Skip to main content

Blog

How to Vet an Offshore Development Partner

The eight questions US and EU founders should ask before hiring a development partner abroad — IP ownership, NDAs and DPAs, demo cadence, handover — plus the red flags and how to verify claims independently.

5 min read

Hiring a development partner in another country is mostly a trust problem. You are committing real money to people you will never share an office with, in a jurisdiction where enforcing a contract is impractical, on the strength of a portfolio you cannot independently verify.

We are one of those partners — we are based in Pakistan and most of our clients are in the US, Europe and the Gulf — so treat this as the inside view. These are the questions that separate a partner who will still be useful in eighteen months from one who will leave you with a codebase nobody can maintain. Ask all of them, of everyone, including us.

Start with the work, not the pitch

A deck proves nothing. Apps in a store prove a lot.

Ask for live App Store and Google Play links, then open them. Check the developer name, the update history, the screenshots and the reviews. An app that has shipped updates over a year is evidence of a team that stayed; a portfolio of concept shots and unnamed projects is not.

If a case study describes a product that is not in a store and has no public URL, ask why. Sometimes the answer is legitimate — internal tools, white-label builds, an NDA. But you should get a straight answer rather than a subject change.

The eight questions that actually matter

1. Who owns the IP, and from when?

The answer you want is that you own the work as it is produced, not on some future date or milestone. Ownership that transfers only on final payment gives you very little leverage if the relationship sours halfway through.

2. Where does the code live during the build?

Best case: your own GitHub or GitLab organisation, so you always hold the code and can see every commit. If the partner hosts it, ask when it transfers and what the handover contains. Ask to be added as a reader on day one either way.

3. Will you sign an NDA, and a DPA if we are in the EU?

An NDA should be routine. If you are in the EU or UK and the app touches personal data, you also need a Data Processing Agreement, and you should ask where the infrastructure runs. A partner who can deploy into EU regions should say so plainly; one who has never been asked will hesitate, and that hesitation is your answer.

4. Who exactly works on my project?

Ask for names and roles, not a team size. Then ask what happens when one of them leaves, because over a year-long project someone will. The answer should involve documentation, code review and more than one person who understands the codebase.

5. How often will I see working software?

Weekly is the standard to hold out for. Not a status report, not a percentage — an actual build you can open. Long silences between milestones are where projects quietly go wrong, and a weekly demo makes that impossible to hide.

6. How are changes priced?

Scope will change. What matters is whether changes get priced before the work happens, so you decide. A partner who absorbs everything without discussion is either padding the original quote or building up a grievance.

7. What does handover include?

The repository with its full history, environment configuration, build and deployment instructions, and the store accounts in your name. A zip file of source code at the end is not a handover.

8. What happens after launch?

Apps need OS updates, store policy changes and bug fixes. Ask what post-launch support looks like and what it costs before you need it, not after.

Red flags

  • A quote arriving without questions. Anyone who can price your project from a one-paragraph brief is guessing, and the guess will be revised later.
  • Estimates in exact weeks with no ranges or assumptions listed.
  • No written scope before work starts.
  • Reluctance to name the developers, or a sales contact who cannot answer technical questions.
  • Prices far below every other quote you have. Somebody is planning to cut something, and it is usually testing, documentation or the second half of the project.
  • Reviews that all arrived in the same week, or a portfolio of apps that no longer exist in the stores.

Verify independently

Do not rely on anything the partner controls:

  • Review platforms. Clutch, GoodFirms and similar verify that the reviewer worked with the company, which a testimonial on a website does not. Read the middling reviews, not the five-star ones.
  • The stores. Open the apps. Look at the developer account, the release cadence and the user reviews.
  • Public code. A GitHub organisation, packages or open-source contributions tell you how the team actually writes software.
  • A reference call. Ask for a client who is one year past launch, not one mid-project and still hopeful. Ask that client what went wrong and how it was handled — every project has something.

The practical side: distance and timezones

Distance matters less than overlap. Four hours of shared working time is enough for a daily call and a same-day answer; zero overlap means every question costs you a day.

Agree the specifics before you start: which hours overlap, which channel is for urgent issues, who your single point of contact is, and what response time you can expect. English fluency matters more for written communication than for calls, since most of the project will happen in writing.

How we answer these

Since we are asking you to interrogate partners, here are our own answers, on the record: you own the work from day one and we commit into your repository where you have one; we sign your NDA or provide a mutual one; we can sign a DPA and deploy into EU regions; work is invoiced against milestones from an agreed scope; and you see working software every week. The detail is on how we work, and our Clutch profile carries the reviews we did not write.

If you are still scoping, our two-week MVP Discovery ends in an architecture plan and a fixed build quote that you own regardless of whether you continue with us — which is a reasonable thing to demand from anyone you are evaluating.

Frequently asked questions

What should I ask an offshore development agency before signing?
Cover IP ownership and when it transfers, where the code lives during the build, NDA and DPA willingness, who specifically works on the project, demo cadence, how change requests are priced, what handover includes, and post-launch support.
How do I verify an agency's portfolio is real?
Open their apps in the App Store and Google Play. Check the developer account name, update history and user reviews. Ask for a reference client who is at least a year past launch, and read reviews on platforms that verify the reviewer actually worked with the company.
Is it safe to give an offshore team access to our code?
It is standard practice, and safest when the repository belongs to you from the start so access can be revoked at any time. Combine that with an NDA and, where personal data is involved, a Data Processing Agreement.
How much timezone overlap do I need?
Around four hours of shared working time is enough for a daily call and same-day answers. Zero overlap turns every clarifying question into a day of delay.
Should I pick the cheapest quote?
A quote well below the others usually means something has been left out — testing, documentation, project management or post-launch support. Compare what each quote actually includes before comparing the numbers.

Ready to scope your MVP? Get in touch or explore our portfolio, or grab the free MVP scoping checklist.

Ready to build something remarkable?

Book a free 20-minute scoping call. We'll review your idea, share relevant case studies, and outline a realistic timeline.

Reply within 24 hours · No commitment required