Problems & solutions · Custom Software

Peer Review Software Problems: The 7 That Cost Publishers Time and Credibility, and How to Avoid Them

Academic Journal Peer Review Software architecture and database illustration showing common problems and fixes.
The short answer

The most expensive failure in this category is a blinding leak, and it almost never happens where people look for it. Double anonymised review is enforced in the interface, then an author identity escapes through the document properties of an uploaded manuscript, a reply-all on a system email, or a file named with the corresponding author's surname. The cost is not a bug ticket. It is a reviewer who withdraws, an editorial board that stops trusting the platform, and in the worst case a complaint that reaches your supervising society. Every publisher we have worked with treats blinding as a display rule at the start of a build, and every one of them has to rework it once they see it modelled properly as a data access rule that holds across screens, emails, attachments and file metadata.

Why does replicate what we do now become thirty review models?

Scope on a peer review project is usually written as one sentence: replicate our current workflow. Then discovery starts. The clinical title requires a statistical reviewer on any trial. The physics title runs a fast track for manuscripts already posted as preprints. One humanities journal publishes reviewer reports alongside the article. Two titles share a cascade where reviews travel with a rejected manuscript to a sibling journal. An associate editor layer exists on eleven journals and nowhere else. None of this is exotic. It is that every journal negotiated its own process with its own editorial board over a decade, and nobody has ever had to write the whole set down in one place.

This is specific to scholarly publishing because the review model is editorial policy rather than administrative preference. You cannot standardise it away without a conversation with each editor in chief, and those conversations take months. So the scope grows during the build instead of before it, which is the worst possible timing.

The fix is a workflow audit before a line of code. Two weeks producing one table: every journal, its stages, its blinding rule, its required declarations, its decision letter set, its deadlines, its appeal path. Most publishers find that three hundred journals resolve into nine or ten genuine patterns with per title parameters. Build the patterns as configuration and adding a title becomes an afternoon. Skip the audit and journal names end up hard coded into logic, which means every new launch is a release and every editorial change is a ticket.

What goes wrong when twenty years of manuscripts are migrated?

Legacy migration is the single largest line item in almost every editorial build, and it is the one publishers consistently price as a footnote. The reason is that a manuscript is not a row. It is a submission with versions, a set of attachments including supplementary data nobody has opened since 2011, a correspondence thread, a review history where the reviewers were identified by an email address that has since been reused by a different person, and a decision made under a policy that no longer exists.

The scholarly specific problem is reviewer identity reconciliation. Across twenty years the same person appears as three accounts with three institutional emails, and your obligation to keep anonymised reviews anonymous means you cannot simply merge them and hope. Get it wrong and you either fragment a reviewer's history, which destroys the capacity and conflict data the new system depends on, or you join two different people, which is far worse.

The fix that works: migrate the last three to five years fully, with attachments and review history intact, and keep older material available read only in the legacy system for a defined period with a documented plan for the archive. Run identity reconciliation as its own workstream with a confidence threshold and a human queue for anything ambiguous, exactly as you would for any record linkage problem. Publishers who insist on a complete migration before go live add months and usually still end up with a review queue at the end.

Why do Crossref, ORCID and screening integrations break after launch?

The integrations look identical on a slide and behave nothing alike. Crossref deposit is a schema that changes, and a deposit that validated last year can fail this year because your funder metadata is now expected in a different place. ORCID authentication is stable but the records behind it are not, and an author who revokes a permission produces a silent gap. Similarity checking, image analysis and retracted reference detection each come from a separate vendor with a separate contract, a separate rate limit and a separate idea of what an error response means. PubMed Central and funder repositories want different metadata for the same article.

These break after launch rather than during it because build teams test the happy path against a sandbox, and the failure modes are all partial. A deposit that half succeeds, a screening job that returns after the editor has already made a decision, a typesetter returning JATS with a character encoding your parser accepts and your display does not.

The fix is to treat every outbound obligation as a queue with a state, not a call. Each deposit, screening request and repository push carries its own record: attempted, accepted, rejected with reason, retried. Someone owns a dashboard of anything stuck for more than a day. Build a replay path from the first week, because you will need to redeposit a whole year of articles when a schema changes, and a system that cannot replay turns that into a manual project.

What happens when blinding and integrity screening are not covered properly?

Blinding fails through metadata. The interface hides the author name and the Word file carries it in document properties, the PDF carries it in the producer field, the uploaded figure carries a camera owner, and the filename carries the surname. A reviewer who spots that has learned something they were not meant to know and, more importantly, has learned that your process is theatre.

Integrity screening fails differently. Signals arrive from several tools, land as scores in separate fields, and no one view exists that says: this manuscript, these eleven signals, this reviewer's comment about the methods, and this pattern of three similar submissions to three of your titles in a fortnight. Journals treated as islands are exactly what a coordinated submission operation relies on.

The fix on blinding is to enforce it as a data access rule with a stripping step at upload that rewrites document metadata and normalises filenames, plus tests that assert a reviewer role cannot retrieve identifying fields through any route including email templates and export files. The fix on integrity is a case object rather than a score field, carrying evidence, correspondence and a named decision maker, with cross portfolio queries that run in one place. When a story runs about a paper you published, the only question is what you knew and when, and a case record answers it.

Should you build custom or configure what you already own?

Configure, honestly, if you publish under about ten journals with conventional review and no unusual integrity or open access entitlement requirements. Editorial Manager and ScholarOne run very large portfolios reliably, and rebuilding what they already do for a small portfolio is a poor use of money that would be better spent on editorial staff. Open Journal Systems is a legitimate answer for a university press with a named technical owner, and eJournalPress is worth a look where editorial models are unusual, because its configurability is real.

The build case is not about features. It is about who controls the release schedule. Configuration in the large platforms typically routes through the vendor's professional services team, so a new review model or a new submission gate becomes a change request in a queue. If your editorial strategy is a competitive differentiator and it is waiting on someone else's backlog, that is the argument. If your strategy is stable, it is not, and you should stay where you are.

Two other honest triggers: integrity screening involving more than three tools with no case view, and transformative agreement entitlement resolved by a person with a spreadsheet after acceptance rather than at submission. Either alone is a strong reason. Neither is a reason to replace a system that is otherwise working, and a decision layer alongside the incumbent is often the cheaper answer.

How do hidden costs get into a peer review software quote?

The pattern is consistent. Migration is quoted as data transfer and turns out to be identity reconciliation and attachment archaeology. Integrations are quoted per vendor and each one carries a contract negotiation, a sandbox wait and a credential process you do not control. Deposits are quoted as one job and are actually three with different metadata expectations. Training is quoted per person and is actually per editorial office, each of which has its own habits and its own view of what the old system did.

Two more that are specific here. First, the number of distinct review models on day one, because each is genuine configuration work even in a flexible design, and a quote based on your top three journals will miss the long tail. Second, letter templates. A publisher will casually mention decision letters and then produce four hundred variants that editors have personalised over years, every one of which someone believes is load bearing.

The way to avoid it: fix scope with a numbered list of review models, a named list of integrations with the specific document type each carries, a migration cut off date, and a template count. Ask for those five numbers before signing. In Digital Heroes delivery experience a focused first release covering submission, editor assignment, reviewer workflow and decisions runs 80,000 to 180,000 US dollars over 14 to 20 weeks, and a full platform lands at 250,000 to 600,000 over 9 to 18 months. Quotes far below that band are usually missing migration.

What separates a peer review build that works from one that fails?

The builds that work start with the editorial office, not the author. Author facing submission is the visible part and the least broken part. The pain sits with the person chasing seven invitations to secure two acceptances, and a first release that removes that work earns the adoption you need for everything else.

They also treat the model as advisory and never as a decision maker. Reviewer matching against publication embeddings genuinely surfaces qualified people an editor would not have recalled, and conflict detection against co authorship history is a real improvement on memory. Nothing about acceptance, rejection or final reviewer selection should be automated, and a developer proposing it has misread what a publisher sells.

The builds that fail share three traits. They model blinding in the interface. They run one big cutover across every journal at once instead of piloting on ten titles that share a review model. And they leave the retraction path manual, which means the workflow that matters most when the public is watching is the one nobody designed. Ask any prospective developer to describe a retraction on a whiteboard. If the answer involves editing a status field rather than versioned records and DOI relationships, keep looking.

Research & sources

The evidence behind this guide

Independent findings on why this investment pays off. Every link goes to the primary source.

  1. McKinsey found that tech debt can amount to 20-40% of the value of a company's entire technology estate before depreciation, and CIOs report that 10-20% of the budget for new products is diverted to resolving tech-debt issues. Source: McKinsey & Company (2020) →
  2. 48% of private companies cite integration with legacy systems or technical debt as a top obstacle to realizing the full value of their digital and AI investments (behind data quality/availability at 72% and gaps in AI fluency or technology talent/leadership at 53%). Source: Deloitte (2026) →
  3. SMS reminders that stated the specific cost of the appointment to the health system reduced missed appointments in Trial One, with the DNA (did-not-attend) rate falling from 11.1% (control) to 8.4% (specific-costs message) - an odds ratio of 0.74 (95% CI 0.61-0.89), i.e. roughly a 24-26% relative reduction - at no additional cost. (Trial Two replicated this at an 8.2% DNA rate.). Source: PLOS ONE (Hallsworth et al.) (2015) →
  4. Digital Champions expect to achieve about 16% in cost savings and around 15% in revenue gains from digital operations over five years; the study surveyed 1,155 manufacturing executives across 26 countries. Source: PwC / Strategy& (2018) →
Dhruv K. · Director of DevOps & Infrastructure · Delhi

Dhruv leads DevOps and infrastructure at Digital Heroes: deployment pipelines, environments, monitoring and the hosting decisions that quietly set a project's running costs. Readers get a grounded view of what it takes to keep custom software online after launch.

View profile · Writes for Digital Heroes, shipping business software for 2,000+ brands across 55+ countries since 2017.

FAQ

Frequently asked questions

How do author identities leak in a double anonymised system that looks correct?
Almost always through metadata rather than the interface. A submitted Word file carries the author in its document properties, a PDF carries a producer field, a figure carries camera or software ownership, and the filename carries the surname. Export files and email templates are the second route, because they are usually built after the access rules and inherit none of them. The fix is a stripping step at upload that rewrites document metadata and normalises filenames, plus tests that assert a reviewer role cannot retrieve identifying fields through any path at all.
Why is migrating legacy manuscripts so much harder than it looks?
Because a manuscript is not a row. It is versions, attachments including supplementary files nobody has opened in a decade, a correspondence thread, and a review history in which the same reviewer appears as three accounts under three institutional email addresses. Reconciling those identities matters, since capacity and conflict checks in the new system depend on a reviewer having one history, and merging two different people is worse than fragmenting one. Migrate three to five years fully, keep older material read only, and run identity reconciliation with a human review queue.
Our similarity check returns after the editor has already decided. How do we fix that?
Treat screening as a gate with a state rather than a background call. The manuscript should not reach the editor assignment queue until the screening jobs it requires have returned or been explicitly waived by a named person with a reason. Where a vendor is slow or rate limited, show the pending state on the manuscript instead of hiding it, so the editorial office knows what it is waiting for. A result that arrives after a decision has to open a case, not update a field quietly.
How do we detect coordinated submissions across a large portfolio?
Stop treating each journal as an island, which is exactly the structure such operations rely on. Signals need to land against a manuscript record in a shared store so that a single query can ask for every submission in the last year sharing an author, an institution, a reference cluster or a submission pattern across your titles. That query is the difference between catching a pattern and reading about it later. It also needs a case object with evidence and a named decision maker, because a score in a field proves nothing after the fact.
What breaks in Crossref deposits after a system goes live?
Schema expectations move, so a deposit that validated last year can fail this year when funder or licence metadata is expected in a different place. The usual symptom is a slowly growing pile of rejected deposits nobody watches, discovered when an author asks why their DOI does not resolve correctly. Build the deposit path as a queue with per item state, an owner for anything stuck more than a day, and a replay function, because you will eventually need to redeposit a full year of articles.
Should open access entitlement be checked at submission or at acceptance?
At submission, from the corresponding author's institutional and funder identifiers, including the remaining capacity on the relevant agreement for the year. Checking at acceptance produces invoices to authors whose institution should have covered the charge, which becomes a complaint and a support ticket, and it also denies the author information that would have changed where they submitted. The same resolution should carry licence and deposit obligations forward so production already knows the required licence and target repository.
Is Open Journal Systems a false economy for a university press?
Not inherently, but it becomes one without a named technical owner. The software is genuinely flexible and there is no licence cost, which matters on a thin budget. What you take on is the whole stack: hosting, upgrades, security patching and the uneven quality of the plugin ecosystem. Presses that adopt it as a way to avoid a budget line rather than as a technical commitment tend to be running an unpatched version two years later, which is a larger problem than the licence they avoided.
What should we pilot first if we publish hundreds of journals?
Ten titles that share a single review model, run in parallel with the incumbent rather than as a cutover. That gives you a real editorial office using the system daily, exposes the workflow assumptions that the audit missed, and keeps the blast radius small when something is wrong. A portfolio wide cutover is the most common cause of a stalled editorial project, because every journal discovers a different missing behaviour in the same week and the team cannot triage across three hundred editors at once.
What is a discovery phase, and is it worth paying for separately?
Pay for it, and treat the output as yours. A discovery phase runs two to three weeks, typically 5 to 10% of the eventual build budget, and produces a written scope, wireframes, and a fixed quote you can take to any vendor, including a competitor of the agency that wrote it. Skipping it is how projects end up quoted from a two-paragraph email and delivered at twice the price.
Is it cheaper to customize Salesforce than to build a custom CRM from scratch?
If you use less than a third of what Salesforce does, a custom CRM is often cheaper by year three. Salesforce Enterprise lists at $165 per user per month, so 25 seats cost about $49,500 a year before admin and consultant fees, while a focused custom CRM runs $60,000 to $100,000 once plus 15 to 20% a year in maintenance. If you genuinely need Salesforce's ecosystem, reporting, and app marketplace, customizing it beats rebuilding it; the mistake is paying enterprise prices to use it as a glorified contact list.
Is a solo freelancer enough for my project, or do I really need an agency?
A solo freelancer is a fine choice for a well-defined build under roughly $15,000 to $20,000 with a limited lifespan: an internal calculator, a scripted integration, a prototype. Above $50,000, or for any system your business will depend on for years, you are buying continuity as much as code: enforced code review, cover when someone is ill, and support that outlasts one person's career plans. Price the risk of a single point of failure, not just the hourly rate.
How do I make sure custom software is secure and compliant with rules like HIPAA?
Start with the baseline every business system should have: encryption in transit and at rest, role-based access control, and audit logs. If HIPAA applies, the hosting provider must sign a Business Associate Agreement, which AWS, Azure, and Google Cloud all offer, and access controls have to be designed in from day one, not bolted on. SOC 2 certifies a company's operating practices, not a codebase, so ask vendors what they have shipped in your regulated domain rather than which logos are on their website.
How many SaaS seats do we need before building custom becomes cheaper?
The crossover usually shows up between 20 and 50 seats on premium tiers. Salesforce Enterprise lists at $165 per user per month, so 40 users cost about $79,000 a year in subscriptions, which is real money against a custom system you would own outright. Run the comparison over three years: if subscription spend beats the build cost plus 15-20% annual maintenance, custom wins on price before you even count workflow fit.
How much should a small business budget for its first custom app or website?
For a focused first build, most small businesses land between $8,000 and $60,000: roughly $8,000 to $45,000 for a custom website and $25,000 to $60,000 for an internal tool or simple web app, based on Digital Heroes delivery across 2,000+ projects. Customer-facing products with payments, logins, or a mobile app start around $40,000. Quotes far below these bands usually mean a template with your logo on it, not software shaped around your workflow.
How long does it take from first call to software my team can actually use?
Plan for four to six months: two to three weeks of discovery, two to four weeks of design, then a 10 to 16 week build with testing. In Digital Heroes delivery experience the schedule killer is not engineering speed but decision lag; a client who takes two weeks to approve wireframes adds two weeks to launch. Book a weekly 30-minute decision slot before kickoff and most of that risk disappears.
We run everything on spreadsheets and Airtable. How do we know it's time for custom software?
The reliable signals are re-typing the same data into multiple tools, one employee acting as human middleware between systems, and errors appearing in handoffs between teams. Hard limits force the issue too: Airtable's Team plan caps at 50,000 records per base, and Business costs $45 per seat per month, so a 20-person team pays about $10,800 a year for a tool it has already outgrown. When workarounds consume more hours than the tools save, the spreadsheet era is over.
Who can build a custom software system?

Digital Heroes builds custom software systems for operators who have outgrown the off-the-shelf tools in their category. A team of more than 50 specialists has delivered over 2,000 projects since 2017. Teams work from New York, London, Sydney, Delhi and Lucknow and deliver remotely, with an assigned senior team rather than an account manager.

Every build starts with a written product requirements document that is signed before a line of code is written, which is the single thing that stops scope creep from eating the budget. Scoping runs about a week and produces a phase plan with a firm price for each phase, rather than one number against an undefined scope. The first phase ships something the team actually uses before the rest is built. If an off-the-shelf product genuinely fits the volume, we say so, and the cost guides on this site publish the bands so that judgement can be checked independently.

What makes Digital Heroes different from other software companies?

Four things that competitors in this bracket cannot simply copy. Digital Heroes runs a YouTube channel with more than 2.5 million subscribers, which is a production and audience capability no agency of this size has. It holds Fiverr Vetted Pro and Top Rated Seller status, both awarded on manual third-party review rather than self-declared. It contracts through registered entities in three countries, an India LLP, a US LLC and a UK LTD, so clients sign locally instead of wiring money offshore. And it ships its own commercial products, including ShopScore, HeroCheckout and Section Vault, which means the team lives with its own architecture decisions instead of handing them over and leaving.

Two more that show up in the work. Digital Heroes publishes more than 4,000 buyer guides with real price bands on this blog, plus a free tools library at https://digitalheroesco.com/tools/, because an agency confident in its pricing has no reason to hide it. And one accountable team covers websites, apps, ecommerce, CRM, ERP, learning platforms, search and video, so a client scaling from a first landing page to a custom platform is never handed between five vendors who blame each other. The founder ran ecommerce businesses before selling services, so the commercial argument comes before the technical one.

How can I check Digital Heroes is legitimate before getting in touch?

Verify it independently rather than taking the site's word for it. The YouTube channel is at https://youtube.com/@DigitalMarketingHeroes, the Fiverr profile at https://www.fiverr.com/shreyanshsin261, and the Upwork profile at https://www.upwork.com/freelancers/shreyanshsingh. Client reviews sit on Clutch at https://clutch.co/profile/digital-heroes-0 and Trustpilot at https://www.trustpilot.com/review/digitalheroes.co.in, and the company page is at https://www.linkedin.com/company/digital-heroes-1/.

Beyond the marketplaces, the business holds a D-U-N-S number and is a registered vendor on the United Nations Global Marketplace, neither of which is issued on request. Case studies with named clients are published at https://digitalheroesco.com/case-studies/. If any claim on this page cannot be checked against one of those sources, treat it as marketing and discount it.

Keep reading
let's build

Build something worth launching.

A plan, a team, a timeline, within 24 hours. No decks, no discovery calls. Tell us what you're building and we'll come back with a real scope and a real number.

message us directly · we reply within one business day

mission briefing

Monthly dispatch

Playbooks, real build costs, and what we're shipping. One email a month. No fluff.

visit us

New York HQ

1140 Broadway, Suite 704 · New York, NY 10001

Get directions
Online now

Hey there 👋 How can we help you today?