Ask any mid-market IT lead whether they could walk away from their main vendor tomorrow. Most either laugh, or go quiet. Neither answer should be acceptable to a board.
The trap nobody notices building
Vendor lock-in is usually discussed as an abstraction — something to “keep in mind.” In practice it’s concrete, and by the time it’s visible, the leverage to do anything about it has already gone.
How it actually accumulates
Lock-in never arrives as one decision. It arrives as a proprietary data format chosen because it was the path of least resistance. A single-vendor identity provider selected because it integrated most easily with what was already there. A support contract with an auto-renewal clause nobody actively re-decided. Each step was reasonable on its own. The accumulated position is a business that never consciously chose to become dependent — and now can’t credibly threaten to leave. A vendor who knows you can’t walk away has no commercial reason to compete on price, service, or terms at the next renewal. That’s not a procurement footnote. It’s a transfer of control your board never signed off on.
Closing the gap
Three questions expose most of this before the next renewal forces the conversation: can the data be exported in a usable, non-proprietary format without the vendor’s cooperation; is identity and access management tied exclusively to this vendor’s ecosystem (Identity is the first pillar the Sovereignty Index™ scores for exactly this reason); and what notice period sits inside the current auto-renewal. A business that can’t answer all three with confidence has dependency it has never priced.
Every renewal moves this
Lock-in is cheapest to fix before the renewal deadline, not during it. Wait for the deadline and the questions above stop being diagnostic and start being a negotiation you’ve already lost.
Where this leads
The Sovereignty Index™ scores this dependency explicitly — surfacing where switching costs have quietly become strategic risk, while there’s still time to act on your own terms rather than the vendor’s.