Requirements · Outsourcing
Outsourcing contracts and service levels: what to require
Last updated 25 October 2026 · 2 sources listed · Reading time about 3 minutes
Short answer
A robust outsourcing agreement defines the scope in measurable terms, sets service levels tied to business outcomes, links remedies to performance, protects data and audit rights, manages change and subcontracting, and plans the exit. Service levels fail when they measure what is easy rather than what matters or when remedies are too small to influence behaviour.
Who this is for: A procurement or operations lead negotiating a master services agreement and service level schedule with an outsourcing provider.
What to evaluate
Service scope and boundaries
Ambiguity about tasks, volumes and interfaces causes disputes and hidden charges.
How to check: Define in-scope and out-of-scope tasks, volume assumptions and what happens above or below them.
Meaningful service levels
Metrics should reflect customer or business impact, such as accuracy, resolution quality and turnaround, not merely activity.
How to check: Link each service level to an outcome and agree how it is measured, by whom and from which data.
Remedies and incentives
Credits or penalties that are trivial will be ignored, while excessive ones can encourage gaming of metrics.
How to check: Review how credits scale with failure and whether persistent failure gives rights to terminate.
Audit and information rights
You need the ability to verify performance, security and compliance, including by regulators if applicable.
How to check: Ensure rights to audit, receive reports and access relevant records, including at subcontractors.
Data protection and security obligations
Responsibility for personal and confidential data does not transfer to the vendor.
How to check: Include data processing terms, breach notification timing, location restrictions and deletion on exit.
Change and benchmarking
Needs shift. Without a change mechanism, small adjustments turn into disputes or surcharges.
How to check: Agree a change process and a periodic review of pricing and service levels.
Exit and transition assistance
Leaving a provider is hardest when the contract is silent on handover.
How to check: Require exit planning, knowledge transfer, continued service during transition and return of data in usable formats.
Comparison
| Element | Purpose | What to verify |
|---|---|---|
| Master services agreement | Sets general legal and commercial terms | Liability, intellectual property, termination and governing law |
| Service level schedule | Defines measurable performance targets | Metric definitions, measurement method, reporting frequency |
| Service credits | Adjusts price when targets are missed | Scale of credits and whether they are the only remedy |
| Governance schedule | Sets meetings, roles and escalation | Named leads and authority levels |
| Exit schedule | Plans orderly transfer on termination | Assistance duration, data return and knowledge transfer |
Decision worksheet
Rate up to three options against this guide’s own criteria. It runs in your browser and saves only on this device. It is a thinking aid, not a recommendation.
1. Have you checked each criterion?
0 of 7 criteria checked.
2. Compare options (0 = fails or unknown, 3 = meets it well)
| Criterion | |||
|---|---|---|---|
| Service scope and boundaries | |||
| Meaningful service levels | |||
| Remedies and incentives | |||
| Audit and information rights | |||
| Data protection and security obligations | |||
| Change and benchmarking | |||
| Exit and transition assistance | |||
| Total (max 21) | 0 | 0 | 0 |
Questions to ask before you commit
- How are each service level measured and who owns the measurement data?
- What happens when volumes rise or fall beyond the assumed range?
- Which remedies apply for repeated failure, and when can we terminate?
- Can we audit your operations and those of subcontractors?
- Where will our data be stored and processed, and who can access it?
- How are changes proposed, costed and approved?
- What exit support will you provide and for how long?
- Which limits on liability apply and what do they exclude?
Typical trade-offs
Strict service levels with penalties versus collaborative targets
- Upside
- Clear penalties create accountability.
- Downside
- They can encourage defensive behaviour and metric gaming.
Fixed price versus volume-based pricing
- Upside
- Fixed pricing gives budget certainty.
- Downside
- It may penalise you if volumes drop and encourages the vendor to cut corners.
Long term for better pricing versus shorter term for flexibility
- Upside
- Long contracts attract investment and lower unit prices.
- Downside
- They lock you in if needs change or performance declines.
Common mistakes
- Choosing service levels that are easy to meet rather than meaningful. Measure outcomes your customers notice.
- Letting the vendor measure and report its own performance without verification. Use independent data or audit rights.
- Neglecting exit terms because the relationship is new. Exit rights are cheapest to negotiate at the start.
- Capping liability at levels far below potential loss from a data breach. Review limits against realistic risk.
- Leaving subcontracting unrestricted, so work moves to places or parties you never assessed.
Related questions
What makes a good service level?
It is tied to an outcome, specific, measurable from reliable data and within the provider's control. Examples include accuracy of processed transactions, first-contact resolution, response and resolution times by severity, and availability of a system. Avoid measures that reward volume over quality. Pair a speed metric with a quality metric so improvement in one does not hide decline in the other.
Are service credits enough protection?
Usually not on their own. Credits compensate for missed targets but rarely cover the real business impact of a failure. Make sure the agreement also gives rights to claim damages for serious failures where law permits, to require remediation plans and to terminate for persistent or severe breach. Check whether credits are stated as the sole remedy, which would limit your options.
How should data protection be handled?
Treat the provider as a processor of your data under a written agreement specifying purposes, security measures, subcontractor approval, breach notification, assistance with data subject requests, location restrictions and deletion or return at end. Where data crosses borders, check the legal mechanisms for transfer that apply in your jurisdiction. Regulators generally hold you accountable, so obtain evidence of controls rather than assurances.
What is benchmarking in outsourcing?
It is a clause allowing periodic comparison of the provider's price and performance with comparable services in the market, with a mechanism to adjust if the provider is materially out of line. It helps prevent pricing and service from drifting over a long contract, but depends on finding genuinely comparable data and agreeing the method in advance.
What should be in an exit plan?
It should specify a notice and transition period, continued service at agreed standards during transfer, handover of documentation and process knowledge, return of data in usable formats, transfer or deletion of systems access, and cooperation with a successor provider. Agree who bears transition costs and keep the plan updated during the contract instead of waiting until termination.
Sources and further reading
These pages were reachable when we last checked. They informed definitions and rules referred to above; they do not endorse this guide. Where rules differ by country, check the authority for your location.
- Data protection in the EU — European Commission, retrieved 27 October 2026
- Guidance for organisations — Information Commissioner's Office, retrieved 27 October 2026
Related guides
How to choose · Outsourcing
How to choose a business process outsourcing partner
Select a partner by testing process maturity, relevant references, security and continuity controls, the stability and training of the delivery team, and how well governance will work day to day. Start from a clear process definition and measurable service goals. A pilot with real volumes tells you more than any presentation.
Comparison · Outsourcing
Offshoring, nearshoring or onshore outsourcing: choosing a location model
Offshore locations typically offer larger talent pools and lower labour cost but add distance, time zone gaps and legal complexity. Nearshore sits between on proximity and cost. Onshore offers closest alignment on language, law and culture at higher price. The right choice depends on how much interaction the work needs, data and regulatory limits, and the value of overlapping working hours.
Problems & fixes · Outsourcing
Outsourcing problems: quality decline, vendor lock-in and how to exit
Typical problems include service levels met on paper while customers are unhappy, scope creep charged as change requests, loss of internal knowledge, high staff turnover at the vendor and difficulty moving away. Diagnose with data, address governance first, and prepare a credible alternative. Exit works best when data, documentation and a transition plan are secured early.
Requirements · B2B software
SaaS contract terms to review and negotiate
Beyond price, the clauses that most affect outcomes are renewal and termination mechanics, data ownership and return, service levels and remedies, liability caps, security and breach commitments, and rules on price changes. Contract law varies by jurisdiction, so treat this as a checklist for conversation with counsel, not legal advice. Negotiate before signature, because leverage drops once data is in the system.
Requirements · Marketing agencies
What to require in a marketing agency contract and reporting
Require clear deliverables, ownership of accounts and creative assets, transparency on media spend and agency margins, compliance with advertising and data protection rules, defined reporting with raw data access, approval workflows and a workable exit. Agencies act in your name, so you carry legal responsibility for much of what they publish.
Problems & fixes · Business operations
When facilities contracts go wrong: service failure, disputes and exit
Most facilities disputes come from vague specifications, weak performance measurement and variation charges. Respond by documenting failures against the specification, giving formal written notice under the contract, invoking agreed remedies such as service credits and, when necessary, following termination procedures. This is general information, not legal advice; check the contract and consult a qualified adviser before ending an agreement.
Requirements · Hiring freelancers
What a freelancer contract should cover: scope, ownership and classification
A freelancer agreement should state the parties, scope and deliverables, acceptance and revision process, fees and payment schedule, ownership and licensing of work, confidentiality, data protection, term and termination, and liability. The relationship should reflect genuine independence. This is general information, not legal advice, and rules differ by jurisdiction, so consult a qualified adviser for significant engagements.