client, business, marketing, website, online, technology, office, tablet, communication, analytics, connection, advertising, laptop, web, digital, design, blue, customer, network, hubspot, marketing agency, teaching, academy, social, presentation, client, client, client, client, client, marketing agency, academy
Photo by Campaign_Creators on Pixabay

Reviews

Retention software checks: London, Manchester, Edinburgh

A UK guide to retention software checks: ICO registration, Article 28 data terms, contract clauses and due diligence for London, Manchester, Edinburgh buyers.

Retention software helps customer success, support and account teams spot churn risk, automate outreach and measure whether their retention programmes work. This guide sets out the checks to run before you sign in London, Manchester or Edinburgh: the data protection and financial services rules that apply UK-wide, the contract terms worth negotiating, and a due diligence checklist you can work through. It does not rank providers or quote prices, and the product categories are the same in all three cities; what changes is the law that governs the contract, the compliance evidence buyers ask for and how procurement is run. A platform of this kind rarely stands alone, so think about how it fits alongside your CRM and support desk customer success software vs CRM.

What the category covers and why your city matters

The phrase covers several kinds of product. It can mean a customer success platform with health scores and playbooks, a churn prediction tool, a journey automation engine, an in-app messaging system, or a survey and feedback platform. Most UK buyers combine two or more of those capabilities, and integration with your CRM, billing and support desk is usually more important than any single feature.

Location changes the buying process in four practical ways. First, procurement is run differently, from formal security reviews to an evaluation led by a head of customer success. Second, the sectors concentrated in each city change the compliance evidence a vendor must supply. Third, distance from the vendor's delivery team affects how much implementation and training happens on site rather than remotely. Fourth, the law that governs the contract can differ, which affects how terms are interpreted and which courts hear a dispute.

That last point matters. Contracts for businesses in London and Manchester are usually governed by the law of England and Wales. Contracts for businesses in Edinburgh are often governed by Scots law unless the parties agree otherwise. The practical effects include which courts hear disputes and how certain terms are interpreted. It is not a reason to avoid a vendor, but it is a reason to have the contract reviewed by a solicitor qualified in the relevant jurisdiction.

Data protection law is different. UK GDPR and the Data Protection Act 2018 apply across the whole of the UK, and the Information Commissioner's Office (ICO) is the UK-wide regulator. There is no separate data protection regime for Scotland, England or Wales. A platform processing customer data therefore needs a lawful basis, a retention schedule and a clear data processing agreement wherever your customers live.

Three UK buying environments

London

Vendor pool
Deepest
Procurement
Toughest
Cost base
Highest
Buying risk
Underestimated work

Manchester

Vendor pool
Smaller
Procurement
Pragmatic
Cost base
Middle
Buying risk
Overpaying

Edinburgh

Vendor pool
Specialist
Procurement
Compliance-led
Cost base
Lower
Buying risk
Overpaying

Legal and regulatory checks for all three cities

Before you compare features, confirm the vendor can meet your legal obligations. The checks below apply in London, Manchester and Edinburgh.

Under UK GDPR you need a lawful basis for processing personal data. Consent, contract, legitimate interests and legal obligation are the common bases for retention software. You also need to tell customers what you do with their data, how long you keep it, and how they can exercise their rights. The ICO publishes guidance on contracts and data processing agreements. Where a vendor processes personal data on your behalf, you need a written contract that meets Article 28 of UK GDPR. That contract must cover the subject matter, duration, nature and purpose of the processing, the type of personal data and categories of data subjects, and the obligations of both parties. It must also list sub-processors and set out how international transfers are handled.

The ICO also requires most organisations that process personal data to register, unless an exemption applies. Check that your vendor is registered where it needs to be. Our guide to customer success software data protection covers the detail.

If you are regulated by the Financial Conduct Authority (FCA), further rules apply. The FCA Handbook includes outsourcing rules in SYSC 8 and record-keeping requirements in SYSC 9 that affect how you use third-party systems. Edinburgh has a high concentration of financial services and fintech firms, so these checks come up more often there, but the rules apply to any FCA-regulated firm in the UK. Our article on FCA and Ofcom rules churn tactics explains how those rules shape outreach, and customer success software UK regulations gives a broader overview.

Data residency is another common question. If your vendor stores or processes data outside the UK you need appropriate safeguards, and the ICO provides guidance on international transfers. Ask where data is stored, which sub-processors are involved, and what happens on termination.

Local vendor presence

London

UK HQ
Most global platforms
Local teams
Account, delivery, support
References
Local
Cost
Highest salaries

Manchester

UK HQ
Few
Local teams
Thinner
References
London-based
Cost
Lower

Edinburgh

UK HQ
Specialist
Local teams
Regulatory focus
References
Financial services
Cost
Lower

Buying in London

London has the largest concentration of software vendors, professional services firms and customer success teams in the UK. That gives buyers more choice, but it also creates more noise. Your shortlist can fill quickly, and vendors know they are one of many, so expect to work harder for a tailored response rather than a standard pitch.

Formal procurement is common in London, even at mid-market size. Security questionnaires are long, and questions about data retention, subject access requests and sub-processors arrive early. Reference checks are standard and usually include at least one customer in a comparable sector. Vendors expect this and staff for it, which is why London deals often move slowly but predictably.

Implementation and consultancy can be scoped as fixed price or time and materials, so agree the delivery model and travel expectations in writing. Fix your requirements first, then compare what each vendor will deliver against them; a structured supplier comparison saves time.

Practical steps for London buyers: narrow your list by sector and integration needs rather than by vendor count; check Companies House filings for financial stability; confirm support hours cover your working day; ask for the named implementation lead and their relevant experience; and request a reference call with a customer of similar size.

Buyer scrutiny by city

London

Process
Formal procurement
Security
Long questionnaires
References
Standard, comparable sector
Speed
Slow, predictable

Manchester

Process
Pragmatic
Security
Commercial focus
References
Informal, local
Speed
Faster

Edinburgh

Process
Compliance-led
Security
Data residency
References
Regulatory evidence
Speed
Regulation-driven

Buying in Manchester

Manchester's tech and media cluster has grown quickly, with strong ecommerce, subscription and direct-to-consumer businesses. Those firms are natural retention software buyers because churn hits subscription revenue directly. If you run a subscription business, our guide to how to reduce SaaS churn UK covers the operational side.

Manchester's subscription and direct-to-consumer businesses tend to judge a vendor on delivery rather than on postcode. Ask how remote onboarding is run, who leads it, and what the escalation path looks like when something breaks during your peak period. A remote implementation is not a problem if the vendor can demonstrate successful ones with references from comparable businesses.

Manchester buyers are often pragmatic. The evaluation is frequently led by a head of customer success or operations rather than a formal procurement function, so decisions can be faster. Scrutiny still exists, but it concentrates on commercial outcomes: how quickly churn falls, how much admin the tool removes, and whether the team will actually use it. Take reference calls all the same, and ask what implementation actually involved against the original scope.

Negotiation in Manchester tends to focus on first-year commercial terms and local success management. Multi-year commitments are common where the vendor offers a named success manager, so ask what happens if that person leaves. Confirm that remote onboarding is included in the agreement rather than treated as an extra.

Pricing and negotiation norms

London

Pricing pressure
Highest
Discounts
Vendors discount
Negotiation
Implementation fees
Renewal risk
Uplift caps

Manchester

Pricing pressure
Middle
Discounts
Hard on year one
Negotiation
Multi-year deals
Renewal risk
Local success manager

Edinburgh

Pricing pressure
Lower
Discounts
Less focus
Negotiation
Contract terms
Renewal risk
Exit provisions

Buying in Edinburgh

Edinburgh is Scotland's fintech and data hub. Financial services firms, asset managers and data businesses make up a large share of serious buyers, and they approach a retention software purchase with regulatory obligations already in mind. FCA-regulated firms need audit trails, data residency answers and evidence of how the platform supports record-keeping, which narrows the field. Vendors without a credible financial services story rarely reach a second meeting.

Scots law is a practical consideration. If your contract is governed by Scots law, disputes go to the Scottish courts. That is not a barrier, but your legal review should cover the governing law clause, the jurisdiction clause and how termination and liability are handled. Some vendors will agree to English law if you ask; others will not. Decide early what you can accept.

Edinburgh buyers often evaluate remotely and travel for the final sessions, so build that into your timetable rather than treating it as a delay. Ask for financial services references and check whether the vendor has experience of FCA outsourcing rules. Data residency questions are more common here, so have your requirements ready before the first call.

A practical Edinburgh checklist: confirm data residency and sub-processor arrangements; ask how the platform evidences consent and deletion; check the governing law and jurisdiction clauses; request a reference from an FCA-regulated customer; and confirm support hours cover your working day. If you are regulated, map the FCA Handbook rules to your vendor checks before you sign.

Worked example: five vendors

London (3)

Licence quotes
Within 30%
Implementation
Varied by 2x
Strength
Integration depth

Manchester (1)

Licence quotes
Within 30%
Implementation
Varied by 2x
Strength
Price and local support

Edinburgh (1)

Licence quotes
Within 30%
Implementation
Varied by 2x
Strength
Compliance evidence

Contract terms to negotiate in any of the three cities

The same contract issues appear in all three cities. Negotiate them before you sign.

Renewal clause. A modest first-year arrangement with uncapped renewal terms is a bigger risk than a higher fixed commitment. Ask for the renewal terms in writing before you sign, and treat a refusal to cap them as a risk in itself.

Exit assistance and data export. Specify the format of your export, the timeline for delivery and any conditions attached. You should be able to export customer records, health scores, playbooks and history in a usable format, and you should test the export before you commit.

Support hours. Confirm that support covers your working day and your peak periods, and define severity levels and response times in the contract. If your team works across time zones, check whether extended coverage is an extra.

Implementation scope. Agree the scope in writing. Fixed-scope implementation is easier to budget but only works if the scope is clear; time-and-materials contracts need a change control process. Ask who owns the project on the vendor side and what happens if that person leaves.

Data processing agreement. The DPA must meet Article 28 of UK GDPR. It should list sub-processors, describe security measures, set breach notification timelines and explain how international transfers are handled.

Pilot period. Ask for a pilot with agreed success measures. It reduces risk and gives you evidence for a full rollout, provided the success measures are agreed in writing before the pilot starts.

Checklist of contract terms to negotiate before signing retention software (London compared with Manchester and Edinburgh on retention software buying)
These four terms protect buyers from the biggest first-year and renewal risks. Image: Customer Care Tech
- [ ] Exit assistance and data export format - [ ] Reference calls with two customers in your sector - [ ] A pilot period with agreed success measures

Due diligence checklist for UK buyers

Work through this before you invite any vendor to a second meeting. It applies in London, Manchester and Edinburgh.

  • Check the vendor's Companies House filings for financial stability. Look at accounts, the confirmation statement and directors.
  • Confirm the vendor's ICO registration where applicable, and check its data processing agreement against Article 28 of UK GDPR.
  • Ask for a security summarycertifications, penetration test summary, incident history and business continuity arrangements.
  • Request a sub-processor list and confirm where data is stored.
  • Ask for reference calls with customers in your sector. Ask what implementation actually involved against the original scope, how long it took before the team stopped needing vendor hand-holding, and what they would negotiate differently.
  • Test the data export format and completeness before you sign.
  • Confirm support hours cover your working day and peak periods.
  • Agree a pilot period with success measures.
  • Check the contract's governing law and jurisdiction, especially in Edinburgh or when contracting with a Scottish entity.
  • Set internal success measures for the rollout, not just vendor measures.

For more on comparing vendors, see our product comparison guide and the selection checklist.

UK buyer comparison checklist

  • Confirm similar size and sector customers
  • Check data storage and sub-processors
  • Ask about UK GDPR subject access
  • Get implementation scope and price in writing
  • Ask for renewal uplift in writing
  • Speak to two references you chose
  • Agree exit terms and data export

A table can help you compare practical differences across the three cities without ranking them.

London

Legal jurisdiction for contracts
Usually England and Wales
Data protection regulator
ICO (UK-wide)
Financial services regulator (if applicable)
FCA (UK-wide)
Vendor field
Largest concentration in the UK
Procurement style
Often formal, detailed security reviews
Travel and remote delivery
Local vendors common
Key extra checks
Integration depth, local references

Manchester

Legal jurisdiction for contracts
Usually England and Wales
Data protection regulator
ICO (UK-wide)
Financial services regulator (if applicable)
FCA (UK-wide)
Vendor field
Smaller, some northern specialists
Procurement style
Often led by CS or operations
Travel and remote delivery
Some remote delivery likely
Key extra checks
Remote onboarding, subscription references

Edinburgh

Legal jurisdiction for contracts
Often Scotland, unless agreed otherwise
Data protection regulator
ICO (UK-wide)
Financial services regulator (if applicable)
FCA (UK-wide)
Vendor field
Smallest, specialist-led
Procurement style
Often compliance-led
Travel and remote delivery
Remote evaluation common
Key extra checks
Scots law, FCA outsourcing rules, data residency

Common questions

What should I check first when comparing vendors?
Start with your requirements. Fix the capabilities, integrations and support hours you need, then compare every vendor against the same list. That prevents a strong demo from inflating the score.
Do Edinburgh buyers need different software?
No. The product categories are the same. What changes is the evidence you need: FCA-regulated firms want audit trails, data residency answers, sub-processor clarity and record-keeping evidence before they can proceed.
How long should a UK retention software evaluation take?
There is no fixed period. Formal procurement and security reviews take longer, and compliance-led reviews in Edinburgh can extend the timetable. Plan for internal resource and legal review time.
Does UK GDPR change what I can ask vendors?
Yes. It gives you firm grounds to ask about lawful basis, retention periods, sub-processors, deletion and international transfers, and vendors should answer directly rather than deferring.
Should I shortlist vendors with no local office?
Yes, if support and implementation cover your working day and travel is manageable. Local presence is a proxy for responsiveness, not proof of it, so ask for remote implementation references.
What is the biggest benchmarking mistake?
Comparing quotes built on different scopes. Fix your requirements first, then compare vendors against the same list in every city.

More in Reviews