Concept Contrast Fable

Vendor lock-in and exit plan

Conclusion first:Vendor lock-in is a risk state—your system's dependence on a vendor has grown so large that switching costs are unacceptable. An exit plan is a pre-established action plan—defining what circumstances trigger exit, how to migrate data, how to switch services, how to notify customers, and how long it will take to complete. Having lock-in risk does not mean you must exit immediately, but having no exit plan means you do not even have a choice.

Vendor lock-in is a risk state—your system's dependence on a vendor has grown so large that switching costs are unacceptable. An exit plan is a pre-established action plan—defining what circumstances trigger exit, how to migrate data, how to switch services, how to notify customers, and how long it will take to complete. Having lock-in risk does not mean you must exit immediately, but having no exit plan means you do not even have a choice.

Fable

The locked door and the spare key

The office building management replaced the main door with an electronic lock, fingerprint recognition plus mobile phone Bluetooth, making entry and exit convenient. Property manager Old Qian was very satisfied with this solution. The supplier's service contract was signed annually, and the entire system ran stably for two years.

In the third year, the supplier was acquired by a large company, and the annual fee rose fivefold. Old Qian called to negotiate, and the other party said take it or leave it. Old Qian wanted to switch back to mechanical locks, but discovered that the electronic lock's controller was embedded in the door frame, and removing it would damage the door structure. Renovating the door frame would cost 150,000, and during the shutdown the entire building would need security guards on duty 24 hours a day, adding another 80,000 per month in security costs.

Old Qian did the total math and gritted his teeth to renew. The night after signing the contract, Old Qian sat in his office staring at the bill. It wasn't that he didn't know this electronic lock could fail—he knew that one day the vendor might raise prices, go bankrupt, or be acquired, and access to the building would be strangled. But he had never turned that "knowing" into a written plan.

Old Qian asked security consultant Old Yan for help. Old Yan asked three things: what price increase or disruption would trigger a lock change; how the fingerprint database, whitelist, and access records would be exported and handed over to the next vendor; and during the switch, who guards the door, for how long, and following what steps.

Old Qian could not answer a single question. Old Yan spent two weeks helping him write a "Building Entry and Exit Switchover Plan." It contained trigger conditions, data migration steps, a physical security plan for the transition period, a supplier handover checklist, a timeline and responsible persons. Old Qian locked this document in a safe and updated it once a year.

In the fourth year, the supplier raised prices again, and Old Qian started the exit process according to the trigger conditions in the plan. Because the fingerprint database format had long been understood, the new supplier's craftsmen completed the data migration in two days. During the transition, they followed the physical security plan for five days, and everything was stable. The total cost of switching to the new full setup was sixty thousand—one sixth of the previous year's renewal fee.

Sharing this experience at an industry forum, Old Qian said: lock-in is not the problem. Whichever deeply integrated full-stack system you choose, you will have some degree of dependency. The question is whether, on the day you sign the contract, you also write the operating manual for the day you exit. The cost of exit is mainly not technical cost; it is that once you are locked in, you no longer have the right to say "no" at the negotiating table.

After the forum, a property management peer came over to add Old Qian on WeChat, saying their entire access control system was also nearing end of life. Old Qian asked whether they had an exit plan. The other said: we still feel it works well, so we don't need one for now. Old Qian said: the best time to write an exit plan is when things are working well. If you wait until things go bad, you've already missed the only window of initiative.

Vendor Lock-In

A risk state in which a customer loses the freedom to change suppliers because of technical dependency, non-portable data, or excessively high switching costs. It describes the degree of being "locked in" and is a risk assessment conclusion.

Exit plan

A pre-established, complete action plan for migrating away from a given vendor or system, including trigger conditions, data export procedures, transition plans, timelines, and responsible parties. It provides the path for "how to leave safely."

Story Mapping

Can't switch after the electronic lock price rises: a typical vendor lock-in scenario—migration cost exceeds accepting the price increase.
Old Qian knew the risk but did not write a plan: being aware of lock-in risk is not the same as having exit capability.
Old Yan's three questions: the core elements of an exit plan—trigger conditions, data migration, transition plan.
Executing the exit per plan costs sixty thousand in total: the measured value of an exit plan—turning lock-in cost back into something controllable.
Write an exit plan when things are going well: an exit plan should be made during normal operations; there is no time for it in a crisis.

In the project

Each time a new vendor is brought in, write a minimal exit plan at the same time and attach it to the contract. At minimum, spell out four things: data ownership and export format, migration validation criteria, the transition service period after contract termination, and the business continuity plan during the switch. Putting it in a contract annex is not about exiting right away; it is about both sides acknowledging from the start that "breaking up" is normal business behavior. Also, the exit plan cannot be written and then locked in a drawer—confirm once a quarter that the export format is still compatible and the contacts are still valid.

Vendor Lock-In Exit plan