Both are viable. We use a contractor that takes a cut (~25% for < 25k claims, 20% for bigger claims IIRC), but I know of companies that do it themselves and hire a SRED specialist to review their application on an hourly contract.