contract, consultation, pen, ballpoint pen, signature, paper, agreement, business, concept, contract law, company, arrangement, conclusion, business deal, trade, act, pact, file, document, documents, form, contract, contract, contract, contract, contract
Photo by geralt on Pixabay

Operations

Part of How to run subscription commerce operations that scale cleanly

A subscription commerce launch review should test what vendors claim

A subscription commerce launch review checks vendor claims, contract terms and operational readiness. Learn what to assess and what to leave out.

What to take away

  • Settle the scope question firstare you reviewing a supplier's assurance pack, or your own readiness to operate?
  • A review can test contracts, disclosures, consent records and staffing plans. It cannot test platform performance at your order volume.
  • Treat every supplier claim as unverified until you can inspect a document, a registration or a signed agreement.
  • Keep it narrow. One owner, one deadline, one list of open decisions.
  • Write down what you chose not to assess, so nobody mistakes silence for approval.

What does a subscription commerce launch review actually assess?

That is the whole scope. Anything else belongs to a separate technical audit with its own budget and its own specialist.

Launch review scope

  • Operating modelworkflow, ownership, handover points
  • Billing logic trusted only after model check
  • Regulatory disclosuresconsent and renewal reminders
  • Use ICO guidance, not supplier summary
  • Methodpublished UK guidance, contract questions
  • Out of scopesoftware tests, live billing, customers

Start with the operating model, not the software: who owns billing, who approves a refund, how a cancellation reaches the payment provider, and where handover points sit between teams. Those are the things a review should check before anyone trusts the billing logic.

Regulatory disclosures are the second column. For marketing consent and renewal reminders, the ICO's direct marketing and privacy guidance explains what counts as consent under UK GDPR and PECR, and how that consent must be recorded. That is the reference a reviewer should work from, not a supplier's summary of it.

Renewal reminders and cancellation rights have their own rulebook. The subscription-contract provisions of the Digital Markets, Competition and Consumers Act 2024, which the CMA will enforce, sit alongside the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, including the fourteen-day cooling-off right on distance contracts. A reviewer should test the vendor's process against both.

Reviewers should state their method. This one assessed published guidance from UK regulators and professional bodies, plus the contract and disclosure questions those sources raise. It did not test software, run a live billing cycle or interview any supplier's customers.

Which vendor claims can you verify before launch?

Very few of the interesting ones. You can confirm that a company exists, and when it was incorporated, at Companies House, and that it holds the registrations it names — a data protection notification, for instance, appears on the ICO's register of data protection fee payers. Throughput, uptime and support quality cannot be confirmed from a slide deck.

Take every other claim down to a document.

  • Uptime and service levels.Ask for the contracted SLA and the service credits that apply when it is missed.
  • Payments.Ask for the current PCI DSS Attestation of Compliance, or the Self-Assessment Questionnaire the vendor completed.
  • Information security.Ask for a valid ISO 27001 certificate, or a SOC 2 report covering the service you are actually buying.
  • Penetration testing.Ask for the tester's summary report and the date of the most recent test.

A claim you cannot trace to one of those is a claim, not a fact.

Ask for the documents behind each claim. A statement about consent handling should point to a named process, not a policy page. The CIPR's professional standards guidance is useful here because it treats retention and cancellation messaging as an ethical question as well as a legal one.

Hiring claims need the same treatment. If the launch depends on a customer service team, Acas on employment contracts covers what a contract must state, which is more than most launch plans record.

Then come the consumer-facing gaps a commercial review leaves open. Refund handling, escalation paths and account cancellations run into the same two regimes: the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 and the subscription-contract provisions of the Digital Markets, Competition and Consumers Act 2024, which the CMA will enforce. Test the vendor's written process against those, not against a template.

What does a review cost a small team?

Costs follow scope. For example, a team of three planning a £30,000 first-year launch might set aside £3,000 for an independent review and £1,200 for legal time on contract terms. Those are illustrative figures, not market rates. Quotes vary widely with scope, and a reviewer who will not fix a price is not offering a review. Ask for a fixed fee tied to a written scope and a delivery date.

The larger cost is delay. A review that runs for six weeks after the build finishes holds up revenue. Run it against the plan, in parallel, and accept that some items will stay unresolved.

Give the review a single owner who does not sit in the sales or procurement team. That owner keeps the open list, chases documents and decides when an item is closed. Without one, reviews drift into shared documents nobody updates.

This kind of review does not test payment processing, load behaviour or support response times, and it should say so. A named gap is easier to manage than an implied approval.

Common questions

Does the review need to be independent?

Not always, but the person running it should not be the person who chose the supplier. Independence is about the incentive, not the invoice.

Can a supplier run the review for US?

A supplier can hand over evidence and complete a questionnaire. It should not score its own answers, and it cannot sign off commercial terms.

How long should the review take?

Two to four weeks covers documents, contracts and interviews for a small launch. Allow more time where employment arrangements are still unsettled.

What if an item cannot be resolved before launch?

Record it with an owner and a date. Launching with a known gap is a decision. Launching with an unknown one is a risk.

More in Operations