Observe

The tactics, in the industry's own words.

None of this is hidden. Providers write about these practices openly, in their own guides and blogs, because inside the industry they are simply how the business model works. Every claim below carries its source: a live link and an archived copy, so the citation survives even if the page does not. Nothing here names a villain. The tactic is the villain.

Part one

The contract

The terms that decide how hard it is to leave are agreed to on the day you arrive, when everyone is friendly and nothing has gone wrong yet.

The multi-year minimum

What it looks like

A 24 to 36 month required term is the industry standard. And the provider side has weighed the appeal candidly for a decade: a multi-year deal, in one platform vendor's own words, "guarantees you their business for the foreseeable future," a sentence first published in 2015 and still on that vendor's blog today.

What it costs you

If service quality drops in month six, you still owe months seven through thirty-six. The provider's incentive to keep earning your business ends the day you sign.

TechProComp, 2026 source archived CIO Technology Solutions, 2026 source archived ConnectWise (2015, republished 2022, still live) source archived

The early termination fee

What it looks like

Leaving early typically costs 50 percent of the remaining contract value. On a $3,500 per month agreement with 18 months left, that is $31,500 owed just to stop being a customer. Some agreements charge 100 percent in the first year.

What it costs you

The fee is priced so that tolerating bad service for another year is cheaper than escaping it. That is not an accident. It is the design.

TechProComp, 2026 source archived

The auto-renewal window

What it looks like

The agreement renews itself for another term unless you cancel in writing inside a narrow notice window, often 60 to 90 days before the renewal date. Miss it, and the clock restarts.

What it costs you

The reminder rarely comes from the provider. One missed calendar date can cost a full additional year of a relationship you had already decided to end.

CIO Technology Solutions, 2026 source archived

The quiet clauses

What it looks like

Buried terms that only matter when something goes wrong: forced arbitration that waives your right to court, liability caps set so low the provider risks almost nothing in a breach, and price increase language with no ceiling.

What it costs you

In a regulated business, a data breach is your liability first. A token cap means the provider whose failure caused it may owe you less than one month of fees.

CIO Technology Solutions, 2026 source archived

Part two

The price

The most expensive quote is usually the low one. Industry pricing guides say so themselves: one calls IT pricing "deliberately opaque," noting that providers compete on a headline number while hiding what it excludes.

SerenIT, 2026 source archived

The stripped headline rate

What it looks like

A per-user price well under market, quoted without the security tooling, managed detection, backup, or compliance work a regulated business actually needs. Those come back after signature, as add-ons. One 2026 guide is blunt: below roughly $80 per user, the quote is almost certainly missing security essentials. Another names picking the cheapest provider the most common trap in MSP procurement: the buyer absorbs unexpected charges for the security, backup, and compliance services that were never in the base price.

What it costs you

The sticker that looked $100 higher was the whole price. The one that looked cheap becomes the expensive one, a line item at a time.

SerenIT, 2026 source archived Petronella, 2026 source archived

The compliance project

What it looks like

The risk assessment, remediation, and audit evidence your regulator or insurer requires are scoped as separate projects at project rates, on top of the monthly fee. Industry benchmarks put compliance needs at 20 to 40 percent above standard rates.

What it costs you

For a medical practice or accounting firm, the compliance work is not optional. Quoting it separately makes the monthly number look good and the yearly total look nothing like it.

Velo IT Group, 2026 source archived

The metered attention

What it looks like

Routine care, the patching, the follow-ups, the scheduled maintenance that the word "managed" implies, sold back to you as hourly blocks or support bundles that run out.

What it costs you

You pay a management fee and then pay again for the management. Ask exactly which routine work is included labor and which is metered, in writing.

No citation on this card, by design: the pricing guides cited on this page document the block-hours and support-bundle models; the paying-twice framing is this site's own reasoning. Test it against any quote.

The hardware margin

What it looks like

Equipment and licenses bundled into the agreement at a markup, or "included" hardware that turns out to belong to the provider, with a buyout price waiting at exit.

What it costs you

Industry buyer guides warn that included does not always mean yours. Gear you thought you owned becomes leverage in the offboarding negotiation.

CIO Technology Solutions, 2026 source archived

What the market actually charges

Published 2026 ranges from independent pricing guides. Read any quote against these, and compare all-in numbers only: same user count, same inclusions, same compliance scope.

$100–$400 Per user, per month The full published market range
$150–$200 Typical small business National average, comprehensive service
$200–$300+ Regulated environments Healthcare, legal, financial, defense
Petronella, 2026 source archived Velo IT Group, 2026 source archived

Part three

The exit

The quietest tactics live at the end of the relationship, where industry buyer guides list difficult offboarding among the standard lock-in mechanisms. Transition specialists say it outright: providers dragging their feet on documentation, delaying credential transfers, or going silent once notice is given is more common than people expect, and the contract's offboarding and data-return clauses are the buyer's first line of defense. By the time you meet these tactics, you are already leaving, and in the worst position to negotiate.

The credential hold

What it looks like

The provider holds the administrator passwords, firewall configurations, domain registrations, and backup encryption keys, and the agreement says nothing about when or how you get them back.

What it costs you

Whoever holds the admin credentials owns the timetable of your departure. Every day of delay is billable friction for you and leverage for them.

The data ransom

What it looks like

Your data returned slowly, in proprietary formats your next provider cannot use, or for an "extraction fee" that appears only at exit. For a medical practice, that data includes the backups your compliance obligations depend on.

What it costs you

Migration stalls, the new provider bills discovery hours, and the old provider gets paid to slow-walk your own property back to you.

The documentation gap

What it looks like

No current record of your own environment: what runs where, how it is configured, which vendor holds which account. The provider never wrote it down, or wrote it down as theirs.

What it costs you

Your next provider starts from archaeology. You pay for the same knowledge twice, and the gap is priced into every switching decision you weigh.

The final-invoice hostage

What it looks like

Handover of credentials, data, and documentation made contingent on settling a final bill, including any disputed charges that appeared on it.

What it costs you

Disputing a charge means delaying your own exit. Most businesses pay whatever the last invoice says, which is the point.

CIO Technology Solutions, 2026 source archived Stratify IT, 2026 source archived

Seen the tactics. Now see what fair paper looks like instead.

Adapt: the standard