How to Evaluate an IT Support Company: 12 Questions to Ask Before You Sign a Contract

Before signing any IT support contract, ask about response times, security credentials, contract flexibility and hidden costs. The right provider answers clearly and confidently. Vague answers are a red flag.

Get these 12 questions right, and you’ll avoid a bad contract. Below, we break each one down.

Key Takeaways

• Always get response times and SLAs in writing.
• Proactive monitoring beats reactive fixing every time.
• Ask for an itemised price breakdown before signing.
• Certifications like Cyber Essentials Plus signal real competence.
• Contract flexibility protects you as your business changes.
• Client references reveal more than any sales pitch.

1. What’s Your Guaranteed Response Time?

Every good provider offers a Service Level Agreement (SLA). It states exactly how fast they’ll respond.

Ask for response times by priority level. Critical issues should get attention within 30–60 minutes.

Watch for: vague answers like “as soon as possible.” That’s not a guarantee. It’s a hope.

2. Do You Offer 24/7 Support, or Just Office Hours?

Not every business needs round-the-clock cover. But you should know what you’re getting.

Ask specifically: does support stop at 5pm? What happens if a server fails overnight?

Some providers charge extra for out-of-hours support. Get this confirmed in writing, upfront.

3. Are You Proactive or Reactive?

This is the single biggest difference between IT support providers. Reactive support waits for things to break.

Proactive support monitors systems constantly. It catches problems before they cause downtime.

Ask: “What monitoring tools do you use?” A confident provider will name them specifically.

4. What Cybersecurity Measures Are Included?

Cybersecurity shouldn’t be an optional extra in 2026. It should be built into the core service.

Ask about firewalls, endpoint protection, email filtering and staff security training. All should be standard.

According to the UK Government’s Cyber Security Breaches Survey 2024, half of UK businesses faced a cyber attack last year. Don’t treat security as an afterthought.

5. How Do You Handle Data Backups and Disaster Recovery?

Backups fail more often than people think. Untested backups are almost as risky as no backups at all.

Ask: “How often do you test restores?” Not just “do you back up data.”

A strong answer includes backup frequency, storage location, and a clear recovery time objective (RTO).

6. Can You Provide Client References?

Any established provider should offer references without hesitation. Ask for businesses similar in size to yours.

Speak to at least one reference directly. Ask them about response times and how issues get resolved.

Red flag: reluctance to share references, or only offering written testimonials.

7. What’s Included in the Price, and What Costs Extra?

This is where many contracts hide surprises. Ask for a full breakdown before signing anything.

Common extras include:

• Out-of-hours support
• On-site visits
• New starter/leaver setup
• Hardware procurement
• Emergency callouts

Get everything itemised. Avoid providers who keep pricing vague or “case by case.”

8. How Long Is the Contract, and How Do I Exit It?

Contract length matters more than people realise. Long lock-ins can trap growing businesses.

Ask about notice periods, early termination fees, and rolling contract options.

A good provider offers flexibility. They should earn your renewal, not force it contractually.

9. What Certifications and Accreditations Do You Hold?

Credentials matter here. They prove technical competence and industry standards.

Look for certifications such as:

• Microsoft Partner status
• Cyber Essentials or Cyber Essentials Plus
• ISO 27001 (information security)
• CompTIA or vendor-specific engineer certifications

These aren’t just badges. They show the provider follows recognised best practices.

10. Who Will Actually Be Supporting Us?

Some providers outsource support to third parties or offshore call centres. Ask directly who handles your tickets.

You want consistency. The same engineers understanding your systems, not a rotating cast of strangers.

Ask: “Will we have a dedicated account manager or engineer?”

11. How Do You Scale as We Grow?

A growing business needs a provider that grows with it. Ask how they handle onboarding new staff, offices, or systems.

Can they support hybrid or remote teams? Do they offer cloud migration support?

If they can’t answer this clearly, they may not be the right long-term fit.

12. What Happens If Something Goes Seriously Wrong?

This question separates good providers from great ones. Ask about their incident response process.

Do they have a documented disaster recovery plan? Have they handled a major outage before?

Ask for a real example. Their answer reveals how they perform under real pressure.

Quick Comparison: Green Flags vs Red Flags

Frequently Asked Questions

1. How long should an IT support contract be?
Most run 12 months, though flexible rolling contracts are increasingly common and often preferable.

2. What’s a good response time for IT support?
Critical issues should see a response within 30–60 minutes. Anything longer risks costly downtime.

3. Should IT support include cybersecurity?
Yes. In 2026, cybersecurity should be a core part of any IT support package, not an add-on.

4. What certifications should an IT provider have?
Look for Cyber Essentials Plus, ISO 27001, and Microsoft Partner status as minimum indicators of credibility.

5. Can I negotiate an IT support contract?
Yes. Pricing, contract length and included services are usually negotiable, especially for multi-year commitments.

6. What questions reveal a bad IT provider quickly?
Vague pricing, no written SLA, and reluctance to share client references are the clearest warning signs.

7. Do I need on-site IT support or is remote enough?
It depends on your setup. Ask providers how they balance remote fixes with on-site visits when needed.