7 min read
- Custom software vendor selection
- Software development contracts
- IP ownership
- Fixed bid vs time and materials
- Vendor evaluation

Founder & Product Engineer
Full analysis
Picking the wrong project scope is expensive. Picking the wrong vendor is worse, because it's much harder to undo once code exists, deadlines have slipped, and the relationship has already gone sideways. Most guidance on choosing a software development company focuses on checking a tech stack or skimming a portfolio for shiny screenshots. That tells you almost nothing about whether the vendor will still be reliable six months after launch, or whether you'll own what they build. This is a framework for the parts of vetting that actually predict how the engagement goes: how they run discovery, how to read what they show you, what the contract says about ownership, and what their pricing model reveals about how they expect the project to unfold.
The discovery question that separates vendors fast
Ask one thing before anything else: how will you figure out how my team actually works before you tell me what this costs? A vendor who answers with a quote, not a process, is telling you they plan to scope your project from assumptions. We've seen this pattern often enough to treat it as a hard filter: a business asks three vendors for a price on "a CRM integration with our scheduling system," one comes back within a day with a fixed number, and that number is almost always wrong, because nobody asked how scheduling conflicts get resolved today, who touches the data manually, or what the exception cases look like. A fixed price with no workflow mapping behind it isn't a sign of efficiency. It's a sign the vendor is quoting the request, not the work.
A vendor who does this well will want to see how the work actually runs before they propose how to build it, not just gather a feature list. That's the difference between scoping a project and scoping a system. If you want to see what that looks like in practice, our Custom Software page describes the same principle we apply ourselves: map the workflow first, replace the manual parts second.
Reading a portfolio for fit, not polish
A polished case study tells you a vendor can finish a project. It doesn't tell you whether they can finish your project. When you look at past work, the useful questions aren't "does this look professional" but "does this look like the same kind of problem." A portfolio full of marketing sites and e-commerce storefronts says little about a vendor's ability to handle a messy internal tool with three legacy data sources and a compliance requirement. Ask for a project with a comparable level of operational complexity, not just a comparable industry. Ask what went wrong on it and how they handled it: a vendor with nothing to say about a problem they hit is either inexperienced or not being candid with you, and both are worth knowing before you sign.
It also matters whether the portfolio shows template work dressed up as custom development. A tell is when every project uses the same underlying structure regardless of the client's actual process, just with different branding. Custom software should look different project to project, because the workflows it's built around are different. If a vendor's past work all looks interchangeable, the next one probably will too.
The ownership questions most buyers forget to ask
Who owns the code, and what happens if you leave? These sound like legal boilerplate, but they determine whether you actually control the asset you're paying for. Before signing, get clear, written answers to three things. First, intellectual property: does the contract state outright that you own the code and any custom logic, or does it grant you a license to a product the vendor still controls? Second, source code handover: will you receive the full repository, including commit history and build configuration, on delivery or on request, not just at the end of a multi-year relationship? Third, integration ownership: when your software talks to a third-party system (a payment processor, a scheduling API, an accounting platform), who is responsible when that integration breaks after an API update on the other end, and is that covered under any ongoing agreement or billed separately every time?
That third question matters more than most buyers expect, because integrations rarely fail at launch. They fail months later, quietly, when data volume grows or a third-party vendor changes something upstream. Our article on why system integrations break after launch goes into the specific architecture decisions that determine whether an integration holds up or becomes a recurring support ticket. A vendor who has a clear answer for who owns that risk has probably been through it before.
What the pricing model tells you about the project
The pricing structure a vendor proposes is itself a signal about how well they understand your project, not just a budget decision. Three models show up repeatedly, and each predicts something different about how the engagement will run.
- Fixed-bid with no discovery phase: a single price for the whole project, agreed before any workflow mapping. This only holds up when requirements are genuinely stable and simple. For anything with real process complexity, it predicts change orders, scope disputes, or a vendor cutting corners to protect their margin once the real complexity surfaces.
- Time-and-materials: you pay for hours worked, with no fixed ceiling. This gives flexibility to adjust scope as understanding improves, but it puts the budget risk entirely on you, and it works best with a vendor you already trust to manage hours responsibly.
- Discovery-then-fixed-scope: a short, paid discovery phase that maps the actual workflow and produces a scoped proposal with a fixed price for defined phases, with room to re-scope later phases as needed. This tends to produce the most accurate estimates, because the price is set after the workflow is understood, not before.
None of these is universally correct. The point is to match the model to how well-understood the problem actually is, and to be suspicious of a vendor offering total price certainty on a project that hasn't been mapped yet. Certainty that arrives before understanding is usually false certainty.
The month-18 question
Ask who maintains this in eighteen months, and watch how they answer. A good vendor has a real answer: an ongoing maintenance agreement, a clear handover process if you want to bring support in-house, or an honest statement of what support looks like after the initial contract ends. A vendor who hasn't thought about this, or treats it as a future conversation, is telling you the relationship is scoped around delivery, not around the software's working life. Internal tools in particular go through a predictable set of changes after launch as usage grows and requirements shift; our internal tool lifecycle model describes the stages most tools pass through and where maintenance decisions tend to get made too late. If a vendor can't speak to that lifecycle at all, that's worth noting before you sign anything.
A short list to bring to the first call
- How will you learn our actual workflow before pricing this, and what does that process look like in practice?
- Can you show a past project with similar operational complexity, not just a similar industry, and tell me what went wrong on it?
- Does the contract state plainly that we own the code and receive full source on delivery?
- Who is responsible for a third-party integration when it breaks after launch, and is that covered or billed separately?
- What happens to maintenance and support once this contract ends, and what would it take to bring it in-house?
None of these questions require technical knowledge to ask or to evaluate the answer. A vendor who answers them directly, specifically, and without defensiveness is usually a safer bet than one with the most impressive portfolio. Sometimes the honest answer, after a proper discovery conversation, is that building custom software isn't the right move at all; our documented pattern on when we recommend against building walks through how that conclusion gets reached and why a vendor should be willing to say it. If proximity and responsiveness also matter to you, our piece on what changes when a software studio is local covers a related angle on vendor selection worth weighing alongside this one.
What's the biggest red flag when evaluating a custom software vendor?
Is fixed-bid or time-and-materials better for custom software?
Should I always own the source code my vendor writes?
Who should maintain custom software after launch?
Share this article
Copy the article URL or use your device share sheet.
Related reading
Want help applying this?
Rough scope is fine. Tell us what you are building, we reply with options and tradeoffs, not a generic pitch.