Dave set up the archive server four years ago. It sits in the server cupboard next to the router, backs up to a NAS on Friday nights, and nobody else in the firm knows the admin password. Dave left in March. In July, a former client's lawyer sent a discovery request for correspondence from 2022. The practice manager spent two days finding someone who could even get into the box, and another week confirming the backup job had actually been running the whole time. It had — mostly. Six weeks in early 2023 were missing because a drive filled up and nobody was watching.
This is the actual failure mode for on-prem email archiving at small-firm scale, and it has nothing to do with the technology being bad. Local archive servers work fine, technically. The problem is that a 10-person firm doesn't have a systems team — it has one person who understands the archive, and everything depends on that person staying, remembering, and being available when a regulator or opposing counsel comes asking.
What the compliance requirement doesn't care about
Whether you're a law firm keeping client correspondence for 7 years under state bar trust account rules, an accounting practice retaining records under the Corporations Act, or a financial adviser meeting ASIC recordkeeping obligations, the requirement is about the outcome: can you produce complete, unaltered correspondence for a given period on request. It doesn't specify cloud or on-prem. Auditors and courts don't ask where the server lives — they ask whether the archive is complete, whether it's tamper-evident, and how fast you can retrieve from it. A firm can meet that bar either way. The question is which one a 10-person team can actually sustain without a dedicated IT hire.
Cost: the honest comparison
On-prem looks cheaper on the invoice and isn't, once you count everything. A basic archive server, NAS for backups, and UPS is maybe $3,000–5,000 upfront. Then there's the annual cost nobody puts in the budget: patching, disk replacement every 3–4 years, backup verification, and the IT contractor's hourly rate every time something needs attention — which for most small firms is "whenever it breaks," not on a schedule. Add up three years of that and you're often past what cloud archiving would have cost outright, before factoring in the time your practice manager spends chasing it.
Cloud archiving is a predictable per-mailbox monthly fee — typically somewhere between the cost of a decent coffee and a decent lunch, per user, per month, depending on retention length and features. No hardware to buy, no server to retire, no disk that fills up on a Friday night with nobody watching. The tradeoff is that you're paying indefinitely rather than owning hardware outright — over a long enough horizon, a well-run on-prem setup can be cheaper in raw dollars. Very few 10-person firms run one well enough, for long enough, to actually realise that saving.
Who maintains it — the real question
This is where the size of the firm matters more than the size of the mailbox. At enterprise scale, on-prem archiving is maintained by a team, and single points of failure get designed out. At 10 people, on-prem archiving is maintained by whoever happened to set it up and still works there. That's not a criticism of Dave — it's just how small firms staff IT. One person configures it once, it runs quietly for years, and the knowledge of how it actually works — where the credentials live, what the backup schedule is, what happens when the disk fills up — exists in exactly one head.
Cloud archiving moves that maintenance burden to the vendor. Capture, storage, retention enforcement, and backup integrity become someone else's operational responsibility, running to a service-level agreement rather than to whether your one IT-literate staff member remembers to check on it. That's a real, calculable reduction in risk for a firm this size — not because cloud is inherently more reliable technology, but because it removes the single point of human failure.
What happens when that person leaves
This is the scenario that should actually drive the decision, more than cost. With on-prem, when the one person who understands the archive leaves, the firm typically doesn't know what it doesn't know until it needs the archive urgently — a subpoena, a client dispute, a regulator's request for correspondence from a specific period. At that point you're paying an external contractor an emergency rate to reverse-engineer someone else's setup, and you find out about the gaps — the unwatched disk, the backup job that silently stopped in month three — at the worst possible time.
With cloud archiving, the person leaving is a personnel change, not an infrastructure risk. The service keeps running because it was never dependent on any one staff member's knowledge. This is the tradeoff that matters most for a firm your size: on-prem concentrates risk in a person, cloud distributes it into a contract.
What good looks like, either way
Regardless of where the archive lives, it needs continuous capture of sent and received mail (not a manual export someone remembers to run), tamper-evident storage so nothing can be quietly edited or deleted, full metadata preserved for each message, and retrieval that doesn't take a week when a request lands. AutoArchive Mail handles this as a cloud service — mail is captured continuously as it flows, stored in a format that can't be altered after the fact, and searchable in minutes rather than days, without anyone in the firm needing to maintain a server.
The practical path forward
If your firm currently has no formal archiving — just PST files and hope — start by finding out what you actually have: how far back does it go, and is there a single named backup owner? If that owner is one person and there's no documented handover plan, that's the risk to fix first, independent of cloud versus on-prem. For most firms under 15 people without an in-house IT function, cloud archiving removes more real risk than it costs, because the risk being removed is a single point of human failure, not a technology gap. You can start a free trial and see what your current archive actually contains before committing either way. If your firm already has a dedicated IT function managing infrastructure across multiple systems, on-prem may fit better into what that team already maintains — get their input before switching either direction.
This article doesn't cover firms with in-house legal hold or e-discovery obligations beyond standard retention — those requirements can justify more complex hybrid setups that are outside the scope of a straightforward cloud-versus-on-prem decision.
Ready to automate your email archiving?
AutoArchive Mail captures every email automatically — incoming and outgoing — with clean filenames and full .MSG preservation. 14-day free trial, no credit card required.
Start Free Trial See How It Works