per gigabyte	Buy ahead of need or run out	Cloud side scales, server side planned
In-house skills needed	Admin and security configuration	Patching, hardware, backup, recovery	Both, usually with a managed provider

What it costs in the UK, without the sales pitch

A small on-premise server with Windows Server licences, client access licences, a backup device, a UPS and installation typically costs several thousand pounds up front, with support, electricity, backup subscriptions and eventual replacement on top. Spread over its life, that is a meaningful monthly cost even though it never appears on a subscription invoice.

For the cloud, Microsoft's published UK list prices for Business Basic, Standard and Premium are per user per month and are the figures to plan around. Google publishes its Workspace pricing the same way. Add a third-party backup licence per user and your provider's management fee.

Hosted virtual servers are the part people underestimate. An Azure virtual machine that runs around the clock with adequate storage can cost more per year than the physical server it replaced, because you are paying for someone else's hardware, power and redundancy every hour. That is worth it for some workloads and poor value for others, so the comparison needs doing properly rather than assumed. Our IT support cost calculator gives an indicative monthly figure for the support side.

A working rule of thumb: for a business of 10 to 50 people whose main needs are email, files and collaboration, the cloud is usually cheaper over five years once everything is counted. For a business with a heavy line-of-business application, moving that application to a hosted server can cost more than keeping it on a modest local box.

The hybrid option in practice

Hybrid is not a compromise for people who could not decide. It is the most common end state for established SMEs with more than one site or more than one generation of software.

Mr Plant Hire, established in 1981 and headquartered on Hertford Road in Enfield, runs multiple depots on exactly this model. Microsoft 365 with SharePoint handles inter-company document sharing and email, while Windows servers at the centre still run the workloads that need them, protected by local plus cloud backup and connected to the depots by site-to-site VPNs. Dig IT has supported that environment for over 15 years, and the Mr Plant Hire case study shows how the pieces fit.

A typical hybrid design looks like this:

Email, calendars, Teams and documents in Microsoft 365
Local Active Directory synchronised with Entra ID so staff have one login
Line-of-business application and its database on a local server
Backup of the server to a local appliance and to the cloud, plus third-party backup of Microsoft 365
A multi-site connection so branches reach the server securely

The point of hybrid is to move in stages. Email first, files second, then the application when the vendor is ready or when the server reaches end of life.

When to make the decision: trigger events

Few businesses sit down on a quiet Tuesday and decide to review their server. The decision is usually forced by one of these events, and it is far cheaper to plan for them than to react.

The server's operating system is approaching end of support. Windows Server 2012 and 2012 R2 already ended in October 2023.
The hardware warranty has expired or a disk has failed.
You are moving office. Office move IT planning is the natural moment to decide whether the server travels with you.
You are opening a new site or depot and need shared access.
Staff are working remotely more than the VPN was designed for.
Your line-of-business vendor releases a hosted version.
A restore test fails, or a cyber incident exposes how much depends on one box.
Full fibre arrives at your premises and removes the bandwidth objection.

Backup remains your job in both models

Moving to the cloud does not move the responsibility for backup. Microsoft 365 provides recycle bins, version history and retention policies, and those are useful. They are not an independent copy you can restore after ransomware encrypts synchronised files, a leaver deletes a mailbox, or a mistake is discovered six months later. Our article on whether Microsoft 365 includes backup covers the gaps in detail, and a Microsoft 365 backup service closes them.

For the on-premise side the rule has not changed. Keep a local copy for fast recovery, an off-site or cloud copy for disaster, and test restores on a schedule. The NCSC's cloud security guidance is clear that responsibility for data is shared with the provider rather than transferred to it.

What to do next

If your server is within two years of end of support, or your team's working pattern has changed since it was installed, now is the time to score your business against the matrix above and cost both routes properly. Dig IT engineers do this regularly for businesses across Hertfordshire, west Essex and London, and will tell you plainly if the server should stay. Talk to an engineer about a cloud versus on-premise review.

Frequently asked questions

Can the cloud fully replace an on-premise server for a small business?

Often, yes. If the server mainly holds shared files, handles staff sign-in and runs email, Microsoft 365 with SharePoint, OneDrive and Entra ID can replace it outright. The exception is a line-of-business application that only supports a local install or performs badly over broadband. In that case the application keeps a server, or moves to a hosted virtual server, while everything else goes to the cloud.

Is the cloud cheaper than an on-premise server?

For a business of roughly 10 to 50 people whose main needs are email, files and collaboration, the cloud is usually cheaper over five years once support, backup, electricity and hardware replacement are included. It is not automatically cheaper for a large application that needs a hosted server running around the clock. Compare total cost over the life of the hardware rather than the monthly subscription against the purchase price.

What happens to cloud systems if our internet goes down?

Cloud email and files become unreachable from the office until the connection returns, although staff can usually keep working from phones or home broadband and desktop Office apps keep working on cached files. If your work cannot tolerate that, use a second connection from a different provider, a 4G or 5G failover on the firewall, or keep the latency-sensitive workload on a local server.

Do we lose control of our data by moving to the cloud?

You give up physical control but keep legal responsibility. Under UK GDPR you remain the data controller wherever the data sits, and the ICO expects you to know where it is processed and who can access it. Microsoft and Google both offer UK or EU data locations for core services. What changes is that access is governed by identity, multi-factor authentication and policy rather than by being inside the building.

What is a hybrid setup and who is it for?

A hybrid setup keeps a local server for the workloads that need it, typically a line-of-business application, a database or specialist hardware, and moves email, documents and collaboration to Microsoft 365. Identity is synchronised so staff have one login for both. It suits multi-site businesses, firms with older applications, and anyone who wants to move in stages rather than in one weekend.

How long does it take to move a server to the cloud?

Email and files for a small business can usually be moved in a few weeks including planning, a pilot group and staff briefing, with the final cutover done outside working hours. Moving a line-of-business application depends entirely on the vendor and can take months if it needs re-platforming. Backups of everything must be taken and tested before anything is switched off.

Does Microsoft 365 back up our data once we move the file server into SharePoint?

Not in the way a backup device did. Microsoft 365 provides recycle bins, version history and retention policies, which protect against some deletions for a limited window. It does not give you an independent, point-in-time copy you can restore after ransomware, a malicious insider or a deletion discovered months later. A third-party Microsoft 365 backup is recommended alongside the platform's own protections.