Buying decisions

Does a small business need a CRM?

You need a single customer record. Whether it needs to be a dedicated CRM depends on how many people touch a customer, how long the cycle runs, and whether anyone has ever asked you what you hold about them.

The sixty-second answer

Every business needs one place where customer records live. It only needs to be a dedicated CRM once more than one person touches the same customer, the sales cycle runs long enough that context is lost between contacts, or you must answer questions about what you hold. Before that, a disciplined spreadsheet is legitimate.

The question behind the question

"Do I need a CRM" is usually asked by someone who has already noticed a symptom. A customer got called twice about the same quote. A follow-up that was definitely going to happen did not. Someone left and took the state of six deals with them. Nobody asks this question in the abstract.

So the useful answer is not a yes or a no. It is a description of the point at which the informal system stops working, so you can tell whether you have reached it. Most Canadian businesses asking are very small: as of December 2024 there were 1.10 million employer businesses in Canada, and 1.08 million of them were small [4]. At that size, buying a system that assumes a sales team of twelve is its own kind of mistake.

What a CRM actually is

Strip the category name away and a CRM does three things a contact list does not.

It records history, not just state. A contact list tells you a phone number. A CRM tells you that the number was called on the fourteenth, that a quote went out on the fifteenth, and that nothing has happened since.

It records intent. What is supposed to happen next, by when, and whose job it is. This is the part that fails hardest when it lives in someone's memory.

It survives people. When the person who owned the relationship is on holiday or gone, the relationship is still legible to everyone else.

If you do not need those three things, you do not need a CRM. You may still badly need one contact list instead of four, which is a different and usually cheaper problem.

The three thresholds

More than one person touches a customer. One person can hold context. Two people cannot hold it jointly without writing it down, and the moment they try, the writing-down becomes the system. This is the most reliable single trigger.

The cycle is longer than your memory. If a customer enquires in March and buys in July, you will not remember March in July. A trade doing same-day work can run on a calendar for years. A business quoting on projects that close months later cannot.

You need to answer questions about the record itself. Not "what is their number" but "when did we collect this, why, who has seen it, and can we delete it". This threshold arrives quietly, and it is a legal one as much as an operational one.

The privacy obligations arrive either way

A spreadsheet of customers is a database of personal information, with all the obligations that implies. PIPEDA's Schedule 1 requires that the purposes for collection be identified before or at the time of collection (Principle 2), that collection and use rest on knowledge and consent (Principle 3), and that information not be used or disclosed for new purposes without consent (Principle 5) [1]. It also requires, at clause 4.5.3, that information no longer required be destroyed, erased or made anonymous, and that the organisation develop guidelines and implement procedures to govern that destruction [1]. A folder of spreadsheets going back nine years is the exact opposite of a retention procedure.

Principle 9 is the one that decides whether your system is adequate. On request, an individual must be informed of the existence, use and disclosure of their personal information, given access to it, and allowed to challenge its accuracy and have it amended [1]. Try answering that from four systems and a shared drive. Then try it from one record with a history attached. That difference is most of the argument for a real system, and it has nothing to do with sales pipelines.

If you also market to those customers, Canada's Anti-Spam Legislation requires consent — express or implied — before a commercial electronic message, and requires the message to carry prescribed identifying and contact information [2]. Consent is a fact about a person, which means it belongs on the customer record, not in a separate mailing platform that drifts out of sync. Where your messages travel matters too: the Electronic Commerce Protection Regulations exempt messages sent and received on an electronic messaging service where the required identifying information and unsubscribe mechanism are conspicuously published and readily available on the interface, and the recipient has consented [3]. In-product notifications and outbound email are not the same object.

When a spreadsheet is still the right answer

Plenty of vendors will tell you that a spreadsheet is amateurish. It is not. It is free, universally understood, exports perfectly, and does not disappear when a subscription lapses. A sole operator with a short cycle and a hundred customers can run one for years without a single bad consequence.

What a spreadsheet cannot do is concurrent editing without conflict, history without discipline, or access control at the row level. Notice that all three are about other people. The spreadsheet is not failing at data; it is failing at coordination. If you are the only person who touches a customer, the failure mode has not arrived.

What you should not do is run several spreadsheets, or a spreadsheet plus a mailing list plus a booking tool that each hold their own copy of a customer. That is worse than either extreme, because there is no version anybody trusts. Our guide to how many subscriptions a business actually needs works through counting data locations rather than tools.

Buying one without regretting it

Three questions decide most of this.

How does the data get out? Ask before you sign, and ask for a sample export. A system you can leave is a system you can negotiate with. The domain-name world provides the contrast: under ICANN's Transfer Policy registrants must be able to move registrations between registrars, transfer processes must be clear and concise, and a transfer lock has to be removed or an accessible removal method provided within five calendar days [6]. No such rule governs your customer database, so the export test is the only leverage you have.

What is the evidence for the claims? Vendors quote conversion lifts and hours saved. Under paragraph 74.01(1)(b) of the Competition Act, a performance or efficacy representation is reviewable where it is not based on an adequate and proper test, and the proof of that test lies on the person making the representation [5]. Asking what test produced the number is not rudeness; it is the statutory allocation of proof.

Will people actually use it? A CRM that the team routes around is worse than a spreadsheet, because now the real record is somewhere you are not looking. If entering a call takes longer than the call, nobody will enter the call.

Migrating without losing the past

Move contacts first, then history, then anything automated. Open the export before you trust it — a file that downloads is not a file that contains what you think. Run the old system read-only alongside the new one for a full cycle, and only cancel once you have successfully found something in the new system that you last saw in the old. Our walkthrough on switching business software without downtime sets out the sequence in full.

Where we sit

MapleWorkSuite treats the contact record as shared infrastructure rather than as a product. Whichever apps you switch on — booking, invoicing, email, phone — they read and write the same Canadian-hosted customer record, so history accumulates in one place without anyone syncing anything. That is the specific problem we set out to solve: not a better pipeline view, but the absence of five competing copies of the same person.

We will say plainly where this is the wrong buy. If you sell into long, complex, multi-stakeholder deals and live inside forecasting, a dedicated sales platform will go deeper than we do. If your problem is that a customer's booking, invoice and email history are three different systems that disagree, that is ours. Our comparison of a suite against best-of-breed tools lays out both sides without pretending the answer is always us.

The test is not whether you feel like a CRM company. It is whether you can currently answer, in under a minute, what has happened with any given customer and what happens next. If you can, keep your spreadsheet. If you cannot, you already need the thing.

Frequently asked questions

Does a small business need a CRM?

Every business needs one place where customer records live. That place only needs to be a dedicated CRM once more than one person touches the same customer, the cycle runs long enough that context is forgotten between contacts, or you need to answer questions about what you hold and when it was collected.

Can I just use a spreadsheet as a CRM?

Yes, for a while, and honestly for longer than most vendors will admit. A spreadsheet fails at three specific points: when two people need to edit it at once, when you need history rather than current state, and when you need to prove who changed what. Until then it is a legitimate customer record.

At what point does a small business outgrow a spreadsheet?

The practical trigger is a customer being contacted twice about the same thing by two different people, or nobody being able to say when a customer was last spoken to. Both are symptoms of state living in someone's head rather than in the record.

What is the difference between a CRM and a contact list?

A contact list stores who someone is. A CRM stores what has happened with them — enquiries, quotes, calls, purchases, and what is meant to happen next. If you only need the first, you do not need a CRM; you need one contact list instead of four.

Does a CRM help with PIPEDA compliance?

It makes compliance possible rather than automatic. PIPEDA gives individuals the right to be told what you hold about them and to have inaccuracies corrected, and requires information no longer needed to be destroyed under documented procedures. Answering those requests across one system is a task; answering across five is a project.

Do I need a CRM to send marketing email legally?

No, but you need a reliable record of consent, and a CRM is the usual place to keep it. Canada's anti-spam law requires consent before a commercial electronic message and requires prescribed identifying and contact information in the message itself. What matters is that consent and unsubscribes live where the sending happens.

How do I move to a CRM without losing my history?

Export first and open the export before you trust it. Migrate contacts, then history, then automations, in that order, and run the old system read-only in parallel for a full billing or sales cycle. Do not cancel the old subscription until you have found something in the new system that you last saw in the old one.

How should I judge a CRM vendor's claims?

Ask what test produced any performance figure they quote. Under Canadian competition law, the proof of an adequate and proper test for a performance claim rests on the person making it, so the question is entirely reasonable. Ask separately how your data comes out if you leave.

Sources and evidence

Every link below was fetched and read on September 2, 2026. Where a source did not support a claim, the claim was cut rather than softened.

  1. Personal Information Protection and Electronic Documents Act, Schedule 1 Principle 2 requires purposes to be identified before or at collection; Principle 3 requires knowledge and consent; Principle 5 bars use for other purposes without consent; clause 4.5.3 requires information no longer needed to be destroyed, erased or made anonymous under documented procedures; Principle 9 gives individuals access on request and the right to challenge accuracy.
  2. Canada's Anti-Spam Legislation (Electronic Commerce Protection Act), section 6 Subsection 6(1) prohibits sending a commercial electronic message unless the recipient has consented expressly or by implication and the message complies with subsection 6(2), which requires prescribed identifying and contact information.
  3. Electronic Commerce Protection Regulations (SOR/2013-221) Exempts messages sent and received on an electronic messaging service where the subsection 6(2) information and unsubscribe mechanism are conspicuously published and readily available on the user interface, and the recipient has consented expressly or by implication.
  4. Innovation, Science and Economic Development Canada — Key Small Business Statistics 2025 As of December 2024, 1.08 million of Canada's 1.10 million employer businesses (98.2%) were small businesses; in New Brunswick, 20,256 of 20,631 employer businesses were small.
  5. Competition Act, section 74.01 Paragraph (1)(b) makes a performance or efficacy claim reviewable where it is not based on an adequate and proper test, the proof of which lies on the person making the representation.
  6. ICANN Transfer Policy Registered Name Holders must be able to transfer their registrations between registrars; transfer processes must be clear and concise, and a lock must be removed or an accessible removal method provided within five calendar days.

MapleWorkSuite keeps one contact record shared across whichever apps you switch on, so a booking, an invoice and an email are all looking at the same customer rather than three copies of them.

See all products See all products More articles