Token-OPEX: Inference Controls, Not the Seat Budget
Angelika Beierlein
9 Min. read time Token costs aren’t a line item in SaaS contracts. They’re variable OPEX per workflow-and ...
The most expensive build-vs-buy decision is the one no one consciously made. In most organisations it happens by default: a team builds because it can, or buys because a vendor just gave a presentation. The real calculation belongs in front of the strategy slide. Treating build, buy, and partner as three quantifiable options leads to faster decisions – and far fewer reversals.
Key Takeaways
Related:The Operating Model That Survives the Reorg / Managed Security Services: The CISO Doesn’t Carry Liability Alone
What is the build-vs-buy decision? Build vs buy describes the choice of whether to develop a required software capability in-house, purchase it ready-made, or source it through a partner. It touches cost, speed, control, and dependency simultaneously. This is not a purely technical question – it determines where a company concentrates its scarce engineering capacity.
In practice, the build-vs-buy question rarely comes first. It surfaces once a project is already underway, a team has already formed a preference, or a vendor has already been given a slot in the calendar. By that point the decision has effectively been made before anyone ran the numbers. The real work must therefore begin earlier: with the question of whether the capability in question actually makes the business meaningfully different.
That assessment demands honest self-appraisal. A payment processor, an identity service, or a content management system are solved problems. Building them in-house means competing against vendors who have done nothing else for years. Anyone who builds anyway is funding a second-rate commodity product – and tying up capacity that no competitor will ever see.
The underlying principle is simple: buy the ordinary, build the unique. Best-in-class services handle standard functions, connected via APIs. As a rough heuristic, internal build capacity focuses on the 10 to 20 percent that actually differentiates the business – a pricing engine, logistics logic, or a proprietary matching algorithm.
Between build and buy lies a frequently overlooked third path. A partner model – whether co-development or managed service – comes into play when a capability is differentiating but the organisation hasn’t yet built the competency in-house. It distributes execution risk and keeps domain ownership closer to home, but creates a new dependency and raises the question of who ultimately bears responsibility. This managed approach is exactly what many organisations choose for security, where running it yourself is rarely viable and a pure off-the-shelf solution would be too inflexible.
Anyone who builds the ordinary themselves is paying for their differentiation with the hours they no longer have.
The rule of thumb that orders the matrix
Buy commodity, build differentiation, partner the gap. Assigning every capability to one of these three categories clarifies the decision faster than any TCO spreadsheet. The numbers come afterwards – and usually confirm what the categorisation already suggested.
The visible figures mislead in both directions. With buy, a manageable licence fee appears in the proposal – but integration, customisation, training, and migration pile on considerably over the years. With build, the first sprint looks affordable, until maintenance, security updates, feature upkeep, and the drain on scarce developers flip the balance. The partner path merely shifts these costs; it doesn’t eliminate them: vendor management, contractual exit clauses, service levels, shared accountability, and knowledge transfer back in-house all belong in the same calculation. A sound decision runs all three options across five years, including the costs that never appear in any proposal.
The most expensive line item doesn’t show up in any table: opportunity cost. Every developer hour spent on a commodity problem is an hour lost to the capabilities that genuinely set you apart. That missed differentiation compounds over time far more painfully than any licence fee. Factor it in, and build starts to look considerably less attractive for commodity topics.
In German mid-market companies, the calculation frequently tips on the talent question. Building requires a team that sustains the solution for years – not just builds it. In a depleted labour market, that team is more expensive and harder to retain than any licence. For Mittelstand organisations, these holding costs often make buy or partner the more compelling choice, since maintaining a permanent development team is harder to secure than a contract.
In larger enterprises, by contrast, lock-in anxiety dominates. A deeply integrated standard product binds through data models and processes, and switching becomes costlier with every passing year. Here it pays to complement the differentiation logic with a sovereignty logic: keep interfaces open, secure data ownership, and evaluate the partner option for critical components before a single vendor dictates the terms. Organisations that distribute decision rights clearly move faster – as the operating model illustrates.
The first step is a list of the capabilities in question, each with two honest assessments: how strongly it differentiates the business, and how mature your own competency is in that area. The assignment follows almost automatically. Low differentiation points to Buy; high differentiation with mature competency points to Build; high differentiation without competency points to Partner. Only for these pre-sorted candidates does a five-year calculation pay off – including integration, maintenance, and opportunity costs. This sequence inverts common practice: strategic classification first, then the numbers, and vendor selection last. The strategy slide belongs at the end of the process, not at its beginning.
When the capability meaningfully differentiates your business and your internal competency is mature enough to sustain it over the years. For standard functions like payments, authentication, or a content management system, that’s rarely the case. There, custom development competes against specialized vendors while consuming capacity that could otherwise drive differentiation.
It fits when a capability is differentiating but the in-house expertise isn’t there yet. Co-development or a managed service shifts execution risk outward while keeping domain ownership internal. That way, you can build a distinctive solution without having to hire an entirely new team from scratch.
Because the license is only the visible tip of the iceberg. Integration, customization, training, and migration add considerably to that figure over five years – and with custom builds, maintenance and opportunity costs pile on top. A solid calculation looks at total cost of ownership across the full lifecycle, from year one through to decommissioning.
With a list of the capabilities in question, each rated by degree of differentiation and internal competency. That yields a pre-sort into Buy, Build, or Partner. Only then comes the five-year cost calculation for the shortlisted candidates – and vendor selection comes last.
Read more on Digital Chiefs
Digital ChiefsThe Operating Model That Survived the ReorganizationDigital ChiefsApple Builds AI as Its Moat: The Golden Gate StrategyDigital ChiefsThe global market is disintegrating – Europe’s strength becomes a trap.More from the MBF Media Network
cloudmagazinCloud Repatriation: When Bringing Workloads Back Actually Pays Off mybusinessfutureCloud or On-Prem: What Actually Counts from a Business Perspective securitytodaySecurity Awareness: Why Click Rate Measures the Wrong ThingImage source: AI-generated (June 2026), C2PA certificate embedded in image