All You Ever Wanted To Know About Third-Party Software Support

Serious enterprises are diligent about vendor risk management to protect their operations and reputation. In this context, it is important to understand the risks associated with Third Party Software Support (TPSS) offered by independent companies competing with the original software vendor’s offerings. A TPSS has no formal business or technical relationship with the original vendor (OEM) whatsoever – they are not a customer, a business partner or recognized service provider.

In January 2024, Allianz published their 2024 Risk Barometer and cyber incidents now top the list!

For any software used in your enterprise, you are dependent on constant, immediate threat protection.

A TPSS offers customers what appears to be a low-cost alternative to the support provided by the software vendor (OEM), however, competing solely on price with no ability to deliver the same outcomes.

One of the challenges for a TPSS is that it does not have access to the necessary information and resources to solve even simple issues, as a TPSS has no legal access to any of the vendor's source code or other intellectual property (IP). In contrast, the vendor has direct access to product design specifications and engineering expertise, which are required to provide comprehensive support. No one knows a software program more intimately than its developer.

Keep in mind that if the OEM provides an update/fix for a certain issue, the TPSS does not have any distribution rights for such updates, as they are only available from the OEM for customers that have active support subscriptions with the OEM. A TPSS cannot create an archive of software updates and fixes without violating the OEM copyright – court cases in North America were won by the OEM. Even if a TPSS had access to an update, the software license agreement disbars you from using it without an active software support subscription with the OEM.

Consider the risks if you run into an issue with your use of a particular software program in one of the scenarios below and consider what is needed to resolve it. Typically, the TPSS relies on a range of independent consultants (not employees) and resolving issues will be challenging except for usage questions.

One more risk is the potential for data breaches. A TPSS may not have the same level of data security awareness, which may lead to data breaches and theft of sensitive information and result in serious consequences for both the business and its customers, including financial losses, loss of trust, damage to the business’s reputation, legal and compliance repercussions. The TPSS has no ability to remediate any security issue discovered in the product compared with the OEM creating a fix with thorough testing.

TPSS Claims for Support Services for HCLSoftware Products

In conclusion, while a TPSS may offer lower direct costs, they fall short in key areas. Customers should carefully consider the level and quality of support they require, and whether a TPSS is the best option for their specific needs. Ultimately, the decision to use TPSS should be made with caution, as it will not always be the most reliable or effective solution.

Protecting your business is HCLSoftware’s top priority. Make the right choice when it comes to your support partner. Subscribing to HCLSoftware Support keeps your investment current and protects your business continuity and data security.

If you have questions about your Support options, please contact your HCL sales representative, or business partner.

Learn more about HCLSoftware Support.