How to Switch IT Providers Without Losing Access or Data

Most businesses that want to change IT providers have wanted to for a while. What stops them is rarely the new contract. It is the fear of the handover: that the outgoing provider holds the passwords, that email will stop on a Monday morning, that the backups turn out to belong to someone else. Those fears are reasonable, because each one happens to somebody every year. They are also preventable, because every one of them comes down to a small number of things you can check before you give notice.

This guide is the order we would do it in. It is written by a provider, IT Rapid Support at 7810 Keele St in Vaughan, so read it with that in mind. Nothing in it depends on choosing us: it works the same whoever takes over, and most of it is worth doing even if you decide to stay where you are.

Step 1: Read Your Current Agreement Before You Say Anything

Find the signed agreement, not the proposal. Four clauses decide how the exit goes. The notice period, which is commonly 30 to 90 days and sometimes longer. Auto-renewal, because many agreements roll over for another full term unless notice lands inside a specific window before the anniversary. Termination assistance, meaning whether the provider has committed to hand over documentation and credentials, and whether that work is included or billed. And ownership: whether hardware, software licences or backup storage were supplied under the agreement and remain the provider's property.

If the agreement is silent on handover, that is not a disaster, but it means you are relying on goodwill. Plan the remaining steps on the assumption that you need to have everything in your own hands before notice is given, not after.

Step 2: Confirm You Own the Things That Cannot Be Rebuilt

Some parts of your IT can be rebuilt by any competent provider in an afternoon. A few cannot, and those are the ones to secure quietly, first.

• Your domain name. Log in to the registrar yourself and confirm the registrant is your business, not the IT company or a former employee. If you cannot log in, that is the first thing to fix. A domain held in someone else's name is the single most expensive thing to recover.
• DNS hosting. The domain can be registered in one place and its DNS records hosted in another. Find out where the records for email and your website actually live, and make sure you have a login there too.
• Microsoft 365 or Google Workspace administration. You want at least one global administrator account in your business's name, protected by multi-factor authentication, that is not shared with the provider. In Microsoft 365, check which partners hold delegated admin access to your tenant; that list is visible in the admin centre and should be cleaned up when the old provider leaves.
• Licensing. If your Microsoft licences were bought through the provider as a cloud solution partner, they are billed through them and will need to move to a new partner. Microsoft's current commercial subscriptions are often annual commitments that cannot simply be cancelled mid-term, so ask when each subscription renews before planning the cutover date.
• Backups. Ask where the backup data is stored, whose account it sits in, how long it is retained, and what happens to it the day the agreement ends. If the vault belongs to the provider, arrange an export or a parallel backup in your own name before notice.

Step 3: Build the Inventory the New Provider Will Need

A good incoming provider will run its own discovery, but the transition is faster and safer when you can hand over a list on day one. It does not need to be elegant. A spreadsheet with these headings is enough: every administrative login (firewall, Wi-Fi, switches, server, NAS, internet provider account, phone system, printer management), line-of-business software and who the vendor contact is, any remote access tools in use, and the people who currently have admin rights. If the outgoing provider uses a password vault on your behalf, ask for a full export as part of the handover, and change every credential after the export is received.

Write down the things only staff know, too: the accounting package that only works from one PC, the camera system the landlord installed, the supplier portal that emails a code to a former employee. Those are the items that break in week two if nobody mentions them.

Step 4: Overlap, Do Not Cut Over

The safest transitions run the two providers side by side for a short period rather than switching at midnight. During the overlap the incoming provider deploys its monitoring and security tooling alongside the existing tools, documents the environment, and verifies that backups are running into accounts you control. Only then is the old tooling removed.

Order matters here. Endpoint protection should never be removed from a device before the replacement is active on it, and the outgoing provider's remote access agents should be uninstalled once the new ones are confirmed working, not left running indefinitely. Leftover remote access software from a previous provider is one of the more common findings when we review an environment, and it is an open door nobody is watching.

This is the shape of the four-stage process we use with new clients: Assess, Plan, Onboard, Operate. We review what exists, put the plan in writing, onboard with tooling and documentation running in parallel, and only then take over day-to-day support. The detail is set out on our managed IT services in Vaughan page.

Step 5: Give Notice, Then Change the Keys

With ownership secured and the overlap planned, give notice in writing, in the form the agreement requires, and ask for the handover items by name: documentation, credential export, confirmation that their delegated admin access will be removed, and the date their tools will be uninstalled. Keep the tone professional. Most outgoing providers cooperate, and the transition goes better when they do.

On the final day, rotate every administrative password the old provider knew, remove their accounts from Microsoft 365, the firewall and any other system, revoke their partner access, and confirm in writing that their agents have been removed from every device. Then run one test restore from the backup you now control. A backup you have not restored from is an assumption, not a control.

What a Transition Typically Costs

There are usually three cost lines. Any remaining fees under the old agreement, including the notice period. Onboarding with the new provider, which some charge as a one-off fee and some absorb into the first months of the agreement; ask which, and what it includes. And any licensing or hardware that has to be replaced because it belonged to the old provider. None of these should be a surprise if Steps 1 and 2 are done first, and our guide to comparing managed IT quotes covers how to read the incoming proposal line by line.

If you only want a second pair of eyes before deciding, for example a review of what your current provider controls and what you would need back, that can be done as a short piece of hourly work rather than a commitment. Our general IT rate is CA$185 an hour plus 13% HST.

Where This Usually Goes Wrong

In our experience the problems in a provider switch cluster around a handful of mistakes. Giving notice before confirming domain and admin ownership, which hands all the leverage to the party leaving. Cancelling licences or backup storage before the replacements are live. Removing security tools before their replacements are active. Assuming staff know the new helpdesk number without anyone telling them. And treating the last day as the end of the work, when the credential rotation and access clean-up on that day are what actually close the old provider out.

Across the GTA the steps are the same whether you are a ten-person office in Newmarket or Aurora, a warehouse in Ajax or Pickering, or a multi-site business in Burlington. What changes is how much on-site work the overlap needs, which is mostly a question of how much hardware is in the building. Our IT support services across the GTA page sets out how on-site coverage works by region.

Frequently Asked Questions

How long does it take to switch IT providers?

The technical work is often a matter of weeks; the controlling factor is usually the notice period in the existing agreement and the renewal dates of any annual licences. Plan backwards from those dates rather than forwards from the day you decide.

Will our email go down when we change IT providers?

It should not. Changing who manages your Microsoft 365 or Google Workspace tenant does not move your mailboxes. Email only moves if you are also changing platforms or the tenant itself is owned by the outgoing provider, which is exactly why Step 2 comes first.

What if our current provider will not hand over passwords?

Start with what you can control directly: the domain registrar, your Microsoft 365 global admin account and your internet provider account can usually be recovered through those vendors with proof of ownership. Firewall and network equipment can be reset and reconfigured if necessary. It is slower and more disruptive than a cooperative handover, but it is recoverable.

Should we tell our current provider we are looking?

That is a business decision. Practically, secure ownership of your domain, admin accounts and backups before any conversation about leaving, so the timing of the handover stays in your hands either way.

Can a new provider work alongside our internal IT person during the switch?

Yes. An internal IT person is often the most useful source of knowledge in the transition, and many businesses keep them on in a co-managed arrangement afterwards. Make sure their admin access is documented in the same inventory as everyone else's.

What should we ask the incoming provider before signing?

Ask how their onboarding is run and documented, whether onboarding is charged separately, who will own the licences and backup storage under their agreement, and what they would hand over if you ever left them. A provider that answers the last question clearly has usually thought about the first three. To talk it through, call (289) 582-9930.