An online store is only open when its website is available. Slow pages, outages during a sale or lost data can all cost revenue and customer trust. Understanding the basics of cloud hosting helps store owners ask the right questions, whether they use a hosted e-commerce platform or run their own infrastructure.
This guide explains key concepts in plain language. It is general information, not advice about any specific provider.
Hosted platforms versus self-managed hosting
There are two broad approaches:
- Hosted e-commerce platforms provide the store software and the hosting together. The provider handles servers, updates and much of the security. You trade some flexibility for convenience.
- Self-managed hosting means running store software on cloud servers or a managed hosting service. You gain control and flexibility but take on more responsibility for updates, security, scaling and backups.
Many small stores start on a hosted platform; larger or more specialised stores sometimes move to self-managed setups. Neither approach is right for everyone.
Uptime and service level agreements
Uptime is the percentage of time a service is available. Providers often publish a service level agreement (SLA) describing their availability commitment and what compensation, if any, applies when they miss it. Read SLAs carefully: they usually cover only the provider's own infrastructure, not problems caused by your code, plugins or configuration.
Scaling for traffic peaks
Traffic can rise sharply during promotions or holidays. Cloud infrastructure can scale in two ways:
- Vertical scaling: giving a server more CPU or memory.
- Horizontal scaling: adding more servers behind a load balancer.
Some platforms scale automatically; others require you to plan and configure capacity. Load testing before major events helps reveal bottlenecks, such as a slow database or an overloaded checkout service.
Content delivery networks
A content delivery network (CDN) stores copies of images, scripts and other static files on servers in many locations, so visitors download them from somewhere nearby. CDNs improve page speed, reduce load on your main servers and can provide some protection against traffic floods.
Backups and recovery
Backups protect against accidental deletion, software bugs, failed updates and security incidents. Good backup practice includes:
- Backing up both files and databases.
- Automating backups on a regular schedule.
- Keeping copies in a separate location or account.
- Retaining several versions, not just the latest.
- Testing restores periodically so you know they work.
Two useful planning terms are the recovery point objective, which is how much data you could afford to lose, and the recovery time objective, which is how long you could afford to be offline.
Security basics
- Use HTTPS on every page.
- Keep platform software, themes and plugins up to date.
- Enable multi-factor authentication for admin accounts.
- Give staff only the access they need.
- Use a reputable payment provider so card data is handled by systems designed for it; card-handling businesses generally need to consider PCI DSS requirements.
Monitoring
Uptime monitoring services check your site regularly and alert you if it goes down. Performance monitoring and error logs help you spot slow pages or failing processes before customers complain.
Questions to ask a hosting provider
- How does the service handle traffic spikes?
- What backups are included, and how are restores performed?
- What support is available, and at what hours?
- Where is data stored, and how can it be exported?
- What security features and certifications are documented?
Plan before peak season
The weeks before a major sale are the wrong time to discover a weakness. Review hosting limits, test checkout under load, confirm that backups are recent and restorable, and freeze non-essential changes to the site. A short written runbook explaining whom to contact and what to do if the store goes down helps everyone respond calmly.
Bottom line
Reliable hosting for an online store comes down to availability, the ability to scale, fast delivery of content, tested backups and sound security. Understanding these basics helps you choose the right approach and ask providers the right questions.