The cheapest quote rarely makes the best partner. Before you sign, pressure-test a provider on four things: the people who answer your calls, how they handle your data, whether they can stay online and integrate with your tools, and how the deal is structured. Twelve questions below cover all four. A good provider will answer every one without flinching.
A call center becomes your brand the moment a customer dials in. If the agent is confusing, the data isn’t safe, or the line drops during an outage, that’s your reputation on the line — not the vendor’s. So vetting one is less about price and more about trust.
The good news: the right questions surface the truth fast. A serious provider answers each of these clearly and specifically. Vague, defensive, or “we’ll get back to you” answers to the basics are themselves the answer. Use the list below as a scorecard when you’re comparing shortlisted providers — South African or anywhere else.
01The people answering your calls
Everything downstream depends on who is actually on the headset and how long they stay. Start here.
1.Where are your agents located, and are they your employees or subcontractors?
Why it matters. Some “providers” quietly subcontract your work to a third site with different standards, pay, and oversight. You want to know exactly where your customers’ calls land and who employs the people taking them.
A good answer sounds like: “Our agents are our own full-time employees, based in our own Cape Town, Durban and Johannesburg call centers. We don’t subcontract client work. You’re welcome to tour a site or meet the team over video.”
2.What is your agent attrition rate, and how do you keep good people?
Why it matters. High turnover means your customers keep meeting brand-new agents who don’t know your product. Retention is a proxy for how well a center is actually run.
A good answer sounds like: a specific number, plus a real retention plan — career paths, competitive pay, and dedicated team leads. A provider that tracks attrition and states it plainly beats one that dodges.
3.How do you hire and train agents for my market and customers?
Why it matters. Accent, cultural fit, and product knowledge are what make offshore support feel seamless. Generic training produces generic, scripted calls.
A good answer sounds like: a described hiring bar for English fluency and neutral accent, a structured onboarding on your product and tone of voice, and ongoing coaching — not just a headset and a script on day one.
02Security, data & compliance
Your customers’ personal and payment data will pass through this provider. Treat this section as non-negotiable.
4.What security certifications do you hold, and when were they last audited?
Why it matters. Certifications are third-party proof that security is real, not a promise on a sales deck. Ask for current certificates and audit dates.
A good answer sounds like: PCI-DSS if you handle card payments, SOC 2 and/or ISO 27001 for information security — with certificates they can actually show you, recently audited.
5.How do you comply with data-protection laws — POPIA, GDPR, and my local rules?
Why it matters. South Africa’s POPIA is its GDPR-equivalent privacy law. If your customers are in the UK/EU (GDPR) or US, you need contractual and technical guarantees that their data is handled lawfully across borders.
A good answer sounds like: a clear grasp of POPIA plus your customers’ laws, a data-processing agreement, defined data-retention and deletion policies, and named responsibility for privacy on their side.
6.What stops an agent from walking out with customer data?
Why it matters. Most real breaches are human, not technical. The floor-level controls matter as much as the certificates.
A good answer sounds like: role-based access so agents see only what they need, a clean-desk / no-phones policy on the floor, masked payment fields, activity logging, and background checks at hiring.
03Staying online & the technology
A great team is worthless if the lights go out or their tools don’t talk to yours. This is where offshore deals quietly fail.
7.What’s your backup for power and internet outages?
Why it matters. South Africa has periodic grid instability (“load-shedding”), and any location can lose connectivity. Serious providers engineer around it; unserious ones hope it won’t happen during your peak.
A good answer sounds like: backup generators and UPS, often solar, plus redundant fiber and mobile internet — with a plain statement of how long they can run fully off-grid. Vagueness here is a red flag.
8.What platform do you run, and can it integrate with my CRM and helpdesk?
Why it matters. If agents can’t see the customer’s history in your systems, every call starts from zero and your data lives in two disconnected places.
A good answer sounds like: a named, modern contact-center platform and concrete experience integrating with your CRM/helpdesk (Salesforce, Zendesk, HubSpot, and the like) — including how call and ticket data syncs back to you.
9.How will you measure and report performance to me?
Why it matters. You can’t manage what you can’t see. You want visibility into quality and speed from week one, not a black box.
A good answer sounds like: agreed KPIs (CSAT, first-contact resolution, average handle time, service level), a real QA program with call scoring, and a live dashboard or regular reporting cadence you both review.
04The deal & the fit
Finally, make sure the commercial shape of the partnership fits how your business actually runs.
10.How is your pricing structured, and what’s included?
Why it matters. Per-seat, per-hour, and per-contact models behave very differently as you scale, and “extras” (setup, training, tech, reporting) can move the real number a lot.
A good answer sounds like: a clear model, a written list of what’s included versus billed separately, and no reluctance to put the all-in cost in writing.
11.What’s the minimum commitment, and can you scale up or down with me?
Why it matters. You may want to start small and grow, or flex for seasonal peaks. A rigid minimum or slow ramp can trap you or leave you short-staffed at Christmas.
A good answer sounds like: a realistic minimum seat count and contract length, plus a described process (and lead time) for adding or reducing seats as your volume changes.
12.Can I speak to a client like me — and who owns my account day to day?
Why it matters. References in your industry and region are the closest thing to a test drive. And you want a named human accountable for your account, not a ticket queue.
A good answer sounds like: two or three reachable references at companies of similar size or sector, plus a named account manager or team lead and a clear escalation path when something goes wrong.
Print these twelve and score each shortlisted provider 1–5. The pattern matters more than any single answer: a provider who is specific and unbothered across all four sections is showing you how they’ll operate once you’re a client. Evasiveness on the basics — certifications, attrition, backup power — is the loudest signal you’ll get.
Skip the cold outreach — get pre-vetted matches
We screen South African call centers against exactly these questions and introduce you only to providers that fit your market, size and support needs. Tell us what you need and we’ll do the vetting — free.
Get my free match →05Frequently asked questions
How do I vet an offshore call center before signing?
Treat it as a brand decision, not just a cost one. Work through who actually answers your calls (location, employee vs subcontractor, attrition), how agents are hired and trained for your market, security and data-protection certifications (PCI-DSS, SOC 2, ISO 27001, POPIA/GDPR), operational resilience like backup power and internet, technology and CRM integration, performance reporting, pricing model, minimum commitment, scalability, and client references in your industry. The 12 questions above cover each of these.
What certifications should an offshore call center have?
For data handling, look for PCI-DSS if payment card data is involved, SOC 2 and/or ISO 27001 for information security, and compliance with the relevant privacy laws — South Africa's POPIA, plus GDPR for UK/EU customers and applicable US state laws. Ask to see current certificates and when they were last audited.
Is load-shedding a risk for South African call centers?
It can be, which is exactly why you ask. Established South African contact centers plan around grid instability with backup generators, UPS systems, solar, and redundant fiber and mobile internet, so agents stay online through outages. Ask a provider to walk you through their power and connectivity redundancy specifically.
What is a good agent attrition rate for a call center?
Lower is better — high turnover means constant retraining and inconsistent customer experience. There's no single universal number, but a provider that tracks attrition, can state it plainly, and has a clear retention plan (career paths, competitive pay, dedicated team leads) is a better sign than one that dodges the question.
Should I contact call centers directly or use a matching service?
Both can work. Contacting providers directly gives you full control but means doing all the vetting yourself. A matching service like Ubunye CX pre-screens providers against questions like these and introduces you only to ones that fit your market, size and support needs — which saves time and reduces the risk of a bad fit. This checklist works either way.