A software license compliance audit checklist lists the steps for matching every installed, deployed and subscribed product against the licences you actually own, so shortfalls are found and fixed before a publisher's auditor turns them into true-up bills, penalties or legal costs.
Updated 13 Oct 2026 · Reviewed by the Spendflo procurement team
Choose what triggered the audit and the list hides the checks a lighter review can skip. Open any row to see the evidence to collect and the red flag that needs fixing before an auditor sees it.
Get the software license compliance audit checklist as an Excel tracker with owners, status drop-downs and a progress score.
It is a review of what your organisation has installed, deployed and subscribed to, set against the purchase rights in your agreements, so you can prove you are licensed correctly and fix any shortfall on your own terms.
Audits come from three places: a publisher exercising the audit clause in its agreement, an industry body acting for publishers, or your own team running an internal review. The work is the same in each case; only the deadline and who sees the results change.
IT runs discovery, procurement holds the purchase records, legal reads the audit and use-rights terms, and finance prices the gap. Without all four, a reconciliation usually stalls at the point where installs need matching to contracts.
This checklist is a starting point, not legal advice. Take legal advice before you share data with an auditor or sign a settlement.
Six phases take you from scope to an ongoing programme. Each produces a document the next one depends on.
| Phase | What it produces | Usual owner |
|---|---|---|
| Preparation and scope | Team, scope, audit clause summary, auditor contact | IT asset manager, Legal |
| Discovery and inventory | Dated list of installs, servers, cloud and SaaS apps | IT |
| Entitlements and contracts | Proof of purchase, licence metrics and special rights | Procurement, Legal |
| Reconciliation and gap analysis | Shortfalls, dormant seats and financial exposure | IT asset manager, Finance |
| Remediation and true-up | Fix plan, uninstalls, priced top-ups | IT, Procurement |
| Governance and evidence | Evidence pack, report and an ongoing SAM routine | IT asset manager |
Publisher audits focus on installed software, but SaaS is where most waste sits. Add these ten checks to cover subscriptions that no scan will find.
When a publisher's letter arrives, the first month decides how the audit goes. Work through these eight steps before you send any data.
Do not admit a shortfall or agree a figure in early calls. Check findings against your own reconciliation and use rights first.
Download the software license compliance audit checklist so every owner can work their own rows in Excel or Google Sheets, with status and dates.
Not every gap needs the same urgency. Rate each finding so the fix plan starts with the ones that carry real cost.
| Severity | Typical finding | Act within |
|---|---|---|
| High | Unlicensed server or database use, wrong virtualisation licensing | Before any data goes to the auditor |
| Medium | Desktop shortfalls, missing proof of purchase, expired support | The current audit cycle |
| Low | Dormant seats, wrong plan tier, duplicate tools | The next renewal |
| Saving | Over-licensed products and unused subscriptions | Before the renewal notice date |
An auditor asks you to prove what you own; the burden sits with you. Keep these records together per publisher.
| Record | What it proves |
|---|---|
| Master agreement and product terms | The rules and metrics that apply |
| Order confirmations, POs and invoices | What you bought, when and how many |
| Renewal and support receipts | Which versions you are entitled to run |
| Dated inventory and usage export | What was deployed at a point in time |
| Reconciliation sheet with sign-off | How you calculated your position |
| Correspondence with the auditor | What was agreed on scope and timing |
A formal audit letter needs every check; a quick spot check needs only the essentials. Choose the trigger in the filter above.
A publisher or industry body has invoked the audit clause.
Plus the 30-day audit letter plan
Your own yearly check of high-spend publishers and SaaS.
Plus the SaaS licence checks
A single product before a renewal or after a merger.
One per phase, for one product
Run the phases in order; skipping straight to reconciliation without a frozen inventory is the most common reason audits drag on.
Form the team, set scope and agree the auditor channel.
Scan devices, servers, cloud and SaaS, then freeze the inventory.
Gather proof of purchase, licence metrics and special rights.
Match deployments to entitlements and price the exposure.
Buy, uninstall or reassign, then run an ongoing SAM routine.
This completed audit follows a publisher letter about a design application, with the two flagged checks and the outcome. The company and figures are illustrative.
| Check | Owner | Evidence received | Status |
|---|---|---|---|
| Audit clause in each agreement read | Legal | 45-day notice, audit once a year | Done |
| SaaS apps found through SSO logs and OAuth grants | IT | 150 users assigned in admin console | Done |
| Unused and dormant seats listed | IT asset manager | 22 users with no login in 90 days | Done |
| Shortfalls listed as unlicensed use | IT asset manager | 30 seats over, 8 after reclaiming dormant | Flagged |
| Licences inherited through mergers confirmed | Legal | 10 owned seats came from an acquired clinic, transfer unsigned | Flagged |
| True-up priced against current agreements and benchmarks | Procurement | 8 seats at contract unit price | Done |
+ 30 more checks done, evidence filed
All 36 checks, the 30-day audit letter plan and a reconciliation sheet for entitlements against usage. Free, no credit card.
FreeNo credit cardWork email only
| # | Check | Owner | Status |
|---|---|---|---|
| 1 | Audit team named: IT, procurement, legal, finance | IT asset manager | Done |
| 2 | Scope set: business units, servers, cloud tenants, locations | IT asset manager | In progress |
| 3 | Publishers ranked by audit risk and spend | Procurement | Flagged |
| 4 | Audit clause in each agreement read | Legal | Done |
It is a check that the software you run and subscribe to matches the licences you have bought and the terms attached to them. Publishers can demand one under the audit clause, and many companies run their own each year to find gaps first.
A software licence compliance audit covers scope, a full inventory of installs and subscriptions, proof of purchase and licence terms, a reconciliation of use against entitlements, and a plan to fix the gaps. The free download includes all six phases as 36 checks with owners.
Start from the phases of the audit, then write each check as one action with an owner, the evidence that proves it and the finding that would fail it. You can download this one in Excel or PDF and trim it to the publishers in scope.
Review high-spend publishers and SaaS at least once a year, and run a spot check before every major renewal or after a merger. A formal publisher audit then becomes a matter of updating records you already hold.
Yes. You can download this checklist as an Excel file, a Google Sheet or a PDF, and the Excel version adds the reconciliation sheet for entitlements against usage.
Keep entitlements and renewals in one place
Spendflo does not scan devices; it covers the commercial side of an audit. The Contracts Agent pulls licence terms and renewal dates from agreements, renewal tracking flags seat counts before auto-renewal, intake routes new licence requests for approval, and pricing benchmarks help you value a true-up.
Enter your work email and your download starts straight away.
Need another format? Pick one below.
Google Sheets: upload the Excel file to Drive and open it with Google Sheets.
