Most businesses don't realize their IT contract has them locked in until they try to leave. These are the 5 clauses that do it, what a fair version looks like, and what to do if you've already signed.
Nobody signs an IT contract expecting to feel trapped by it. It usually happens 2 years later, when the service has slipped, the owner starts looking around, and someone finally reads the termination section.
I hear some version of “we’re locked into a contract” in a lot of first conversations. Most of the time, the business didn’t agree to anything unusual. They agreed to a handful of ordinary-looking clauses that, together, make leaving more expensive than staying. If you’re weighing managed IT services, or you’re already in an agreement, these are the 5 to look for.
A quick distinction. Our article on what to look for in a managed IT provider covers how a provider behaves. This one is only about the paperwork. And it isn’t legal advice, so have your lawyer read anything you’re planning to act on.
What Does It Mean to Be Locked Into an IT Contract?
You’re locked in when the cost of leaving your IT provider, in fees, lost access or disruption, is higher than the cost of putting up with service that isn’t working. It’s usually created by a combination of clauses rather than one, and it tends to stay invisible until you try to leave.
That last part is why it’s worth checking now. Every red flag below is easier to negotiate before you sign than after.
Red Flag 1. Does Your Contract Renew Itself With a Tiny Notice Window?
Auto-renewal on its own isn’t sinister. Plenty of businesses like not having to re-sign every year. The problem is the combination of 3 details that usually sit in the same paragraph.
- The contract renews for another full term, not month to month.
- The notice window closes well before the end date, often 60 or 90 days out.
- The renewal date isn’t anywhere you’d naturally see it, like an invoice.
Miss the window by a week and you’ve bought another 1 to 3 years. A fair version renews month to month after the initial term, or sends you a written reminder before the notice deadline. Either way, find your notice date today and put it in the calendar of whoever signs the cheques.
Red Flag 2. Is the Exit Fee the Rest of the Contract?
Early termination fees are normal. A provider that bought tools or spent weeks onboarding you has real costs to recover. What separates a reasonable fee from a lock-in is how it’s calculated.
A fixed fee or a short declining schedule is one thing. A clause that makes you pay the full remaining balance, whether or not the provider is meeting its service levels, means you’d be paying for support you’ll never receive. At that point, the contract is doing the job the service should be doing.
Look for a termination for cause clause too. If the provider repeatedly misses response times, can you leave without the fee? If the contract doesn’t define service levels at all, the answer is probably no. Our guide to the SLAs you should expect from a managed IT provider covers what those numbers usually look like.
Red Flag 3. Does Your Provider Hold the Keys?
This one is rarely in the contract at all, which is what makes it dangerous. Over the years, a provider ends up holding things that should belong to you.
- The top-level Microsoft 365 global admin account.
- Your domain registration, sometimes in the provider’s own name.
- Your Microsoft licences, bought through the provider’s partner account.
- Firewall, backup and Wi-Fi equipment leased as part of the monthly fee.
- Passwords and network documentation that live only in the provider’s system.
None of these stop you from leaving. They just make it slower, more expensive and dependent on your old provider’s cooperation. Microsoft’s New Commerce Experience policy, for example, only allows prorated licence cancellations within 7 days of purchase, so licences held by a provider follow their renewal dates, not your switch date.
The Canadian Centre for Cyber Security’s guidance for consumers of managed services recommends that providers only have the access they need to manage their services, and that your organization can manage access controls itself. That’s a security principle, and it happens to be the best protection against lock-in too.
Red Flag 4. Does Your Data Come Back on Their Terms?
Ask a simple question of your contract. If you gave notice tomorrow, how would your data, backups, passwords and documentation come back to you, in what format, and at what cost?
If the agreement doesn’t say, you’re relying on goodwill at the exact moment the relationship is ending. Some contracts allow hourly billing for exports. Others use proprietary backup formats that are hard to restore anywhere else. The Cyber Centre’s guidance makes the point directly, recommending that businesses raise data portability before signing to avoid vendor lock-in, and confirm they keep legal ownership of their data if the contract ends.
A fair contract names what gets returned, sets a timeframe for it, and states whether there’s a charge. It also covers what happens to your data on the provider’s side once you’ve left.
Red Flag 5. Is the Term Long but the Scope Vague?
A 3-year term isn’t a red flag by itself. It can make sense when it’s tied to hardware financing or a large migration project. It becomes one when the commitment is specific and the service isn’t.
Watch for phrases like “reasonable support,” “best efforts” or “standard maintenance” with no definition behind them. Check for annual price escalators that apply automatically. And see whether the agreement says what’s out of scope, because that’s where surprise invoices come from. Our breakdown of what’s actually included in an IT support contract is a useful checklist here.
When the provider is locked into nothing measurable and you’re locked into 36 months, the risk sits entirely on your side of the table.
What Does a Fair IT Contract Look Like?
Here’s how the same 5 clauses look when they’re written to keep you, rather than to trap you.
| Clause | Locked-in version | Fair version |
|---|---|---|
| Renewal | Renews for a full term unless you give notice 90 days out | Renews month to month, or sends written notice before the deadline |
| Early exit | Full remaining balance, regardless of service | Fixed or declining fee, plus termination for cause if service levels are missed |
| Admin access and licences | Provider holds global admin, domain and licences | Your business owns them, and the provider has its own delegated access |
| Data return | Not mentioned, or billed hourly on request | Defined list, timeframe and cost for returning data and documentation |
| Scope and pricing | Vague support language with automatic increases | Defined inclusions, exclusions, service levels and price review terms |
You won’t always get every fair version. But knowing which ones matter most to your business tells you where to push before you sign.
What If You’re Already Locked In?
You have more options than it feels like. Start here.
- Find the renewal notice date and put it in the calendar, even if you’re not sure you’ll leave.
- Confirm who holds your Microsoft global admin account, domain registration and licences, and move ownership to your business where you can.
- Ask your provider for a full asset and documentation list. A good provider produces it without fuss.
- Compare the exit fee with what the current service is costing you in downtime and stalled work over the remaining term.
- Have your lawyer review the termination and data return sections before you raise anything with the provider.
Once you know those numbers, the decision usually gets clearer. Our guide to what it costs to switch IT providers walks through the full calculation.
Why ACT360 Uses a 90-Day Exit Clause
Our Managed IT agreements include a 90-day exit clause. If the relationship isn’t working in the first 90 days, you can leave. That applies to Managed IT specifically, and it’s there because 90 days is roughly how long a properly run onboarding takes, which is long enough to judge whether we’re doing what we said.
My view is simple. If a provider needs a contract to keep a client, the contract is covering for the service. We’d rather you stay because the technology works the way your business works, and because you can see what we’re doing through transparent tools and access.
Final Thought
Most lock-in isn’t malicious. It’s a few standard clauses nobody questioned, stacked on top of access nobody tracked. The fix is the same either way. Read the renewal, exit and data sections now, while you still have time to act on what you find.
If you’d like help reading yours, talk to our team or book a free IT Readiness Assessment. Call 705-739-2281 or email [email protected].