Comparison · Ecommerce platforms
Hosted storefront service versus self-hosted ecommerce software
Last updated 25 October 2026 · 3 sources listed · Reading time about 3 minutes
Short answer
Hosted services trade flexibility for convenience: updates, security and uptime are the vendor's job. Self-hosted software trades convenience for control: you can alter anything, but you carry maintenance, hosting quality and breach risk. The decision turns on available technical skill, how unusual the business logic is, and how comfortable you are depending on a vendor's pricing and rules.
Who this is for: A merchant weighing a subscription storefront service against installing open-source shop software on their own hosting.
What to evaluate
Technical skill on hand
Self-hosted shops need someone who can manage servers or at least a managed hosting account, apply updates and recover from faults.
How to check: Name the specific person who would handle a failed update at a busy time.
Uniqueness of business logic
Standard retail flows are served well by hosted tools; unusual pricing rules, subscriptions with complex billing or regulated goods may demand code-level change.
How to check: Write down any requirement that is not available as a setting or approved extension.
Security responsibility
On self-hosted systems, outdated software and weak server settings are common entry points for attackers, and a breach affects customer data you are liable for.
How to check: Ask who applies security patches, monitors for intrusions and keeps backups, and how quickly.
Cost shape over time
Hosted services charge predictable recurring amounts plus extras. Self-hosting shifts cost into hosting, development time and maintenance contracts that vary unpredictably.
How to check: Draw up a year-long cost outline for both models including your own time valued sensibly.
Performance control
Self-hosted owners can tune servers and caching, but also suffer if hosting is weak. Hosted platforms provide scale for traffic spikes within their limits.
How to check: Consider your busiest sales periods and ask what happens to load times then.
Exit options
Both models can lock you in, hosted through proprietary data structures and self-hosted through custom code.
How to check: Check export formats and whether themes and custom work could move elsewhere.
Comparison
| Aspect | Hosted service | Self-hosted software |
|---|---|---|
| Launch speed | Quick set-up using templates and built-in tools | Slower because hosting, installation and configuration come first |
| Maintenance | Vendor handles updates and server uptime | Owner arranges patches, backups and monitoring |
| Customisation depth | Bounded by vendor's settings, apps and permitted code areas | Open to any change in code, database and front end |
| Security duty | Shared, with the vendor responsible for platform-level protection | Largely yours, including server configuration and extension vetting |
| Cost predictability | Recurring plan with add-ons that can accumulate | Variable costs through hosting, developer time and extensions |
| Vendor dependence | Rules, fees and features set by the provider | Dependent on the open-source community and your own developers |
Decision worksheet
Rate up to three options against this guide’s own criteria. It runs in your browser and saves only on this device. It is a thinking aid, not a recommendation.
1. Have you checked each criterion?
0 of 6 criteria checked.
2. Compare options (0 = fails or unknown, 3 = meets it well)
| Criterion | |||
|---|---|---|---|
| Technical skill on hand | |||
| Uniqueness of business logic | |||
| Security responsibility | |||
| Cost shape over time | |||
| Performance control | |||
| Exit options | |||
| Total (max 18) | 0 | 0 | 0 |
Questions to ask before you commit
- Who will be responsible for applying security updates, and how quickly will they respond to a critical patch?
- What backup frequency do I need, and has a restore ever been tested?
- If the hosted vendor changes its terms, what alternatives could I migrate to?
- Which of my planned features need custom code, and who will maintain it?
- What is the vendor's policy on content or product categories that I intend to sell?
- How will my site perform during promotions, and does the plan scale automatically?
- What are my obligations for storing and protecting customer personal data under local privacy law?
Typical trade-offs
Accept hosted limits on checkout customisation
- Upside
- Stable, tested checkout that the vendor keeps compliant.
- Downside
- Cannot implement unusual rules or integrations without workarounds.
Use managed hosting for a self-hosted shop
- Upside
- Offloads server tasks while keeping code control.
- Downside
- Still need someone to handle application updates and extension conflicts.
Write custom extensions
- Upside
- Exactly fits your workflow.
- Downside
- Becomes technical debt if documentation is poor or the developer leaves.
Start hosted and migrate later
- Upside
- Fast validation with little infrastructure.
- Downside
- Migration costs, redirects and risk of lost data at the changeover.
Common mistakes
- Picking self-hosted purely because the software licence is free. Total cost includes hosting, security work, updates and developer time.
- Never testing backups. A backup that cannot be restored provides false comfort, so rehearse the recovery.
- Running outdated extensions. Abandoned plugins are a common source of vulnerabilities and should be removed or replaced.
- Assuming hosted means no responsibility. You are still accountable for accurate product information, privacy notices and customer service.
- Stacking customisations that make upgrades impossible. Keep changes in documented, separable layers.
Related questions
Is self-hosted software cheaper in the long run?
It can be if you have the skills in house and a steady, simple site, but it is not automatically cheaper. Costs move from subscription lines to hosting, security monitoring, developer time and the occasional emergency repair. A fair comparison counts the hours spent on maintenance. Many small merchants find the predictability of a hosted plan more valuable than the licence savings of self-hosting.
Which option is more secure?
Neither is inherently secure. Hosted vendors typically manage patching and infrastructure protection at scale, which removes common failure points, but account security, extension choices and weak passwords remain your responsibility. Self-hosted shops can be very secure when professionally managed and quickly patched, but neglected installations are frequent targets. Look at who actually performs the work rather than the label.
Can I move from hosted to self-hosted later?
Yes, and many merchants do as they grow. Export products, customers and orders, rebuild the theme, replicate payment and tax settings, and set redirects for old addresses. Check that your data export includes variant details and images. Plan a parallel testing period, since checkout behaviour often differs subtly between systems.
What happens if the hosted vendor shuts my store?
Vendors can suspend accounts for terms violations or payment disputes, which is why reading acceptable use rules for your product category matters. Keep regular exports of your catalogue and customer data, and know how you would restore operations elsewhere. Having an alternate platform shortlisted turns a crisis into an inconvenience.
Do hosted shops still need legal pages and compliance work?
Yes. The vendor provides tools, but you are the trader. You must present accurate business details, delivery and returns terms, a privacy notice, and tax settings suited to where you sell. Rules differ by country, so consult your consumer protection and data protection authorities. Templates help but do not replace checking that they match what you actually do.
Sources and further reading
These pages were reachable when we last checked. They informed definitions and rules referred to above; they do not endorse this guide. Where rules differ by country, check the authority for your location.
- PCI Security Standards Council — PCI Security Standards Council, retrieved 27 October 2026
- Cybersecurity and Infrastructure Security Agency — CISA, retrieved 27 October 2026
- Business Guidance — Federal Trade Commission, retrieved 27 October 2026
Related guides
How to choose · Ecommerce platforms
How to choose an ecommerce platform for your store
Choose by matching the platform's strengths to your catalogue shape, sales channels, payment and tax needs and the technical skill you can actually call on. Check how easily you can export products, customers and orders if you leave. A platform that fits your operations as the business grows at a manageable ownership burden beats one with the longest feature list.
Problems & fixes · Ecommerce platforms
Why shoppers abandon your online checkout and how to diagnose it
Abandonment usually comes from a handful of friction points: surprise delivery costs, forced account creation, limited payment choices, slow or confusing pages and doubts about trust. Diagnose by walking the checkout on several devices, reading session recordings or funnel step data, and asking abandoning customers directly. Fix one cause at a time so you can see what actually changed behaviour.
Requirements · Ecommerce platforms
Legal and tax requirements for opening an online store
Selling online usually involves registering the business in some form, handling indirect tax such as sales tax or VAT where thresholds apply, publishing trader information and returns terms, protecting personal data and following product safety and advertising rules. Requirements vary significantly by country and by what you sell, so verify with your national authorities and a qualified adviser. This page outlines topics to check, not advice.
Comparison · Business operations
Cloud POS versus on-premise POS
Cloud POS offers remote access, automatic updates and quicker setup but relies on connectivity and a subscription. On-premise systems run locally with fast response and independence from the internet but need servers, backups and technical support. Many modern hybrids cache locally. Choose according to connectivity reliability, technical capacity, number of sites and tolerance for vendor dependence.
Comparison · Business operations
Buying versus leasing office equipment
Buying gives ownership and generally the lowest total cost if you keep equipment for its full life, but it ties up cash and leaves you responsible for repair and disposal. Leasing spreads payments, can include service and upgrades, and preserves cash, yet usually costs more overall and imposes return conditions. Tax and accounting treatment varies, so consult an adviser before deciding.
Comparison · Business operations
Invoice finance versus a term loan for managing cash flow
Invoice finance advances cash against unpaid invoices, so funding grows with sales and suits businesses with reliable corporate customers and long payment terms. A term loan provides a fixed sum repaid on a schedule regardless of sales. Compare fees, how customers are treated, recourse terms and flexibility. This explains how to evaluate options and is not personal financial advice.
Comparison · Logistics and supply chain
Direct carrier account versus a shipping aggregator or platform
A direct carrier account offers full control, direct support and negotiated terms that can improve with volume. An aggregator offers pooled rates, instant setup and multi-carrier tools, but sits between you and the carrier for support and claims. The decision depends on volume, administrative capacity, need for flexibility and how much you value direct accountability.