The foundation: engage.re
Procurement 30 July 2026 9 min read

Vendor Lock-In: What Can You Prove Before You Sign?

Lock-in appears in five forms, and only one of them responds to negotiation. Buyers therefore spend their leverage on the exit clause and leave the other four untouched. This article names the five forms, gives seven tests to apply before you sign, explains why the semantic form catches most organisations, and describes what an exit looks like when the design guarantees it.

Connect with us about your exit terms · · Replies within 24 hours

5
forms of lock-in, and one of them is contractual
7
tests to apply before signature
v2.0.0
the published conformance package that lets a third party rebuild the platform

What are the forms of vendor lock-in?

Five, and they operate independently of each other.

Form What holds you Does negotiation help?
ContractualNotice periods, exit fees, minimum terms.Yes.
TechnicalA proprietary format or interface.Partly.
SemanticThe meaning of your data lives in the supplier's code.No.
OperationalYour processes are shaped around the product.No.
SkillsYour team knows only this product.No.

A procurement exercise negotiates the first row well. HM Government's Technology Code of Practice and its Open Standards Principles push at the second.

Rows three, four and five receive almost no attention, and they hold you the longest.

What is semantic lock-in?

Semantic lock-in means the meaning of your data lives in software you do not own.

Your supplier's system holds a field called status, with values 1 to 6. The rule that says 3 means an active tenancy with unpaid rent sits in the supplier's code. You export the data, and you receive the numbers.

You now hold your records and not your rules. The export is complete and the meaning did not come with it.

This form defeats a data portability clause. The ICO's right to data portability guidance covers structured, commonly used, machine-readable data. A file of status codes satisfies that description, and a person still has to rediscover what each code means.

The seven tests

Apply these before signature, while you still hold leverage. Each one has a factual answer, and a supplier can answer each one in writing.

  1. Ask for a sample export. Not a description of the export. The file itself, from a real system, with the field definitions.
  2. Ask where the meaning is written down. Where the answer is the code, you face semantic lock-in.
  3. Ask what the interface is. A documented, versioned interface beats a bespoke integration built for you.
  4. Ask who holds the encryption keys. Where the supplier holds them, the supplier controls access to your data whatever the contract says.
  5. Ask whether you can run it yourself. The answer tells you whether the product could survive the company.
  6. Ask for the exit runbook. A supplier with a written exit process has thought about it, and a supplier without one has not.
  7. Ask what happens to your audit trail. Records of past decisions outlive the contract, and obligations attach to them.

Test five deserves emphasis. The cloud guide for the public sector treats exit planning as part of a decision to buy, rather than a task for later.

Why does operational lock-in matter?

Your processes shape themselves around the product you use. A team learns the screens, builds its week around the reports, and writes its procedures against the fields the product offers.

Three years later, the exit cost includes retraining, rewritten procedures and a period of reduced service. None of that appears in a contract, and all of it appears in a business case.

Operational lock-in grows with time in use, so a five-year term costs more than the licence fee difference suggests.

What does a guaranteed exit look like?

A supplier promise and a design guarantee differ in one way. A promise depends on the supplier existing and choosing to honour it. A guarantee holds when neither is true.

Three things make an exit a design property.

  • Your meaning is data, not code. An export carries the concepts and their definitions, so the rules leave with the records.
  • You can run it yourself. A published specification lets a third party build a conforming replacement.
  • You hold the keys. Where you hold the encryption keys, your access does not depend on a supplier's cooperation.

Sense Future publishes a self-host conformance package for engage.re, at version 2.0.0. It describes the interfaces and the behaviour a conforming implementation must show.

What ESRE Media offers

We build your system on engage.re, and each of the five forms of lock-in has a specific answer.

Form What your system gives you
SemanticYour meaning is held as data in a shared dictionary, so an export carries the definitions with the records.
TechnicalSix interfaces over JSON, from any language, described in a published conformance package.
ContractualYou may host it yourself. A published specification lets a third party build a conforming replacement.
OperationalThe system fits your process, because we build it to your process rather than the reverse.
SkillsYour team learns your own vocabulary and standard interfaces, not a supplier's screens.

You hold your own encryption keys. Sense Future built engage.re, and it has run in production since December 2025.

The same exposure at two sizes

A council signs a ten-year contract for a housing management system. The exit clause is strong, and the meaning of every field lives in the supplier's code. Year eight arrives, the council runs a re-procurement, and the migration takes three years because nobody can state what the data means. The contract was never the constraint.

A care home group signs a three-year contract for a records system. The group holds no leverage on price, and it can still apply all seven tests, because each one asks for a fact rather than a concession.

The care home software and estate agency software pages set out the sector detail. Our guides to off-the-shelf against bespoke for care homes and software subscription price rises cover what lock-in costs once it exists.

What we do not claim

  • No design removes all five forms. Skills and operational lock-in follow from using anything for years.
  • Self-hosting is not free. It moves a cost from a licence to your own team, and the option is what matters.
  • A published specification is not a guarantee that a replacement exists. It is the condition that makes one possible.

What to do next

  1. Send the seven tests to your current supplier this week. The answers describe your position today.
  2. Ask for a real export, and read it. Field names without definitions are the finding.
  3. Find out who holds your encryption keys.
  4. Price your exit, including retraining and rewritten procedures.
  5. Then apply the same seven tests to every bid in your next procurement.

Common questions

What are the types of vendor lock-in?

Five. Contractual lock-in comes from notice periods and exit fees. Technical lock-in comes from proprietary formats. Semantic lock-in means the meaning of your data lives in the supplier's code. Operational lock-in means your processes are shaped around the product. Skills lock-in means your team knows only that product. Negotiation helps with the first, and barely touches the others.

What is semantic lock-in?

The meaning of your data lives in software you do not own. Your supplier's system holds a status field with values 1 to 6, and the rule that says 3 means an active tenancy with unpaid rent sits in the supplier's code. You export the data and receive the numbers, so you hold your records and not your rules.

Does a data portability clause protect us?

Only against technical lock-in. A file of status codes is structured, commonly used and machine-readable, so it satisfies a portability requirement. A person still has to rediscover what each code means, and that work is the real cost of leaving.

What should we ask a supplier before signing?

Seven questions. Ask for a real sample export with field definitions. Ask where the meaning of the data is written down. Ask what the interface is. Ask who holds the encryption keys. Ask whether you can run the system yourself. Ask for the exit runbook. Ask what happens to your audit trail.

What makes an exit guaranteed rather than promised?

Three properties that hold without the supplier's cooperation. Your meaning is held as data, so an export carries the definitions. A published specification lets a third party build a conforming replacement. You hold your own encryption keys, so your access does not depend on anybody else.

What does ESRE Media build?

We build your system on engage.re. Your meaning is data in a shared dictionary, six interfaces over JSON are described in a published conformance package at version 2.0.0, you may host the platform yourself, and you hold your own encryption keys.

Connect with us about your exit terms · · Replies within 24 hours

Sources and further reading