The verdict in three sentences
Budget 15 to 20% of the development cost per year for application maintenance, which means EUR 800 to 3,500 per month excluding VAT for a mid-sized company. The price matters less than the written SLA: response time, resolution time and penalties. Require a reversibility clause and up-to-date documentation from day one, otherwise you stay locked in with the vendor.
What maintenance costs in 2026: the three market models
The European maintenance market for SMEs is built around three models. The monthly retainer with a bundle of included hours dominates, because it smooths the budget and forces the vendor to keep a team that knows the code. Time and materials suits stable applications that change little. Work-unit pricing (per ticket, per quoted change) is mostly found in large enterprise contracts.
| Model | Indicative 2026 price | Included hours | Best for |
|---|---|---|---|
| Essential retainer | EUR 800 to 1,200/month | 8 to 12 h | Internal app, under 50 users |
| Standard retainer | EUR 1,500 to 2,200/month | 15 to 22 h | Business app, 50 to 200 users |
| Premium retainer | EUR 2,500 to 3,500/month | 25 to 35 h + on-call | Critical app, external clients connected |
| Time and materials | EUR 550 to 750/day | As needed | Stable app, few changes |
| Work units | EUR 350 to 1,500/ticket | Fixed price per ticket | High volumes, tooled process |
| Hosting and monitoring | EUR 150 to 600/month | Outside retainer | Managed cloud, backups, alerts |
The 15 to 20% rule remains the best safeguard: an application billed EUR 90,000 calls for a maintenance budget of EUR 13,500 to 18,000 per year, or EUR 1,125 to 1,500 per month. Below 10%, the vendor cannot keep dependencies current and technical debt piles up. Above 25%, you are probably paying for new features disguised as maintenance.
What the SLA must contain: service levels to require
A maintenance contract is judged by its quantified commitments. The IT director should define three severity levels and obtain for each a response time (the vendor starts working) and a resolution time (the service works again, possibly with a workaround).
| Incident level | Example | Response | Resolution | Usual penalty |
|---|---|---|---|---|
| Critical (P1) | App unreachable, invoicing stopped | 4 business hours | 1 business day | 5% of monthly fee per day late |
| Major (P2) | Module down, workaround available | 8 business hours | 3 business days | 2% per day late |
| Minor (P3) | Display glitch, slow export | 2 business days | Next release | None |
| Change request | New field, new report | Quote within 5 days | Scheduled in sprint | None |
| Security | Critical flaw in a dependency | 24 h | 5 business days | 5% per day late |
| Availability | Hosting included | Continuous monitoring | 99.5% monthly | 10% credit below threshold |
Penalties are often capped at 10 or 15% of the monthly fee. That cap is acceptable: the goal is to align incentives, not to fund the budget with credits. Also ask for a monthly report with ticket counts, actual response times and hours consumed.
Reversibility, documentation and scope: the clauses that protect you
The reversibility clause requires the vendor, at contract end, to hand over source code, hosting access, technical documentation and a handover session (often 3 to 5 days billed at the daily rate). Check that the code lives in a Git repository owned by your company, not by the vendor. Require an architecture document, a deployment guide and a dependency inventory updated at least once a year.
The scope must also be explicit: bug fixing is included, library security updates are included, functional changes are deducted from hours or quoted separately. Unused hours are rarely carried over beyond a quarter: negotiate a 3-month carry-over.
Mini case study
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Claire, IT director of a 150-employee manufacturer near Lyon, had a production management application built in 2025 for EUR 85,000. She compares two offers. Offer A: EUR 1,100/month, 10 hours included, P1 response in 2 days. Offer B: EUR 1,450/month, 16 hours included, P1 response in 4 business hours, reversibility included.
One day of workshop downtime costs the company about EUR 6,000 in delayed output. With two critical incidents a year, offer A exposes her to about 4 cumulative days of downtime (EUR 24,000), offer B to under 2 days (EUR 12,000). Offer B costs EUR 4,200 more per year, for about EUR 12,000 less risk. Claire picks offer B, which represents 20.5% of the development cost per year, at the high end of the range but justified.
FAQ
What budget should I plan for maintaining a business application in 2026?
Plan 15 to 20% of the initial development cost per year. For a EUR 60,000 application, that is EUR 9,000 to 12,000 per year, or EUR 750 to 1,000 per month.
What response time should I require for a critical incident?
The 2026 standard for SMEs is 4 business hours to respond and 1 business day to restore service. Evening and weekend on-call usually adds EUR 300 to 800 per month.
Are unused retainer hours lost?
It depends on the contract: many vendors forfeit them at month end. Negotiate a 3-month carry-over capped at 50% of the monthly volume, which most vendors accept.
Can I switch maintenance vendor mid-contract?
Yes, if the reversibility clause is written: allow 3 to 5 handover days, or EUR 1,650 to 3,750. Without a Git repository in your name or documentation, a new vendor may need 10 to 20 days of audit to take over.
Is a framework upgrade included in maintenance?
Minor security patches usually are. A major version upgrade (for example Next.js or Symfony) takes 5 to 15 days and is often quoted separately, which is why it pays to schedule one per year.
Let's scope your project. We audit your application, price a maintenance retainer matched to your incident volume and draft an SLA with reversibility, from EUR 800 per month. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
