What a Conservatory Should Ask Every Software Vendor: A Buyer's Checklist
Buying software for a conservatory is nothing like downloading an app: the wrong choice is expensive, disruptive, and hard to leave. The procurement questions that separate a safe purchase from a costly mistake — the ones vendors hope you won't ask.
Pract.is Editorial
Research-based practice guidance for musicians from the Pract.is editorial team.

Buying software for a conservatory is nothing like downloading an app. A poor choice isn't a $10 mistake you delete next week — it's a multi-year contract, a migration of sensitive student data, faculty retrained on a tool they resent, and an exit cost high enough that departments stay married to bad systems for years. The stakes are institutional, and yet a striking number of music departments still evaluate vendors the way a consumer would: watch a slick demo, skim a feature list, sign.
The trouble is that a demo only ever shows the happy path. It never shows what happens when you want your data back, when a student invokes their privacy rights, when an accessibility audit lands, or when the vendor gets acquired. Those are the moments that decide whether a purchase was wise — and they're exactly what the right questions surface before you sign. This is the buyer's checklist for a music institution: the questions that separate a safe procurement from an expensive regret, grouped so you can hand them straight to a vendor.
Evaluate like a buyer, not a user
The mental shift that protects a department is to stop evaluating the software as a user ("is it nice to use?") and start evaluating the vendor as a buyer ("what happens on the bad days?"). A user cares about the interface. A buyer cares about ownership, compliance, security, accessibility, fit, and exit — the things that don't appear in a demo but determine the total cost and risk of the decision. Run every candidate through the same gates, and most of the field eliminates itself quickly:
The gates that eliminate most vendors
… and only the one that survives a real pilot earns the signature.
Notice that the interface — the thing the demo sells hardest — isn't a gate at all. It matters, but it's the last five per cent, and it's the easiest thing for a vendor to make look good. The gates below are where real procurement risk lives.
The question bank
Hand these to every vendor in writing and compare the answers side by side. Vague answers are themselves an answer:
| Area | Ask the vendor | A good answer | Red flag |
|---|---|---|---|
| Data ownership | Who owns the data, and how do we export all of it if we leave? | You own it; self-serve full export any time | "Export on request" / unclear |
| FERPA | Will you sign a DPA and act as a school official? | Yes — DPA + published sub-processor list | "Working on compliance" |
| GDPR / residency | Where is data hosted; can EU student data stay in the EU? | EU region available; documented deletion | US-only; vague on GDPR |
| Security | Encryption, MFA, audit logs, backups — and proof? | All standard; independent audit available | No audit logs; shared logins |
| Access model | Can roles be scoped — and do you support our SSO? | Granular RBAC + SSO with our IdP | One admin login for all |
| Accessibility | Do you conform to WCAG 2.1 AA, with a VPAT? | Yes — current VPAT provided | No VPAT / "not sure" |
| Music fit | How do you model studios, juries, and practice? | Purpose-built for applied music study | Generic LMS with a music label |
| Exit / continuity | What happens to our data if we cancel or you’re acquired? | Defined offboarding; data returned & deleted | No offboarding terms |
"A demo shows you the happy path. Procurement is the discipline of asking what happens on every other day."
The four answers vendors hope you'll skip
Four areas carry most of the institutional risk, and they're precisely the ones a feature-led evaluation glosses over. Press hard on these.
1. Data ownership and exit. The single most important question in the room is: if we leave in three years, do we get all our data back, in a usable format, and is it then deleted from your systems? The institution should own its data outright, with self-serve export at any time and contractual deletion on exit. "You can request an export" is not the same as "you own it and can take it whenever you like." Ask to see the export format before you sign — a PDF dump is not a migration.
2. Privacy compliance, in writing. For a music department this is not optional box-ticking; it is legal exposure. Confirm the vendor will sign a Data Processing Agreement, will act as a school official under FERPA where applicable (restricting redisclosure and secondary use), and publishes a sub-processor list so you know every third party that can touch student data. For conservatories with international students, add the GDPR layer: where is data hosted, can EU students' data stay in the EU, and how does the vendor reconcile the GDPR right to erasure with records you're legally required to retain? Guidance for institutions is consistent that the answers must be contractual, not verbal — a FERPA vendor risk assessment exists precisely because "trust us" is not a compliance posture.
3. Accessibility. A conservatory has legal and moral obligations to students with disabilities, and accessibility is increasingly a hard procurement condition. Ask for WCAG 2.1 AA conformance and a current VPAT (Voluntary Product Accessibility Template). A vendor who can't produce one, or doesn't know what it is, is telling you they haven't done the work — and that the liability becomes yours the moment you deploy.
4. Does it actually fit music? Much of the "education software" pitched to music departments is generic LMS or student-information tooling with a music logo bolted on. Applied study doesn't look like a lecture course: it runs on one-to-one studios, juries and recitals, repertoire tracked over years, and practice that happens between lessons. Ask the vendor to show how the system models those realities specifically — not how you could force them into a generic gradebook. Purpose-built music tools (our own Practis for institutions among them) exist because the generic ones fit badly; make every vendor prove which kind they are.
Never buy at scale off a demo — insist on a pilot
No checklist replaces evidence from your own students and faculty. Before any institution-wide commitment, run a one-term pilot with a real cohort — a couple of studios, a genuine slice of your actual workflow — and define what success looks like before it starts: adoption by faculty, student practice actually logged, time saved on reporting, whatever your goal is. A vendor confident in their product will welcome a scoped pilot; one who pushes for a full multi-year signature first, "because the pricing only works at scale," is managing their risk by transferring it to you. The pilot is also where the demo's happy path meets your real edge cases, which is the entire point.
"A vendor confident in their product welcomes a scoped pilot. One who needs your signature first is managing their risk with your budget."
Red flags that should end the conversation
Walk away if a vendor...
Any one of these is a reason to slow down; two is a reason to walk. None of them are about whether the software is pleasant to use — they're about whether the company is a safe institutional partner, which is the actual thing you're buying.
Common questions
We're a small department — is this level of scrutiny overkill?
No — the questions scale down, but none of them drop. A small program has the same legal duties around student data and accessibility as a large one, and less slack to absorb a bad multi-year contract. You can run a lighter process, but data ownership, a signed DPA, accessibility conformance, and a pilot are non-negotiable at any size.
What if the best-fitting tool is from a small vendor?
Small vendors often fit music study better than enterprise generalists, and that's fine — but hold them to the same answers. A small company can absolutely sign a DPA, publish a sub-processor list, provide a VPAT, and offer clean data export; if they can, size isn't a risk. What matters is whether the answers are solid and contractual, not the size of the logo.
Where does this checklist sit next to a full RFP?
Think of it as the qualifying round before or inside your RFP. These questions cut a long list of vendors down to the few worth a formal process, and they map cleanly onto RFP sections for data governance, security, accessibility, and fit. For the wider landscape of what's actually available to music programs, pair this with our guide to software for conservatories and serious music programs and the 2026 buyer's map for music-school software.
The department that gets burned by a software purchase almost never got there by choosing an ugly interface. It got there by never asking who owned the data, never getting compliance in writing, skipping the accessibility check, mistaking a generic tool for a music one, or signing at scale before testing. Every one of those failures is preventable with a question asked before the signature. Put these to every vendor, compare the answers on paper, run the pilot — and let the tool that answers cleanly, not the one that demos best, win.
More on institutions.

From 3 Studios to 30: When a Music School Outgrows Its Tools
The scrappy stack that felt like a superpower at three studios becomes the bottleneck at thirty. Nothing breaks overnight — you cross thresholds the old tools can't. The signs you've outgrown them, and what graduating actually looks like.
Pract.is Editorial

Practice Data & Student Privacy: What Music Institutions Must Know (GDPR/FERPA)
Music programs collect more student data than ever — logs, recordings, progress — usually through third-party tools. Who is legally responsible for protecting it? You are. A plain-English guide to FERPA, GDPR, and practice-data governance.
Pract.is Editorial

A One-Term Pilot: How Music Departments Should Trial Practice Software
The smartest move before buying practice software isn't buying it — it's piloting it. But a pilot only de-risks the decision if it's built to produce evidence, not vibes. How to run a one-term pilot that ends in a defensible yes or no.
Pract.is Editorial