ACT360 Web & IT Inc.
Blog

5 Red Flags Your IT Contract Has You Locked In

Most businesses don’t realize their IT contract has them locked in until they try to leave. These are the 5 clauses that do it, what a fair version looks like, and what to do if you’ve already signed.

Woman squinting at the fine print of a contract, representing the lock-in clauses hidden in managed IT agreements

QUICK ANSWER

Quick answer

An IT contract has you locked in when leaving costs more than staying. Watch for short auto-renewal windows, exit fees equal to the remaining term, provider-held admin access, unclear data return terms, and long terms with vague scope.

KEY TAKEAWAYS

What to remember

  • Lock-in is rarely one clause. It's usually 2 or 3 working together, like an auto-renewal paired with a full-balance exit fee.
  • If your provider holds the Microsoft global admin account, the domain registration or your licences, leaving gets slower and more expensive.
  • A fair contract spells out how your data, passwords and documentation come back to you, and what that costs.
  • Long terms aren't automatically bad. They're a problem when the scope and service levels are vague.
  • If you're already locked in, start with the renewal date, the admin credentials and an asset list. Those 3 give you options.
  • ACT360's Managed IT agreements carry a 90-day exit clause because a provider shouldn't need a contract to keep a client.
In this article
  1. What Does It Mean to Be Locked Into an IT Contract?
  2. Red Flag 1. Does Your Contract Renew Itself With a Tiny Notice Window?
  3. Red Flag 2. Is the Exit Fee the Rest of the Contract?
  4. Red Flag 3. Does Your Provider Hold the Keys?
  5. Red Flag 4. Does Your Data Come Back on Their Terms?
  6. Red Flag 5. Is the Term Long but the Scope Vague?
  7. What Does a Fair IT Contract Look Like?
  8. What If You’re Already Locked In?
  9. Why ACT360 Uses a 90-Day Exit Clause
  10. Final Thought

Most businesses don't realize their IT contract has them locked in until they try to leave. These are the 5 clauses that do it, what a fair version looks like, and what to do if you've already signed.

Nobody signs an IT contract expecting to feel trapped by it. It usually happens 2 years later, when the service has slipped, the owner starts looking around, and someone finally reads the termination section.

I hear some version of “we’re locked into a contract” in a lot of first conversations. Most of the time, the business didn’t agree to anything unusual. They agreed to a handful of ordinary-looking clauses that, together, make leaving more expensive than staying. If you’re weighing managed IT services, or you’re already in an agreement, these are the 5 to look for.

A quick distinction. Our article on what to look for in a managed IT provider covers how a provider behaves. This one is only about the paperwork. And it isn’t legal advice, so have your lawyer read anything you’re planning to act on.

What Does It Mean to Be Locked Into an IT Contract?

You’re locked in when the cost of leaving your IT provider, in fees, lost access or disruption, is higher than the cost of putting up with service that isn’t working. It’s usually created by a combination of clauses rather than one, and it tends to stay invisible until you try to leave.

That last part is why it’s worth checking now. Every red flag below is easier to negotiate before you sign than after.

Red Flag 1. Does Your Contract Renew Itself With a Tiny Notice Window?

Auto-renewal on its own isn’t sinister. Plenty of businesses like not having to re-sign every year. The problem is the combination of 3 details that usually sit in the same paragraph.

  • The contract renews for another full term, not month to month.
  • The notice window closes well before the end date, often 60 or 90 days out.
  • The renewal date isn’t anywhere you’d naturally see it, like an invoice.

Miss the window by a week and you’ve bought another 1 to 3 years. A fair version renews month to month after the initial term, or sends you a written reminder before the notice deadline. Either way, find your notice date today and put it in the calendar of whoever signs the cheques.

Red Flag 2. Is the Exit Fee the Rest of the Contract?

Early termination fees are normal. A provider that bought tools or spent weeks onboarding you has real costs to recover. What separates a reasonable fee from a lock-in is how it’s calculated.

A fixed fee or a short declining schedule is one thing. A clause that makes you pay the full remaining balance, whether or not the provider is meeting its service levels, means you’d be paying for support you’ll never receive. At that point, the contract is doing the job the service should be doing.

Look for a termination for cause clause too. If the provider repeatedly misses response times, can you leave without the fee? If the contract doesn’t define service levels at all, the answer is probably no. Our guide to the SLAs you should expect from a managed IT provider covers what those numbers usually look like.

Red Flag 3. Does Your Provider Hold the Keys?

Yellow Dead End road sign, representing an IT contract where the provider controls the admin access a business needs to leave

This one is rarely in the contract at all, which is what makes it dangerous. Over the years, a provider ends up holding things that should belong to you.

  • The top-level Microsoft 365 global admin account.
  • Your domain registration, sometimes in the provider’s own name.
  • Your Microsoft licences, bought through the provider’s partner account.
  • Firewall, backup and Wi-Fi equipment leased as part of the monthly fee.
  • Passwords and network documentation that live only in the provider’s system.

None of these stop you from leaving. They just make it slower, more expensive and dependent on your old provider’s cooperation. Microsoft’s New Commerce Experience policy, for example, only allows prorated licence cancellations within 7 days of purchase, so licences held by a provider follow their renewal dates, not your switch date.

The Canadian Centre for Cyber Security’s guidance for consumers of managed services recommends that providers only have the access they need to manage their services, and that your organization can manage access controls itself. That’s a security principle, and it happens to be the best protection against lock-in too.

Red Flag 4. Does Your Data Come Back on Their Terms?

Ask a simple question of your contract. If you gave notice tomorrow, how would your data, backups, passwords and documentation come back to you, in what format, and at what cost?

If the agreement doesn’t say, you’re relying on goodwill at the exact moment the relationship is ending. Some contracts allow hourly billing for exports. Others use proprietary backup formats that are hard to restore anywhere else. The Cyber Centre’s guidance makes the point directly, recommending that businesses raise data portability before signing to avoid vendor lock-in, and confirm they keep legal ownership of their data if the contract ends.

A fair contract names what gets returned, sets a timeframe for it, and states whether there’s a charge. It also covers what happens to your data on the provider’s side once you’ve left.

Red Flag 5. Is the Term Long but the Scope Vague?

A 3-year term isn’t a red flag by itself. It can make sense when it’s tied to hardware financing or a large migration project. It becomes one when the commitment is specific and the service isn’t.

Watch for phrases like “reasonable support,” “best efforts” or “standard maintenance” with no definition behind them. Check for annual price escalators that apply automatically. And see whether the agreement says what’s out of scope, because that’s where surprise invoices come from. Our breakdown of what’s actually included in an IT support contract is a useful checklist here.

When the provider is locked into nothing measurable and you’re locked into 36 months, the risk sits entirely on your side of the table.

What Does a Fair IT Contract Look Like?

Here’s how the same 5 clauses look when they’re written to keep you, rather than to trap you.

Clause Locked-in version Fair version
Renewal Renews for a full term unless you give notice 90 days out Renews month to month, or sends written notice before the deadline
Early exit Full remaining balance, regardless of service Fixed or declining fee, plus termination for cause if service levels are missed
Admin access and licences Provider holds global admin, domain and licences Your business owns them, and the provider has its own delegated access
Data return Not mentioned, or billed hourly on request Defined list, timeframe and cost for returning data and documentation
Scope and pricing Vague support language with automatic increases Defined inclusions, exclusions, service levels and price review terms

You won’t always get every fair version. But knowing which ones matter most to your business tells you where to push before you sign.

What If You’re Already Locked In?

You have more options than it feels like. Start here.

  1. Find the renewal notice date and put it in the calendar, even if you’re not sure you’ll leave.
  2. Confirm who holds your Microsoft global admin account, domain registration and licences, and move ownership to your business where you can.
  3. Ask your provider for a full asset and documentation list. A good provider produces it without fuss.
  4. Compare the exit fee with what the current service is costing you in downtime and stalled work over the remaining term.
  5. Have your lawyer review the termination and data return sections before you raise anything with the provider.

Once you know those numbers, the decision usually gets clearer. Our guide to what it costs to switch IT providers walks through the full calculation.

Why ACT360 Uses a 90-Day Exit Clause

Our Managed IT agreements include a 90-day exit clause. If the relationship isn’t working in the first 90 days, you can leave. That applies to Managed IT specifically, and it’s there because 90 days is roughly how long a properly run onboarding takes, which is long enough to judge whether we’re doing what we said.

My view is simple. If a provider needs a contract to keep a client, the contract is covering for the service. We’d rather you stay because the technology works the way your business works, and because you can see what we’re doing through transparent tools and access.

Final Thought

Most lock-in isn’t malicious. It’s a few standard clauses nobody questioned, stacked on top of access nobody tracked. The fix is the same either way. Read the renewal, exit and data sections now, while you still have time to act on what you find.

If you’d like help reading yours, talk to our team or book a free IT Readiness Assessment. Call 705-739-2281 or email [email protected].

FAQ

Questions We Hear About Getting Out of an IT Contract

How can I tell if my IT contract auto-renews?

Look for words like renewal, term, evergreen or successive periods, usually near the termination section. If the contract renews for another full term unless you give notice by a set date, it auto-renews, and that notice date matters more than the end date.

Our provider wants the full remaining balance to let us leave. Is that normal?

It’s common in long contracts, but common isn’t the same as fair. A full-balance exit fee means you pay for service you’ll never receive, so it removes almost any reason for the provider to earn your renewal. Check whether the contract lets you terminate for cause when service levels are missed, because that can change the math. Before you negotiate, have a lawyer review the actual wording.

Who should own the Microsoft 365 admin account?

Your business should. Your provider can have its own administrator account to do its job, but the top-level global admin, your domain registration and your licence records should sit with you so a change of provider never depends on anyone’s goodwill.

Is a month-to-month IT contract always better?

Not always. Month-to-month can carry a higher per-user rate, and a longer term can make sense when it’s tied to hardware financing or a large project. The question is whether you can leave if the service stops working, and at what cost.

What if our contract says nothing about returning our data?

Silence isn’t the same as a no, but it does leave room for argument and hourly charges. Put a written request in early, listing exactly what you need back, from admin credentials and network documentation to backups, licence keys and vendor contacts. The Canadian Centre for Cyber Security’s guidance for consumers of managed services recommends sorting out data ownership and portability before you sign, so make it a standard clause in your next agreement.

Can someone look over our current IT contract before we decide anything?

ACT360 will walk through your current agreement as part of a free IT Readiness Assessment and show you where the exit costs sit. For the legal interpretation, your own lawyer is the right call. Talk to our team to set it up.

KEEP READING

Related Posts