Technology 101 · Beginner · Small · 8 min read · Updated 2026-11-05

Cloud computing

What the cloud actually is, the difference between software, platform and infrastructure services, how cloud pricing works, and how to decide what belongs in the cloud for an Australian small business.

Cloud, on-premises and hybrid: Most small businesses end up mostly cloud with a few local pieces; the trade-offs are about control, cost shape and responsibility.

Cloud

Rented from a provider
Monthly operating cost
Provider maintains hardware
Access from anywhere
Needs reliable internet

On-premises

Owned and sited by you
Upfront capital cost
You maintain and replace
Works without internet
You carry backup and security

Hybrid

Mix of both
Local where latency or law demands
Cloud for everything else
More to manage
Common transition state

The cloud is simply someone else’s computers, rented over the internet, with the work of keeping them running included in the price. When your accounting software opens in a browser rather than from a file on your laptop, that is the cloud. When your photos appear on every device, that is the cloud. The marketing can make it sound mysterious; the idea is not.

This article explains the three main ways cloud services are sold, what you are and are not responsible for when you use them, how the costs behave compared with owning equipment, and the questions about security and data location that Australian businesses should ask before moving anything.

Why it matters

Ten years ago a small business that wanted shared files, email and a database needed a server in a cupboard, someone to look after it and a plan for the day it failed. Cloud services removed that capital cost and most of the maintenance, and they let a five-person business use tools that only large companies could once afford. The flip side is that your business now depends on internet access, on subscriptions that can rise in price, and on providers whose terms you did not write. Understanding the model lets you capture the benefits without sleepwalking into the risks.

What the cloud actually is

A cloud provider runs very large data centres full of servers, storage and networking equipment, and sells slices of that capacity to customers over the internet. Because thousands of businesses share the same facilities, the provider can afford specialists, redundancy and security that no individual small business could. You pay for what you use, usually monthly, and stop paying when you stop using it.

The major providers, such as Amazon Web Services, Microsoft Azure and Google Cloud, operate data centres in Australia, and most business software companies build their products on top of one of them. When you subscribe to a cloud accounting or CRM product, there are often two layers involved: the software company, and the infrastructure provider underneath it.

Three ways cloud is sold

Cloud services come in three main models, and the difference is how much of the work you take on. Software as a service (SaaS) is a finished application you log into: accounting, email, CRM, payroll. Platform as a service (PaaS) gives developers a managed place to run their own code and databases without managing servers. Infrastructure as a service (IaaS) is raw computing: virtual servers, storage and networks that you configure yourself.

Most small businesses live almost entirely in SaaS and should. PaaS and IaaS become relevant when you have custom software, a website with specific needs, or a legacy application that cannot be replaced yet and needs a home other than the server in the back room.

Who manages what: The higher up the stack you buy, the less you manage and the less you control.

SaaS: You use the application; the vendor manages everything else.
PaaS: You manage your code and data; the provider runs the platform.
IaaS: You manage operating systems and software on rented servers.
On-premises: You manage everything, including the building and the power.

How cloud costs behave

Owning equipment means a large payment up front, depreciation over several years, and a replacement cycle you must budget for. Cloud turns that into an operating expense that rises and falls with use. For a growing business this is usually attractive: you add users as you hire rather than guessing capacity three years ahead. For a stable business with predictable needs, the sums can be closer than vendors suggest, especially over five or more years.

Cloud bills have their own traps. Per-user pricing grows silently as staff join and nobody removes departed users. Infrastructure services charge for storage, data transfer and features that are easy to leave switched on. Set a monthly review of every cloud invoice, and ask each vendor what happens to the price at renewal before you sign.

Compare total cost over five years, not the first month.
Include the time you or staff currently spend maintaining equipment.
Remove users and resources the same day they stop being needed.
Ask about price increases, minimum terms and exit fees before committing.

Security, privacy and where your data lives

Reputable cloud providers run security programmes far beyond what a small business could build, but the data is still yours and so are the legal obligations. If the Privacy Act applies to your business, you are responsible for how personal information is handled wherever it is stored, including overseas. Many small businesses are below the Privacy Act turnover threshold, but health service providers and some others are covered regardless; check your position with the Office of the Australian Information Commissioner or a legal adviser.

Data residency, meaning the country where your data is physically stored, matters for some industries and some customers. Most major vendors let you choose an Australian region or state where your data is hosted. Ask, and get the answer in writing. Also ask how you would get your data out: a complete export in a usable format is your insurance against a vendor failing, changing terms or simply becoming a poor fit.

Questions before moving to the cloud

Where is our data stored, and can we choose Australia?
How do we export everything if we leave?
What is the uptime commitment and how is it compensated?
Who at the vendor can see our data, and under what rules?
What does the price do at renewal and as we add users?
How is our account protected: multi-factor authentication, admin roles?
What happens to our data when the subscription ends?

How to move a small business to the cloud sensibly

Inventory what you run List every application and where its data lives today: local PC, server, or already cloud.
Fix the internet first A cloud business needs a reliable connection and a backup, such as a mobile data fallback.
Move email and files first These are the easiest wins and the biggest risk reduction. Choose one suite and commit.
Replace rather than lift For each remaining application, ask whether a SaaS product does the job before hosting the old one in the cloud.
Set up identity properly One business login per person, multi-factor authentication everywhere, and admin rights held by the owner.
Arrange independent backup Back up your cloud data to a second location. Vendors protect their systems, not your mistakes.
Review the bill monthly Remove departed users, unused storage and forgotten trials before they become permanent.

Real-world example

A Wollongong accounting practice retires its server

Harbour Partners is a four-partner accounting practice with fourteen staff. Its client files sit on a server in a cupboard that is six years old, backed up to a drive that one partner takes home each Friday. During a storm the office loses power for two days and nobody can work. The quote to replace the server is a five-figure sum plus annual support, and it would still be in a cupboard.

The practice moves email and documents to a cloud productivity suite, chooses an Australian hosting region for its practice management software, and sets up a separate cloud backup service that keeps independent copies of everything. Staff can work from home or client sites, and the firm’s professional obligations around client confidentiality are met with documented access controls. The monthly cost is higher than the old server’s depreciation but lower once support, downtime and the partner’s Friday drive runs are counted, and the firm no longer has a single point of failure in a cupboard.

Common mistakes

Lifting the old server into the cloud Hosting a legacy application on a rented server keeps all the old maintenance and adds a bill. Replace with SaaS where a product exists.
Assuming the vendor backs you up Vendors protect against their failures, not your deleted files or a compromised account. Keep an independent backup.
Ignoring where data is stored Some clients and industries require Australian hosting. Ask before you sign, not after a tender asks you.
Letting user counts drift Per-user pricing means every departed staff member still on the subscription is money wasted and a security hole.
No plan for the internet going down A cloud business with one internet connection and no mobile fallback has simply moved its single point of failure.

KPIs to track

Cloud spend per active user Total monthly subscriptions divided by current staff. A rising figure with stable headcount usually means unused licences.
Unplanned downtime hours Hours per quarter the business could not work because of systems or internet. Track it to justify a backup connection.
Data recoverability Whether you have exported or restored your data from each core system in the last twelve months. Yes or no, per system.
Licences removed within a week of departure The share of former staff whose accounts were disabled promptly. Target 100 per cent.

Frequently asked questions

Is the cloud safe for a small business?

Generally safer than a server you maintain yourself, provided you protect your accounts with strong passwords and multi-factor authentication. Most cloud incidents involve compromised logins rather than provider failures.

Does my data have to stay in Australia?

For most small businesses there is no blanket legal requirement, but privacy obligations still apply to data sent overseas, and some clients, industries and government contracts require Australian hosting. Choosing an Australian region when it is offered is a sensible default.

What if my internet goes down?

Cloud applications stop, so plan for it: a mobile data fallback on the router or a phone hotspot covers most short outages. Choose applications that work offline on mobile where field work matters.

Should I keep anything on-premises?

Sometimes: a point-of-sale system that must keep trading offline, machinery control software, or very large files edited locally. Treat these as deliberate exceptions and back them up to the cloud anyway.

Key takeaways

The cloud is rented computing with maintenance included; the mystery is marketing.
Most small businesses should live in SaaS and treat platform and infrastructure services as exceptions.
Providers secure their systems; you secure your accounts, users and data.
Compare costs over five years and review every cloud bill monthly.
Ask where data is stored and how you get it out before you sign anything.

This article is general information only, not financial, legal or tax advice.