A software audit is a vendor initiated formal review of the customer's deployment of licensed software against the entitlement granted by the contract. Across our 320 audit panel from 2024 to 2025, median settlement landed at 11 to 22 percent of audited annual spend, with the long tail running to 60 percent plus on Oracle Database, SAP indirect access, and Microsoft Windows Server core licensing audits. Oracle, IBM, SAP, and Microsoft were the four vendors initiating the largest share of high impact audits.
Definition
Software Audit: A formal vendor initiated review of the customer's deployment of licensed software against the entitlement granted by the contract. The vendor sends a written audit notice invoking the audit clause, requests deployment data or runs measurement scripts, and reconciles findings against contracted entitlement. Any deployment in excess of entitlement is presented as a settlement claim with back maintenance, penalties, and forward purchase requirements. The audit ends when both sides sign a settlement document.
Software audits exist because every enterprise software contract contains an audit clause and because vendor compliance functions operate as profit centers. The top four audit initiators by deal value are Oracle, IBM, SAP, and Microsoft, each of which runs a dedicated license management or global license auditing team that operates independently from the sales account team and reports through finance. The compliance team's settlement targets are tracked as revenue. The buyer who treats an audit as a routine compliance exercise rather than a commercial negotiation will settle at the high end of the panel.
The audit process runs in five phases: notice, data collection, finding presentation, negotiation, and settlement. Each phase has defined buyer side moves documented at the audit defense playbook by vendor. Related concepts include the license true down, the concurrent user license, the named user license, SAP digital access, and the Oracle ULA. For audit risk by clause structure see the co term audit risk benchmark and the indirect access benchmark.
Defend an audit
Send the audit notice and entitlement summary. We benchmark exposure against 320 comparable audits and return a defense plan with target settlement in 72 hours.
Audit settlement benchmarks by vendor
From our 320 audit panel, median settlement ran 11 to 22 percent of audited annual spend across the population. Oracle Database audits ran 18 to 60 percent settlements driven by core factor processor licensing, virtualization scoping disputes, and ULA exit certification gaps. SAP audits ran 14 to 45 percent settlements anchored by digital access document tier exposure and named user reconciliation. Microsoft audits ran 10 to 30 percent settlements driven by Windows Server core licensing, M365 license type drift, and SQL Server virtualization claims. IBM audits ran 12 to 35 percent settlements anchored by sub capacity reporting via ILMT compliance gaps. The remaining vendors in the panel produced settlements at the lower end of the band. Methodology: NDA settlement data, 2024 to 2025, mid to large enterprise audits with audited annual spend $1M to $40M. For vendor specific audit defense see the Oracle, SAP, Microsoft, and IBM vendor profiles, the vendor index, the benchmarks hub, and the glossary hub.
Get the audit defense kit
Download the audit defense playbook with vendor specific settlement benchmarks, response templates, and clause negotiation moves.
Frequently asked questions
What is a software audit?
A software audit is a vendor initiated formal review of the customer's deployment against the entitlement granted by the contract. Any deployment in excess of entitlement is presented as a settlement claim with back maintenance, penalties, and forward purchase requirements.
How costly is a typical settlement?
Median settlement ran 11 to 22 percent of audited annual spend across 320 audits 2024 to 2025, with the long tail running to 60 percent plus on Oracle Database, SAP indirect access, and Microsoft Windows Server core licensing.
What triggers an audit?
Slow renewal cycles, M&A activity, public layoff announcements, refusal of vendor upsell, lapsed maintenance, and pattern detection by vendor compliance teams. Oracle audits often follow ULA exit certification disputes; Microsoft audits often follow Software Assurance lapses; SAP audits often follow indirect access detection.
Benchmark this vendor
Submit the audit notice. We benchmark exposure and settlement target against comparable audits and return a defense plan in 72 hours.
Benchmark your contract against modelled deal cohorts, or decode an agreement free in about a minute.
Decode a contract free →Benchmark your own contracts
Your free Vera AI trial opens the benchmarking database, 1,341 benchmarks across 1,140 vendors, plus the negotiation guides, playbooks, and talking points for your own renewals. No card needed, a corporate email is all it takes.