www.simplify-data.de
A WordPress website is not finished at go-live. WordPress itself, themes and plugins receive regular updates, backups must run and someone has to respond when something fails. A maintenance contract defines who takes care of these tasks. This article shows what belongs in such a contract and what drives the cost.
Why a maintenance contract makes sense
Many businesses look after their website on the side until an update breaks something or the site gets hacked. At that point, a current backup or the know-how to restore it is often missing.
A maintenance contract creates clear responsibilities. It defines which tasks are done regularly, how quickly emergencies are handled and what is billed separately. Effort becomes predictable, and problems are spotted before customers notice them.
What belongs in a WordPress maintenance contract
Updates
The core of any maintenance is updating WordPress core, plugins and themes. Clarify in the contract:
- How often are updates applied, for example weekly or monthly?
- How quickly are critical security updates installed?
- Are updates tested on a staging environment first?
- Who checks that the site still works after an update, and what exactly is checked?
The server's PHP version belongs here too. PHP is the programming language WordPress runs on, and each PHP version receives security updates only for a limited period.
Backups
A backup is only as good as its restore. The contract should cover:
- frequency, for example daily for database and files
- retention, meaning how many versions back are available
- storage location, ideally separate from the web server
- regular test restores
- who performs the restore in an emergency
Monitoring and security
Monitoring means the website is checked automatically. This includes availability, SSL certificate expiry, load times and security scans for malicious code or suspicious changes. Define who is notified and what happens next.
Response times and support
This is often where offers differ most. Key points:
- Response time: how quickly does the provider react after an incident is reported?
- Availability: business hours on weekdays only, or weekends too?
- Channels: email, phone or ticket system?
- Prioritisation: a shop outage is more urgent than a wrong line break.
A response time is not a resolution time. Watch for this distinction in the contract wording.
Small changes and content updates
Some contracts include an allowance for minor adjustments, such as text changes, new images or small layout fixes. Clarify whether unused hours expire or roll over.
Emergencies and recovery after a hack
Whether cleaning up a hacked site is included should be stated explicitly. Many contracts include restoring from backup but bill extensive clean-up separately.
Reports and documentation
A regular report shows which updates were applied, whether issues occurred and how availability and load times have developed. This makes the service transparent.
Data protection
If the provider has access to personal data, such as customer data in the shop or form submissions, a data processing agreement under Art. 28 GDPR is usually required. Settle this when signing the contract.
Term, termination and access
Look at the minimum term and notice period. Just as important is what happens when the contract ends: you should keep or get back all credentials for WordPress, hosting, domain and licences, plus a current full backup. Ideally, domains and licences are registered to your company, not to the provider.
Maintain it yourself or outsource?
A simple website with few plugins can certainly be maintained by a technically skilled employee. The prerequisites are that updates are scheduled regularly, backups run automatically and someone knows what to do when something goes wrong. If that person is unavailable, a backup person should be ready.
Outsourcing pays off especially when the website is business-critical, when a shop processes orders or when nobody internally has the time. Do the maths honestly: internal working hours and the consequences of downtime are costs too.
What a maintenance contract does not cover
Typically excluded are new feature development, major redesigns, licence fees for premium plugins and often hosting. Get these boundaries confirmed in writing to avoid misunderstandings later.
What drives the cost
Flat price figures are of little help because websites differ widely. These factors determine the effort:
| Factor | Lower effort | Higher effort |
|---|---|---|
| Type of site | corporate site with few pages | WooCommerce shop, members area |
| Number of plugins | few, widely used plugins | many or custom plugins |
| Update process | direct updates with functional check | staging, test log, approval |
| Response time | weekdays, within one business day | fast, also outside business hours |
| Backups | daily, short retention | several times a day, long retention, off-site |
| Change allowance | none | fixed hours per month |
| Hosting | separate, with the client | included in the contract |
A shop usually needs more care than a purely informational site, because errors cost revenue directly and order data must not be lost during a restore. A poorly maintained legacy site also increases the initial effort, since postponed updates have to be caught up first.
Checklist: comparing maintenance offers
- Which tasks are specifically included, and which are not?
- How often are updates applied, and is there a staging environment?
- How often are backups taken, where are they stored and are restores tested?
- Which response times apply, and when?
- Is clean-up after a hack included?
- How is additional work billed?
- Are there regular reports?
- What are the contract term and notice period?
- Do you receive all credentials and a current backup when the contract ends?
- Is a data processing agreement in place?
How Simplify Data can help
Simplify Data maintains WordPress websites and WooCommerce shops for businesses in Kiel, Schleswig-Holstein, Hamburg and remotely across Germany. We tailor the scope to your website instead of forcing a standard package on it. Request WordPress maintenance