Local service guide
Cloud Service Setup in Calgary: Hiring and Planning
For Cloud Service Setup in Calgary, choose a technician against a written scope covering the files to move, staff permissions, backup recovery and business control of accounts. Agree on a demonstration before accepting the handover. For organizations subject to PIPA, review overseas-provider notification requirements subject to the applicable regulations. Health custodians should resolve assessment and agreement obligations before migration. [1] [2]
Define the work before comparing quotes
Describe the outcome through tasks your staff can test: opening shared folders, editing approved documents and recovering a missing file. Separate shared documents, application data and archives in your brief. Identify the devices that need access and require the technician to list anything excluded from the migration.
Give bidders the same inventory of users, devices, source locations and approximate data volume. Request a written breakdown of labour, subscription charges, follow-up support and onsite visits. Agree who will handle failed transfers or files needing manual attention, and require your approval before anyone expands the scope.
Choose help that matches your information
Have candidates explain their proposed permissions using a sample folder. Discuss how they would grant access to a new employee, remove a departing employee and separate confidential records from public website material. Verify platform credentials they claim and review a sample of the handover documentation they propose to provide.
In its October 2020 web-bucket advisory, Alberta’s privacy commissioner recommends risk assessments, encryption at rest and in transit, access limited to the information a person needs, and periodic permission reviews. The commissioner also recommends backups in an alternate location and recovery tests. Use this storage-specific guidance to question a technician proposing object storage or web buckets. [3]
Resolve privacy responsibilities before transfer
Alberta’s PIPA guidance says organizations subject to the Act may collect personal information only for reasonable purposes and to the extent reasonably needed. Even with consent, organizations must stay within the purposes in their notice and reasonable limits. Identify the records involved before granting technician access. The government presents this page as guidance; consult the legislation and regulations when determining legal obligations. [1]
For web-bucket services, the OIPC recommends a signed contract addressing data ownership, residency requirements, incident notification, access to records, and secure return and deletion at termination. Have the provider explain its permitted uses of your records and document your exit process before signing. [3]
Plan a migration you can check
Agree on a pilot folder before moving the full collection. Have staff open representative documents and check editing rights. Record missing files, permission changes and application dependencies before authorizing the next stage. Set a period when staff will stop editing source files so the technician can reconcile changes.
Keep a recoverable copy of the source data until you have checked the agreed results. Require a rollback procedure and name the person who can authorize it. For web buckets containing identifying information, the OIPC recommends secure backups in an alternate location and periodic recoverability tests. [3]
Accept the handover after a demonstration
Watch the technician demonstrate staff access, account recovery and a file restore. Confirm that you control the business account and subscription billing. Obtain notes covering folder ownership, administrative roles, recovery contacts and staff access removal. Agree who will answer questions after handover and whether that support carries a separate charge.
For web buckets, review the permission checks and keep identifying information out of public website buckets. The OIPC warns that public buckets may expose file and directory listings. Assign someone in your business to review access and remove accounts that no longer need it, following the commissioner’s recommendations. [3]
Published weekday office schedule spans
Local details that affect your job
Calgary licensing depends on the provider’s activities
The City lists electronics repair shops among businesses that do not require municipal licensing. It also says businesses without a licence requirement still need a Business ID and land use approval. The repair-shop classification does not establish every cloud consultant’s status. If your technician offers repairs alongside setup, identify their business activities and confirm an unclear classification with the Planning Services Centre. [4]
Alberta overseas-provider notices need preparation
For organizations subject to PIPA, subject to the applicable regulations, Alberta’s guidance describes notice requirements when using an outside-Canada service provider to collect information or transferring previously collected information to that provider. The notice must explain access to relevant policies and practices and identify a contact for information-handling questions. Before moving customer records, assign that contact and review your notice against the legislation and regulations. This government page provides guidance rather than an authoritative interpretation of the law. [1]
Health custodians need a separate migration plan
For Calgary clinics whose responsible practitioners are HIA custodians, the OIPC identifies moving an on-premise electronic medical record system to the cloud as a change requiring a PIA amendment. Custodians must submit the assessment before implementation and enter into an information manager agreement before providing health information to an information manager. Have bidders separate technical migration from assessment and agreement work, and involve the accountable custodian in both. [2]
Match the scope to your records
| Situation | Request | Before proceeding |
|---|---|---|
| Shared office documents | A pilot migration and folder-permission plan | Approve sample results and staff access checks |
| Organization subject to PIPA using an overseas provider | Provider details and notification planning, subject to applicable regulations | Review notice and information-handling contact requirements |
| HIA custodian moving an EMR to the cloud | PIA amendment support and information manager agreement work | Submit the assessment before implementation; complete the agreement before providing health information |
| Public website buckets alongside confidential records | Separate storage for public content and identifying information | Check permissions and demonstrate backup recovery |
Your hiring checklist
- List the users, devices, folders and applications included in the job.
- Identify customer, employee and patient records before granting access.
- Request separate labour, subscription and support charges.
- Agree on a pilot migration, editing pause and rollback procedure.
- Specify permission checks and a witnessed file recovery test.
- Confirm business control of billing, administrative access and recovery contacts.
- Obtain handover notes and remove temporary technician access when the work ends.
Frequently Asked Questions
How much should I budget?
These official sources do not publish cloud setup prices. Request a quote against your inventory and acceptance checks. Have bidders distinguish labour, recurring subscriptions, migration troubleshooting and follow-up support so you can compare the same scope. [1] [2] [3] [4]
Must business cloud records stay in Canada?
Alberta’s PIPA guidance describes overseas-provider notification requirements, subject to the applicable regulations; it does not establish a blanket Canadian-storage rule. Identify the law governing your records and review the provider arrangement before choosing a location. For HIA custodians, the OIPC also describes written-agreement requirements for storage, use or disclosure outside Alberta. [1] [2]
Does a clinic need to wait for PIA approval?
The OIPC says HIA requires submission before implementation and encourages early engagement for high-risk systems needing preliminary feedback. Since October 1, 2024, it has issued closing letters, with comments and recommendations where required, rather than accepting or rejecting PIAs. Submission does not remove the custodian’s responsibility for compliance. [2]
What should I ask about leaving the provider?
Discuss how you will export your records, how the provider will return them and how it will delete remaining copies. The OIPC recommends covering secure return and deletion at termination in web-bucket provider contracts. Review these terms alongside account ownership and support arrangements before signing. [3]
Sources and scope
This guide combines the sources below with practical planning guidance. Figures apply to the stated geography and period; request a written quote for your property.