Comparing small business CRM operating models on contract, data and exit criteria

Small business CRM operating models split responsibility as much as cost. A self-managed subscription such as HubSpot Starter, Zoho CRM or Pipedrive can store the same fields as a bespoke Salesforce or Microsoft Dynamics 365 build, yet leave different work with the buyer. A spreadsheet or shared inbox is also a model.

So is a partner-configured service. Cloud Tamers, a UK HubSpot partner, is one route to that model.

What to take away

Comparison basis and limits

This desk comparison, completed on 5 September 2026, covers small organisations in England. Models were included when they split software, service and control distinctly. They are unranked. No vendor paid or provided access. Named products are listed with public UK prices as of 2026, shown as typical starting figures.

No product, security measure, support route or contract was tested. No accessibility claim or price was tested. Actual legal roles follow the processing, not the model's label.

Apply identical questions

First, normalise the workload. Fix the same count of authorised users, records, integrations and data changes. Then set service cases and reporting periods.

Record whether charges follow seats, stored contacts, active records, API use or professional time. Request currency, VAT treatment, contract term, renewal mechanism and every mandatory add-on without inventing a reference price.

Zoho CRM Standard is listed from about £14 per user per month on annual billing, and Pipedrive Essential from about £14 per seat. HubSpot Starter starts near £15, Salesforce Starter Suite near £20, and Microsoft Dynamics 365 Sales Professional typically £50 to £55.

Take an illustrative small English business with five users, 2,000 contact records and two integrations. On annual billing, typical list prices are about £70 per month for Zoho CRM Standard, about £70 per month for Pipedrive Essential and about £75 per month for HubSpot Starter.

Those figures use five users or seats at about £14 or £15 each. They exclude VAT and any paid marketplace add-on for the two integrations.

Second, map responsibility. The ICO's guidance on controller and processor contracts covers instructions, confidentiality, security and sub-processors. It also covers assistance and what happens to data at the end of services. The page is marked under review after the Data (Use and Access) Act 2025.

A managed service does not remove the buyer's controller duties; a software vendor is not necessarily a processor for every activity. HubSpot, Zoho and Pipedrive publish data processing addenda, yet the legal role follows the processing.

Third, test switching. Obtain sample exports covering fields, relationships, notes and permissions. Ask too for suppression states and audit history. A standard HubSpot export omits permission settings, workflow logic and API credentials. A Pipedrive export omits team visibility settings and integration credentials. A Zoho CRM export can omit layout rules and audit logs.

Record proprietary elements and deletion evidence. The NCSC's cloud provider selection guidance recommends examining the service and its supply chain rather than relying on an unbounded security assertion. Recovery, administrator access and underlying providers need named evidence.

Fourth, inspect integrations and support. HubSpot, Zoho and Pipedrive each have marketplaces for connections; name the owner for every connection, its authentication method, failure alert and restart step. Define support hours, severity, clock, exclusions and escalation from the contract. A promised response is not the same as restoration, and neither proves business continuity.

Fifth, assess accessibility for workers and customer-facing forms. W3C accessibility standards provide technical references, but a supplier badge does not demonstrate conformance across the buyer's chosen edition, customisation and connected journey. Require scoped evidence and competent review.

Salesforce, HubSpot and Microsoft publish accessibility conformance reports. Ask for the report that names HubSpot Starter, Salesforce Starter Suite or Dynamics 365 Sales Professional, because one edition's report does not cover a customised journey or a marketplace app.

Finally, model whole-life effort. Include discovery, cleaning, migration, configuration and training. Add legal and security review, operation, incident work, renewal and exit. The GOV.UK VAT rates record gives the standard UK rate for most supplies, but only a qualified adviser can determine the real invoice and recovery treatment.

How to choose between models

Score evidence as verified, supplier-asserted, unknown or not applicable. An unknown security or export point cannot be offset by attractive features. HubSpot, Salesforce and Pipedrive all offer CSV or Data Loader exports, but each carries different history.

For a typical small English business, the default model is a self-managed subscription such as Zoho CRM Standard or HubSpot Starter, provided one internal owner can manage data quality, exports and integrations.

Choose a managed service only when no owner exists or the process needs custom objects, strict audit history or sector-specific controls. Choose a bespoke build only when a configured service cannot meet a documented requirement.

Run the same synthetic contact journey through shortlisted models and the manual baseline. Stop if a route cannot preserve the agreed history, permission status or recoverable export. The preferred model fits the documented work and risk ownership, not the longest feature list.

Before you act

Common questions

Does a managed CRM service remove the buyer's data protection responsibilities?

No. A managed service does not remove the buyer's controller duties, and a software vendor is not necessarily a processor for every activity. Actual legal roles follow the processing, not the model's label, so buyers must still map instructions, confidentiality, security and sub-processors.

What accessibility evidence should a buyer request?

Request the conformance report that names your edition, for example HubSpot Starter, Salesforce Starter Suite or Dynamics 365 Sales Professional. A report for another edition or a marketplace app does not cover your customised journey.