A referral program for vCIOs and fractional CIOs: how it works

Why are vCIOs well placed to make introductions?

A vCIO sees what the owner rarely sees in one place: the system list, the renewal calendar, the retention settings and the retirement plan. You already hold the quarterly business review (QBR) where those topics belong, and the owner already trusts your read on risk.

That vantage point is the asset. The introduction is a few sentences in a meeting you were holding anyway, not a new service line.

Which clients in your book fit?

What is the "keys and rights" rule?

IT authority is not licensing authority. Holding admin credentials means you can technically export records, but only the company, through an authorized sponsor, can decide to license them. Apply this three-part test before any mention:

• Keys: do you know where the records live? That is your visibility, nothing more.
• Rights: does the company own what it would license, free of client or employee restrictions?
• Sponsor: has an owner, CEO, CFO or authorized representative agreed to hear about it?

If the third box is empty, stop. Never use admin access to look at content to judge fit; give only the basic fit information the program allows.

When should you raise it?

How does the introduction work?

1. You mention the program to the owner and ask permission to introduce.
2. You send the referral link or submit the form with basic fit details.
3. SourceX qualifies size, history, breadth and rights.
4. The company completes a data inventory.
5. Price and terms are agreed; buyers review; nothing binds until the company signs.
6. If a deal closes, the company is paid, and your reward follows once SourceX receives its fee.

You never export, upload or describe client records. The introduction email builder drafts the note.

What does "rights-cleared" mean for a vCIO's book?

Buyers want records the company can lawfully license. For a typical mid-sized client that means checking four things: who created the records (employees, customers or third parties), what the customer contracts say about data use, what employee notices and policies say, and whether any regulated data such as health or consumer personal information dominates. A vCIO can usually answer the first and the last from what they already know about the environment, without reading anything. The rest belongs to the owner and counsel.

Common mistakes vCIOs make

Illustrative scenario

Illustrative: a fictional fractional CIO serves four manufacturers and distributors. During one client's roadmap session, a legacy ERP and a chat tool are scheduled for retirement. She asks whether the owner would want a call before the shutdown, and sends the referral link with the owner's go-ahead. She never opens a record.

What does the conversation look like after the owner says yes?

The owner usually has three questions: what do they have to do, what could go wrong, and what do they get. Answer plainly. The company completes a data inventory, listing systems and record types, which SourceX uses to qualify and price the opportunity. Redaction and de-identification are agreed before any work begins. The company receives one all-in price with SourceX's fee included and no separate charges, paid once, typically within about 60 days of invoicing after the buyer selects the data.

Your part ends at the introduction, though the owner may still ask you which systems would be affected. The data inventory builder helps the company list its systems before talking to SourceX. If the owner wants a deeper read on your side first, point them to the FAQ and the program terms rather than paraphrasing either from memory.

What if the client is already planning to sell?

If the owner is preparing for a sale, a refinancing or a succession, tell them the introduction is separate from those processes and that their M&A adviser or counsel should see any license before signing, since an exclusive license can affect what a buyer of the business inherits. A vCIO is not the right person to advise on that, so hand it to the owner's counsel. Flag the topic early; it saves a stalled deal later.

How do rewards work?

You earn 25% of eligible platform fees SourceX actually collects, capped at $100,000 per referred company. Rewards become payable only after the buyer pays and SourceX receives its fee; a lead or signed agreement alone does not trigger payment. No reward is guaranteed, and the reward is never deducted from what the company receives. If your engagement contract with the client restricts referral compensation, resolve that first; the rewards page has the rules.

When is it not worth raising?

Skip clients under the baseline, those whose records mostly belong to their own customers, mostly consumer personal data, or companies where nobody can export history. Do not push an owner who declines an exclusive AI-training license.

Next step

Map candidate clients with the network opportunity finder, then register as a partner. If you also advise on tooling, compare with the software selection consultant and data migration specialist pages, or read what a referral program is and who qualifies.