Every firm has vendors. That is not the risk. The risk is the small number of vendors that could end your business inside a week if their view of your segment changed on a Tuesday — and the fact that most operators have never written that list down.
The 2024 MetaQuotes terminations made the abstract concrete: 80 to 100 prop firms ceased operations in the aftermath, while others changed platform in a fortnight and kept selling. Same shock, opposite outcomes, and the difference was architectural. This is the audit that tells you which side you are on.
First, Rank Your Vendors by How Fast They Could Kill You
Not by spend — by blast radius and speed. For most trading firms the order is roughly:
- Trading platform — takes the product away instantly; traders notice within minutes.
- Payment processor — takes revenue away instantly and holds a rolling reserve while doing it. See high-risk payment processing.
- CRM / system of record — slower to bite, but it holds the truth about accounts, rules, payouts and compliance.
- KYC provider — stops new onboarding; survivable for days, not weeks.
- Market data feed — a platform without prices is a website.
- Hosting, domain and email — unglamorous, and the reason a firm can lose its trader list overnight.
Now apply four tests to each one. They take an afternoon, and the answers are usually uncomfortable.
Test 1: Whose System of Record Is It?
Somewhere there is one authoritative copy of what is true — every account, its balance and equity, its evaluation phase and day count, its drawdown baselines and high-water marks, every trade, every rule breach and the reason, every payout and its approval. If that copy lives inside a vendor's platform, the vendor owns your company's memory.
The architectural fix is a CRM that is continuously fed by the platform rather than dependent on it — in ours, positions and trades sync every 500ms into the rules engine, which means the record is complete and current in a system you control. Losing a platform then costs you a rendering surface, not your history.
Test 2: Can You Export, Today, Without Asking?
Not "is there an export feature" — have you actually run it, this quarter, and does the output contain what you would need to reconstruct the business elsewhere? Firms discover during a termination that the export omits open positions, or evaluation state, or the equity high-water marks that every trailing drawdown calculation depends on. Run the export. Open the file. Check that a competent engineer could rebuild account state from it. Then automate it on a schedule and store it somewhere the vendor cannot reach.
Test 3: Can You Run a Second One Tomorrow?
Optionality is only real if it has been exercised. Firms with a 1-click bridge architecture — MT4, MT5, cTrader, DXtrade, NinjaTrader, Match-Trader, TradeLocker, all speaking to the same rules engine — can add a venue as configuration. Firms without it face procurement, contracting, integration and testing during the exact week they have no revenue and a support queue on fire.
The stronger version is not a second platform you could connect but one that is already live with real traders on it. Route a cohort — new challenges in one region, or a single account size — to the alternative permanently. It costs a little operational overhead and buys you a proven, warm, staffed escape route instead of a theoretical one.
Test 4: Whose Customer Is the Trader?
The subtlest dependency and the most expensive to repair after the fact. If your relationship with a trader is mediated entirely by a vendor's terminal, the vendor holds the relationship. If it runs through your storefront on your domain, your email list, your support desk, your community, your certificates and leaderboards, then a platform change is an inconvenience you can announce rather than an event that disperses your customers.
This is why the firms that survived 2024 with their trader base intact were, almost without exception, the ones with strong brand-owned channels. They could send one email and be believed.
The one-line audit: for every critical vendor, ask am I this vendor's customer, or am I standing on someone else's contract with them? If it is the second, you have a dependency you cannot audit, cannot renegotiate and will not get notice on. That single question explains most of what happened in 2024.
Contract Terms Worth Spending Negotiating Capital On
- Notice periods with teeth. Thirty days is a scramble; ninety is a migration. Ask what happens on termination for convenience, and get the answer in the contract rather than in an email.
- Data export on exit, in writing. Format, completeness, and a guaranteed read-only window after service ends.
- Chain transparency. Whose licence are you actually operating under? If your counterparty is not the vendor, ask them to tell you who is — and treat reluctance as information.
- No exclusivity. Never sign away the right to run a second platform, a second processor or a second provider. That clause is precisely the one that turns a bad quarter into a closure.
- Reserve and holdback terms on payments. The processor equivalent of a platform termination is a frozen balance; know the numbers before you need them.
Run the Drill
Concentration risk is the kind of thing everyone agrees about and nobody tests. Put a failover rehearsal on the calendar twice a year and run it properly: pick a vendor, declare it gone, and execute the 72-hour playbook against a written runbook. Time it. Find out that the export is missing high-water marks, that nobody knows the intermediary's escalation contact, that the support macros do not exist, that the second bridge has not been tested since an upgrade. Fix those in a quiet week rather than in the loudest one of your firm's life.
"Optionality you have never exercised is not optionality. It is a hope with a diagram attached."
— Alex Onta, Executive Director, eTrader & Prop Firm CRM
This Applies to Us Too
It would be convenient to end an article about vendor concentration by suggesting you concentrate on us. We build it the other way deliberately: the CRM bridges to seven platforms including ones we do not own, the rules engine behaves identically across all of them, your data is yours and exportable, your storefront sits on your domain, and you contract with your own PSPs and KYC providers rather than through us. The test of a good vendor is whether leaving them would be an inconvenience or a catastrophe — and a firm that could replace us in a fortnight is exactly the kind of client we would rather have, because they stay for the product.
Key Takeaways
- Rank vendors by blast radius and speed, not by spend: trading platform, payment processor, CRM, KYC, data feed, hosting and domain.
- Four tests decide survival — whose system of record it is, whether you can export today, whether a second platform is already live, and whether the trader relationship belongs to your brand.
- Negotiate notice periods, written data-export rights, chain transparency about whose licence you are on, no exclusivity, and processor reserve terms.
- Rehearse it. A failover drill twice a year against a written runbook finds the missing high-water marks and untested bridges in a quiet week instead of the worst one.
Frequently Asked Questions
What Is Deplatforming Risk for a Trading Firm?
The risk that a vendor whose service your business depends on withdraws it — by policy change, regulatory caution or commercial decision — regardless of whether you have breached anything. The 2024 MetaQuotes terminations are the industry's reference case: firms with clean payment records lost access because a decision was taken one or two links up a chain they were not party to.
How Many Trading Platforms Should a Firm Actually Run?
At least two, with the second carrying real traders rather than sitting as a paper option. One venue is a single point of failure; a second that is live, staffed and tested turns a termination into a routing change. With 1-click bridges and a platform-independent rules engine, the operational overhead of the second is small.
Doesn't Using a Bundled Provider Just Concentrate Risk Differently?
It does if the bundle locks you in. The mitigations are structural: your data exportable and yours, your system of record in a CRM you control, bridges to platforms the vendor does not own, your storefront on your own domain, and your own contracts with payment and KYC providers. Judge any vendor by whether leaving would be an inconvenience or a catastrophe.