How do I know if an agency is subcontracting my work without telling me?

Why Undisclosed Subcontracting Is a Real Risk

Many US software and design agencies win contracts with senior talent on display, then quietly hand the work to overseas contractors or other firms once the engagement starts. This isn't always malicious—margins are thin and specialties vary—but when it happens without your knowledge you lose control over quality, data handling, confidentiality, and legal accountability.

Warning Signs to Watch For

• You can never get a live call with the developers. If the agency shields the team behind a single account manager and resists video introductions, that's a red flag.
• Names and time zones shift unexpectedly. A developer named "Jake" answers emails at 2 a.m. EST without explanation, or Slack handles change mid-project.
• Deliverable metadata tells a different story. Check Git commit author fields, document properties, and design file metadata—these often reveal real contributor names or company names.
• Inconsistent writing styles in code or documentation. Sudden shifts in coding conventions, variable naming, or comment language can suggest a handoff happened.
• The agency is vague about its team size. Agencies that claim a 20-person team but can only put two people on a call, or won't share LinkedIn profiles of assigned staff, may be reselling external labor.
• Your NDA wasn't extended to subcontractors. A transparent agency will proactively confirm that any third parties have signed equivalent NDAs. If they dodge this question, assume they haven't.

What Your Contract Should Say

Before signing anything, push for these clauses:

1. Prior written consent for subcontracting. No work may be delegated to a third party without your explicit approval.
2. Full IP assignment regardless of contributor. All work product—whoever actually writes the code—is assigned to you at delivery.
3. Flow-down of confidentiality. Any subcontractor must be bound by a confidentiality agreement at least as strict as yours.
4. Right to audit. You can request the names and locations of all personnel working on your project at any time.

In the US, these are standard, enforceable contract terms. If an agency balks at any of them, treat that as a signal.

Practical Steps During the Engagement

• Request access to the shared Git repository and review commit history weekly.
• Ask for a team org chart with real names at kickoff.
• Schedule brief, informal video check-ins directly with developers—not just PMs.
• Run a quick LinkedIn search on names that appear in commits or emails.

How CodeNicely Approaches This

CodeNicely operates with an NDA-first, full IP ownership model and assigns dedicated in-house teams to each engagement. Clients can meet the actual developers building their product. If you want a firm where the team you're shown is the team doing the work, that's worth asking any agency explicitly—including CodeNicely—before signing.