You need someone to handle your IT. You shortlist three firms. Two are positioning themselves as managed service providers; one is an IT consultancy with professional services on its rate card. The pricing differs, the contract lengths vary, and you are not sure what distinguishes them. Many founders of owner-managed businesses have been here, often after the contract is already signed, when the provider explains why your particular problem falls outside what they were engaged to do.
What choice are you actually making?
The real question is whether you need ongoing capacity or expert accountability. Business services cover repeatable, operational tasks at volume: payroll, facilities, IT support under an SLA. Professional services bring regulated or specialist judgement to a specific problem: legal advice, a tax restructure, a system implementation that requires expert design. Both are legitimate. The risk is buying one when you needed the other.
The UK government groups both under the “professional and business services” sector, which employs around five million people and accounts for 14% of the UK workforce. What the sector label obscures is the functional difference. An accountancy practice providing tax advice is in professional services. The firm that processes its payroll is providing a business service. Your job as the buyer is to identify which type you are commissioning before the contract is signed.
Many providers blend both. A large IT firm might combine high-end consulting with outsourced operations. A mid-size local firm might sell helpdesk cover under a managed service agreement and charge separately for a cloud architecture redesign. The category of the work determines your rights, the insurance that responds if things go wrong, and your regulatory position. The firm’s name tells you none of that.
When does a business service fit?
A business service is the right choice when the work is defined by volume, consistency, and availability rather than by the quality of expert judgement involved. If you can describe what success looks like in terms of uptime, response times, or volumes processed, you are in business services territory. Think outsourced payroll, contact centre management, building facilities, or standard IT helpdesk cover.
Business services typically run under long-term contracts with SLAs as the primary performance metric. That structure suits both parties: the provider prices for volume and predictability; you get operational continuity at a known cost. For a 10 to 40 person owner-managed business, this kind of outsourcing frees internal capacity for work that actually generates revenue.
One thing to watch: business service contracts frequently run 12 to 36 months, with auto-renewal clauses and meaningful exit costs. If your business changes shape and the provider cannot grow with you, buying out of a multi-year agreement can cost more than the savings that justified it. Read the exit provisions before comparing price.
When do you need professional services instead?
Professional services are the right call when you have a specific problem requiring regulated or specialist input, and where the outcome depends on the quality of that judgement. The work is typically time-limited: a legal review, a tax restructure, a system implementation, an FCA authorisation application. You are buying the provider’s accountability for the advice or design, not just their time.
Professional services providers are typically regulated. A solicitor is authorised by the Solicitors Regulation Authority. An accountant carries ICAEW or ACCA accreditation. An FCA-regulated adviser operates under conduct rules. That regulation matters for two reasons. It provides a complaints and redress mechanism if things go wrong. It also typically requires professional indemnity insurance, meaning there is a financial backstop if the advice causes you a loss.
The contract shape differs too. Professional services engagements are usually scoped by project or matter, with defined deliverables: a report, a design, a legal document, a system go-live. That structure means you can change providers between phases if a relationship is not working, and it creates a clearer paper trail for regulators, investors, or a future buyer during due diligence. The FRC regularly sanctions professional services firms for failures, which also means regulators hold them to account in ways they simply cannot hold unregulated business service providers.
What does it cost to get this wrong?
Getting this call wrong in either direction costs you something real. Hiring a professional services firm for routine operational work adds overhead you cannot justify and creates a relationship that is difficult to exit. Hiring a business service provider for work that required regulated expertise can expose you to regulatory risk, re-work costs, and liability gaps that are expensive to untangle.
On the regulatory side, the FCA’s Senior Managers and Certification Regime makes senior managers personally accountable for the suitability of delegated service relationships. Using an unqualified business service provider for compliance-critical tasks is an aggravating factor in any enforcement action. The ICO takes a similar position on data protection, requiring GDPR-compliant contracts and documented evidence that third-party processors offer sufficient technical and organisational guarantees.
In 2020 the ICO fined British Airways £20 million for a data breach affecting around 400,000 customers, linked in part to vulnerabilities in third-party systems. Outsourcing a function does not outsource your liability for how it is managed. Capita’s 2023 cyber incident makes the same point from a different angle. When Capita disclosed a breach that exposed data held on behalf of local authorities and pension schemes, ICO investigations followed. Scale and reputation did not protect the clients who had outsourced without appropriate professional oversight on data protection and security.
For owner-managed businesses commissioning AI-enabled tools for clients in the EU, the EU AI Act adds a further dimension. UK firms may be classified as providers of high-risk AI systems if they commission software without appropriate compliance advice, creating obligations they may not have anticipated when they signed what looked like a standard business service agreement.
What should you ask before you sign anything?
Before committing to any significant external service relationship, four questions will tell you whether you have the right type of provider. Price and prestige are the wrong starting points. What matters is whether the contract allocates accountability in a way that protects you when things go wrong, and whether the provider’s regulatory status matches the work you are commissioning.
Is the work regulated? If it involves legal advice, financial services, audit, tax, or safety-critical design, you need a provider who is regulated, carries professional indemnity insurance, and can produce formal documentation. Ask for the name of their regulatory body and check the registration directly.
What does the contract hold the provider accountable for? Business service contracts typically use best-efforts language and cap liability at fees paid. Professional services contracts usually carry broader accountability for advice quality. Read the liability and indemnity clauses before comparing the headline fee.
What are the data protection arrangements? If the provider will process personal data on your behalf, you must have a GDPR-compliant data processing agreement in place. The ICO requires documented evidence that processors offer sufficient technical and organisational guarantees. A provider without credible answers here is a risk regardless of their label.
What does exit look like? For business service contracts, ask for minimum notice periods, auto-renewal windows, and exit fees before you sign. For professional services, confirm that deliverables are yours from handover and there is no lock-in to ongoing fees once the project is complete. The NCSC recommends that owner-managers set clear exit and data-return provisions in any IT service contract as a matter of course.
The label on a supplier’s website rarely tells you which category they sit in. The contract does. Read it with these four questions in hand, and you will know whether you have the right type of provider before you commit.
