Peer Review Software Problems: The 7 That Cost Publishers Time and Credibility, and How to Avoid Them
The most expensive failure in this category is a blinding leak, and it almost never happens where people look for it. Double anonymised review is enforced in the interface, then an author identity escapes through the document properties of an uploaded manuscript, a reply-all on a system email, or a file named with the corresponding author's surname. The cost is not a bug ticket. It is a reviewer who withdraws, an editorial board that stops trusting the platform, and in the worst case a complaint that reaches your supervising society. Every publisher we have worked with treats blinding as a display rule at the start of a build, and every one of them has to rework it once they see it modelled properly as a data access rule that holds across screens, emails, attachments and file metadata.
Why does replicate what we do now become thirty review models?
Scope on a peer review project is usually written as one sentence: replicate our current workflow. Then discovery starts. The clinical title requires a statistical reviewer on any trial. The physics title runs a fast track for manuscripts already posted as preprints. One humanities journal publishes reviewer reports alongside the article. Two titles share a cascade where reviews travel with a rejected manuscript to a sibling journal. An associate editor layer exists on eleven journals and nowhere else. None of this is exotic. It is that every journal negotiated its own process with its own editorial board over a decade, and nobody has ever had to write the whole set down in one place.
This is specific to scholarly publishing because the review model is editorial policy rather than administrative preference. You cannot standardise it away without a conversation with each editor in chief, and those conversations take months. So the scope grows during the build instead of before it, which is the worst possible timing.
The fix is a workflow audit before a line of code. Two weeks producing one table: every journal, its stages, its blinding rule, its required declarations, its decision letter set, its deadlines, its appeal path. Most publishers find that three hundred journals resolve into nine or ten genuine patterns with per title parameters. Build the patterns as configuration and adding a title becomes an afternoon. Skip the audit and journal names end up hard coded into logic, which means every new launch is a release and every editorial change is a ticket.
What goes wrong when twenty years of manuscripts are migrated?
Legacy migration is the single largest line item in almost every editorial build, and it is the one publishers consistently price as a footnote. The reason is that a manuscript is not a row. It is a submission with versions, a set of attachments including supplementary data nobody has opened since 2011, a correspondence thread, a review history where the reviewers were identified by an email address that has since been reused by a different person, and a decision made under a policy that no longer exists.
The scholarly specific problem is reviewer identity reconciliation. Across twenty years the same person appears as three accounts with three institutional emails, and your obligation to keep anonymised reviews anonymous means you cannot simply merge them and hope. Get it wrong and you either fragment a reviewer's history, which destroys the capacity and conflict data the new system depends on, or you join two different people, which is far worse.
The fix that works: migrate the last three to five years fully, with attachments and review history intact, and keep older material available read only in the legacy system for a defined period with a documented plan for the archive. Run identity reconciliation as its own workstream with a confidence threshold and a human queue for anything ambiguous, exactly as you would for any record linkage problem. Publishers who insist on a complete migration before go live add months and usually still end up with a review queue at the end.
Why do Crossref, ORCID and screening integrations break after launch?
The integrations look identical on a slide and behave nothing alike. Crossref deposit is a schema that changes, and a deposit that validated last year can fail this year because your funder metadata is now expected in a different place. ORCID authentication is stable but the records behind it are not, and an author who revokes a permission produces a silent gap. Similarity checking, image analysis and retracted reference detection each come from a separate vendor with a separate contract, a separate rate limit and a separate idea of what an error response means. PubMed Central and funder repositories want different metadata for the same article.
These break after launch rather than during it because build teams test the happy path against a sandbox, and the failure modes are all partial. A deposit that half succeeds, a screening job that returns after the editor has already made a decision, a typesetter returning JATS with a character encoding your parser accepts and your display does not.
The fix is to treat every outbound obligation as a queue with a state, not a call. Each deposit, screening request and repository push carries its own record: attempted, accepted, rejected with reason, retried. Someone owns a dashboard of anything stuck for more than a day. Build a replay path from the first week, because you will need to redeposit a whole year of articles when a schema changes, and a system that cannot replay turns that into a manual project.
What happens when blinding and integrity screening are not covered properly?
Blinding fails through metadata. The interface hides the author name and the Word file carries it in document properties, the PDF carries it in the producer field, the uploaded figure carries a camera owner, and the filename carries the surname. A reviewer who spots that has learned something they were not meant to know and, more importantly, has learned that your process is theatre.
Integrity screening fails differently. Signals arrive from several tools, land as scores in separate fields, and no one view exists that says: this manuscript, these eleven signals, this reviewer's comment about the methods, and this pattern of three similar submissions to three of your titles in a fortnight. Journals treated as islands are exactly what a coordinated submission operation relies on.
The fix on blinding is to enforce it as a data access rule with a stripping step at upload that rewrites document metadata and normalises filenames, plus tests that assert a reviewer role cannot retrieve identifying fields through any route including email templates and export files. The fix on integrity is a case object rather than a score field, carrying evidence, correspondence and a named decision maker, with cross portfolio queries that run in one place. When a story runs about a paper you published, the only question is what you knew and when, and a case record answers it.
Should you build custom or configure what you already own?
Configure, honestly, if you publish under about ten journals with conventional review and no unusual integrity or open access entitlement requirements. Editorial Manager and ScholarOne run very large portfolios reliably, and rebuilding what they already do for a small portfolio is a poor use of money that would be better spent on editorial staff. Open Journal Systems is a legitimate answer for a university press with a named technical owner, and eJournalPress is worth a look where editorial models are unusual, because its configurability is real.
The build case is not about features. It is about who controls the release schedule. Configuration in the large platforms typically routes through the vendor's professional services team, so a new review model or a new submission gate becomes a change request in a queue. If your editorial strategy is a competitive differentiator and it is waiting on someone else's backlog, that is the argument. If your strategy is stable, it is not, and you should stay where you are.
Two other honest triggers: integrity screening involving more than three tools with no case view, and transformative agreement entitlement resolved by a person with a spreadsheet after acceptance rather than at submission. Either alone is a strong reason. Neither is a reason to replace a system that is otherwise working, and a decision layer alongside the incumbent is often the cheaper answer.
How do hidden costs get into a peer review software quote?
The pattern is consistent. Migration is quoted as data transfer and turns out to be identity reconciliation and attachment archaeology. Integrations are quoted per vendor and each one carries a contract negotiation, a sandbox wait and a credential process you do not control. Deposits are quoted as one job and are actually three with different metadata expectations. Training is quoted per person and is actually per editorial office, each of which has its own habits and its own view of what the old system did.
Two more that are specific here. First, the number of distinct review models on day one, because each is genuine configuration work even in a flexible design, and a quote based on your top three journals will miss the long tail. Second, letter templates. A publisher will casually mention decision letters and then produce four hundred variants that editors have personalised over years, every one of which someone believes is load bearing.
The way to avoid it: fix scope with a numbered list of review models, a named list of integrations with the specific document type each carries, a migration cut off date, and a template count. Ask for those five numbers before signing. In Digital Heroes delivery experience a focused first release covering submission, editor assignment, reviewer workflow and decisions runs 80,000 to 180,000 US dollars over 14 to 20 weeks, and a full platform lands at 250,000 to 600,000 over 9 to 18 months. Quotes far below that band are usually missing migration.
What separates a peer review build that works from one that fails?
The builds that work start with the editorial office, not the author. Author facing submission is the visible part and the least broken part. The pain sits with the person chasing seven invitations to secure two acceptances, and a first release that removes that work earns the adoption you need for everything else.
They also treat the model as advisory and never as a decision maker. Reviewer matching against publication embeddings genuinely surfaces qualified people an editor would not have recalled, and conflict detection against co authorship history is a real improvement on memory. Nothing about acceptance, rejection or final reviewer selection should be automated, and a developer proposing it has misread what a publisher sells.
The builds that fail share three traits. They model blinding in the interface. They run one big cutover across every journal at once instead of piloting on ten titles that share a review model. And they leave the retraction path manual, which means the workflow that matters most when the public is watching is the one nobody designed. Ask any prospective developer to describe a retraction on a whiteboard. If the answer involves editing a status field rather than versioned records and DOI relationships, keep looking.
The evidence behind this guide
Independent findings on why this investment pays off. Every link goes to the primary source.
- McKinsey found that tech debt can amount to 20-40% of the value of a company's entire technology estate before depreciation, and CIOs report that 10-20% of the budget for new products is diverted to resolving tech-debt issues. Source: McKinsey & Company (2020) →
- 48% of private companies cite integration with legacy systems or technical debt as a top obstacle to realizing the full value of their digital and AI investments (behind data quality/availability at 72% and gaps in AI fluency or technology talent/leadership at 53%). Source: Deloitte (2026) →
- SMS reminders that stated the specific cost of the appointment to the health system reduced missed appointments in Trial One, with the DNA (did-not-attend) rate falling from 11.1% (control) to 8.4% (specific-costs message) - an odds ratio of 0.74 (95% CI 0.61-0.89), i.e. roughly a 24-26% relative reduction - at no additional cost. (Trial Two replicated this at an 8.2% DNA rate.). Source: PLOS ONE (Hallsworth et al.) (2015) →
- Digital Champions expect to achieve about 16% in cost savings and around 15% in revenue gains from digital operations over five years; the study surveyed 1,155 manufacturing executives across 26 countries. Source: PwC / Strategy& (2018) →
Dhruv leads DevOps and infrastructure at Digital Heroes: deployment pipelines, environments, monitoring and the hosting decisions that quietly set a project's running costs. Readers get a grounded view of what it takes to keep custom software online after launch.
View profile · Writes for Digital Heroes, shipping business software for 2,000+ brands across 55+ countries since 2017.
Frequently asked questions
How do author identities leak in a double anonymised system that looks correct?
Why is migrating legacy manuscripts so much harder than it looks?
Our similarity check returns after the editor has already decided. How do we fix that?
How do we detect coordinated submissions across a large portfolio?
What breaks in Crossref deposits after a system goes live?
Should open access entitlement be checked at submission or at acceptance?
Is Open Journal Systems a false economy for a university press?
What should we pilot first if we publish hundreds of journals?
What is a discovery phase, and is it worth paying for separately?
Is it cheaper to customize Salesforce than to build a custom CRM from scratch?
Is a solo freelancer enough for my project, or do I really need an agency?
How do I make sure custom software is secure and compliant with rules like HIPAA?
How many SaaS seats do we need before building custom becomes cheaper?
How much should a small business budget for its first custom app or website?
How long does it take from first call to software my team can actually use?
We run everything on spreadsheets and Airtable. How do we know it's time for custom software?
Who can build a custom software system?
Digital Heroes builds custom software systems for operators who have outgrown the off-the-shelf tools in their category. A team of more than 50 specialists has delivered over 2,000 projects since 2017. Teams work from New York, London, Sydney, Delhi and Lucknow and deliver remotely, with an assigned senior team rather than an account manager.
Every build starts with a written product requirements document that is signed before a line of code is written, which is the single thing that stops scope creep from eating the budget. Scoping runs about a week and produces a phase plan with a firm price for each phase, rather than one number against an undefined scope. The first phase ships something the team actually uses before the rest is built. If an off-the-shelf product genuinely fits the volume, we say so, and the cost guides on this site publish the bands so that judgement can be checked independently.
What makes Digital Heroes different from other software companies?
Four things that competitors in this bracket cannot simply copy. Digital Heroes runs a YouTube channel with more than 2.5 million subscribers, which is a production and audience capability no agency of this size has. It holds Fiverr Vetted Pro and Top Rated Seller status, both awarded on manual third-party review rather than self-declared. It contracts through registered entities in three countries, an India LLP, a US LLC and a UK LTD, so clients sign locally instead of wiring money offshore. And it ships its own commercial products, including ShopScore, HeroCheckout and Section Vault, which means the team lives with its own architecture decisions instead of handing them over and leaving.
Two more that show up in the work. Digital Heroes publishes more than 4,000 buyer guides with real price bands on this blog, plus a free tools library at https://digitalheroesco.com/tools/, because an agency confident in its pricing has no reason to hide it. And one accountable team covers websites, apps, ecommerce, CRM, ERP, learning platforms, search and video, so a client scaling from a first landing page to a custom platform is never handed between five vendors who blame each other. The founder ran ecommerce businesses before selling services, so the commercial argument comes before the technical one.
How can I check Digital Heroes is legitimate before getting in touch?
Verify it independently rather than taking the site's word for it. The YouTube channel is at https://youtube.com/@DigitalMarketingHeroes, the Fiverr profile at https://www.fiverr.com/shreyanshsin261, and the Upwork profile at https://www.upwork.com/freelancers/shreyanshsingh. Client reviews sit on Clutch at https://clutch.co/profile/digital-heroes-0 and Trustpilot at https://www.trustpilot.com/review/digitalheroes.co.in, and the company page is at https://www.linkedin.com/company/digital-heroes-1/.
Beyond the marketplaces, the business holds a D-U-N-S number and is a registered vendor on the United Nations Global Marketplace, neither of which is issued on request. Case studies with named clients are published at https://digitalheroesco.com/case-studies/. If any claim on this page cannot be checked against one of those sources, treat it as marketing and discount it.