FLOWLAB INSIGHTS

SMEs: 5 tests to decide build vs buy in internal tool development

· Practical guidance for Singapore SMEs

Hands mapping an internal approval workflow

Most SMEs should buy or configure an existing tool rather than build one from scratch. Custom internal tool development only earns its cost when the workflow is genuinely unique to your business, will still matter in three years, and nothing on the market does the job well enough. Before you commit either way, map your current spreadsheet process and run the two tests in the next section.


TL;DR:

  • Most SMEs should prioritize buying or configuring existing tools unless their workflow is highly unique, lasting three years, and not well-supported by the market.
  • Building internal tools for internal use is only justified if the development is cheaper over five years than buying, and the workflow truly differs from common processes.
  • Choosing between no-code, low-code, custom, or hybrid approaches depends on team size, integration needs, and the importance of security and control.
  • The smallest viable version of a tool should replace one manual step with a clear scope, user roles, essential data fields, and minimal integrations.
  • Long-term costs are heavily influenced by the number of integrations, auditability, automation complexity, and licensing models, not just initial development expenses.

Flowlab
Find the right app approach
FlowLab helps SMEs assess operational challenges and compare ready-made, adapted, or custom app solutions for their workflow needs.

Explore app solutions

Table of Contents

What is internal tool development, and how do you decide whether to build?

Internal tool development means creating software used only inside your business, such as an approval workflow, a lead tracker, or a booking system, rather than software you sell to customers. It sits apart from customer-facing product development because the only users are your own staff, which changes what “good enough” looks like. A clunky interface that a trained employee tolerates is a completely different problem to a clunky interface that costs you sales.

The decision hinges on two tests before anything else. The OpsAutomators build-vs-buy framework calls these the money test and the uniqueness test, and they work well as a first filter for any SME.

The money test: would building this tool cost less over three to five years than paying for a ready-made or configurable alternative, once you include your own team’s time? Custom software development almost always looks cheaper on day one and more expensive by year two, because nobody budgets for the maintenance tail.

The uniqueness test: does this workflow genuinely differ from what thousands of other businesses do, or does it just feel different because nobody has looked at how competitors solve it? A queue management process, a lead pipeline, or an event registration flow is rarely as bespoke as it feels from the inside.

Once a workflow passes both tests, five strategic filters help you score the decision properly rather than going on gut feel:

  1. Uniqueness — is this process genuinely specific to your operation, or a common workflow wearing your branding?
  2. Strategic importance — does this tool touch revenue, compliance, or customer experience directly, or is it purely administrative?
  3. Expected lifetime — will this workflow still exist in its current form in three years, or is it likely to change with the business?
  4. Maintenance capacity — do you have someone, internal or contracted, who can own bug fixes and updates indefinitely?
  5. Integration needs — does this tool need to talk to your accounting system, your POS, or your CRM in ways off-the-shelf products won’t support?

A simple scoring workshop works better than endless debate. Gather the people who actually use the workflow, score each filter from one to five, and total the result. Anything scoring high on uniqueness and strategic importance, but low on available off-the-shelf options, is a genuine build candidate. Anything else usually points towards configuring an existing product.

Skipping this exercise is how businesses end up with expensive internal software nobody asked for. The failure modes are predictable enough to name in advance:

  • Scope creep, where “just add one more field” turns a two-week build into a two-month one.
  • The maintenance tail, where the tool works fine at launch but nobody has budgeted the ongoing hours to patch it as your other systems change.
  • Bus factor risk, where only one person understands how the tool works, and they leave.

Budgeting for these three risks up front, rather than discovering them mid-project, is the single biggest difference between internal tool development that pays off and internal tool development that quietly drains time for years.

No-code, low-code, custom, or hybrid: which approach actually fits?

Once a workflow has passed the build tests, the next decision is how to build it, and this is where most SMEs get the trade-offs wrong. Each approach solves a different problem, and picking the wrong one is often more costly than picking build over buy in the first place.

No-code tools let non-technical staff assemble forms, workflows, and simple dashboards without writing code. They’re fast, often live within days, but they hit a ceiling quickly on anything with complex logic, high transaction volumes, or non-standard data structures.

Low-code platforms, such as Microsoft’s Power Apps, extend that speed with connectors, more flexible data models, and enough scripting for moderately complex logic. You trade some of the “anyone can build it” simplicity for real integration capability, but you also inherit the platform’s licensing model, its update cycles, and its limits on custom logic.

Custom development gives you full control over architecture, auditability, and data ownership, which matters enormously if you operate in a regulated sector or need airtight audit logs. It also means you own every bug, every server, and every future migration, with no vendor to lean on when something breaks.

Hybrid approaches, configuring a platform for eighty percent of the workflow and writing bespoke extensions for the rest, often deliver the best risk-adjusted outcome for SMEs. Practitioner guidance from Airful points to this pattern repeatedly: teams get the platform’s speed for standard functionality and custom code only where the business genuinely differs from the norm.

Three practical constraints should shape your choice regardless of approach:

  • Scaling — no-code tools that work fine for ten users can slow to a crawl at a hundred.
  • Version control and audit logs — genuinely essential in finance, healthcare, or any regulated workflow, and often missing or bolted-on in no-code platforms.
  • Vendor lock-in — check how easily your data exports before you commit, not after.

A rough decision map: small teams with standard workflows and low integration needs should lean no-code or low-code. Mid-sized teams with moderate integration needs and some non-standard logic often do best with a hybrid build. Larger teams, or anyone in a security-sensitive sector such as healthcare or finance, should weight custom development more heavily, even if it costs more upfront.

Pro Tip: Before choosing a platform, ask for a working demo with your actual data structure, not the vendor’s sample data. Edge cases in your real workflow are where no-code tools usually reveal their limits.

How do you scope the smallest useful version of an internal tool?

The smallest useful version of an internal tool replaces one manual step, usually a spreadsheet or an email chain, not the entire department’s workflow. This is the single most common mistake in internal software development: teams try to build the whole platform in version one, and the project either stalls or ships eighteen months late with features nobody wanted.

NextPage’s build guidance puts it plainly: start by replacing a single spreadsheet or handoff, not by trying to reimagine the whole process. That single sentence saves more internal tool development projects than any amount of architecture planning.

Your MVP checklist should cover exactly these elements, and nothing more:

  1. One primary workflow — pick the process that causes the most friction today, not the one that sounds most impressive.
  2. User roles — define who submits, who approves, and who views, even if it’s just three simple permission levels.
  3. A data model — the fields you actually need, not every field you might one day want.
  4. Required fields only — every optional field is a decision someone has to make later; cut them ruthlessly at launch.
  5. Basic reporting — a simple status view or count, not a full analytics dashboard.
  6. One or two integrations — connect to the system people already use daily, and stop there for version one.

Write a visible “won’t do” list alongside your MVP spec, and share it with everyone who’ll use the tool. This does more to control scope creep than any project management process, because it gives you something concrete to point to when someone asks for “just one more feature.” NextPage’s own guidance on MVP scope treats this list as a core discipline, not an afterthought.

Consider a typical example: an approval queue that replaces an email chain for expense sign-off. The MVP needs a submission form with four fields (amount, category, description, receipt upload), one approval step with a single approver role, a status view showing pending, approved and rejected items, and an email notification when status changes. That’s it. No multi-level approval chains, no custom reporting, no mobile app. Those come in version two, if the data shows they’re needed.

Expense approval MVP workflow components

Pro Tip: Ship the MVP to a small pilot group of five to ten people before rolling it out company-wide. Real usage surfaces missing fields and confusing steps faster than any amount of internal review.

The test for “smallest useful” is simple: does this version fully replace the spreadsheet or manual step it’s meant to kill? If staff still need to check the old spreadsheet for anything, you haven’t shipped a replacement. You’ve shipped a second system to maintain alongside the first, which is worse than doing nothing.

What does internal tool development actually cost over three to five years?

Cost bands for internal tools vary enormously depending on complexity, but three rough categories help set expectations. Custom internal tools vary in cost depending on complexity, from simpler dashboards to workflow MVPs with approvals and integrations, up to full operations platforms with multiple processes, which generally require ongoing development as well as maintenance.

Four factors drive most of the cost variance between projects of similar scope:

  • Number and complexity of integrations — each new system you connect to adds development time and ongoing failure risk.
  • Auditability requirements — regulated workflows needing full audit trails cost more to build and more to maintain than simple internal tools.
  • Automation depth — a tool that just displays data costs far less than one that triggers actions automatically based on business rules.
  • AI features — document extraction, chatbots, or predictive fields add real value in the right workflow, but they add ongoing cost too, since models and prompts need monitoring and occasional retraining.

Low-code platforms shift the cost shape rather than eliminating cost: instead of a large upfront build fee, you pay recurring per-user or per-app licensing indefinitely, which Microsoft’s own Power Apps pricing illustrates clearly with its tiered plans.

That distinction matters more than most SMEs realise when they compare quotes. A custom build with a £15,000 upfront cost and minimal licensing fees can be cheaper over five years than a low-code platform with a smaller setup fee but ongoing per-seat charges that scale with headcount. Model both scenarios out to year three and year five before deciding, not just year one.

137Foundry’s analysis of build-vs-buy modelling recommends running this long-horizon comparison explicitly, including a switching cost estimate: what would it cost to migrate off this tool if the vendor doubles prices or shuts down in three years? That number should factor into your decision even before you sign anything.

Here’s a worked example for a workflow MVP replacing an expense approval spreadsheet. Custom build: moderate upfront development cost, low ongoing hosting cost, occasional maintenance hours as the business changes. Low-code platform: lower upfront setup cost, but recurring per-user licensing that grows as headcount grows, plus connector fees for accounting system integration. At ten users, the platform route often looks cheaper. At fifty users, the custom route frequently wins, because licensing scales with people while a custom build’s running cost stays largely flat.

Document three assumptions behind whichever decision you make, along with a trigger to revisit it. 137Foundry’s framework suggests this discipline specifically: if headcount doubles, if the vendor changes pricing, or if the workflow changes shape, that’s your signal to reopen the build-versus-buy question rather than assume the original decision still holds.

What technical checklist should you use before building or buying?

Any internal tool, whether you build it or buy it, needs to pass the same technical bar, and skipping this checklist is how businesses end up with tools that work in the demo and fail in production.

Integration capability comes first. Check for a documented API, support for webhooks so other systems can react to changes in real time, sensible retry logic when a connected service is briefly unavailable, and typed data boundaries so a field renamed in one system doesn’t silently break another. Power Apps documents its connector ecosystem as a core part of its low-code offering, which is worth reviewing as a benchmark even if you ultimately build custom.

Security fundamentals are non-negotiable regardless of tool size:

  • Single sign-on (SSO) so staff access the tool with existing company credentials, not a separate password to forget.
  • Least-privilege role-based access control (RBAC), so a junior staff member can submit requests but can’t approve their own expenses.
  • Full audit trails recording who changed what and when.
  • A clear data retention and backup policy, agreed before launch, not improvised after the first data loss scare.

Open-source projects such as Casbin offer a useful reference point for what proper RBAC implementation looks like, even if you never touch the library directly. It’s a good benchmark to hand a developer: “can you support permission granularity like this?”

Operational practices separate tools that last from tools that quietly rot. Automated tests catch regressions before they reach users. Documentation, even brief, means the next developer doesn’t have to reverse-engineer your logic from scratch. Deployment automation reduces the risk of a manual release breaking something on a Friday afternoon. And every tool needs a named owner, someone whose job includes maintaining it, plus a modest ongoing maintenance budget rather than an assumption that it’ll just keep running.

Pro Tip: Ask any vendor or developer directly: “What happens to our data if we want to leave in two years?” A vague answer is itself useful information.

How do you roll out an internal tool so people actually use it?

A tool nobody uses has cost you money and delivered nothing, and adoption failure is far more common than technical failure in internal software development. The rollout process matters as much as the build itself.

A practical deployment checklist runs in this order:

  1. Assign an owner before launch day, someone accountable for fixing issues and answering questions.
  2. Migrate the first batch of real records into the tool before anyone starts using it live, so day one isn’t an empty screen.
  3. Train the people who’ll use it daily, not just managers, in a short session focused on their actual tasks.
  4. Set a hard stop date for the old process, whether that’s a spreadsheet or an email chain, and communicate it clearly.

Without that fourth step, most teams run both systems in parallel indefinitely, which doubles the admin burden and guarantees the new tool never gets a fair test.

Track a small set of metrics from week one rather than guessing whether adoption is working:

  • Request volume through the new tool versus the old process.
  • Cycle time from request to resolution, which should visibly shrink if the tool is doing its job.
  • Overdue items sitting in the queue, a good early warning sign of a broken approval step.
  • Manual rework, where someone still has to fix data or chase people outside the tool.
  • Support queries, which should taper off within a few weeks if the tool is intuitive.

Post-launch governance keeps the tool useful rather than letting it calcify. Set aside a fixed number of maintenance hours per month, even if they go unused some months. Establish a lightweight process for reviewing feature requests, so the “won’t do” list from your MVP stage has somewhere to go when a genuine need arises later. And revisit the original build-versus-buy decision if headcount changes significantly, if the underlying workflow changes shape, or if a much better off-the-shelf option appears.

The most effective adoption tactic is often the simplest: remove access to the old spreadsheet or shared inbox on the agreed cut-off date. People default to the path of least resistance, and if the old workaround still exists, some will keep using it indefinitely.

FlowLab’s approach and what to expect from an app-fit review

Some app developers start conversations with understanding the operational problem before recommending a solution. That order matters. A business that leads with “we need custom software” often discovers, once the workflow is properly mapped, that an existing product configured correctly would have done the job for a fraction of the cost and time.

The complimentary app-fit review walks through exactly the decision points covered in this guide: what the current process looks like, where the friction actually sits, and which of three routes fits best, a ready-made product, an adapted existing foundation, or a custom build. Nothing about the review commits you to anything.

To get the most from an app-fit review, it helps to arrive with a few things ready:

  • A rough sketch or description of the current workflow, even a messy spreadsheet screenshot works.
  • A sense of who’s involved: how many people, which roles, which departments touch the process.
  • Any systems the new tool would need to talk to, such as accounting software or a POS.
  • A rough sense of what success would look like, whether that’s faster turnaround, fewer errors, or less manual chasing.

Some developers’ decision process mirrors the uniqueness and money tests covered earlier: if a workflow is common enough that an adapted product foundation, such as a queue management or lead tracking base, can be configured to fit, that’s often the faster and cheaper route. Custom development gets recommended only when the workflow genuinely doesn’t map onto anything that already exists.

Details on Ronald’s background and FlowLab’s working style are on the FlowLab team page, for readers who want to understand who they’d actually be working with before booking a review.

Why most build-versus-buy advice misses the real risk

The conventional advice on internal tool development spends most of its energy on the build decision and almost none on what happens after launch. That’s backwards. The research is consistent on this point: the maintenance tail, not the initial build cost, is where most internal tools quietly fail. A business that builds a technically excellent tool with no named owner and no maintenance budget has made the same mistake as one that bought the wrong platform. Both end up with software nobody trusts within eighteen months.

What gets underrated is the discipline of the “won’t do” list. It sounds almost too simple to matter, yet it’s the single cheapest control against scope creep available to any team. Most projects don’t fail because the initial scope was wrong. They fail because nobody had a mechanism to say no to the fifteenth reasonable-sounding addition.

If you take one thing from this guide, make it this: score the decision before you fall in love with a solution, then budget the ongoing hours as seriously as the build itself.

— Ronald

Ready to scope your internal tool? Here’s the next step

Reading a framework is useful. Getting a straight answer for your own workflow is faster. FlowLab’s complimentary app-fit review exists precisely for the moment after this guide, when you know roughly what you need but aren’t sure whether to buy, adapt, or build.

Flowlab

If your business runs on a queue, a lead pipeline, or an event sign-up process that feels close to standard but not quite, FlowLab’s ready-made product range is worth checking before committing to a custom quote. It’s often the fastest route from “we have a spreadsheet problem” to “this is solved,” without the months a full build usually takes. For workflows that genuinely don’t fit an existing pattern, the app development service covers everything from scoping through to delivery, with the same fit review as the starting point either way.

Before booking, gather a sample of the current workflow, whatever spreadsheet or process document you’re using today, a rough list of stakeholders involved, and the one metric you’d want to see improve. That is generally sufficient to get a clearer, no-pressure answer on cost and approach. Book a complimentary app-fit review and get a straight recommendation before you spend a cent on development.

Sources

Not sure what your business needs?

We recommend the simplest suitable solution before proposing any build.