Choosing a managed IT provider can be harder than it looks.
Two proposals may include similar services, similar cybersecurity language, and even similar monthly pricing. But what happens after you sign can be very different.
One provider may include onsite support, employee onboarding, cybersecurity tools, and strategic planning in the monthly agreement. Another may charge separately for many of those services. One may answer your calls with experienced local technicians. Another may route you through an outsourced help desk.
The differences are often buried beneath the proposal.
Before signing an IT contract, ask every provider you are considering the same questions. Their answers can help you compare providers more fairly, uncover important differences, and make a more informed decision.
1. What Isn’t Included in My Monthly IT Fee?
A monthly price does not mean much until you understand exactly what is included.
Ask each provider:
“Please provide a complete list of anything that could result in an additional charge outside of my monthly agreement, including onsite visits, after-hours support, projects, new employee setup, employee off-boarding, Microsoft 365 administration, training, licensing, and anything else that could appear on an invoice.”
Many IT agreements look affordable until additional charges begin appearing each month. Understanding what is included, and what is not, helps you compare providers fairly.
GREEN FLAG: The provider can quickly give you a complete list of services that may cost extra. RED FLAG: The answer is vague or repeatedly comes back to “it depends”.
2. Can You Show Me a Real Client Invoice?
A proposal tells you what an IT provider plans to charge. An invoice can show you what clients actually pay.
Ask:
“Can you show me a redacted invoice from one of your current clients so I can see what a typical month actually looks like?”
The provider does not need to reveal a client’s identity or confidential information. The goal is simply to see whether the typical invoice resembles the monthly pricing being presented to you.
A low monthly price can become much less attractive if common support needs routinely create additional charges.
GREEN FLAG: They can provide an appropriate redacted invoice.
RED FLAG: They avoid the request or cannot provide an example.
3. Who Will Actually Answer When I Call for Help?
Terms such as “help desk,” “24/7 support,” and “technical support” can mean very different things depending on the provider.
Ask:
“Will all of my calls be answered by your local employees, an outsourced help desk, or a combination of both? If it’s a combination, who answers first?”
The first person your employees speak with can have a major impact on how quickly an issue gets resolved.
Find out whether the person answering your call can troubleshoot the problem immediately or whether the request must first move through multiple levels of support.
GREEN FLAG: The provider clearly explains exactly who answers support calls and what happens next.
RED FLAG: They avoid giving you a direct answer about who provides support.
4. What Cybersecurity Protections Are Included in Your Standard Service?
Almost every IT provider now talks about cybersecurity.
That does not mean every managed IT agreement provides the same level of protection.
Ask:
“Please provide a list of the cybersecurity tools and services included in your standard monthly agreement.”
You should be able to clearly understand what security protections are included, which services are optional, and what may cost extra.
Be cautious of broad terms such as “comprehensive cybersecurity” or “advanced protection” unless the provider can explain specifically what those terms mean.
Many providers advertise cybersecurity while including only basic protections in their standard service. Other protections may be optional add-ons.
GREEN FLAG: They clearly explain what is included, what is optional, and why each protection matters.
RED FLAG: They rely on vague cybersecurity terminology without clearly identifying the protections included.
5. How Do You Know My Backups Will Work When I Actually Need Them?
Backing up your company’s data is important, but simply having backups is not enough.
Ask:
“How long do you retain our backups? How do you test them? When was the last successful restore test performed? If we had a ransomware attack today, how long would it take to recover our business?“
Backup systems should be tested so the provider knows data can actually be restored when needed.
Without regular testing, a business may not discover that something is wrong until it is already dealing with a major outage, ransomware incident, or data loss.
GREEN FLAG: They can clearly explain both the backup process and the recovery process.
RED FLAG: They only tell you backups are “running successfully” but cannot explain how they verify that the data can be restored.
6. Who Will Have Administrator Access to My Systems?
Your IT provider may have administrative access to some of the most important systems in your business.
That could include your network, Microsoft environment, servers, firewalls, backups, and other critical technology.
Ask:
“Who will have administrator access to our network, Microsoft environment, servers, firewalls, and backups? What certifications or qualifications do those individuals hold?”
You are trusting your IT provider with the keys to your business. You should know who has that level of access and whether those individuals are qualified to manage it securely.
Company partnerships and vendor certifications can be valuable, but they do not necessarily tell you who will actually be working inside your systems.
GREEN FLAG: The provider is transparent about its team, certifications, qualifications, and security practices.
RED FLAG: They focus only on company partnerships or avoid discussing the qualifications of the people who will actually support your business.
7. What Happens if I Want to Leave?
No business chooses an IT provider expecting the relationship to end.
But circumstances can change.
Ask:
“If we choose another provider in the future, how will you help transition our systems, passwords, documentation, and licenses?”
A professional IT provider should have a clear process for transitioning your business to another company if you decide to make a change.
Your passwords, documentation, licenses, and data belong to your business, not your IT company.
You should understand the transition process before signing a contract, including whether there are fees, restrictions, or other requirements associated with ending the relationship.
GREEN FLAG: They are willing to work directly with a new provider and have a clear process for transferring passwords, documentation, licenses, and data.
RED FLAG: They are vague about the process, mention large fees to release information, claim important documentation is proprietary, or become defensive when discussing the possibility of your leaving.
8. How Will You Prove You’re Delivering What You Promised?
The sales process should not be the last time your IT provider talks strategically about your technology.
Ask:
“What reports or business reviews will we recieve? Will we regularly review ticket trends, cybersecurity risks, system health, strategic recommendations, and technology planning together? Can you give me an example of you being proactive?”
A good IT provider should continue evaluating your technology after the contract is signed.
Regular reporting and business reviews give you an opportunity to understand recurring support problems, cybersecurity risks, system health, upcoming technology needs, and recommendations for your business.
Just as importantly, ask the provider for a real example of how it identified and addressed a problem proactively instead of waiting for something to break.
GREEN FLAG: They have a structured process for ongoing communication, reporting, strategic planning, and proactive recommendations.
RED FLAG: Most communication happens only when something breaks or your contract is due for renewal.
How Do You Compare IT Providers Fairly?
When comparing IT companies, price should be only one part of the decision.
The lowest monthly fee may not result in the lowest overall cost if common services generate additional charges. A long service list may not tell you who answers the phone when an employee needs help. And terms such as “cybersecurity,” “proactive support,” and “24/7 service” can mean very different things from one provider to another.
Ask each IT provider the same questions and compare their answers side by side.
Pay attention not only to what they say, but also to how clearly and confidently they answer.
A provider should be willing to explain its pricing, support model, cybersecurity protections, backup procedures, qualifications, reporting process, and contract terms before you make a commitment.
Before You Sign an IT Contract, Compare the Answers
Choosing an IT provider is an important business decision. The right questions can help you look beyond a proposal and better understand what working with each provider will actually be like.
If you are currently comparing IT providers, use our printable 8 Questions to Ask Before Signing an IT Contract as you review proposals.
Download the 8 Questions to Ask Before Signing an IT Contract
Considering a change in IT providers?
Frequently Asked Questions
What should I ask before signing an IT contract?
Ask about additional charges, real client invoices, who provides technical support, included cybersecurity protections, backup testing, administrator access, contract termination, and how the provider measures and reports its performance.
How should I compare managed IT service providers?
Use the same questions for every provider you are considering. Compare what is included in the monthly fee, how support is delivered, the cybersecurity services provided, backup and recovery procedures, technical qualifications, ongoing communication, and contract terms.
What should be included in a managed IT services contract?
The agreement should clearly explain the services included in the monthly fee, services that may result in additional charges, support expectations, cybersecurity responsibilities, licensing, service terms, and what happens if the agreement ends.
Why should I ask an IT provider about backup testing?
A successful backup does not necessarily mean the data can be restored successfully. Ask how backups are tested when restore testing occurs, how long backups are retained, and how long recovery may take after an outage or cyberattack.
Should an IT provider explain who has administrator access?
Yes. An IT provider may have privileged access to critical business systems. You should understand who has access, what qualifications those individuals have, and how privileged access is managed.