Skip to content
Article

Software audits: how do they work and how do you protect yourself?

Software audits are a proven revenue model for Software manufacturers and a costly surprise for customers. How does an audit work, which Software manufacturers carry them out, and how do you protect yourself?

  • June 24, 2025
  • 5 min

A Software audit is an unexpected and costly surprise for many organisations. A Software manufacturer announces an audit, requests insight into usage, and the outcome often leads to additional charges. How does it work and how do you protect yourself?

How does a Software audit work?

Almost every Enterprise Software contract contains an audit clause. This gives the Software manufacturer the right to check whether you use the Software according to the license agreement. An audit usually proceeds in three steps:

  1. Announcement: the Software manufacturer or an external audit firm sends a formal announcement.

  2. Inventory: you provide data about installations, users, servers, and environments.

  3. Outcome: the auditor compares actual usage with your licenses. Differences lead to additional charges.

Why are audits increasingly common?

For large customers, an audit almost always yields something for the Software manufacturer: license models are complex, rules change, and few organisations keep an up-to-date license overview.

The chance of an audit rises as a contract renewal approaches, your organisation has grown or merged, the Software manufacturer has been acquired (such as VMware by Broadcom), or license terms have changed.

How do you protect yourself?

  • Keep an up-to-date license overview. Know what you have purchased, what is installed, and how many users are active.

  • Read the audit clause. How much notice is required, how long may the audit last, and who bears the costs?

  • Don't respond immediately. You always have room to respond. Get guidance before sharing data.

  • Negotiate the outcome. Additional charges are negotiable even in case of discrepancies; the Software manufacturer wants to maintain the relationship.

How SoftVaro helps

SoftVaro maps your license position, so you go into an audit well prepared. When an announcement arrives, we immediately think along with you.

Frequently Asked Questions

The most asked questions about this topic.

What is a Software audit?

A Software audit is a formal check by a Software manufacturer or an external audit firm to verify whether your organisation uses the Software according to the license agreement. Audit rights are included in almost all Enterprise Software contracts.

Which Software vendors conduct audits?

Large Software manufacturers such as Microsoft, Oracle, SAP, IBM, Adobe, and Autodesk regularly carry out audits. Smaller Software manufacturers do this less often but contractually retain the right.

What are the consequences of a negative audit?

Additional charges, sometimes at higher rates than a normal purchase. In addition, there is often an obligation to immediately buy extra licenses, with little room for negotiation.

Ready to save on software?

SoftVaro negotiates the best deal on your behalf with over 4,000 suppliers. Independent, transparent, within 24 hours.

More from the knowledge base

Change language

More pages

Choose per category what we may place. Strictly necessary cookies cannot be turned off.

  • Third-party analytics (Google)

    Google Analytics 4 for product improvement: page views, time on page, button clicks. In addition to our own privacy-friendly Umami (always active, no consent required). Data is transferred to Google in the US — under Standard Contractual Clauses.

  • Marketing

    Leadinfo identifies companies visiting the site by IP address, for B2B lead follow-up (no personal data of individual visitors). Google Ads sets advertising cookies for remarketing and conversion measurement; this transfers data to Google in the US under the Standard Contractual Clauses.

  • Strictly necessary

    For basic site functionality: remembering your language preference, rate-limiting, session handling. No third parties.

    Always on

No Umami measurement

Umami qualifies for the analytics exception and does not require consent, but you can opt out of being measured.