WebSavers.ca

Canada · websavers.ca · 15 vendors

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 15 sub-vendors.

Insights

Last updated 2026-08-11 · revision 2

15 direct vendors, 120 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

WebSavers.ca demonstrates a medium-low level of migration readiness, primarily due to its traditional hosting infrastructure and specific operational constraints. The company's tech stack, while functional, relies on platforms like OpenVZ 7 for virtualization, Plesk for control panel management, WHMCS for client management, and Microsoft Exchange 2016 for email hosting. These components suggest a more monolithic or tightly integrated architecture, which would require a significant re-platforming or lift-and-shift effort to migrate to a modern, cloud-native, or containerized environment. A major challenge for migration is the explicit requirement for 'All data hosted in Canada' and 'Canadian Exchange Email Hosting'. While beneficial for local compliance, this strict data residency constraint significantly limits the choice of potential cloud providers and regions, potentially increasing complexity and cost for any migration initiative. Implied vendor lock-in exists due to the reliance on specific commercial and open-source products (Plesk, WHMCS, OpenVZ, Exchange 2016). Migrating away from these platforms would involve considerable effort in data conversion, configuration changes, and potentially re-architecting services. The 'Total Vendors: 0' data point is contradictory, but assuming vendors exist based on the geographic diversity, the actual number of vendors and contract complexities, which are crucial for assessing lock-in, are unknown. On the positive side, core components like WordPress, PHP 8.x, and MariaDB 10.11 LTS are generally portable. The company also offers a 'SiteMigrator Website Transfer Service', indicating internal expertise in handling website migrations, which might translate to some understanding of migration processes, albeit primarily for inbound transfers. However, the lack of data on financial stability (ability to fund a large migration) and specific regulatory compliance requirements adds significant uncertainty to the migration readiness assessment.

Compliance

10 in-scope frameworks identified; showing 3.

PIPEDA — Partially Compliant

PIPEDA is the primary federal Canadian privacy law directly applicable to Websavers Inc. as a private-sector organization conducting commercial activities across provincial borders. The company has a published privacy policy, acknowledges data collection and retention practices, and provides customer access to personal data via its Client Centre. However, the privacy policy lacks explicit mention of PIPEDA by name, does not clearly identify a designated Privacy Officer (as required under PIPEDA Principle 1), and the data breach notification procedures reference only the Terms of Service rather than a standalone breach response plan aligned with PIPEDA's mandatory breach reporting requirements (in force since November 2018). Risk is Medium because the OPC (Office of the Privacy Commissioner of Canada) actively enforces PIPEDA against SMEs in the digital services sector, and gaps in breach notification and accountability documentation could attract regulatory scrutiny. Fines under PIPEDA are limited (up to CAD $100,000 for certain offences), but reputational damage and OPC investigations are significant business risks for a hosting provider.

Evidence: https://websavers.ca/privacy, https://websavers.ca/terms, https://laws-lois.justice.gc.ca/eng/acts/P-8.6/, https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/

Quebec Law 25 — Assessment Required

Quebec's Law 25 (modernization of Act respecting the protection of personal information in the private sector) is one of the most stringent privacy laws in Canada and has been declared substantially similar to PIPEDA. It applies to any enterprise that collects, holds, uses, or communicates personal information about Quebec residents, regardless of where the enterprise is located. As a Canadian web hosting provider serving customers across Canada, Websavers almost certainly has Quebec-based customers, triggering Law 25 obligations. Law 25 introduces GDPR-like requirements including: mandatory Privacy Impact Assessments (PIAs) for cross-border transfers, appointment of a Privacy Officer (with public disclosure), privacy by default, right to data portability, right to de-indexing, and significant penalties (up to 4% of worldwide turnover or CAD $25M). Risk is Medium because Law 25 is fully in force (phased implementation completed September 2023), penalties are significant, and Websavers' privacy policy does not address Law 25-specific requirements.

Evidence: https://websavers.ca/privacy, https://www.legisquebec.gouv.qc.ca/en/document/cs/P-39.1, https://www.cai.gouv.qc.ca/en/, https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/provincial-privacy-laws/provincial-privacy-legislation-in-quebec/

CIRA — Assessment Required

Websavers offers .CA domain registration services, which requires accreditation as a CIRA-certified registrar or operating as a reseller through an accredited registrar. CIRA registrars must comply with CIRA's Registrar Agreement, which includes obligations around WHOIS data accuracy, domain dispute resolution (CDRP), and registrant data protection. Risk is Low because these are operational compliance requirements rather than major regulatory risks, and Websavers has been offering domain registration since at least 2004.

Evidence: https://clients.websavers.ca/whmcs/cart.php?a=add&domain=register, https://www.cira.ca/en/domain-names/registrars/

Financials

Three-year financials

Financial Resilience Score: 6/10

Websavers Inc. is a privately held Canadian web hosting company that has operated continuously since 2004, indicating over 21 years of sustained, likely cash-flow-positive operations in a highly competitive and consolidating industry. Its subscription-based recurring revenue model (hosting, email, domains, SSL) provides predictable cash flows, and its low overhead structure — with distributed home-office staff and owner-operators explicitly reinvesting in infrastructure rather than executive compensation — supports operational resilience. The company has demonstrated ongoing capital reinvestment, including a full SSD migration in 2018 and cloud backup rollout in 2019, without price increases. However, no public financial statements exist because Websavers is a small, non-distributing Canadian private corporation with no legal disclosure obligation. This opacity prevents assessment of liquidity, leverage, or profitability. The company faces meaningful structural risks: very small scale (~6 identified staff) creating key-person dependency on founders Jordan Schelew and Allen Pooley, single-datacentre concentration near Montreal, and intense competitive pressure from hyperscale clouds (AWS, Azure, GCP) and hosting conglomerates (GoDaddy, Newfold, Hostinger). Migration of SMB customers to Wix, Squarespace, and Shopify is an ongoing headwind. The score reflects longevity and business model strength offset by scale, concentration, and disclosure limitations.

Key strengths: 21+ years of continuous operation since 2004, Recurring subscription revenue model with high switching costs, Low overhead via distributed workforce, Independently owned, no apparent leverage overhang, Ongoing infrastructure reinvestment (SSD migration 2018, cloud backup 2019), Owner-operator reinvestment discipline

Risk factors: Very small scale (~6 staff) with key-person risk on founders, Highly competitive commoditised hosting industry, Single datacentre partner concentration near Montreal, Unknown customer concentration, skewed to Canadian SMBs, Technology transition risk from SMBs moving to Wix/Squarespace/Shopify, No public financials — full opacity on liquidity, debt, profitability

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report