Can you leave? A vendor lock-in audit
A booking system you can't get your clients and history out of holds you more than a contract does. An interactive 0–100 audit measures the lock-in — and what to do so your data stays yours.
You don't choose a booking system just for today. One day you may want to leave — over price, features or the vendor. And that's exactly when it shows whether your data is really yours: can clients and history be exported, in a usable format, without penalties and with a backup at your side?
This report doesn't give generic migration advice. It gives an interactive audit: answer six questions and get a 0–100 lock-in score, plus what to add so the vendor keeps you with quality, not lock-in.
The score is computed from your own answers. We invent nothing. The only hard external anchor is GDPR Art. 20 — the right to get your personal data in a machine-readable format and pass it elsewhere.
Business and beauty media and comparison writers may cite this with attribution to YourSalon Research.
Exactly what you'll find on this page
We combine an interactive self-audit with a verified legal anchor. We label each content type.
An interactive audit (self-audit)
A 0–100 lock-in score from your answers. A model heuristic, not a measured statistic.
A verified legal anchor (GDPR)
The right to data portability (Art. 20) — the basis for taking your data with you. Source below.
A fix list
For each weakness, a concrete step to reduce lock-in.
An exit checklist
What to verify before you start using a system — or before you leave it.
The score is a model self-audit, not a legal review of your contract. Verify specific rights and periods in your contract and with the vendor.
Vendor lock-in audit — calculate your score
Six questions about how easily you could leave your current booking system. A 0–100 score shows your lock-in level and what to do so your data stays yours. Save your result with a link.
Names, contacts and consents in your own file that you can download any time yourself.
Who had what and when — not just names but the history retention rests on.
A machine-readable file (CSV, XLSX, JSON) you can import straight into another system.
Can you leave without a long lock-in, penalties or losing access to data?
A current copy of clients and history with you, not just in the vendor's cloud.
Communication and marketing consents you take with you and don't have to collect again.
Your lock-in score
You're tied to the vendor: data won't come out easily, there's no backup, exit is costly. Start exercising the right to portability (GDPR Art. 20) and back up to yourself.
- Find out and test the client export. GDPR Art. 20 gives you the right to get your data in a machine-readable format — insist on it.
- Confirm that history can be exported too, not just contacts — without it you start from zero on retention in a new system.
- Require export in a machine-readable format (CSV/XLSX/JSON). A PDF or image is practically impossible to import into another system.
- Review the contract — a long lock-in and exit penalties are a form of lock-in. Prefer a no-commitment option.
- Download a regular backup of clients and history to yourself. Your own copy is the fastest insurance against lock-in and outage alike.
- Keep records of communication consents so you can take them with you — otherwise you re-collect consents after a switch and lose reach.
A model self-audit from your answers. Weights are in the methodology. Score 0 = full portability, 100 = full lock-in. GDPR Art. 20 (data portability) is a verified legal anchor.
Key conclusions
Lock-in isn't the contract, it's the data
What really holds you is whether you can take clients and history out. Without export, even a short notice period is a formality — you start elsewhere from zero.
Format matters as much as access
A PDF export is nearly useless. Only a machine-readable form (CSV/XLSX/JSON) can be imported into another system.
You have the right — it's about exercising it
GDPR Art. 20 grants a right to portability. The key is knowing it and holding your own backup, not relying on the vendor's goodwill.
The cheapest insurance is your own backup
A regular export to yourself solves lock-in and outage at once. It's the fastest, highest-impact step.
What vendor lock-in is and why it touches salons too
Vendor lock-in is a state where leaving a provider is so costly or hard that you stay even when it no longer fits. With a booking system it doesn't show until you want to leave — and then you find that clients and history come out only with difficulty, in an unusable format, or not at all.
Lock-in has several layers: access to data, export format, contract terms, your own backup and portability of consents. Each looks innocent alone; together they decide whether you're free or trapped.
So the audit measures these layers and weights them by how much they block an exit.
The six factors the audit weights
The score weighs six factors: the ability to export clients, the ability to export history, the export format, exit terms, your own backup and portability of consents.
Client export carries the most weight — it's the core of what you must take with you. Right behind it: format, history and your own backup.
Terms and consents carry less weight but can drag out and inflate a switch, so we count them too.
How to read your score
0–33 (low lock-in): you control your data and can leave any time. The vendor keeps you with quality.
34–66 (medium lock-in): leaving is possible but with friction. Add the missing export, format or backup before you need to switch.
67–100 (high lock-in): you're tied in. Start exercising the right to portability and back up to yourself.
Locked-in vs. partly portable vs. free system
Three levels of portability side by side. The table shows what's missing at each and what it means the moment you want to leave.
Locked-in vs. partly portable vs. free system
Three levels of portability and what decides each on exit.
| Aspect | Locked-in | Partly portable | Free |
|---|---|---|---|
| Client export | Not possible / hard | On request | Any time and easily |
| History export | Not at all | Only part | Complete |
| Format | PDF / none | Non-standard | CSV/XLSX/JSON |
| Own backup | None | Occasional | Regular |
| Exit terms | Lock-in / penalties | Notice period | No commitment |
| What it means on exit | Start from zero | Switch with friction | Smooth switch |
A simplified three-level model; verify specific terms in your contract.
Five levels of data portability
Portability is built in levels. Each cuts lock-in — from a system you can't get data out of to full control with your own regular backup.
Five levels of data portability
A YourSalon Research model. Each level cuts lock-in.
- Lvl1
Locked-in
Data won't come out. Leaving means losing clients and history and starting from zero.
- Lvl2
Limited export
You export something, but only part or in an unusable format (PDF).
- Lvl3
Standard export
Clients and history in a machine-readable format. A switch is feasible.
- Lvl4
Own backup
You add a regular backup with you to the export. Lock-in and outage are covered.
- Lvl5
Full control
Data and consents are portable and backed up, no lock-in. The vendor keeps you with quality.
How to reduce lock-in today
The cheapest, highest-impact step: find out and test the export. Download clients and history in a machine-readable format and store them with you as a backup.
Second step: exercise the right to portability (GDPR Art. 20) if the vendor makes export hard. You have a right to your data, not a request.
Third: when choosing or renewing a system, ask about export, format and lock-in before you sign. Freedom is easier to negotiate at the start than at the end.
Recommended approach
From the cheapest, highest-impact steps to negotiating terms.
From the cheapest, highest-impact steps.
- 1Calculate your score above and find the biggest lock-in.
- 2Find out and test the export of clients and history.
- 3Download a backup in a machine-readable format to yourself.
- 4Exercise the right to portability (GDPR Art. 20) if export is made hard.
- 5Set up a regular backup, not a one-off.
- 6Keep records of communication consents so you can take them with you.
- 7When choosing or renewing, ask about export and lock-in before signing.
Portability and exit checklist
Go through the points — ideally before you start using a system.
- Can the client database be exported any time by yourself?
- Can visit and service history be exported too?
- In what format do I get the data (CSV/XLSX/JSON)?
- What are the notice periods and exit penalties?
- Do I have my own regular backup outside the system?
- Do I take communication consents with me?
- Do I know my right to portability (GDPR Art. 20)?
Methodology and limitations
The audit computes the score from six factors, each with its own weight: client export (weight 3), history export (2), export format (2), exit terms (1), own backup (2) and portability of consents (1). Each answer has a value of 0–1; the score is the weighted average × 100.
It is a model heuristic and a self-audit from your own answers, not a measured market average or a legal review of a specific contract. The weights are a YourSalon Research expert estimate.
The only hard external anchor is GDPR Art. 20 (the right to data portability), which underpins the claim that you have a right to get your personal data in a machine-readable format and pass it elsewhere.
Specific terms, periods and export scope vary vendor to vendor — verify them in your contract and with support, don't rely on the score alone.
Recommended citation: YourSalon Research: Data export & vendor lock-in (2026), yoursalon.cz/en/research/export-dat-a-vendor-lock-in.
Sources and methodology
The verified anchor is GDPR Art. 20; the other sources provide context. Each was opened and verified on the date shown.
- Nařízení (EU) 2016/679 (GDPR) — článek 20, právo na přenositelnost údajů
Evropská unie (EUR-Lex)
Podle čl. 20 GDPR má subjekt údajů právo získat osobní údaje, které poskytl správci, ve strukturovaném, běžně používaném a strojově čitelném formátu a předat je jinému správci bez překážek.
Published 2016-04 · Checked 2026-06-29
- Využívání informačních a komunikačních technologií v domácnostech a mezi osobami – 2024
Český statistický úřad (ČSÚ)
V roce 2024 mělo v Česku připojení k internetu 89 % domácností a 88 % osob ve věku 16+ byli uživatelé internetu (přibližně 7,6 milionu lidí).
Published 2024-11 · Checked 2026-06-29
- How digitalised have the EU's enterprises become?
Eurostat
V roce 2023 dosáhlo alespoň základní úrovně digitální intenzity 58 % malých a středních podniků v EU; cíl Digitální dekády je více než 90 % MSP do roku 2030.
Published 2024-08 · Checked 2026-06-29
Transparency
YourSalon offers a booking system with data export, so we have an interest in the topic. The audit therefore computes from your own answers, and we recommend applying the same criteria to any vendor, including us.
Corrections
Think a factor should carry a different weight? Write to us and we'll update the model with a date.
Report an inaccuracy →How to cite
YourSalon Research: Data export & vendor lock-in (2026), yoursalon.cz/en/research/export-dat-a-vendor-lock-in.
Edit history
- 2026-07-04 — First edition of the audit — six weighted factors, three lock-in bands, GDPR Art. 20 anchor.
For media
Business and beauty media and comparison writers may cite the audit methodology and the GDPR Art. 20 link with attribution to YourSalon Research.
Recommended citation: YourSalon Research: Data export & vendor lock-in (2026).
Frequently asked questions
What is vendor lock-in with a booking system?+
A state where leaving a provider is so hard or costly that you stay even when it doesn't fit. With a booking system it's mainly about whether you can take clients and history out in a usable format.
Is a higher score better or worse?+
Worse. 0 means full portability (you can leave any time), 100 means full lock-in — data won't come out and exit is costly.
Do I really have a right to take my data?+
Yes, your personal data that you provided. GDPR Art. 20 grants a right to get it in a structured, machine-readable format and pass it to another controller.
What's a PDF export good for?+
Practically nothing for a switch — a PDF won't import into another system. Require CSV, XLSX or JSON.
What's the fastest way to shed lock-in?+
Download a regular backup of clients and history in a machine-readable format to yourself. Your own copy solves lock-in and outage at once.
Does the report contain invented numbers?+
No. The score is a self-audit from your answers, the weights are a labelled expert estimate, and the only hard external anchor (GDPR Art. 20) has a stated source.
Related YourSalon pages
More research
Resources
Next step
Measured international studies and methodologies
This page is a practical overview for Czech salons. The measured international studies and full methodologies are published on yoursalon.eu:
Want your data under your control?
A booking system with export and backup means we keep you with quality, not lock-in. Try it for yourself.