You paid, but did you sign anything?
Recently I was asked for payment after seeing only a proposal. Within it I had seen various prices for service offerings and chose one over email with the agency. I was following someone else’s lead and commented that this was an impulsive move that I was not terribly comfortable with, but in solidarity, I closed my eyes and clicked that “pay” button. Fortunately, this was not a work situation but a personal one. The company had come highly recommended through channels I trusted and I had even personally met with their former clients. Willingness to pay was in part driven by the excitement of possibility and the promise of success underscored by thousands of successful client outcomes on the company’s website and hundreds of positive Google reviews; 4.9/5 stars!
I waited to be guided on timeline and next steps and quickly became aware there was no beginning or end date. Not one to panic, I started gathering documents to send to the service provider, but then realized I had no idea what their process actually was, the timeline, or who the real point of contact might be out of the three people handling my questions.
Is this really a legitimate operation, or am I their first client?
Wait, no. It has to be. I was assured: “this is how we do things in our country.” Not untrue. In Latin America, small to mid sized companies often operate more informally, and business runs on relationships and trust versus contracts. However, this does not inspire confidence in a remote client based in North America, and it is not a problem unique to Latin America either. Informality without structure is a liability in any market and small businesses are especially vulnerable to failing to understand the consequences of not following basic, formal operational procedures.
What I discovered during “onboarding” (I hesitate to call it that) confirmed the concern: no formal contract, no published privacy policy, no secure document portal, unencrypted file sharing of sensitive information such as legal identification documents, medical records, and financials. I dug a bit into their operations and discovered that there was no public registration with the relevant regulatory bodies as required by (their own country’s) law. When I requested a refund, the process took weeks of back and forth and was resolved only because I was prepared to document every gap precisely and why it was a liability for both parties. This is not a story about a dishonest business. It is a story about a business that confused its sales process for its service infrastructure and left its clients exposed in ways they never consented to.
A Proposal Is Not a Promise
There is a moment many clients experience when they realize they never signed anything. No formal agreement. No terms of service. No document that clearly defines scope, deliverables, timeline, or refund conditions. Just an invoice, an email, a payment, and an implicit handshake.
Here is what experienced service providers sometimes forget: many of your clients will be more sophisticated than you expect. Most have signed contracts before. They know what accountability looks like on paper. Social proof may open the door and convince a client to choose you, but it does not substitute for a formal agreement. All great marketing will do is raise the bar for what clients expect to find behind it. Asking for payment after only a verbal or email approval sows seeds of doubt before the work has even begun, and everything that follows will be scrutinized through that lens.
The professional standard is straightforward:
Proposal → Client Approval → Contract → Deposit → Work Begins
Expectation vs. Legal Obligation
Get Sarah Miller’s stories in your inbox
Join Medium for free to get updates from this writer.
A proposal is a marketing instrument. It describes what a business intends to offer and is designed to build confidence and close a sale. It speaks in aspirational language, but it is incomplete. It is the last step in the sales process before a contract is signed and payment is made.
A contract is a legal agreement. It specifies what will be delivered, the timeline, the conditions under which either party may exit, and the mechanism by which disputes are resolved. The distinction matters because a proposal creates an expectation whereas a contract creates an obligation. A well-written contract protects both parties equally. For the client it defines entitlements and recourse. For the business it defines scope, limits liability, and documents what was agreed. It addresses scope of services, data handling, refund conditions, and regulatory compliance, creating an internal audit function simply by existing.
Relating to data collection (including sensitive document sharing) a published privacy policy can carry the same weight as the contract. A client sending sensistive documents or a company collecting data is owed a privacy policy. In an international context, sharing data across borders is exposed to risk across multiple jurisdictions simultaneously. The privacy policy answers a simple question every client is entitled to ask: what are you doing with my information and how are you protecting it?
What Clients Should Ask Before Paying
- May I see your standard client agreement? If one does not exist, this is a red flag. A lack of such an agreement may protect the company more than it protects the client.
- Where is your privacy policy? It should be published and accessible, and should specifically address the type of documents and information being shared.
- How will I submit sensitive documents? The answer should involve a secure, encrypted portal, not email, encrypted phone apps, or consumer-grade file sharing. The privacy around your document is the company’s responsibility and should not put that burden on the client.
- Are you registered with the relevant regulatory body? The answer should be yes, with documentation available. Ask for their registration number, or verify it independently if the registry is publicly accessible.
- What are the refund conditions and timeline? This should be in the contract, not described verbally.
The Contract Is Your Professionalism Made Visible
The contract is the document that demonstrates you have thought seriously about your clients’ experience and structured your business to protect both parties. Clients sophisticated enough to ask for one are your best clients: organized, informed, and serious. In markets serving international clients, the contract, privacy policy, and secure portal if collecting sensitive documents are not competitive advantages. They are the minimum infrastructure required to operate with integrity. Businesses that treat them as optional are not respecting their clients and are betting their clients will never find out what’s missing.
The author is a business consultant with experience in international client services, compliance, and operational design.
Originally published at https://sursignal.substack.com.







