You've asked two providers for help with legal operations, privacy or compliance. One proposes a broad managed solution. The other offers a smaller assessment and optional specialist delivery. Their prices and promises are hard to compare.
Before deciding which looks better, check whether they're even proposing the same work.
Define the need before scoring providers
Write a short brief covering the business problem, the tasks involved, how success will be judged, the information they'll need to access and who will make the final decisions.
Share the same brief with everyone. Otherwise, you're comparing different interpretations of your problem rather than the providers' ability to solve it.
Compare six things, not just cost
1. Scope: what is included and excluded?
Ask what work will be delivered, what assumptions the price depends on and which activities are outside scope. A cheap quote can become expensive if key tasks are missing.
2. Relevant experience: have they dealt with this sort of work?
Look for credible examples, appropriate qualifications and evidence that they understand the sector or jurisdiction. Ask what role they played in earlier work. Avoid relying only on familiar client logos.
3. Team and accountability: who will do the work?
Who is responsible day to day? Who reviews quality? Who handles escalations? Will subcontractors be involved? Understand the arrangements, not merely the senior person who presents the proposal.
4. Information and risk: what will they see or control?
Identify the information shared, access permissions, security measures, retention, confidentiality and any international transfers. Under the UK GDPR, a controller using a processor must assess whether that processor gives sufficient guarantees; appropriate contracts and controls also matter. The exact legal assessment depends on each party's role.
5. Fit: how will the relationship work?
A technically capable provider may still be difficult to work with if communication, decision rights and response expectations are unclear. Test the ordinary questions, not only ideal scenarios.
6. Exit: how do we stop or change the arrangement?
Find out how information, work in progress and knowledge will be returned or transferred; what happens to access; and which support is available for transition.
Use a decision table with room for judgement
Try four columns: Requirement | Provider A | Provider B | Questions to resolve. Use plain evidence for each row. Weight the non-negotiables, such as confidentiality or relevant regulatory capability, before considering attractive extras.
A scoring table should help a decision, not make it automatically. If you have a material unanswered risk, the sensible next step may be further diligence rather than choosing a winner.
What is the role of an adviser?
A useful adviser helps define requirements, structure the comparison, clarify trade-offs and coordinate relevant introductions. The client still chooses whom to engage, and specialist partners deliver the work agreed with them.
Where an adviser has relationships with providers, it is important that these are disclosed appropriately and that the client understands the basis of any recommendation.
Further reading: original sources
This article offers general information and is not legal or regulatory advice. Requirements depend on your organisation and circumstances.