In real projects...
Cloud vs on-prem debates often hide the real question: who operates patches, integrations, and identity—and at what SLA. Compare operating models, not slogans; pair with security and RBAC expectations.
A common issue we see...
Teams want cloud agility but still behave like on-prem (custom DLLs, unpatched VMs), or want on-prem control without staffing SRE-style ops.
For example...
- Inventory regulatory and data-residency constraints first.
- Model patch windows, DR tests, and break-glass access for each option.
- Compare TCO with honest headcount for ops and security.
- Validate integration latency and bulk job windows on realistic volumes.
- Write exit criteria: data portability and contract terms.
Common mistakes (and how to avoid them)
- Choosing cloud to avoid internal politics (it will resurface as shadow IT).
- Ignoring network and identity as single points of failure.
- Underestimating long-term vendor roadmap risk in either model.
- Skipping DR drills because “the vendor handles it.”
Note: Representative scenarios for education; validate with qualified IT and legal advisors.
Methodology: This article is an educational guide built from public ERP documentation and widely used implementation patterns. Any mini “scenario walkthroughs” are illustrative and not client-specific.
Cloud and on-premise ERP are not equally appropriate for every organisation. The decision depends on integration complexity, data residency requirements, customisation needs, and a realistic total cost of ownership over five years.
- Define the decision criteria: data residency and regulatory requirements, integration landscape complexity, customisation needs, and internal IT capability to manage infrastructure.
- Build a five-year total cost of ownership model for each option—include implementation, licences, customisation, integration, infrastructure (for on-premise), and ongoing support costs.
- Assess the integration landscape: list every system that must connect to the ERP and evaluate whether cloud APIs or on-premise middleware best support your current integration patterns.
- Review regulatory and compliance requirements: identify any data residency, sovereignty, or sector-specific audit obligations that constrain the deployment model.
- Evaluate internal IT capability: cloud ERP reduces infrastructure management but requires API and configuration skills; on-premise requires server, network, and upgrade management skills.
- Document the decision rationale—including assumptions and constraints—so it can be reviewed when business conditions or vendor roadmaps change.
Artifacts to expect:
- Five-year TCO comparison for cloud and on-premise options.
- Integration inventory with connectivity requirements for each system.
- Regulatory and data residency compliance checklist.
- IT capability assessment for cloud operations and on-premise infrastructure.
- Decision rationale document with assumptions and review triggers.
What usually goes wrong (failure modes)
- TCO comparison is based on list prices rather than actual implementation complexity
Cloud ERP appears cheaper in an initial comparison because implementation and customisation costs are underestimated.
Mitigation: Require a vendor implementation estimate based on a discovery workshop that covers your specific integration and customisation requirements before comparing TCO. - Integration costs are significantly higher than expected for cloud migration
Legacy systems use batch file interfaces that are not compatible with cloud API patterns, requiring significant integration rework.
Mitigation: Complete an integration inventory before the decision, identifying each interface, its frequency, and the technical pattern required for each deployment model. - On-premise ERP is stranded on an outdated version because upgrades are too disruptive
Heavy customisation makes version upgrades technically complex and expensive, so the organisation falls several versions behind the vendor's current release.
Mitigation: Build upgrade cost and frequency assumptions into the TCO model. Assess the customisation volume against the vendor's published upgrade commitment before committing to on-premise.
Controls and evidence checklist
- Document all TCO assumptions and refresh the model annually.
- Include regulatory compliance and data residency requirements in the decision criteria.
- Validate integration inventory completeness with the IT team before finalising the comparison.
- Include upgrade policy and support timeline commitments in vendor contract negotiations.
- Schedule a formal review of the deployment decision after three years or when significant business changes occur.
Implementation checklist
- Complete the integration inventory and regulatory checklist before building any TCO model.
- Obtain implementation estimates from vendors for both deployment options based on a documented scope.
- Review the decision with IT, finance, and legal before finalising.
- Build contractual protections for upgrade commitments, data portability, and SLA guarantees.
- Establish a governance process for managing cloud configuration changes or on-premise upgrade decisions.
- Plan a formal decision review after three years to assess whether the chosen deployment model still meets business needs.
Frequently asked questions
Where do teams usually lose time in cloud vs on-premise decisions?
Most time is lost debating total cost of ownership without agreed assumptions. Cloud and on-premise TCO comparisons are only meaningful when both options are modelled over the same horizon—typically five years—and include implementation, customisation, integration, training, support, and upgrade costs for each scenario. Comparisons based on headline licence costs alone consistently underestimate the total cost of the on-premise option.
What should we review carefully during the integration assessment?
Review the integration landscape carefully: cloud ERP typically uses REST APIs and standardised connectors, while on-premise deployments often rely on batch interfaces and custom middleware. If your organisation has many legacy integrations, cloud migration costs are frequently underestimated in early TCO models. An integration inventory that identifies the technical pattern required for each interface is the single most important input to an accurate TCO comparison.
When should we revisit the deployment decision after go-live?
Revisit the deployment decision when vendor support timelines change, when your organisation acquires a new entity with a different ERP, or when a regulatory change creates new data residency requirements. Cloud and hybrid architectures have become more flexible, and what was impractical three years ago may now be technically and commercially feasible. A formal review every three years is a reasonable governance standard.
Sources
- COSO Internal Control - Integrated Framework (2013 refresh)
- ISACA: Implementing Segregation of Duties (SoD) — practical experience
- NIST SP 800-53 Rev. 5 (Security and Privacy Controls)
Conclusion and next steps
Cloud vs on-premise ERP is a business decision that should be grounded in a realistic TCO comparison, an integration inventory, and a clear understanding of regulatory constraints.
Avoid deciding based on a single factor—whether cost, security, or vendor recommendation. The organisations with the best outcomes document their decision criteria before evaluating options and revisit the decision as their business evolves.