Hiring a Shopify development agency is one of the highest-stakes decisions in ecommerce. A great partner compounds your growth for years; a bad one drains six figures, ships broken code, and leaves you worse off than when you started. The horror stories are everywhere—half-finished rebuilds, stores held hostage by opaque codebases, agencies that disappear mid-project, work that has to be ripped out and redone.
The reason this happens isn't because Shopify development is uniquely hard. It's because the market is unregulated, agency capabilities are wildly variable, and most merchants don't have a structured way to evaluate the firms they're considering. They go on referrals, surface-level portfolios, and gut feel—and 30-40% of the time, they end up hiring poorly.
This guide is the structured framework you should use instead. A 50-point vetting checklist, the questions that separate good agencies from bad, the contract terms that protect you, and the red flags that should kill any deal regardless of how charming the sales rep is.
Before You Even Start: Define What You're Buying
Half of bad agency hires start with poorly defined needs. The merchant asks for "a Shopify development agency" without articulating which kind of development. The agency pitches what they do best, the merchant signs without understanding the gap, and the project is doomed before kickoff.
Before contacting any agency, write down:
- The specific outcome you want (e.g., "rebuild our PDP to lift conversion 15%" or "migrate from Magento to Shopify Plus by Q3")
- The scope of work (themes? apps? integrations? headless?)
- Your budget range (with a real number, even if approximate)
- Your timeline and any hard deadlines
- Your existing tech stack and any constraints (specific apps you must keep, ERPs you integrate with, etc.)
- Your decision criteria (what will make you pick one agency over another)
This brief becomes the basis for every conversation. Agencies that can engage with it specifically are demonstrably more credible than agencies that pitch generically.
The Sourcing Funnel
Where to find candidates:
Shopify Partners directory (shopify.com/partners/directory): Shopify-vetted partners, filterable by service type, region, and specialization. The best starting point.
Shopify Plus Partners: subset of Partners certified for enterprise Shopify Plus work. If you're on Plus, this is the right pool.
Premier Shopify Partners: top-tier partner status (~50 agencies globally). These are typically the most expensive and book out months ahead.
Referrals from peer brands: ask 3-5 brands of similar size in adjacent categories who they've worked with—and what went well or didn't.
Industry events and Slack communities: ecommerce-specific communities (Operators, eCommerceFuel, REPEAT) often have agency recommendations.
Case studies and live sites: identify 5-10 brands whose Shopify stores you admire, look up which agency built them (often credited in the footer or tags).
- Avoid:
- Cold LinkedIn outreach from agencies (the quality is randomly distributed)
- Upwork/Fiverr listings claiming "Shopify expert" (occasional gems, mostly noise)
- SEO-driven agencies whose primary marketing is content—they're often better at SEO than development
Aim for a longlist of 8-12 agencies, then filter to a shortlist of 3-5 to evaluate seriously.
The 50-Point Vetting Checklist
For each shortlisted agency, work through this checklist. Not every item is dealbreaking, but consistent gaps are signal.
Credentials and Track Record (10 points)
- Shopify Partner status: Standard Partner, Plus Partner, Premier Partner, or none?
- Years building on Shopify: 5+ years preferred for serious work
- Number of completed Shopify projects: 50+ for established firms
- Specialization: do they specialize in Shopify, or is it one of many platforms?
- Industry overlap: have they worked with brands in your category (apparel, beauty, B2B, etc.)?
- Scale match: have they worked on stores of similar size (revenue, traffic, SKU count)?
- Ongoing client retention: ask for retention rate or repeat-engagement percentage
- Recent work: at least 3 launches in the last 12 months
- Geographic fit: timezone overlap matters more than location, but matters
- Team depth: avoid solo operators presenting as agencies
Technical Competence (10 points)
- OS 2.0 expertise: recent custom OS 2.0 theme builds (vintage-only agencies are a no)
- Liquid fluency: can they explain section/block architecture without hesitation?
- JavaScript/TypeScript proficiency: critical for any custom interactivity or app work
- Shopify Functions experience: replaces deprecated checkout.liquid customizations
- Checkout Extensibility: required for Shopify Plus checkout customization
- Headless experience (if relevant): Hydrogen, Next.js, or similar
- App development capability (if relevant): Polaris, Shopify CLI, App Bridge
- Performance discipline: can they show before/after Lighthouse scores from past projects?
- Accessibility: WCAG-aware, not "we'll skip that"
- Modern stack practices: Git, CI/CD, code review, version control discipline
Process and Communication (10 points)
- Defined methodology: do they have a documented project process?
- Discovery phase: do they invest real effort in understanding your business before scoping?
- Sprint cadence: 1-2 week sprints with regular demos
- Project management tooling: Asana, Linear, Jira, ClickUp—any modern tool, not "we just email"
- Communication channels: Slack, daily standups, weekly check-ins—understand the rhythm
- Documentation practices: do they document architecture decisions, code, and handoff?
- QA process: dedicated QA phase, cross-browser testing, real device testing
- Pre-launch checklist: real, repeatable launch process
- Post-launch support: typically 30 days, ideally with clear scope
- Escalation path: who do you call if something breaks at 11pm before Black Friday?
Pricing and Contracts (10 points)
- Transparent pricing: itemized estimates, not lump sums
- Pricing model fit: fixed scope, T&M, or retainer—matches your project type
- Payment terms: deposit + milestones, not 100% upfront
- Change order process: documented, not ad-hoc
- Hourly rates (for T&M or retainer work): $75-$250/hr typical for US/EU mid-market, $40-$120 for offshore senior
- Realistic timelines: any agency promising a custom build in 4 weeks is lying
- Contract terms reviewed by legal: don't sign agency-favorable boilerplate
- IP ownership: code and design must transfer to you on payment
- Source code access: from day one, in your repository, not theirs
- Termination clauses: ability to exit with delivered work
References and Proof (10 points)
- 3+ live client references: actual conversations, not just logos
- Case studies with metrics: real before/after data, not just screenshots
- Live sites you can examine: visit them, run Lighthouse, audit them yourself
- GitHub or code samples: for custom work, actual code review of past projects
- Failed projects discussed honestly: every agency has one—their willingness to discuss it is signal
- Client retention data: how many of last year's clients are still working with them?
- Glassdoor / employee reviews: agencies with high churn deliver inconsistent quality
- Public reputation: search for the agency name + "review" or "scam" or "issues"
- Awards or recognition: nice to have, not dispositive
- Time-in-business: 5+ years suggests durability, but newer agencies can also be excellent
Score each agency 0-50. Anything below 35 is a no-go regardless of charm.
The Reference Calls That Actually Matter
References are the single most underrated tool in agency evaluation. Done well, they save you from disasters. Done poorly, they're theater.
What to ask:
- "What did you hire them to do, and did they deliver it?"
- "Were the timeline and budget accurate, or did they slip?" (if slipped, by how much, and why)
- "What did they do exceptionally well?"
- "What would you change about working with them?"
- "If you were starting again, would you hire them?"
- "How did they handle the hardest moment of the project?"
- "What was their post-launch support like?"
- "Anything you wish you'd known before starting?"
Avoid asking yes/no questions. Open-ended prompts get real answers.
A reference unwilling to take 15 minutes for a call is a signal—either the relationship was thin or wasn't great. A reference enthusiastic to talk for an hour is rare and worth its weight in gold.
Contract Terms That Protect You
Most agency contracts are written by the agency for the agency. Watch for and negotiate these terms:
IP ownership: code, designs, and assets transfer to you on payment of each milestone. Default contracts often grant you a license, not ownership.
Source code access: code lives in your GitHub/GitLab/Bitbucket from day one. The agency commits to your repo. Code never lives only on the agency's servers.
Termination rights: you can exit with 30 days notice, paying for work delivered. Agency must hand over all assets, credentials, and documentation in a defined timeframe.
Change order process: any scope change requires a written change order with revised pricing and timeline. No "we'll add it for free" or "we'll figure it out later."
Warranty period: agency fixes bugs in delivered work for 60-90 days post-launch at no charge.
Indemnification: agency indemnifies you against claims arising from their work (e.g., copyright infringement, third-party code license violations).
Data handling: if they touch customer data, GDPR/CCPA-compliant handling, NDAs, security commitments.
Subcontractor disclosure: agency must disclose any work being subcontracted (some agencies front-end work and offshore everything).
Limitation of liability: typically capped at fees paid—watch for caps that are too low to cover real damages.
Dispute resolution: jurisdiction, mediation/arbitration clauses, governing law. Don't sign contracts requiring you to litigate in the agency's home country.
A small investment in legal review ($1,000-$3,000) often catches contract terms that would cost 10x or more if a project goes wrong.
Red Flags That Should End the Conversation
Some signals are dispositive—if you see them, walk away regardless of other strengths:
Vague scope, "trust us" pricing: a real agency commits to specifics. Vagueness benefits them, not you.
Pressure to sign quickly: "this rate expires Friday" or "we have one slot left" is sales theater. A trustworthy agency wants you to make a considered decision.
No portfolio of comparable work: someone has to be the first client at your scale, but it shouldn't be a $200K project.
Reluctance to share references or contracts: opacity at the start predicts opacity throughout the engagement.
Code lives only on agency servers: by default, this means you're locked in. Walk away unless they commit (in contract) to repository handover.
Affiliate-driven app recommendations: some agencies push apps for kickbacks. Ask: "Do you receive affiliate fees for any apps you recommend?" Honest answer or walk.
Bait and switch: senior team in sales calls, juniors in execution. Ask explicitly who will work on your project and how decisions are made.
Overpromising: "We'll triple your revenue" or "Your store will be the fastest on Shopify" without supporting evidence. Bullshit detection should be active.
Bad-mouthing competitors aggressively: confidence in their own work doesn't require trashing others.
Contract terms heavily favoring them: a contract you can't negotiate is a relationship you can't manage.
Sample Vetting Process
A workable sequence for hiring an agency:
Week 1: Build longlist (8-12 agencies). Send brief, request portfolios and rough estimates.
Week 2: Review responses. Disqualify 4-6 based on fit, communication quality, and obvious gaps. Move 4-5 to discovery calls.
Week 3: Discovery calls (1 hour each). Score against vetting checklist. Request detailed proposals from top 3.
Week 4: Receive proposals. Compare side-by-side. Reference calls with 2-3 past clients per finalist.
Week 5: Final negotiation. Contract review with legal. Decide.
Week 6: Onboarding. Kickoff meeting. Project starts.
Total time: 6 weeks. This feels slow if you're in a hurry, but rushing this process is the most expensive mistake in ecommerce.
What to Do If a Project Goes Sideways
Even with great vetting, projects sometimes go off the rails. Early warning signs:
- Missed deadlines without renegotiated commitments
- Communication going dark for days at a time
- Demos showing less progress than the previous demo
- Quality regressions (bugs in previously-working features)
- Account manager changes without explanation
- If you see these, escalate immediately:
- Document concerns in writing
- Request a meeting with the agency principal (not the account manager)
- Define a recovery plan with specific milestones and dates
- Set a decision date: if recovery doesn't happen, terminate
- Have your contract's termination terms ready
Sunk-cost fallacy is real. If you've spent $50K and the project is broken, spending another $50K won't fix it. Cut losses early.
Closing Thought
Hiring a Shopify development agency is a high-stakes, high-leverage decision. Done well, it's a multi-year partnership that compounds your growth. Done poorly, it costs six figures and sets you back 12 months.
The discipline that separates good outcomes from bad isn't luck—it's process. Brief specifically. Vet rigorously. Reference deeply. Contract carefully. Walk away from red flags. The right agency exists for your project, but you'll only find them by treating the hiring process as the strategic exercise it actually is.