Advisory playbook for governing ISV app licenses in Salesforce — separate licensing structures, centralized inventory tracking, governance frameworks, negotiation strategies, compliance risks, ITAM integration, and a 10-step action plan.
Third-party AppExchange apps (DocuSign, Conga, and hundreds more) bring powerful capabilities but introduce separate licensing agreements, costs, and compliance risks. Each ISV app requires its own license on top of Salesforce — users need both a Salesforce license and the ISV license to function.
This playbook provides guidance for CIOs, enterprise architects, procurement, and ITAM teams to manage AppExchange app licenses with the same rigor as core Salesforce licenses — through clear inventory tracking, proactive governance, effective negotiation strategies, and integration into broader IT asset governance.
📚 This article is part of:
📖 Read our SF License Types guide 🏠 Back to Salesforce Knowledge Hub
Each AppExchange application comes with its own licensing terms and fees, separate from your Salesforce licensing. Installing an ISV app means maintaining two parallel subscriptions: one with Salesforce for the core platform and one with the ISV for their product. Your Salesforce contract does not cover AppExchange app costs.
A sales rep using Salesforce, DocuSign eSignature, and Conga Composer may consume three independent licenses: Salesforce (~$150/user/month) + DocuSign (~$20/user) + Conga (~$XX/user), all billed independently. Each vendor has different usage metrics — DocuSign may license per user or documents sent; Conga typically licenses per user.
AppExchange apps are add-ons, not inclusions. They expand capabilities but come with their own entitlements, fees, and contracts that need to be tracked.
Nearly all third-party AppExchange apps require the user to have both an underlying Salesforce license and the ISV's license to function. Plan for each AppExchange app as an additional contract on top of Salesforce, with its own terms, pricing, and support structure. The ISV bills your company directly, even though the app is accessed within your Salesforce environment.
| App (Vendor) | Licenses / Metric | Renewal Date | Annual Spend | Notes |
|---|---|---|---|---|
| DocuSign eSignature | 50 user licenses (5,000 envelopes/yr) | Dec 31, 2025 | $XX,XXX | Requires SF user for each DocuSign user. Overage fees if envelope allotment exceeded. |
| Conga Composer | 100 user licenses (unlimited docs) | Jun 30, 2025 | $YY,YYY | Used by Sales Ops for quotes. Ensure compatibility after SF seasonal upgrades. |
| XYZ Audit Tool (SF Labs) | Site license (free) | N/A | $0 | Free app, no contract. Still requires security review. |
Work with the ISV's sales team directly. Allows tailored contract terms, direct support relationship, and potentially more usage flexibility as a direct customer.
Salesforce can resell or facilitate AppExchange apps as part of your CRM deal. AEs get quota credit for influencing partner sales, so they have incentive to broker better ISV pricing for you.
📋 Need help negotiating Salesforce and ISV AppExchange contracts? Our independent advisors provide benchmark data and negotiation strategies across the entire Salesforce ecosystem.
Salesforce Negotiation →Users accessing apps without proper licenses violates vendor terms. ISVs can audit usage through Salesforce License Management App or telemetry. Overuse may trigger retroactive purchase requirements or penalties.
Small per-user costs accumulate rapidly across departments. Over-provisioning and underutilization directly translate to wasted budget. Usage-based overage fees quietly accumulate without monitoring.
Apps adopted without governance become shadow IT. Every AppExchange app accesses your Salesforce data — unreviewed apps may expose data to third parties without due diligence on GDPR/HIPAA compliance.
Deeply embedded apps (e.g., Conga for contract generation) create operational dependency. License lapses can halt business processes. Tight integration gives ISVs leverage to raise prices — switching is painful.
Unmanaged spend can ruin ROI calculations. You might measure Salesforce ROI but not account for the fact that for every $1 on Salesforce, you're spending $0.50+ on add-ons. Taking the holistic view — a single view of total Salesforce ecosystem costs — prevents underestimation of operating costs and enables informed budgeting.
Establish ownership & inventory — Assign ITAM team or Salesforce product owner to maintain the full inventory of AppExchange apps. Start with a complete audit of all installed packages and their licensing status.
Implement governance policy — Require approval for any new AppExchange installation. Review licensing terms, security, and overlap with existing tools before production deployment.
Centralize contract & renewal tracking — Log all ISV contracts in a contract management system. Alert procurement 3–6 months before renewals. Conduct mini-audits of usage vs. entitlement for each app.
Proactively manage license allocation — Quarterly or bi-annual reconciliation of AppExchange license assignments. Remove unused licenses. Report findings: "Q2 review shows 10 of 60 DocuSign seats unused — reducing at renewal."
Integrate into IT financial planning — Include a "Salesforce AppExchange Add-ons" line item in IT budgets. Track ROI for each app. Ensure executives see the total Salesforce ecosystem cost, not just the core CRM number.
Leverage negotiation opportunities — Treat ISV procurement with the same rigor as major software negotiations. Don't accept list prices. Time negotiations with Salesforce renewals for maximum leverage.
Negotiate contract protections — Include price increase caps, rights to reduce license counts at renewal, clarity on overage charges, and data security/compliance clauses aligned with company standards.
Monitor vendor performance post-deployment — Set KPIs to measure app effectiveness. Maintain regular contact with vendors for critical apps. Watch for upselling and scope creep in usage.
Engage independent licensing experts — For complex negotiations or audits, bring in independent advisors for benchmark data, compliance gap identification, and negotiation support.
Continuous improvement & review — After each renewal, debrief on lessons learned. Update processes. Stay informed on Salesforce ecosystem changes. Follow communities and analyst research for AppExchange trends.
AppExchange apps are separate contracts from Salesforce but deeply connected operationally. Manage them with the same rigor as core Salesforce licenses — inventory, governance, negotiation, and ongoing optimization.
ISV app prices are negotiable. Bundle with Salesforce renewals for leverage. Commit to longer terms for better pricing. Use independent advisors for high-value contracts. Never accept list price without pushing back.
Require approval for all AppExchange installations. Centralize procurement and financial tracking. Integrate into ITAM frameworks. Every app accessing your Salesforce data deserves security and compliance review.
CIOs need a single view of the entire Salesforce ecosystem cost — core licenses plus all third-party add-ons. Without this holistic view, ROI calculations are misleading and budget overruns are invisible.
No. AppExchange ISV apps have their own separate licensing agreements and fees. Each user needs both a Salesforce license and the ISV's license to use an AppExchange app. The ISV bills your company directly — your Salesforce contract does not cover AppExchange app costs. Plan for each app as an additional contract with its own terms, pricing, and support structure.
Both approaches have advantages. Direct negotiation gives you a direct relationship with the ISV for support and potentially more tailored terms. Purchasing through your Salesforce AE can leverage the size of your overall Salesforce deal — AEs get quota credit for influencing partner sales and may push the ISV for better pricing. The best approach depends on your specific situation. For large deals, bundling through Salesforce during renewal negotiations often yields better combined pricing.
Establish a governance policy requiring approval from IT (architecture, security, procurement) before any AppExchange managed package installation. Communicate this policy across all departments. Require a review of licensing terms, security implications, and overlap with existing tools. Tie the installation process to this policy — admins must obtain written sign-off before production installation. Centralize all AppExchange procurement through ITAM to prevent credit-card purchases bypassing oversight.
Yes. While Salesforce itself doesn't police third-party license compliance, ISV vendors can audit usage through the Salesforce License Management App or their own telemetry. If an audit finds over-usage (e.g., 120 users enabled but only 100 seats purchased), you may be liable for retroactive purchase of additional seats. Conduct regular internal audits to ensure alignment between entitlements and actual usage — catching issues internally averts formal compliance disputes.
Treat ISV app renewals with the same rigor as major software renewals. Trigger reviews 90 days before renewal: check current usage vs. entitlement, determine if the business still derives value, and decide whether to renew, cancel, or renegotiate. Right-size license counts based on actual usage. Consider co-terming with your Salesforce renewal for maximum negotiating leverage. Never auto-renew without reviewing — this is where shelfware and budget waste accumulate.
Bundle ISV negotiations with your Salesforce renewal — AEs have incentive to help broker better ISV pricing. Commit to longer terms (3-year subscriptions) for locked-in rates. Research benchmark pricing and know about alternative apps. Negotiate multiple ISV apps simultaneously for cross-vendor leverage. Include price increase caps in contracts. Use independent licensing advisors for high-value deals. Make the connection explicit: tell Salesforce which third-party deals are on the table so they see the full ecosystem spend picture.
Our independent advisors help enterprises manage the full Salesforce ecosystem — core licenses, ISV AppExchange apps, enterprise agreements, and contract negotiations.
📚 Continue exploring:
📖 Read our SF License Types guide 🏠 Back to Salesforce Knowledge Hub