Cloud Lock-In: The 2027 Reset
From 12 January 2027, EU rules ban cloud switching fees. What that means for Monaco businesses tied to a host or SaaS vendor — and what to check now.
The Question Nobody Asks Until It Is Expensive
Most Monaco businesses can tell you what their hosting costs per month. Very few can tell you what it would cost to leave.
That second number is the one that matters. It is the difference between a supplier you chose and a supplier you are stuck with. And on 12 January 2027, in the market that supplies most of the tools you run on, it is legally going to zero.
This is a forward-looking piece. The date is still months away, and the rules in question are European, not Monegasque. But the commercial effect arrives earlier than the deadline, because providers rewrite contracts ahead of it — and the terms you sign this autumn are the terms you will be living with when it lands.
What Actually Changes in January 2027
The European Data Act — Regulation (EU) 2023/2854 — has been applicable since 12 September 2025. Its most commercially significant chapter is about switching between cloud and data processing services.
Three points matter for a business owner rather than a lawyer.
Switching charges disappear. Between 11 January 2024 and 12 January 2027, providers may charge reduced switching fees, capped at the costs directly linked to the switch. From 12 January 2027, they may not impose switching charges at all. That includes data egress charges — the per-gigabyte fee for pulling your own data out, which has long been the quiet mechanism of lock-in.
Exit timelines get defined. Contracts must let a customer switch provider, or move to their own infrastructure, within a mandatory maximum transitional period of 30 calendar days, following a notice period that cannot exceed two months. If 30 days is genuinely unfeasible, the provider must say so within 14 working days, justify it, and propose an alternative period capped at seven months.
You get a retrieval window. After the transitional period ends, there must be a minimum of 30 calendar days in which you can still retrieve your data.
Put plainly: the exit stops being a negotiation and starts being a contractual right with a clock on it.
Does It Apply to You? Probably the Wrong First Question
Monaco is not an EU member state, and EU regulations do not apply in the Principality by default. The Data Act's switching chapter is aimed at providers offering data processing services to customers in the Union. A Monaco-established company contracting directly with a provider is not automatically inside that scope.
We are not going to pretend otherwise, and if you have a specific contract and a material sum at stake, that is a question for counsel, not a blog post. There is no settled guidance on how these provisions apply to customers just outside the EU.
But the practical answer is more useful than the legal one, and it points the same way.
Providers do not usually maintain two commercial models. When a large host, platform or SaaS vendor rebuilds its terms and its billing to remove egress fees and guarantee 30-day exits for its EU book of business, that generally becomes the standard product. Several of the largest cloud providers already removed data transfer-out charges for customers leaving entirely, ahead of any deadline. If your provider serves EU customers, the improved terms are usually available to you too — but you may have to ask for them rather than receive them automatically.
That is the actionable version: from January, "we can't do that" becomes a much harder position for a supplier to hold, and a much easier one for you to challenge.
Where Lock-In Actually Bites in Monaco
Cloud switching sounds like an IT department problem. In a company of fifteen people, it usually shows up somewhere else.
It shows up when a website built on a proprietary page builder cannot be exported as anything but rendered HTML, so a redesign means retyping four languages of content by hand. It shows up when an e-commerce platform holds your customer records and order history in a structure only it can read. It shows up when a marketing tool owns your consent records — a genuine problem under Monaco's Law No. 1.565, because your obligations to the APDP do not pause because your vendor made retrieval awkward.
None of that is exotic. It is the normal result of choosing tools on monthly price and never once asking about the exit.
The businesses that handle 2027 well will be the ones that treated portability as a purchasing criterion before it was a legal one. When we scope web development work, ownership of content, data and the deployment target is a design decision made at the start — because retrofitting it costs several times more than building it in.
A Short Exit Audit You Can Run This Month
You do not need a consultant for the first pass. For each significant system — website, e-commerce, CRM, email platform, file storage, analytics — answer four questions in writing:
- Can I export everything, in a format something else can read? Not a PDF report. Structured data: CSV, JSON, a database dump, real media files.
- What would it cost, and how long would it take? Ask the provider directly, in writing, before you need the answer.
- What is the notice period, and when does it auto-renew? Multi-year renewals signed now will outlive the January change.
- Who holds the keys? Domain registrar, DNS, hosting account, repository, analytics property. If any of those sit in an agency's account rather than yours, that is the lock-in — no regulation fixes it.
Anything you cannot answer is a risk you are carrying without pricing it.
What to Do Before January
Do not switch anything for the sake of it. A working system is worth more than a theoretical right to leave.
Do three things instead. Diarise every renewal date between now and January 2027, so nothing locks in silently. Ask your two most critical providers, in writing, what their exit and egress terms will be after 12 January 2027 — the quality of the answer tells you a lot about the supplier. And make portability a written requirement in the next contract you sign, whatever the regulation ends up saying about Monaco.
If you would rather map this properly — which systems hold what, where the real dependencies are, and what a clean exit path looks like for each — that is exactly the kind of work digital strategy consulting is for, and it pairs naturally with how we approach website maintenance and support.
Want a straight answer on how portable your current setup actually is? Get in touch and we will look at it with you.
Related services
