Top things are like this...
Reliability of the company?
Integrity of the company?
Companies DR planning and capability?
SLA... what will happen when they have outages, what does that look like?
How do you get your data out of their system?
What are they allowed to do with your data?
Is the system modern and under continuous development?
Location of your data / what jurisdiction.