Zopio

Payment orchestration: build vs buy

The build-vs-buy decision is not really about whether your team can integrate two PSPs. It is about whether payment routing, provider abstraction, recovery, observability, policy execution and financial verification are strategic infrastructure you want to own for years.

01

Start with the operating model, not the connector count

A first orchestration layer can look deceptively small: normalize provider APIs, choose a route, retry on failure. In production, the scope expands into credential handling, token portability, payment state machines, provider capability differences, version management, regional rules, reconciliation, observability and operational tooling.

The relevant question is therefore not whether engineers can build an abstraction. They can. The question is whether maintaining that abstraction creates a durable competitive advantage relative to the opportunity cost of the engineers and operational attention it consumes.

02

Build is rational when control is the product

Owning the orchestration core can make sense when payment behavior is deeply differentiated, the company operates at sufficient scale to justify a dedicated payments platform team, or regulatory and deployment constraints require unusually specific control. It can also be rational when the orchestration layer itself is part of the product sold to customers.

In that model the organization should budget for a permanent platform capability, not a one-off integration project. Reliability engineering, provider certification, observability, on-call ownership and financial operations become part of the total cost.

03

Buy is rational when the advantage is elsewhere

Adopting an orchestration platform is often stronger when the business needs provider flexibility, routing and operational control but does not gain strategic advantage from rebuilding the common infrastructure underneath them. The value then comes from configuring business policy while delegating connector maintenance, normalization and reliability primitives.

Buying does not eliminate architecture responsibility. Teams still need to understand data ownership, provider portability, failure modes, security boundaries, commercial dependencies and exit paths. A weak vendor abstraction can simply replace PSP lock-in with orchestration lock-in.

04

Evaluate the total decision

Compare both options across five dimensions: strategic differentiation, engineering and operations cost, provider and geographic complexity, security/compliance scope, and reversibility. If one option appears cheaper only because ongoing maintenance or switching costs are excluded, the comparison is incomplete.

05

Define the orchestration boundary before comparing options

Teams often compare a vendor platform with an internal project that includes only API normalization and routing. That is not an equivalent comparison. A production orchestration layer may also own payment state, retries, provider health, credential references, routing policy, observability, provider feature differences, settlement identifiers, configuration governance, auditability, testing environments, migrations and operational tooling. The first step in a build-vs-buy process is therefore to define which of those responsibilities belong inside the orchestration boundary and which remain elsewhere.

A narrow boundary can be legitimate. Some companies want only a routing decision service while keeping execution and financial operations in existing systems. Others want a broader payment control plane. The mistake is not choosing a narrow scope; the mistake is comparing a narrow internal build with a broad external capability and concluding that build is cheaper because most of the long-term work was omitted from the estimate.

06

Calculate internal cost as a multi-year platform commitment

Internal cost includes more than implementation headcount. Add provider onboarding and certification, regression testing, incident response, observability, security review, operational dashboards, documentation, configuration governance, on-call ownership, payment-operations support and the engineering work required whenever a provider changes an API or capability. Then include opportunity cost: what revenue, product or customer work does the same senior engineering capacity not deliver because it is maintaining payment infrastructure?

The cost profile also changes as provider count and geography increase. The third connector is not always as cheap as the first two because abstraction leaks become clearer. Different providers expose different state models, local payment methods, authentication rules and settlement semantics. A mature internal platform absorbs those differences deliberately; an immature one spreads provider-specific conditionals throughout the application until the supposed abstraction becomes another source of coupling.

07

Evaluate vendor risk beyond feature coverage

A vendor evaluation should examine data ownership, token portability, configuration export, provider passthrough data, audit access, observability, regional deployment, security boundaries, SLA mechanics, commercial scaling and exit paths. Feature parity at procurement time is not enough. The harder question is whether the platform preserves your ability to change PSPs, add regions, change routing policy, or migrate away later without rebuilding the business layer above it.

Vendor abstraction can fail in two opposite ways. If the platform hides too little, your application remains provider-aware and portability gains are weak. If it hides too much, important provider capabilities and diagnostic evidence disappear behind a lowest-common-denominator API. The right abstraction exposes a stable business model while preserving provider-specific escape hatches where they create material value.

08

Use strategic differentiation as the deciding variable

The strongest case for build is not 'we can do it.' It is 'owning this layer materially improves our differentiated product or economics.' A global payments company whose routing intelligence is core intellectual property has a different answer from a retailer whose competitive advantage is merchandising and customer experience. Both may process large volumes, but volume alone does not make infrastructure ownership strategic.

Likewise, the strongest case for buy is not speed alone. It is the ability to move engineering attention upward while retaining enough control over policy and economics. A good external platform should reduce undifferentiated operational work without forcing the company to outsource the decisions that actually matter to its business.

09

A practical scoring model

Score both options across six dimensions: strategic differentiation, required control, total multi-year cost, time to capability, operational resilience, and reversibility. Weight the dimensions before scoring so that the exercise does not simply rationalize a preferred answer. For example, a regulated deployment requirement may deserve more weight than initial cost; a fast-growing international rollout may make time-to-capability more important than short-term engineering ownership.

Then stress-test the result with scenarios: provider outage, new country launch, contract repricing, credential migration, acquisition of another business, and vendor exit. If the architecture looks attractive only in the steady state, the analysis is incomplete. Payment infrastructure earns its value during change and failure, not only during normal processing.

Practical takeaways

Do not reduce orchestration to a connector project.

Treat an internal build as a permanent platform commitment.

Evaluate vendor portability and exit paths before adoption.

Compare total operating cost and strategic value, not initial implementation cost alone.

Primary references