10 questions to ask a New Jersey IT provider before you sign
- Ask what is covered, how fast they reply, how backups are tested and who owns your admin passwords.
- Ask how you can leave, and what you get when you do.
- Ask for the price in writing, with a list of what is not included.
- The FTC advises putting security requirements for vendors into the contract and limiting their access to only what they need.
Free 30-minute review
Tell us about your office. We tell you what we would fix first, in plain words, whether or not you hire us.
Picking an IT provider is a big trust decision. They will see your email, your files and maybe your customers' data. A few good questions up front save a lot of trouble later.
Here are ten we would ask. Use them with any provider, including us.
The ten questions
- What exactly is included, and what is not? Ask for the list in writing. Pay close attention to after-hours help, new projects and on-site visits.
- How fast do you reply, and who answers? Ask for the hours and a clear time to first reply.
- How fast can someone be at my office? For hardware, new staff or a dead network.
- What security is included? MFA, protection on each computer, email filtering and updates should be on the list.
- How do you test my backups? Ask when the last test was and if you can see the result.
- Who owns my admin passwords and accounts? The answer should be you.
- What do I get each month or quarter? Ask for a sample report.
- What happens if there is a breach? Who do you call, who pays, and how fast do I hear from you?
- How do I leave? Ask about notice, fees and a handover of documents and passwords.
- Who are your other clients like me? Ask for a reference in a similar business.
What does the FTC say about vendors?
The FTC's page on vendor security advises you to:
- Write security requirements into contracts, including how data may be used, shared, kept and deleted.
- Verify that the vendor does what it says.
- Limit vendor access to only the data and time needed.
- Use strong encryption and MFA.
An IT provider is a vendor with a lot of access. These rules apply to them most of all.
How to compare answers
| Question | Provider A | Provider B |
|---|---|---|
| Included in the price | ||
| Reply time | ||
| On-site time | ||
| Backups tested | ||
| Password ownership | ||
| Exit terms |
Signs of a good answer
They explain in plain words. They tell you what they do not do. They are happy to show a sample report. They ask you questions about your business too.
Signs of a weak answer
They dodge the exit question. They say "everything" is included with no list. They hold the only admin logins. They will not say how fast they reply.
What should an IT provider contract include?
A contract should list the services, the response times, the price and what costs extra. It should say that you own your accounts and data, how you can leave, and who handles a breach. If something is not in writing, it is not a promise.
How do I know if an IT provider is a good fit?
Ask the ten questions, then listen. A good provider explains in plain words, admits what they do not cover, and shows you real examples like a sample report. A weak one says yes to everything.
Questions to ask references
- How fast do they answer when something breaks?
- Did they ever surprise you with a bill?
- Can they explain things without jargon?
- Would you sign again?
Pair this page with our guides on what IT support should include and one IT person or a managed provider.
Local points for New Jersey
New Jersey businesses often have extra rules, like the state's breach law and, for some, HIPAA or the FTC Safeguards Rule. Ask whether the provider knows the rules for your type of business. See our guides on the NJ breach law and what managed IT costs.
Next step
If you want to test us, use the list. Book a free 30-minute review, ask all ten, and compare. See our managed IT support for what we cover.
Common questions
How do I compare two IT provider quotes?
Put both in one table with the same rows: help desk hours, security items, backups, reporting, extras and exit terms. When the rows match, the real difference shows.
Who should own my admin passwords?
You should. A provider should work under accounts you can see and take back.
Is a long contract a red flag?
Not always, but ask what happens if the service is poor. You want a clear way out.
Should the provider be in New Jersey?
Remote support works from anywhere, but local helps for on-site visits and for knowing New Jersey rules. Ask how fast they can be at your office.
What should an IT provider contract include?
The services, response times, price, what costs extra, who owns accounts and data, how to leave, and who handles a breach.
Book a free 30-minute review
Tell us what is not working. We will look at your setup and tell you what we would change, whether or not you hire us.
Book the review ●●● ●●●-●●●●