[Eridrus]

To go a step further, the reason it's often impossible to add a new vendor if that you've signed a bunch of contracts with your customers saying you're not going to send their data to other vendors in all sorts of various flavors.

[xtracto]

And the pain of the procurement process, specially when you follow a certification such as iso27001, soc2 or similar.

[Eridrus]

soc2 is stupidly viral but generally not a blocker since its pretty straightforward to get.

It's really the per-customer contractual agreements you had to sign to grow that make things horrible.