What is the best cloud platform for startups and small businesses?

We priced one small SaaS app at list rates on October 1, 2026. The monthly bill came to $57.00 on Amazon Lightsail, $59.45 on DigitalOcean, $62.25 on Azure, $72.23 on AWS using EC2 and RDS, and $84.94 on Google Cloud.

Startup credit offers run from $1,000 to $200,000 at AWS alone, but credits expire. Budget for the charges that follow, and check whether a requirement such as HIPAA or a standby database rules out a service or configuration.

These are estimates from published rates, not quotes, and we did not benchmark any server or database. Similar vCPU and memory counts in the model are a specification match and don't show equal capacity.

What do the startup credit programs offer right now?

We read each program's own pages on October 1, 2026.

AWS's credit terms say promotional credit has no cash value and applies only to eligible services. Activate also requires an AWS account on the paid plan, because AWS's Free plan accounts aren't eligible for other promotional credits. A startup without an Activate Provider's Org ID starts with the Founders tier.

Microsoft's milestone guide, updated August 5, 2026, ties its larger awards to usage, so a self-funded startup can reach $5,000 through business verification alone. The $25,000 milestone needs five Azure workloads used for about 60 days. The $150,000 milestone needs 10 or more workloads and about $3,000 a month of Azure usage sustained for about 60 days. Microsoft's pages also disagree on stage, since the application guide lists pre-seed through Series C while the program overview excludes companies that have raised Series C.

Google's second-year Scale credit covers 20% of eligible usage, so on a $100 eligible bill the credit pays $20 and the startup pays $80, up to $100,000 in credits. The Start tier's $2,000 expires after a year, so if all its charges are eligible, our Google scenario would use about $1,019 of it. Google's benefits page counts institutional and venture equity for Scale, plus verified token sales and grants from blockchain foundations, while angel, crowdfunding and friends-and-family rounds don't qualify.

DigitalOcean's startup FAQ gives no standard award, because partners set the amount, and says participants generally have a $10,000 monthly credit limit.

What does a simple SaaS cost each month at list price?

The scenario is one Linux app server with 2 vCPUs and 4 GiB of memory, one single-node managed PostgreSQL database with about 2 GiB of memory, and 50 GB of object storage. The app server sends 200 units of traffic a month to users in North America, and nobody downloads directly from object storage. Everything runs 730 hours a month, in AWS US East (N. Virginia), Azure East US and Google us-central1 (Iowa), with DigitalOcean at its published plan prices.

Twelve months at these totals runs from $684 on Lightsail to $1,019.27 on Google Cloud, before tax. The totals leave out support plans, backup storage, snapshots, request and operation charges, load balancers, DNS, monitoring and traffic between the app and its storage.

Egress uses 200 of each provider's billing units (GB on AWS and Azure, GiB on Google and DigitalOcean), not normalized to a common byte quantity. We assumed no other workload used the free egress allowances, which AWS and Google count account-wide.

Premium Tier egress added $23.88 to the Google total, against $9.00 on AWS and $8.70 on Azure. Google's Standard Tier routes traffic over the public internet, and its first 200 GiB a month per account are free, enough for the app server's traffic.

All five app servers are burstable or shared-CPU shapes, and their baselines differ. Google says an e2-medium sustains each vCPU at 50% of CPU time, Azure's B-series runs on a CPU credit model, and Lightsail uses burstable instances. We assumed CPU use stays low enough to add no CPU charges beyond the listed rates.

On AWS the assumption matters because EC2 T3 instances launch in unlimited mode by default. AWS's unlimited-mode cost example for a Linux t3.large in us-east-1 charges $0.05 per vCPU-hour for surplus credits. RDS db.t4g instances also run in unlimited mode, and AWS says bursting beyond the baseline can add a charge.

Google's db-g1-small database has 1.7 GB of memory on a shared CPU and is not covered by the Cloud SQL SLA. We priced Lightsail's $30 database because its $15 plan has no data encryption. With these differences, the totals compare price for this scenario, not performance.

How do you keep a startup cloud bill from surprising you?

Budget alerts on AWS, Azure, Google Cloud and DigitalOcean send notifications, and stopping usage on a pay-as-you-go account takes a separate mechanism where one exists.

AWS Budgets monitoring is free, and AWS updates budget data up to three times a day, typically 8 to 12 hours apart. Budget actions can apply an IAM policy or service control policy, or target specific EC2 and RDS instances, when a threshold is crossed. The first two action-enabled budgets each month are free, and each additional one costs $0.10 a day.

Lightsail charges a fixed hourly price up to each plan's monthly cost, and outbound transfer beyond the plan allowance starts at $0.09 per GB. AWS's Free plan never charges, but it ends after six months or when its credits run out, and the account closes unless you upgrade within 90 days.

Azure budgets send notifications without affecting resources, and Microsoft evaluates them against cost data every 24 hours. A spending limit that disables services when credit runs out applies to credit-based subscriptions such as the free account, and pay-as-you-go subscriptions can't turn one on. Microsoft for Startups sponsorships convert to pay-as-you-go once credits are used or expire.

Google's standard budgets don't cap usage, and its Preview spend caps pause only one eligible service in one project, such as Cloud Run or the Gemini API. Spend caps don't pause persistent fixed usage, so they wouldn't cap the VM and Cloud SQL setup in our model. Google enforces those caps from estimated gross costs and bills any overage as normal.

DigitalOcean's spend alerts aren't a spending cap, and projected Droplet transfer overages don't trigger an alert until they reach the invoice. Bundled Droplets cap at 672 hours a month, and transfer beyond the team's pooled allowance costs $0.01 per GiB.

Which requirements would force a move or a redesign?

HIPAA comes into play when a covered entity, such as a health plan or healthcare provider, or a business associate working for one has a cloud provider hold electronic protected health information. HHS says the cloud provider must then sign a BAA, and the customer still has to meet the HIPAA Rules itself.

AWS limits that data to the services on its HIPAA Eligible Services Reference, updated September 3, 2026, which lists EC2, RDS for PostgreSQL and S3 but not Lightsail. A Lightsail app that takes on that data would need to move it to services on the list, and AWS's export guide covers Lightsail instance and disk snapshots, not managed databases.

DigitalOcean will sign a BAA, but its HIPAA-eligible products include Droplets, Spaces, Kubernetes and Volumes and leave out Managed Databases. Keeping that data in our DigitalOcean scenario would mean running PostgreSQL yourself on a Droplet, configured to meet your own safeguards, or placing the database elsewhere.

Adding a standby database doubles the Lightsail database line, since its high-availability plan for the 2 GB database costs $60 a month against $30. DigitalOcean is changing Standard Edition so that new PostgreSQL and MySQL clusters can't add standby nodes, starting October 15, 2026 for accounts that have never created one and November 30 for all accounts. Existing clusters aren't affected, and a new cluster that needs a standby then uses Advanced Edition.

DigitalOcean's pricing documentation, last verified September 30, 2026, currently lists Advanced from $130 a month for an 8 GiB dedicated-CPU primary node, with standbys billed at the primary's rate. The change also adds shared-CPU Advanced plans from October 15, and their prices weren't published in the pages we reviewed.

DigitalOcean's startup FAQ lists GPU products and specific inference services among the exclusions from its core credits, and it offers GPU credit packages separately to selected startups. Microsoft's credit guide says partner and community models in Foundry have separate billing, while models sold directly by Azure draw on credits.

What does a provider's compliance report cover?

AWS's shared responsibility model puts security of the cloud with AWS and security in the cloud with the customer, and on EC2 the customer handles guest operating system updates and security patches. Microsoft states that you own your data and identities in every deployment type, and Google's framework has customers on platform services share responsibility for application-level controls and IAM.

DigitalOcean holds SOC 2 Type II and SOC 3 reports, and its HIPAA page leaves encryption of patient data inside your application, your backups and your user access with you. A provider's report covers the provider's controls, so an enterprise buyer's questions about your access rules and data handling need evidence from your own program.