HR · DEFINITIVE GUIDE · 16 MIN
How to pick an HRIS without losing your mind
Switching HRIS is one of those decisions that looks small until you get it wrong. We've spent five years listening to Heads of People explain why they made the wrong call — and the pattern is always the same: they bought based on a demo and found the problems during integration. This guide is the checklist that would have saved them six months.
Before you talk to any vendor
The number one mistake is jumping into demos before knowing what you're looking for. Before any call, write two things on a single page: the 3 processes that hurt most today, and the 3 your CEO will ask about in the next 12 months. That page is your filter. If a product doesn't solve five out of six, don't spend the next hour.
The 28 questions your vendor must answer
Data and sovereignty (5)
- Where is the data physically stored? (EU, US, other)
- Do you have a signed data processing agreement with EU standard clauses?
- What does it cost to export all my data in raw format (CSV)?
- How long do you take to delete it after I terminate?
- Are there sub-processors? Who?
Product (8)
- Do you offer time-recording compliant with RDL 8/2019 with immutable timestamps?
- Are time-off requests pushed to Google/Outlook calendars?
- Is there a multi-level approval flow configurable per person?
- Can I configure different policies per country without separate instances?
- Do you run payroll in-house or integrate with an external provider?
- Is there an employee portal to download digitally signed payslips?
- How many languages does the employee UI support?
- Is it accessible from mobile without a native app (PWA)?
Integrations (5)
- Is there a public API with documentation? Which auth method?
- Webhooks for which exact events?
- Native connectors for Slack, Teams, Google Workspace, Microsoft 365?
- SSO integration (SAML 2.0 / OIDC)?
- How many API endpoints? Request limits?
Commercial (5)
- What's the price per employee per month including everything I need?
- Setup fee? How many onboarding hours included?
- How is billing computed: per contracted, per active, per licence?
- Lock-in period? Early-termination penalty?
- Annual price increases? Contractual cap?
Support (5)
- Do you have a written SLA for response times?
- Is support in my language and timezone?
- Dedicated Customer Success or Enterprise-only?
- Assisted migration from my current system? Cost?
- What happens if I leave within 12 months?
Red flags
- "Custom pricing" with no public tier: you'll overpay.
- "Call us for a demo" with no product tour on the website.
- Roadmap with no concrete dates: it's not going to ship.
- Demo on a pre-configured machine with no real data: not real.
- Salesperson can't answer technical questions: there's no product, just slides.
How to evaluate after the demos
Always ask for trial access with your real data, at least 14 days, and configure three core processes end-to-end. Looking at the product isn't enough — you have to touch it. 80% of failures show up trying to configure an exception, not the happy path.
How to evaluate the trial — the filter nobody applies
90% of buyers spend 2 hours on the trial and decide. Wrong. The trial is your chance to see the product perform under pressure, not look pretty. Design 5 specific real-world scenarios:
- Import 80 employees from Excel with a custom field. Measure how long it takes and whether it loses data.
- Create a medical leave with an attached certificate. Check the holiday balance, manager notification, and file storage permissions.
- Configure a split-shift clock-in policy (morning 9-2, afternoon 4-7). Have a real employee clock in respecting that exact policy.
- Launch a 360º review to 5 people. How many clicks does the manager need? Does the system force a follow-up conversation?
- Ask support to migrate a specific dataset. Measure how long they take to respond and the tone they use.
If any of the 5 scenarios breaks, doesn't resolve, or requires "contact sales", you have real information. The recorded demo doesn't give it to you.
5 hidden cost categories vendors will hide
1. Setup fee
Some vendors charge €1,000–€3,000 extra setup. Others "give it away" but add 2 months of service you're already paying for. Ask: is there setup cost, under what conditions is it waived, what if setup takes longer?
2. Per-envelope signing
DocuSign and similar charge €1–€5 per signed document. For 100 people signing addenda, NDAs and contracts, that's €600–€2,000/year extra. Vendors like Orquiva include eIDAS signing without per-envelope cost. Ask: cost per signature, monthly cap, behavior on overage.
3. Add-ons that are basic features
Some sell reporting, audit log, SSO or API as separate add-ons. Challenge whether what they call premium is basic in your sector. Ask: complete list of what's in each plan and what's billed separately.
4. Annual increases with no cap
Silent renewal: 15–35% hike in year 2 without warning. Ask: written contractual cap on annual increases? Reasonable is CPI + max 5%.
5. Headcount-drop penalty
Going from 80 to 60 employees: does the contract force you to keep paying for 80? Ask for a proportionality clause.
Negotiation levers beyond discount
- 24–36 month price freeze: more valuable than initial 10% off.
- Add-ons included in the base plan: pick the 2–3 you'll use most.
- Exit clause without penalty if headcount drops >30% or SLA missed twice.
- Assisted migration with dedicated consultant the first month, no extra cost.
- Early access to roadmap features — especially with young vendors.
Signs the vendor will fail in 6 months
- The salesperson disappears post-signing — generic Customer Success takes over without knowing your case.
- Support only via ticket: no direct channel.
- Documentation untranslated with head-office examples.
- Public roadmap dates that don't ship — and nobody acknowledges it.
- Bug reports become "in the backlog" with no priority or ETA.
Contract clauses to check before signing
- DPA: EU standard clauses, EU data residency, sub-processors listed.
- Data return deadline at contract end: 30–60 days in exportable CSV.
- Post-cancellation retention: deletion within 90 days, certified.
- Audit rights or current SOC 2 / ISO 27001.
- Liability cap: negotiate 2× annual fee for serious breach cases.
- Governing law: courts in your country, not Delaware.