12 Questions to Ask an MSP Before You Sign the Contract

12 Questions to Ask an MSP Before You Sign the Contract

Before you sign with a managed service provider, ask about five things in particular: guaranteed response times, who actually answers the phone, the security stack included in the base price, contract length and exit terms, and what offboarding looks like if you leave. Those five topics expose more about a provider than any sales deck will.

Below are the twelve questions we’d ask if we were in your chair — including the ones prospects rarely ask us — along with what a good answer sounds like. Any established MSP should be able to answer all twelve without squirming. Hesitation on more than a couple is your answer.

Support: the day-to-day experience

• 1. What is your guaranteed response time, and is it in the contract? A good answer is a specific number tied to severity — for example, critical outages acknowledged within minutes and worked immediately, routine requests same business day — written into the agreement, with a remedy if they miss it. "We’re usually pretty fast" is not an answer.
• 2. Who actually answers when we call? You want a technician or dispatcher employed by the provider, not an offshore answering service that takes a message. Ask whether after-hours calls reach a human, and whether you’ll work with consistent people who learn your environment.
• 3. What does the escalation path look like? Good answer: a clear tiering — who handles the first touch, who it goes to when it’s hard, and how you reach an owner or service manager if something stalls. Bonus points if they volunteer how you complain when they get it wrong.
• 4. Are on-site visits included, and how far will you drive? Some issues can’t be fixed remotely. Confirm whether on-site time is in the monthly fee or billed per visit, and that your locations are genuinely inside their coverage area — not at the edge of it.

Security: what actually protects you

• 5. What security tools are in the base price, and what costs extra? A good answer names the stack plainly: EDR on every endpoint, MFA enforced, email filtering, patching, managed backups. Then it’s honest about what’s a higher tier — 24/7 detection and response, security awareness training, compliance work. Vague answers about being "very security focused" should worry you.
• 6. How do you handle backups, and when did you last test a restore? The second half of that question is the real one. You want scheduled test restores with documentation, not just green checkmarks on a backup job. Ask them to describe their last recovery for a real client.
• 7. What happens if we get hit with ransomware at 2 a.m. on a Saturday? A good provider walks you through their incident response process without notes: who gets paged, how isolation happens, how the restore starts, how you’re kept informed. If they’ve clearly never thought about it, they’ll improvise on your worst day too.
• 8. How do you secure your own company? An MSP holds the keys to your kingdom, which makes them a target. Fair game to ask: do their technicians use MFA everywhere, is access to your systems logged, do they carry cyber insurance, have they had a third-party assessment?

The contract and the exit

• 9. What is the term, and what does it cost to leave early? Month-to-month and one-year terms are common; multi-year lock-ins deserve extra scrutiny. Whatever the term, the early-exit math should be stated in the agreement, not discovered later.
• 10. If we leave, what does offboarding look like? This is the question that tells you the most. A good answer: you get all passwords, documentation, license ownership, and admin access handed over promptly and professionally, because it’s your data and always was. Ask how long the handoff takes and whether it costs anything. A provider that gets cagey here is planning to hold your environment hostage.
• 11. What’s NOT included in the monthly fee? Every agreement has exclusions — projects, hardware, sometimes after-hours work. A trustworthy provider hands you the exclusions list without being pushed. Surprises in month three usually trace back to this question not being asked.
• 12. Can we talk to two clients our size? Not their biggest logo — clients with your headcount and, ideally, your industry. Ask those references one thing: describe the last time something went badly wrong, and how the provider handled it. Everyone looks good when things work.

Use the answers, not the brochure

Write the answers down and get the important ones — response times, exclusions, exit terms — reflected in the actual agreement. The gap between what a salesperson says and what the contract says is where bad MSP relationships are born.

Equal Tech Solutions serves businesses across Cleveland, Chattanooga, and the Southeast US, and we’re happy to answer all twelve of these on the first call — including the offboarding one. See how we structure agreements on our managed IT services page, or contact us and bring this list with you.