Hosting on infrastructure you own. Nightly backups, with restores tested rather than assumed. Monitoring and security patching. Support when something is wrong. And a monthly allowance for small changes — a new report, an extra field, a tweak to how a payout is calculated — because a system that cannot change quietly stops being used.