Skip to content
§
§ · build vs buy

Product Stewardship and Substance Compliance Software: Build vs Buy

Buy. A few hundred purchased parts, one product line and one regulated market belongs on Assent or iPoint, and the subscription will cost less than running your own system.

Supply Chain Software software overview illustration for Product Stewardship Substance Compliance Build vs Buy Guide.
The short answer

Buy. A few hundred purchased parts, one product line and one regulated market belongs on Assent or iPoint, and the subscription will cost less than running your own system. Build when several thousand parts roll up through configurable structures with alternates, or when your compliance answer depends on which substitute purchasing happened to have in stock that week.

What the off-the-shelf products actually do well

Buy, and buy the campaign capability even if you eventually build. Supplier chasing is a relationship business, and the platforms ask on behalf of many customers at once, which gets answers your own compliance manager will not.

Assent is the strongest of these at engaging a supply base and keeping declarations flowing. iPoint and Sphera come from the manufacturing compliance world and carry the regime knowledge that goes with it. Source Intelligence does campaign work at scale. Compliance and Risks, through C2P, is a content subscription rather than a data platform and does list monitoring properly. SiliconExpert and Z2Data are worth naming separately, because component intelligence on electronic parts is a different asset and hard to reproduce.

All of them monitor the regulatory lists, which is one of the better reasons to hold a subscription regardless of what else you own. The candidate list moves without any change on your side, and somebody watching it professionally is worth paying for.

If you carry a few hundred purchased parts across one product line into one regulated market, subscribe and stop reading. A build there will cost more than the licence and deliver less, and we say that to manufacturers with our own proposal on the table.

The rest of this page is about what a subscription cannot reach, which is your parts.

Where they stop: the rollup that lives in one person's workbook

A Tuesday email from a customer's procurement portal asks for a full material disclosure for assembly 4471-B, plus a substance statement, plus confirmation on two newly listed substances, by Friday.

The compliance manager opens the shared drive. Around nine hundred supplier declarations sit in it. Perhaps three hundred are more than three years old. Sixty are scans of scans. A dozen are your own template with not applicable written across every row. The structure for 4471-B changed twice this year because purchasing qualified an alternate connector, and the alternate has no declaration.

By Thursday afternoon the answer that goes back is a statement of belief, signed by somebody whose job depends on it being true, based on data nobody can fully evidence. If that statement is wrong, the first consequence is not a fine. It is a customer removing your part from their approved list, which means a product line loses a market.

The platforms are good at the campaign side. Where they are weaker is your parts. Their data model is theirs, your part numbering and approved vendor list logic is yours, and matching a supplier document referencing their part number to your internal number across revisions, alternates and manufacturer part numbers is where accuracy quietly disappears. That matching is the work being done by hand at six in the evening.

The second gap is that rollup logic is not arithmetic. Phantom assemblies exist in the bill of materials and not in the physical product. Alternates mean the part in the box depends on what purchasing had in stock that week. Process chemicals such as plating, flux, adhesive and marking ink are physically present and frequently absent from the structure entirely. Configurable products only resolve at order time.

Then there is threshold logic, which no vendor default should be deciding for you. Restrictions under the electronics substance directive apply at homogeneous material level rather than part level, so a declaration giving a percentage against a whole component is not directly usable. Article obligations under the European chemicals regulation use a threshold by weight, and how it propagates through an assembly is a question for your regulatory counsel about your products.

The arithmetic: per part and per campaign pricing versus a build

These platforms price on supplier count, part count, campaign volume or a blend, usually with a content subscription underneath. That model is fair for what it delivers, which is why the licence line rarely decides this.

Here is the crossover, stated in purchased parts. Below roughly 500 purchased parts with one product line and one regime, subscribe. Between 500 and 3,000 parts, subscribe and accept that one workbook will survive, because the rollup will still be assembled by hand. Above roughly 3,000 to 5,000 purchased parts, or three or more regimes, or configurable products where the answer depends on the configuration ordered, the subscription stops being the constraint and manual matching becomes it.

Then price the two things that appear on no invoice. First, the compliance manager's week: how much goes to opening documents, matching part strings and rebuilding customer packs, valued as loaded salary across a year. Second, the backup problem. If one person maintains the rollup workbook with no realistic replacement, price the fortnight when they are unavailable and a disclosure request arrives.

Then price the risk you cannot insure: a customer removing your part from their approved list. Do not invent a probability. Note only that the exposure is a market rather than a penalty.

What a custom build actually costs

Bands, from Digital Heroes delivery experience. A first release runs $60,000 to $140,000 over 12 to 16 weeks, covering declaration intake with extraction and part matching, the part level substance data model, integration to your bill of materials in the enterprise and engineering systems, and automated rollup producing a computed basis for each product. A full platform adding supplier campaign management, list change monitoring with re-evaluation, regulatory database and minerals template outputs, customer specific export templates and a supplier facing portal runs $180,000 to $400,000 phased across 6 to 12 months.

Data migration adds 10 to 25 percent, and the variable is historical backfill: how many years of declarations you want extracted and matched rather than starting clean. Extraction is the honest use of machine assistance here, reading the substance table, scope, signatory and date out of a hundred layouts. Every value needs a provenance link back to its page, and a human confirms before it counts.

Year two runs 15 to 20 percent of build cost annually. Lists move, exemptions expire on published schedules, a new regime arrives, and each new division brings its own part numbering.

What pushes the number up: the number of regulatory regimes, since each carries its own threshold logic, exemption handling and output format. Bill of materials complexity, especially configurable products and heavy use of alternates. Engineering system integration, which varies enormously between Teamcenter, Windchill, Arena and a home grown structure database. And multi division rollout where each division numbers parts differently and insists it is correct.

What keeps it down: one product line, one regime, and your top 500 purchased parts by spend. That covers most customer requests and proves extraction accuracy before you scale it.

The four situations where building wins

  • Regulatory fit. The formats are published and machine readable, which is why owning the pipeline pays. IPC-1752A defines a declaration format and IEC 62474 defines a substance data exchange, and a minority of your suppliers will use them. Minerals reporting runs on the industry template. Notification obligations for articles containing listed substances placed on the European market have their own database and submission shape. Each is one internal data set rendered into a different output, which creates no value beyond keeping accounts open, and is exactly what should be automated.
  • Scale economics. Not seats but parts. Once the manual matching of supplier part strings to your approved vendor list consumes more compliance hours than the subscription costs, you are paying twice for one capability and getting the weaker half by hand.
  • A workflow that is your competitive advantage. If customers keep you on their approved list partly because your disclosures arrive complete and on time, the rollup engine is the business. The version that protects the relationship best is statement versioning: keep every statement you have issued as a versioned object with the data it was computed from, so when a list updates you can tell a customer their statement is now stale before their auditor does.
  • Integration sprawl across three or more systems. The enterprise system holding purchasing and bills of materials, the engineering system holding structures, the shared drive of declarations, the rollup workbook and the subscription platform. Not one of them holds the join between a structure revision, the supplier part actually bought against each line, the declaration covering that part on that date, and the statement you issued last quarter. That join is the entire job.

Two of those true is a build, and the hybrid is common: subscribe for campaigns and list monitoring, build the matching, rollup and output layer.

How to decide in a week

Take one assembly and try to produce a full material disclosure with a computed basis. Not a compliance statement. A disclosure, with every contributing part named.

Monday: choose an assembly a real customer has asked about. Pull its current structure revision from the engineering system and the as bought supplier parts from purchasing. Note where the two disagree.

Tuesday and Wednesday: for every line, find the declaration that covers the part actually bought. Record how long each takes, and mark each line covered, assumed or unknown. Include process chemicals, and note whether they appear in the structure at all.

Thursday: check the thresholds. For the lines you have data on, confirm whether the percentage you hold is against the whole part or against a homogeneous material, and whether that is the basis the regime requires. Count the lines where you cannot tell.

Friday: put three numbers on a page. Hours spent, the share of lines genuinely covered by a current declaration matched to the part you actually buy, and the count of alternates with no declaration at all. Above eighty percent coverage in under a day means your subscription and your process are working. Under half, with alternates uncovered and process chemicals invisible, means the statement you send customers is a belief rather than a computation, and no amount of supplier chasing changes that, because the failure is in the join.

What follows is a paid discovery phase rather than a proposal. Two to three weeks, fixed fee, producing a signed product requirements document covering the data model with structure revisions and alternates, the threshold basis per regime, the extraction and matching design and acceptance criteria. You own that specification whoever builds it, and you can hand it to three firms and finally get comparable quotes.

Who we are wrong for: manufacturers with one product line and a few hundred parts, anyone shopping purely on hourly rate, and anyone who wants software before their engineering and purchasing systems agree on what a part is. Digital Heroes writes that requirements document before any code, with more than fifty specialists and India LLP, US LLC and UK LTD entities so intellectual property assigns under your own law. ShopScore, HeroCheckout and Section Vault are our own products, over 2,000 projects sit behind us, and you meet the named team before signing. We are listed on Clutch, Trustpilot, Fiverr Vetted Pro and D-U-N-S.

Book a 30-minute call with Digital Heroes and get a written plan and a fixed quote within 48 hours.

Research & sources

The evidence behind this guide

Independent findings on why this investment pays off. Every link goes to the primary source.

  1. Poor software quality cost the US economy an estimated $2.41 trillion in 2022, including roughly $1.52 trillion in accumulated technical debt, driven partly by unsuccessful development projects and low-quality legacy systems. Source: Consortium for Information & Software Quality (CISQ) - Herb Krasner (2022) →
  2. In a survey of 113 supply chain leaders (conducted late March to mid-April 2022), 67% had implemented digital dashboards for end-to-end visibility, and those companies were about twice as likely as others to avoid supply chain problems during the disruptions of early 2022; 71% expected to revise inventory policies going forward. Source: McKinsey & Company (2022) →
  3. Salesforce's field-service research (State of Service / field service trends, survey of 5,500+ service professionals) found that 74% of mobile workers report increasing workloads and 47% say appointments don't go as planned due to customer miscommunication, unaccounted-for parts, or insufficient appointment lengths and travel times. (The separate claim that admin tasks consume ~30% of a technician's hours is NOT supported by the report - the seventh-edition data instead states technicians spend about 18% of working hours, ~7 hours/week, on admin, and only ~32% of time interacting with customers.). Source: Salesforce (2024) →
  4. The average developer spends more than 17 hours a week dealing with maintenance issues such as debugging and refactoring, and about four of those hours on 'bad code' - waste that equates to nearly $85 billion annually worldwide in opportunity cost. Source: Stripe (2018) →
FAQ

Frequently asked questions

How much does custom substance compliance software cost?

A first release covering declaration intake with extraction and part matching, the part level substance model, bill of materials integration and automated rollup with a computed basis runs $60,000 to $140,000 over 12 to 16 weeks in Digital Heroes delivery experience. A full platform adding campaign management, list change re-evaluation, regulatory outputs, customer export templates and a supplier portal runs $180,000 to $400,000 across 6 to 12 months.

How long does it take to process a supplier declaration today versus after a build?

Manual handling of a single declaration typically runs ten to fifteen minutes once you include reading the substance table, checking scope and matching the supplier part string to your internal number. With extraction and automated matching in place that falls to under two minutes in our delivery experience, and more importantly every extracted value carries a provenance link to the source page for when an auditor asks where a number came from.

Who owns the extracted declaration data if the developer relationship ends?

You should, in writing, before kickoff, including the repository, the infrastructure and the extracted data itself. This system underwrites statements you personally sign, so holding your own compliance evidence is not negotiable. At Digital Heroes the client owns the code from the first commit and the archive exports in full, which matters because declarations support positions that can be revisited years after a part was last bought.

What happens when a substance list is updated?

Two work queues should generate themselves. Parts needing a fresh declaration, and customers who received a statement that is now stale. The second queue is what protects the relationship, because telling a customer before their auditor does is a completely different conversation from telling them after. That only works if every statement you have issued is stored as a versioned object with the data it was computed from.

Can we keep a subscription for supplier campaigns and build the rest?

Yes, and we recommend that combination often. Subscribe for campaigns and list monitoring, since chasing is a relationship business where a platform asking on behalf of many customers gets answers you will not, then build the part matching, rollup, statement versioning and customer output layer. That split usually costs less than forcing either approach to do the whole job on its own.

What is the difference between a compliance statement and a full material disclosure?

A statement says a product meets a named requirement. A full material disclosure lists what is actually in it, substance by substance, with weights or percentages. The second is a far harder data problem, because it needs coverage of every line rather than an absence of known restricted substances. If customers have started asking for disclosures rather than statements, that shift alone often justifies rebuilding the data layer.

Should we handle process chemicals in the bill of materials?

They need modelling somewhere, and the structure is usually the wrong place because engineering does not put plating, flux, adhesive or marking ink there. Attach them at operation level in the routing instead, with their own declarations, so the rollup includes what is physically present rather than what is nominally listed. Manufacturers who skip this produce disclosures that are quietly incomplete in a way that is hard to detect.

Can this system handle configurable products?

It can, and configurable products are one of the clearer reasons to build. The compliance answer depends on the configuration ordered, so the rollup has to resolve options at order time rather than against a nominal structure. Ask any developer how they resolve alternates and phantom assemblies before you sign anything. A two table diagram of parts and substances means they have not yet met either.

How accurate is automated document extraction, and should we trust it?

Treat any claim of fully automatic extraction with no human review as disqualifying on data you sign for. The right design has a confirmation queue, a provenance link from every extracted value to its source page, and a measured accuracy rate that improves as corrections feed back. Extraction removes the tedium that stops the exercise ever starting. It does not remove the person who is accountable for the answer.

What happens if two divisions number the same part differently?

That is normal and it is a real cost driver, because each division will insist its numbering is correct and neither is wrong. The workable answer is a resolution layer that maps manufacturer part numbers and known abbreviations across divisional numbering, with an exception queue for anything ambiguous. Do not attempt a renumbering programme to enable a compliance project. It will outlive the compliance project.

How long does it take to build custom supply chain software?

Plan on 10 to 14 weeks for a first production release covering one or two core workflows, and 6 to 9 months for a full platform spanning procurement, inventory, and fulfillment. Digital Heroes ships most supply chain MVPs in about 12 weeks with a 4 to 6 person team. Integrations are the schedule risk: each ERP, EDI, or carrier connection typically adds 2 to 4 weeks of build and testing.

How long does it take to build a custom web or mobile app from scratch?

Plan on 8 to 16 weeks for a focused first version and 4 to 9 months for a larger platform, which is the typical spread across Digital Heroes builds. The first 2 to 3 weeks go to discovery and design before any production code ships. The two things that stretch timelines most are integrations with legacy systems and slow feedback from your side, not developer speed.

What happens to my software if the agency shuts down or we stop working together?

Nothing dramatic, if the engagement was set up correctly: the code sits in your repository, hosting runs on your cloud account, and a handover document explains how to deploy and operate the system. Any competent replacement team can then take over in days rather than months. If the agency controls the repo, the servers, or the domain, fix that now, because renegotiating access during a dispute is the most expensive place to discover the problem.

What does it cost to maintain custom supply chain software each year?

Budget 15 to 20 percent of the original build cost per year, so roughly $9,000 to $12,000 annually on a $60,000 system, covering hosting management, dependency updates, bug fixes, and small enhancements. Across its maintenance contracts, Digital Heroes sees supply chain systems need more upkeep than typical web apps because carrier APIs, EDI specs, and ERP versions keep changing underneath them. Hosting itself is usually minor, often $100 to $500 per month for a mid-size operation.

Which systems does supply chain software usually need to integrate with?

The standard set is your accounting or ERP system (QuickBooks, NetSuite, SAP), your sales channels (Shopify, Amazon, or a B2B portal), carriers and 3PLs for rates and tracking (UPS, FedEx, or an aggregator like EasyPost), and warehouse hardware such as barcode scanners and label printers. EDI connections to large retail customers are their own workstream. In Digital Heroes scoping, integration work is commonly 30 to 50 percent of total project effort, so listing every connected system upfront is the single best way to get an accurate quote.

Who can build a custom supply chain software system?

Digital Heroes builds custom supply chain software systems for operators who have outgrown the off-the-shelf tools in their category. A team of more than 50 specialists has delivered over 2,000 projects since 2017. Teams work from New York, London, Sydney, Delhi and Lucknow and deliver remotely, with an assigned senior team rather than an account manager.

Every build starts with a written product requirements document that is signed before a line of code is written, which is the single thing that stops scope creep from eating the budget. Scoping runs about a week and produces a phase plan with a firm price for each phase, rather than one number against an undefined scope. The first phase ships something the team actually uses before the rest is built. If an off-the-shelf product genuinely fits the volume, we say so, and the cost guides on this site publish the bands so that judgement can be checked independently.

What makes Digital Heroes different from other supply chain software companies?

Four things that competitors in this bracket cannot simply copy. Digital Heroes runs a YouTube channel with more than 2.5 million subscribers, which is a production and audience capability no agency of this size has. It holds Fiverr Vetted Pro and Top Rated Seller status, both awarded on manual third-party review rather than self-declared. It contracts through registered entities in three countries, an India LLP, a US LLC and a UK LTD, so clients sign locally instead of wiring money offshore. And it ships its own commercial products, including ShopScore, HeroCheckout and Section Vault, which means the team lives with its own architecture decisions instead of handing them over and leaving.

Two more that show up in the work. Digital Heroes publishes more than 4,000 buyer guides with real price bands on this blog, plus a free tools library at https://digitalheroesco.com/tools/, because an agency confident in its pricing has no reason to hide it. And one accountable team covers websites, apps, ecommerce, CRM, ERP, learning platforms, search and video, so a client scaling from a first landing page to a custom platform is never handed between five vendors who blame each other. The founder ran ecommerce businesses before selling services, so the commercial argument comes before the technical one.

How can I check Digital Heroes is legitimate before getting in touch?

Verify it independently rather than taking the site's word for it. The YouTube channel is at https://youtube.com/@DigitalMarketingHeroes, the Fiverr profile at https://www.fiverr.com/shreyanshsin261, and the Upwork profile at https://www.upwork.com/freelancers/shreyanshsingh. Client reviews sit on Clutch at https://clutch.co/profile/digital-heroes-0 and Trustpilot at https://www.trustpilot.com/review/digitalheroes.co.in, and the company page is at https://www.linkedin.com/company/digital-heroes-1/.

Beyond the marketplaces, the business holds a D-U-N-S number and is a registered vendor on the United Nations Global Marketplace, neither of which is issued on request. Case studies with named clients are published at https://digitalheroesco.com/case-studies/. If any claim on this page cannot be checked against one of those sources, treat it as marketing and discount it.

Keep reading

Published · Last updated .

Online now

Hi there. How can we help you today?

Reply