The evaluation closes, the contract gets filed, the working group dissolves, and somebody sends a thank you note. Seven months later a different part of the organization starts the same process from nothing.

Nine months, then seven weeks

Composite from a few organizations now several purchases deep: a construction and infrastructure group, on its fourth evaluation of this kind in three years.

Illustratively, the first took about nine months from mandate to signature. The fourth took roughly seven weeks, for a purchase of comparable size and rather more complexity.

The software had not got simpler. What had changed was that the fourth evaluation started with things the first three had produced.

A standing question set, the same one every time. A habit of measuring the baseline before anyone contacted a vendor. A list of the internal groups who could stop a project, with their actual lead times next to their names, updated after each purchase. A rough template for estimating switching cost. And a record of what they had declined to buy, with the reason.

That last one is the rarest. Most organizations keep a careful record of what they bought and no record at all of what they turned down, so the same product gets evaluated twice by different teams and the same objection gets rediscovered from scratch, at full price both times.

What compounds

Four things, and none of them require a center of excellence, a new function, or anybody’s headcount.

Questions rather than templates. A template gets filled in. A question gets answered, and the answers are what you actually needed. The demo requests, the reference questions, the diligence conversation, the pricing question about what moves when usage doubles. Twenty questions on one page, refined a little each time.

The measurement habit. Baseline before vendors. It takes a week and it is the difference between a benefits review that confirms your judgment and one that finds nothing to look at.

The stopper map with lead times. Not a stakeholder list. The groups who can quietly cost you months, and how many months each of them currently costs. This information already exists inside your organization, distributed across the memories of people who have been burned, and writing it down once converts it into something the next team inherits.

The decision log, including the noes. What you bought, what you declined, and why. Two paragraphs each. Kept somewhere findable by someone who does not know it exists.

Four documents, one owner, no budget. That is the whole apparatus.

The asymmetry you can actually close

This series opened with three asymmetries between the buyer and the seller. They know your process because they run it constantly. They know the market because they are in it every day. And they can wait longer than your sponsor’s attention lasts.

Two of those are not available to you. You will never have their pricing data, and you cannot out-wait them on any individual deal.

The third one is entirely yours. Their advantage is repetition, and repetition is a thing you can build. Not by buying more often, which would be a strange goal, but by making each purchase leave something behind that the next one starts from.

An organization on its fourth evaluation with none of that is on its first evaluation, four times. An organization that kept those four documents is genuinely, measurably better at this than it was, and it closed the only gap it was ever able to close.

You will still get some wrong

I have done most of what is in these fifteen lessons, and I have also skipped most of it, usually under time pressure, and some of those purchases were fine. Process is not a guarantee and anyone selling it as one is selling something.

What changes is the character of the mistakes. Without any of this, you make the same three errors repeatedly: no defined no, no measured baseline, no idea who could stop you. With it, you make new and more interesting errors, about things that were genuinely hard to see.

That is a reasonable definition of getting better at something, and it is the realistic version of what this series is offering. Not better outcomes every time. Failures that at least have not happened before.

One thing to do differently

When this evaluation closes, before the group disbands, spend two hours writing down what you would tell the person who runs the next one.

What you would ask earlier. Who you would have gone to see in week one. What the vendor said that turned out to matter. What you declined and why.

Then put it somewhere they will find it without knowing to look. That document is the capability. Everything else in this series is just a description of what tends to be written in it.

You spent four months negotiating the first contract and you will spend about three weeks on the renewal. The renewal is the one that is worth more.

Six weeks and no alternative

Composite from a few multi-country service operations: a hotel group, guest service and revenue operations across several markets.

The original negotiation had been done properly. Competitive process, three bidders, a discount procurement was rightly pleased with.

The renewal arrived with, illustratively, a forty percent uplift, justified by usage growth that was entirely real. Procurement had six weeks. There was no second quote, because nobody had spoken to the runner-up in two years. Nobody knew what leaving would cost, because nobody had ever worked it out. And the vendor could see the usage data, because the buyer had been sending it to them monthly in the service review.

They negotiated it down somewhat and paid most of it. Which was, given where they were standing in week one of those six weeks, about the best available outcome.

The positions have swapped

At signature you had real alternatives and no dependency, and the vendor had better information about the market than you did.

At renewal that reverses. You now have excellent information about what the product is worth to you, which is a genuine advantage and the only one you gain. They have precise knowledge of how embedded you are, often from data you gave them voluntarily and correctly. And your alternatives exist in theory, in a slide, unrefreshed since the original evaluation.

The uncomfortable part is that most of your room to move exists in month four and is gone by month ten, which is roughly when anyone starts thinking about it.

Four things done early

Diarize it at signature. Not the renewal date. Renewal minus six months, with a named owner who is not the person most invested in the relationship going smoothly.

Keep the measurement running. The baseline you established before the vendors arrived, and the benchmark you wrote into the contract. Evidence of value is the only argument at renewal that is not a threat, and it is the only one that works when you have no credible way to leave.

Keep one alternative warm. An hour a year with the runner-up. It costs almost nothing, it makes a second quote obtainable in days rather than months, and it keeps you current on what the category can do now, which after two years may be considerably more than what you bought.

Refresh the switching cost. A number, from the leave test, updated once a year. Without it you cannot tell whether a proposed increase is worth accepting, and you will end up deciding on how the number feels.

Ask for things that are not price

Renewal is the best moment in the whole relationship to collect the terms you did not get the first time, because the vendor wants a clean renewal and non-price terms cost them less than a discount.

• The benchmark clause, the deprecation notice and the export terms you traded away in round one
• A commitment re-baselined to your actual usage rather than the forecast you got wrong
• Price protection for the following term, so you are not doing this again from the same position
• A unit price that reflects the fact that their input costs have almost certainly fallen since you signed

That last one is the two-line model from the cost lesson, and this is the moment it pays. If you tracked what you would be paying at something nearer list, you can tell whether the uplift is a correction of an introductory price or an increase on top of one.

The pressure from your own side

Worth naming, because it catches people who handle the vendor side well.

Your operating team does not want disruption. Your sponsor has moved on to something else and does not want this back on their desk. And somebody will say, accurately, that there is no capacity for a re-evaluation this quarter.

All of that is true and none of it is an argument about price. It is the condition the renewal number was set against, and a vendor with a decent account team knows the state of your capacity roughly as well as you do. The six months of preparation exist precisely so that the renewal does not require a re-evaluation.

One thing to do differently

On the day you sign, put an entry in the calendar at renewal minus six months, with a named owner and three items: pull the measurement, call the runner-up, refresh the switching cost.

Three hours of work, done once, eighteen months before it is needed. It is the highest-return thing in this entire series and it is skipped almost universally, because on signature day the renewal feels like somebody else’s problem and by the time it is yours the useful window has closed.

Somebody in the approval meeting will say that you can always switch later. It is usually said to close down a risk discussion, it usually works, and in most organizations it has never once been tested.

Eleven months to leave

Composite from a few operations-heavy deployments: a rail and freight operator, maintenance scheduling and incident triage across a large asset base.

Two years in they decided to move, for reasons that were mostly commercial and entirely reasonable. Illustratively, the migration took about eleven months and consumed roughly three times the annual license in internal effort.

The vendor did not obstruct. The data came out in a week, in a clean format, exactly as the contract said it would.

What did not come out was two years of accumulated fit. The thresholds somebody had tuned in month four. The exception rules that had grown to cover the seventeen situations the original design had not anticipated. The routing logic that assumed one product’s way of scoring severity. Most of it lived in a configuration interface, none of it was documented, and the two people who understood why it was set that way had both moved on.

The data was portable. The knowledge was not, and nobody had ever counted it as an asset.

What actually holds you

Roughly in order of how hard each is to move, which is close to the reverse of how much attention each gets in a contract negotiation.

• Tuning and configuration. Thresholds, prompts, rules, weightings. Lives in a screen, rarely documented, exportable in no meaningful sense even when the vendor cooperates fully.
• The shape of the work. Your process quietly reorganized itself around the product’s assumptions. Undoing that is a change program, not a migration.
• Derived artifacts. The evaluation set, the corrections your users made over two years, the labeled examples. Often the most valuable thing you created during the contract, and often not clearly established as yours.
• Integration surface. Connectors, identity pattern, reporting. Real work, but at least it is visible work that somebody can estimate.
• Raw data. The thing everybody negotiates hardest for, and the least of the five.

The leave test

Before signature, write one page answering four things.

What we would get back, in what format, in how long. What we would have to rebuild rather than move. Who understands the configuration and whether that understanding exists anywhere outside their head. And what we would run on while we migrated, because the answer is rarely nothing.

Then do the version almost nobody does. During the pilot, ask for a full export of your data and your configuration, and time it.

A vendor who produces a clean export in a week is telling you something true about how they think about customers. A vendor who needs a professional services engagement to answer the request is telling you something else, equally true, and much better learned in week six of a pilot than in month twenty-six of a contract.

It also has a useful side effect. Asking during the pilot is a neutral, technical request. Asking during contract negotiation reads as distrust and gets handled by a different department.

What to write down

Four terms, in decreasing order of how easily you will get them: export format and timeframe stated explicitly rather than on request; ownership of derived artifacts established as yours; configuration included in what is exportable; and a transition assistance period at rates agreed now rather than at whatever they quote when you are leaving.

The third is the one that gets waved through as a technicality and is the one the rail operator would have wanted most.

Some of this is fine

Worth saying plainly: a product you cannot easily leave is often a product that has become genuinely useful. Deep fit and high switching cost are the same phenomenon viewed from two directions, and an organization that has embedded a tool into how work happens has usually got the value it paid for.

The goal is not zero switching cost. That would mean you never adopted anything properly.

The goal is knowing the number. A buyer who can say switching would take us about nine months and cost roughly this much can make a rational decision at renewal, including the decision to stay and pay more. A buyer who has never worked it out negotiates as though they could leave in the spring, then discovers in week two that they cannot, having already made a suggestion they now have to walk back.

One thing to do differently

During the pilot, request a full export of your data and your configuration, and time how long it takes to arrive.

You will learn more about your future switching cost from that one request than from the entire exit rights section of the contract, and you will learn it while you still have three vendors and no commitment.

You are about to sign a contract for a product that will not be the same product in six months, using a template written for software that shipped twice a year and changed when you accepted an upgrade.

Nothing in this lesson is legal advice. It is the commercial shape to hand to the person who does give it, because your legal team will draft what you ask for and they are not going to know to ask for these on their own.

The change that breached nothing

Composite from a few archive-scale evaluations: a media and publishing group, automated content classification and rights checking across a large back catalogue.

They deployed, then spent about three months tuning their thresholds until the review queue was a size two editors could handle. Good outcome, sensibly done.

Then an update on the provider side changed how the underlying model behaved. Nothing broke. Illustratively, precision moved a few points one way and recall a few points the other, which is the sort of change that is invisible in aggregate and very visible in a queue. Their carefully tuned thresholds were now set for a system that no longer existed.

They found out roughly six weeks later, when an editor mentioned the queue felt heavier. No term of the contract had been breached. No term of the contract covered it. Their own vendor had not been told in advance either.

Five terms worth asking for

Notice of material change to the underlying model. Vendors resist the word material, and fairly, because it is vague. Offer a test instead of an adjective: any change of model family or version, plus anything they announce publicly as a behavior change, plus anything they themselves detect as moving output distribution.

Deprecation notice with a floor. How long you get before a version you depend on is withdrawn. Ask for a stated number of months. Ask separately for the right to remain on a prior version during a validation window, which is worth a great deal in regulated work and very little elsewhere, so do not spend negotiating capital on it if you do not need it.

A benchmark written into the agreement. Almost nobody does this and it is the most useful of the five. Agree a small set of your own held-out cases and an acceptance threshold at signature. Re-run it quarterly. If the result falls below the threshold, you have a defined remedy, even if the only remedy you can win is a termination right.

Without it, the sentence available to you in month eight is that it seems worse than it used to be, which is an opinion, and you will be having an argument rather than exercising a right.

Your data out of training, in terms that survive a product change. Most vendors will give you this readily. What varies is whether it covers the derived artifacts from the previous lesson, and whether it binds their providers as well as them.

What happens if their provider relationship ends. Many vendors in this category are built on capability they license. Ask what happens if that arrangement changes, whether they can serve you on an alternative, and how long that would take. The answer tells you how much of the product is actually theirs, which is useful well beyond the contract.

What you will actually get

Not all five. Possibly two. So rank them before you walk in, because the order in which you concede is decided in the room otherwise, and in the room the unfamiliar clause always goes first.

For most buyers the benchmark and the deprecation notice are worth more than the price concession you would trade to keep them. Procurement will not see it that way, because a discount appears in the savings number and a benchmark clause appears nowhere. That is a reporting artifact rather than a judgment, and it is worth naming out loud before the negotiation rather than after.

One tactical note. Ask for these early, in the first commercial conversation, framed as how we work rather than as demands. A clause introduced in week two is a requirement. The same clause introduced in week nine, after the shortlist is public and your sponsor has told the board, is a problem you are creating for a deal everyone now expects to close.

The list you already have

If you have been keeping the running list from your reference calls, the answers to what would you put in the contract if you were signing again, this is where it earns its keep.

Those answers tend to be narrow and specific in a way that generic templates are not. A named support contact. A cap on the annual uplift. The right to add users mid-term at the original rate. Notice on a change to how consumption is counted. Every one of them came from somebody who learned it at their own expense, and there is no cheaper source of contract language anywhere in this process.

One thing to do differently

Put a benchmark in the contract. Twenty of your own cases, an agreed threshold, re-run quarterly, with a stated consequence if it fails.

It takes an afternoon to assemble and it converts the most likely failure in this category, quiet degradation that nobody can prove, from a disagreement into a clause.

You have a security questionnaire. It runs to several hundred rows, it was written for hosted software, and the vendor will complete it in two days using answers they have given ninety times before.

What comes back tells you the vendor can complete a questionnaire. That is a real signal about organizational maturity and it is not the same thing as having done diligence.

Two weeks to answer a simple question

Composite from a few evaluations in devolved organizations: a research university group, several faculties, federated IT, a purchase covering research administration and grant documentation.

The questionnaire came back complete. Certifications attached, everything in order, no red flags. Procurement signed it off in a week, which was fast and felt like a win.

About nine months later a faculty raised a query about where a particular category of data had been processed during the previous quarter. Nothing had gone wrong. Nobody had been breached. But a subprocessor in the chain had changed, the notice had gone to a shared procurement mailbox that nobody monitored, and it took roughly two weeks to assemble an answer to a question that should have taken an afternoon.

The questionnaire had asked whether the vendor used subprocessors. It had not asked how the university would find out when the list changed, and that is the question that mattered.

Why the form misses

Four structural reasons, none of which involve anyone cutting corners.

It asks about controls in general rather than about your deployment in particular. It is answered by a compliance function rather than by the people who operate the system. It captures a point in time, and the product you are buying changes monthly. And it was written for a category where the software you license is the software you run, which is not the arrangement here.

That last one matters most. Most products in this category sit on capability the vendor does not own, served from infrastructure they do not run, and the questionnaire has no row for that.

Five questions instead

Run these as a conversation, forty-five minutes, with the vendor’s engineering lead in the room rather than their compliance team. Insist on that. The whole value is in the follow-up questions, and a compliance function cannot answer follow-ups.

One. Where does our data go, every hop, and how will we be told when that list changes?

Not whether they use subprocessors. The list, the notification mechanism, the notice period, and which address it goes to. The mechanism is the part everyone forgets and the part that failed at the university.

Two. What of ours is retained, for how long, and what is derived from it that survives deletion?

Deleting source data does not necessarily remove what was built from it. Indexes, embeddings, caches, logs, evaluation sets, corrections your users made. This is the question with the widest range of answers in the industry right now, which is exactly why it is worth asking.

Three. Who at your company can see our data, in what circumstances, and can we see that access?

Support debugging is the usual route and it is entirely legitimate. You want to know the path exists, what triggers it, whether it requires customer approval, and whether the log is visible to you or only to them.

Four. What changed in the last twelve months that you were not obliged to tell customers about?

This surfaces the entire class of change that sits outside contractual notice provisions. It is also an excellent question for a reference call, where you will sometimes get a more complete answer.

Five. Show me your last incident and the write-up.

Not whether they have had incidents. Every operation running at scale has. A vendor who produces a post-incident review, even heavily redacted, is showing you how they operate more convincingly than any certificate. A vendor who says they have not had one is either very new or not counting the same things you would.

Keep the form

None of this is an argument for skipping the questionnaire. Send it. Your own audit function needs it, a vendor who cannot complete one is telling you something real about their maturity, and comparing completed forms across three vendors does occasionally surface a genuine difference.

The mistake is treating a completed form as a finished investigation. The form is the floor. The forty-five minute conversation is the diligence, and it costs less than the week your team will spend reconciling three completed spreadsheets.

One thing to do differently

Ask question two in writing, and keep the written answer.

What is derived from our data, and what survives deletion. It is the question where answers vary most between vendors, it is the one your data protection colleagues will come back to in year two, and a written answer given during evaluation is worth considerably more than a verbal reassurance you half remember.

You’re being offered a price in one of three shapes. The shape will do more to determine what you pay over three years than the number attached to it, and it’s the part most evaluations spend the least time on.

What each shape does to you

The row worth sitting with is the third one. Every pricing shape creates an incentive that works against the reason you bought the thing.

Per-seat pricing makes every additional user a cost, so organizations ration access, and a tool that only the enthusiasts can reach never changes how the work is done. Consumption pricing makes every use a cost, so managers tell their teams to be thoughtful about it, which is a polite instruction to use it less. Outcome pricing makes the definition of the outcome the thing worth arguing about, and you will argue about it, in month seven, with someone whose commission depends on the answer.

You can’t escape this. You can pick which version of it you’d rather manage.

Paying for a curve that didn’t happen

Composite from a few regulated-documentation evaluations: a pharmaceutical company, medical writing and regulatory submissions, a few hundred people in scope across two sites.

What they signed was the shape most of these contracts settle into: a platform fee, plus consumption, with a committed annual minimum in exchange for a better unit rate. Illustratively, the commitment was set at roughly the volume they expected in month nine of year one, extended across the year.

They reached about forty percent of that in year one. They paid for all of it.

The commitment wasn’t a trick and the vendor had given real value for it. The error was upstream: the adoption forecast came from pilot volunteers, who had used the tool enthusiastically for ten weeks, and the curve was drawn as though four hundred medical writers would behave like the thirty who’d signed up.

Adoption in a large regulated function is slow for reasons that have nothing to do with the software. Validation, standard operating procedures, someone has to update a template, a therapeutic area lead is on leave. None of that was in the model.

The clauses that make a commitment survivable

Committed minimums are not inherently bad. They’re how you get a decent unit rate, and refusing all commitment usually means paying a premium for flexibility you may not need. Four terms make them liveable:

• Rollover of unused commitment into the following period. The most commonly granted of the four and the most commonly not requested.
• A ceiling on unit price, not only a floor on volume. If you’re guaranteeing their revenue, they can guarantee your rate.
• A re-baseline right at twelve months, resetting the commitment to actual usage. Harder to get, worth asking for, and the reaction tells you how confident they are in your adoption.
• Protection against changes underneath. If your consumption is measured in units the vendor defines, and the definition changes because the technology changed, your effective price moves without anyone renegotiating.

That fourth one is specific to this category and it’s newer than most procurement templates. Consumption units in AI products are not stable objects. A change in how the product processes a request can change your unit count materially, in either direction, without a single term of the contract being amended.

The thing almost nobody negotiates

Ask what happens to your price when their costs fall.

In a category where the underlying cost per unit of capability has been falling consistently, a three-year fixed price is a bet you’re making against the trend, and you’re making it silently. An annual benchmark review, or a clause that passes through some share of a reduction in underlying cost, is unusual but not absurd to ask for.

Most vendors will decline. The way they decline is informative. A vendor who explains that their own input costs are contracted and can’t be passed through is telling you something specific and probably true. A vendor who treats the question as inappropriate is telling you how the renewal conversation will go.

Which to insist on

If the value is genuinely per person and you intend broad rollout, per seat is usually right, and negotiate the right to add users mid-term at the original rate. That last clause is cheap to get at signature and expensive to get later.

If usage will be concentrated in a small group doing heavy work, consumption is right, because per-seat pricing across a large population to serve twenty real users is how you end up with an unflattering cost per active user in the benefits review.

Outcome pricing is right when the outcome is already being measured, by a system you both already trust, that neither party controls. In practice that condition holds rarely. When someone offers it and the condition doesn’t hold, what’s being offered is a future dispute with a discount attached.

One thing to do differently

Model whatever shape you’re offered at three adoption levels: the rate your pilot volunteers achieved, half of your plan, and double it.

The first is the fantasy, the second is the likely case, the third is what happens if it works better than expected, which is a scenario people rarely cost and which has bankrupted more than one committed-volume contract from the other direction. Sign the shape that’s survivable in all three.