The average small business spends 60 to 90 days evaluating a major software vendor — and still ends up surprised by the real cost, the implementation timeline, or the support experience after the contract is signed. That's not bad luck. It's what happens when warning signs go unrecognized during the sales process.

This guide documents the 12 most reliable warning signs that an IT vendor will disappoint you after the contract is signed. Some are easy to spot. Others are deliberately buried. All of them are worth knowing before you put pen to paper.

73%

of SMBs that regret a software purchase say at least one warning sign was visible before signing — but they either missed it or rationalized it away, according to a 2025 technology buyer survey.

The Quick Reference: All 12 Red Flags

Before we go deep on each one, here's the full list with severity ratings. "High" means walk away unless you can get written remediation. "Medium" means negotiate hard before you sign.

# Red Flag Severity What It Signals
01Opaque pricingHighReal cost is higher than what you've been shown
02Year-1 discount trapsHighPrice jumps 40–80% at first renewal
03Vague implementation timelinesMediumProjects routinely run 2–3× over estimates
04Weak SLAs with no penaltiesHighDowntime commitments are unenforceable
05Thin or one-sided reviewsMediumReal user experience differs from sales pitch
06No customer references at your scaleMediumSMBs are treated as second-tier accounts
07Feature bloat over fitMediumCore use case is weak; complexity adds cost
08High-pressure sales tacticsHighVendor knows the deal won't survive scrutiny
09Buried switching costsHighExit will be painful and expensive by design
10Single point of contactMediumSupport collapses when your rep leaves
11Coordination or "integration" feesMediumReal implementation cost is 2–3× the quote
12Multi-year lock-in, no exit clauseHighYou're trapped even if the product fails you

Red Flags 1–4: Pricing and Contract Structure

Red Flag 01 · High Severity

Opaque Pricing That Requires Multiple Conversations

If a vendor won't give you a complete price sheet before the first demo — or if every pricing question triggers "let me check with my manager" or "that depends on your specific configuration" — the real cost is higher than they want to reveal before you're emotionally invested in the product.

→ Ask for fully loaded annual pricing in writing before the first demo. If they won't provide it, treat this as a high-severity red flag.

Red Flag 02 · High Severity

Year-1 Discount Traps

A vendor offers 40% off for the first year, structures the contract as an annual auto-renewing agreement, and buries the renewal price in an appendix or simply states "standard pricing." You sign. Year 2 arrives. Your bill is 60% higher and you have 30 days to cancel — which requires migrating your data on a tight timeline. This is one of the most common and expensive traps in SMB software buying.

→ Always ask: "What is the standard non-promotional price, and what is the price at renewal?" Get both numbers in writing before signing anything.

The math: A $500/month introductory price that reverts to $850/month at renewal adds $4,200 in unexpected annual cost — before you factor in the switching cost if you try to leave.

Red Flag 03 · Medium Severity

Vague Implementation Timelines

Implementation timelines that come with heavy qualifiers — "typically 6 to 12 weeks, depending on your data" or "we've seen as fast as 2 weeks but it varies" — are a signal that projects routinely overrun. Every week your team spends on implementation is a week of distraction from your core business. Ask for the median timeline for companies at your size, and ask what percentage of implementations come in on schedule.

→ Ask for median implementation time for companies your size, and the on-time delivery rate. Get milestones and penalties for delays in writing.

Red Flag 04 · High Severity

SLAs Without Financial Penalties

A Service Level Agreement that promises 99.9% uptime but carries no financial consequence if that commitment is missed is a marketing document, not a contract. Uptime guarantees are only meaningful when breach of the SLA triggers service credits, price reductions, or the right to terminate. An SLA with no teeth is worse than no SLA, because it creates the appearance of accountability without the substance.

→ Read the SLA remedies section carefully. If breach of uptime commitments results only in a right to terminate (not credits or refunds), that's a weak SLA dressed up as a strong one.

Not Sure What a Good Contract Looks Like?

VendorSage reviews vendor contracts and flags problematic clauses before you sign. We've seen hundreds of SMB software agreements — we know where the traps are.

Get a Free Assessment →

Red Flags 5–8: Sales Process and Market Signals

Red Flag 05 · Medium Severity

Thin Reviews, One-Sided Praise, or Review Gaps

A vendor with 50 reviews on G2, all rated 4.5 or above with near-identical language, is either gaming review platforms or has a self-selected customer base. The useful signal is in the critical reviews: what do unhappy customers say specifically? Look for patterns around support quality, billing disputes, and product gaps. A vendor with 500 reviews and a healthy mix of 3-star critiques is usually more trustworthy than one with 50 uniformly glowing reviews.

Also watch for review velocity gaps. A vendor that had 200 reviews two years ago and only 20 since then has stagnating growth or a worsening reputation keeping new customers from posting.

→ Sort reviews by "most recent" and filter to 2 and 3 stars. The specific complaints in those reviews predict your experience better than the average score.

Red Flag 06 · Medium Severity

No Customer References at Your Scale

When you ask for references and the vendor offers introductions to enterprise customers, or to businesses in completely different industries, they're signaling that their SMB customer base isn't happy enough to serve as references — or that SMBs aren't their real market. You'll be treated accordingly after the contract is signed: as a small account to be managed efficiently rather than a customer to be served.

→ Request 3 references from companies with similar employee count, industry, and use case. If the vendor can't or won't provide them, that tells you something.

Red Flag 07 · Medium Severity

Feature Bloat That Obscures Core Weakness

A vendor demo that spends 40 minutes on integrations, dashboards, and AI features before showing how the core workflow actually functions is usually trying to distract you from a weak core product. Feature count is not functional fit. If the most important capability — the thing you're actually buying the software to do — requires 20 minutes to demonstrate and comes with caveats, the platform isn't ready for your use case.

→ Before the demo, send your top 3 required capabilities and ask the rep to start there. How easily they demonstrate the core function tells you everything.

Red Flag 08 · High Severity

High-Pressure Sales Tactics

Artificial urgency — "this pricing expires Friday," "we only have 3 slots left for Q2 onboarding," "my manager approved this discount but only until end of month" — is a classic indicator that the vendor knows the deal won't survive a careful evaluation. Good vendors want informed customers, because informed customers stay longer and generate referrals. Vendors who pressure you to sign before you've finished due diligence have something to hide.

→ The correct response to artificial urgency is to slow down, not speed up. If the pricing genuinely expires, ask for it in writing with the expiration date — vendors that are serious about the business rarely let deals die over a week's extension.

Pattern to know: High-pressure tactics most commonly appear when a vendor is: (1) end-of-quarter and behind on targets, (2) about to raise prices, or (3) aware of a product weakness you're about to discover. None of these are your problem to solve.

Red Flags 9–12: Exit Risk and Hidden Costs

Red Flag 09 · High Severity

Buried Switching Costs

Switching costs take several forms, and savvy vendors bury all of them. Data portability restrictions — "we can export your data in our proprietary format" — mean migration will require expensive custom development. Deep integrations with proprietary APIs mean every connected tool needs to be rebuilt if you switch. Vendor-managed configurations mean you don't actually own your own setup documentation. Read the contract's data rights and portability provisions before you sign. If you can't get your data out cleanly, you're locked in by design.

→ Ask specifically: "If we cancel, what format will our data export be in, how long will we have access to export it, and is there a fee for bulk data export?" The answers are revealing.

Red Flag 10 · Medium Severity

Single Point of Contact With No Escalation Path

A vendor relationship that runs entirely through one account executive or customer success manager is fragile by design. When that person leaves — and in software sales, turnover is high — you lose continuity, institutional knowledge of your account, and sometimes the informal accommodations that made the relationship work. Ask who your escalation contacts are, whether they're named in the contract, and what the vendor's average account team tenure looks like.

→ Ask: "If my account manager leaves, what's the transition process?" and "Who can I escalate to if I can't reach my CSM?" Vendors with healthy support structures answer this easily.

Red Flag 11 · Medium Severity

Coordination Fees, Integration Charges, and "Professional Services" Scope Creep

An implementation quote that excludes "professional services" or "custom configuration" is not a real implementation quote. Professional services charges routinely double the first-year cost for complex implementations. Some vendors structure their products to require paid professional services for tasks that should be self-serve — data migrations, custom fields, API connections — because it's a high-margin revenue stream that's hard to cut once you're mid-implementation.

→ Ask for a "fully loaded" first-year cost estimate that includes all implementation, configuration, training, and integration work. If the vendor can't give you that number, request an itemized professional services SOW before signing the software contract.

Red Flag 12 · High Severity

Multi-Year Lock-In With No Exit Clause or Performance Guarantee

A two or three-year contract with no termination-for-cause provision and no SLA-linked exit right traps you even if the vendor materially fails to deliver. Software changes, companies get acquired, products get sunset, and your needs evolve. A contract that binds you regardless of vendor performance is not a partnership — it's a financial obligation you're taking on with no recourse. The absence of an exit clause in a multi-year contract is almost always a deliberate choice.

→ For any multi-year contract, negotiate a termination-for-cause provision tied to SLA breaches, a material product downgrade, or acquisition. If the vendor refuses any exit provisions, the risk profile of a multi-year commitment is too high for most SMBs.

Want These Red Flags Checked For You?

Paste in your vendor shortlist and VendorSage will run a structured red-flag check — pricing analysis, contract review, reference verification — and tell you where the risk is before you sign.

Start Your Free Assessment →

What to Do When You Spot a Red Flag

Finding a red flag doesn't always mean walking away. It means you have leverage — and a specific issue to resolve before signing. Here's how to handle each scenario:

High-severity flags (01, 02, 04, 08, 09, 12): Require written remediation before proceeding. This means getting the problematic term changed in the contract or the missing information provided in writing. If the vendor refuses to address a high-severity flag, walk away. No product is good enough to overcome a structurally adversarial contract.

Medium-severity flags (03, 05, 06, 07, 10, 11): Use as negotiating leverage. Each medium-severity flag represents a known risk that can often be mitigated — through price concessions, contract adjustments, additional service inclusions, or enhanced SLA terms. Document your concerns and bring them to the negotiation with specific asks.

Multiple medium-severity flags together: Three or more medium-severity flags pointing in the same direction (e.g., vague timelines + professional services scope creep + single contact) compound each other. A cluster of medium-severity concerns often signals the same underlying problem as a single high-severity flag.

The 72-hour rule: If you feel pressure to sign immediately, wait 72 hours after your last vendor interaction before reviewing the contract. The emotional pull of a polished demo fades quickly. Red flags that seemed minor in a meeting look different in daylight.

The Pre-Sign Checklist

Before signing any IT vendor contract, run through this list. If you can't check every box, you're signing with known risk:

This isn't a checklist designed to kill deals. It's designed to kill bad deals before they cost you money you can't recover. Good vendors — the ones worth signing with — will be able to check every box.

Related Reading

Get weekly tech buying tips

New guides on vendor contracts, software spending, and smarter decisions — straight to your inbox.

Free Offer

Want a personalized IT assessment?

Answer 5 quick questions about your tech stack. Get a tailored recommendation — what to cut, renegotiate, and optimize — within 24 hours.

Take the Free 2-Minute Assessment →

No credit card. No sales pitch. Just honest advice.