Hiring a technology provider abroad: what to check

Working with a provider in another country can cut costs without cutting quality. Here's how to check data protection, hours and contracts first.

Many businesses already work with technology teams in other countries, from service desks to software development. Done well, it gives you experienced people at a fair price. These are the checks that make it work.

Hours and time zones

Ask for support hours in your own time zone, and how much of your working day they cover. Some regions sit within a few hours of the UK and Europe; others suit US hours or offer overnight cover.

Data protection

• Ask where your data will be stored and processed, and by whom.
• If you're in the UK or EU and personal data will be handled abroad, you need a lawful transfer basis, such as the UK International Data Transfer Agreement or the EU standard contractual clauses. Ask the provider which they use.
• Ask for their security certifications, such as ISO 27001, and check the expiry date.

Is the company real?

• Check their company registration in their home country.
• Ask about insurance, including professional indemnity and cyber cover.
• Look for vendor certifications such as Microsoft, AWS or Google Cloud partner status, which the vendor can confirm.
• On Xedir, the Xedir Verified badge shows what we checked and when.

Contracts and money

• Agree the currency and who carries exchange-rate risk.
• Agree which country's law governs the contract and where disputes are settled.
• Make sure the exit terms give you your data, passwords and documentation.

Start small

A short, well-defined first project, or a trial month, shows you how the provider communicates and delivers before you commit for longer.