Do not be polite. Interrogate their process. If they get defensive, they are hiding something.
1. "Can you show me the commit history for your last three projects?"
Why: If they refuse, they are likely outsourcing the software development work to freelancers or ghost developers. You want to see consistent code contributions from the team you are hiring.
2. "What is your developer attrition rate in the last 12 months?"
Why: The Noida tech hub has a high turnover. If their attrition is above 20%, your lead developer will quit mid-project, taking all the domain knowledge with them.
3. "How do you handle 'Scope Creep' financially?"
Why: You need to know if they will nickel-and-dime you for every minor change. A vague answer here means you will receive a surprise bill later.
4. "Can I speak to a client who was unhappy with your work?"
Why: Every agency has a bad project. If they claim 100% satisfaction, they are lying. You want to know how they fixed the mess, not that they are perfect.
5. "Do you have a documented disaster recovery plan for my data?"
Why: If their server crashes or they get ransomed, your IP is gone. If they don't have a plan on paper, they are gambling with your business.
6. "Will I have direct access to the developers, or must I go through a Project Manager?"
Why: A "Project Manager wall" is often used to hide the fact that the developers don't speak English or are working on three other projects simultaneously.
7. "Are you compliant with GDPR and PCI DSS, and can you prove it?"
Why: Security compliance is binary; you are either GDPR or PCI DSS compliant, or you are liable. "We follow best practices" is not a legal defense.
