Editorial photograph of a finance and procurement leader reviewing enterprise software and cloud overpayment patterns on screen
Benchmarking Research / Overpayment

How companies overpay. For software and cloud.

Enterprise software and cloud bills drift above where they should sit for a small set of repeatable reasons. This report names the patterns, sizes the recoverable share in bands, and lays out the buyer side moves that recover the spend at the next renewal.

Contact Us Benchmarking Practice
500+Enterprise clients
$2B+Under advisory
Industry Recognized
500+ Enterprise Clients
$2B+ Under Advisory
11 Vendor Practices
100% Buyer Side Independent

Enterprise software and cloud overpayment follows a small set of repeatable patterns. Naming the patterns, sizing them in bands, and ranking them by recoverable dollar is how a buyer recovers the spend. This report reads the patterns we see most across estates, sizes the recoverable share, and lays out the first recovery moves.

The report at a glance
Patterns
The recurring few that explain most of the bill
Recovery
A material share of every estate is recoverable
$2B+
Under buyer side advisory across the panel
100%
Buyer side, never on a vendor margin

Key takeaways

  • Enterprise software and cloud overpayment follows a small set of repeatable patterns. Five or six explain most of what we recover across estates.
  • Shelfware, tier drift, over commit on cloud, AI attach over scope, and scope creep at renewal are the recurring offenders. Each one is sizable on its own, and they almost always stack.
  • A material share of the typical enterprise software and cloud bill is recoverable in the next twelve months. The recoverable band varies by category, but the floor is not zero.
  • Cloud overpayment looks different from software overpayment because the meter never stops. The recovery is in commit shape, scope, and tier, not in seat count.
  • The largest contracts produce the largest overpayment, not the deepest savings. Scale is a discount lever and a shelfware factory at the same time.
  • Overpayment compounds at every renewal. A bill that drifts five percent above where it should sit doubles its excess every fourteen years even before any rate increase.
  • The reliable buyer side response is a named pattern audit before a vendor conversation, with the recovery move scoped per pattern rather than chased through a single big negotiation.

About this report

This report is a buyer side read on where enterprise software and cloud overpayment actually comes from, why it persists, and how it gets recovered. It draws on three inputs.

  • Our advisory engagement file. Roughly 180 to 220 enterprise estates our team benchmarked or remediated between 2024 and 2025, read as anonymized, aggregated ranges across the eleven vendor practices we serve.
  • Public vendor pricing and program terms. The dated, on the record pages each vendor publishes for list pricing, commit programs, and AI add ons, cited in full through the report.
  • A benchmarking panel. A rolling set of comparable enterprise contracts used to size the gap between an estate as paid and the same estate as used.

We report bands and directions, not precise discounts. Individual outcomes vary widely with estate size, vendor mix, and renewal timing. Where a single number appears, treat it as the middle of a range rather than a guarantee.

Where does enterprise software and cloud overpayment actually come from?

It comes from contracts that were signed for the deal the seller wanted, not the deal the buyer needed. The overpayment is rarely fraud and almost never an error. It is the predictable outcome of a procurement process that bought scope, tier, or commit beyond what the business could verify it would use.

The shape repeats. A seat count was rounded up at signing. A higher tier SKU was bundled in for a sweetener that never delivered. A cloud commit was sized against a forecast that was always optimistic.

An AI add on was rolled out by department rather than by measured action. Each of these is a normal procurement event in isolation. Stacked across an estate they explain the overpayment problem.

It is not a procurement failure, it is a measurement gap

The procurement team is rarely the cause. Procurement is given a forecast and asked to land a price against it. The forecast is the place where overpayment is built in, because the forecast almost never carries a verified measure of what the business actually consumes today.

When the contract is signed against an unmeasured forecast, the seller sets the floor and the buyer pays it. The remedy is a measured consumption baseline before any renewal conversation, not a sharper negotiation on the same flawed base.

The measurement does not have to be perfect to be useful. A directional baseline that names the largest contracts and bands the realized utilization is enough to anchor the next renewal. The first audit usually pays for the second one.

A common buyer side mistake is to wait for a perfect utilization signal before opening the renewal conversation. The perfect signal never arrives. A defensible band, sourced from real telemetry rather than a survey, is the right shape for an opening counter.

Why this is a structural problem, not a vendor problem

The overpayment patterns we see are not the fault of any specific vendor. They are the predictable output of a procurement model that buys on forecast, measures against the contract, and never measures against use. The seller does what sellers do. The buyer does what buyers do. The result is the same shape.

That is why the recovery program is a buyer side discipline, not an adversarial negotiation. The vendor is doing its job. The buyer needs to do its job differently. Naming the patterns is the first move in that job change.

The vendor compensation model points the same way

Vendor sales teams are compensated on signed annual contract value, with accelerators on multi year commits and on the AI attach motion. The reasonable response from a paid sales team is to push for the highest defensible commit on the longest term. That is the seller doing the job the seller is paid to do.

The buyer side response is to remove the seller incentive from the buyer baseline. The number the buyer brings to the table should be drawn from measured use and benchmarked peer rates, not from the seller proposal.

The buyer process gives the overpayment a place to hide

Most large estates run their renewals on a 60 to 90 day clock with limited measurement and a single account owner. That window is too short to find the overpayment patterns hiding in the contract, so the renewal becomes a price negotiation on an unexamined base.

A 9 to 12 month renewal calendar with a named pattern audit at the front of it changes the shape of the conversation. The buyer arrives with a recovery list. The vendor responds to it rather than the other way around.

The shift is procedural, not technical. The buyer is no longer arguing about whether the vendor opening quote is fair. The buyer is presenting a recoverable share by pattern and asking the vendor to respond to it. The conversation is more honest, and shorter.

Vendor account teams generally prefer this conversation, even when it costs them dollars. A clear recovery list resolves faster than a multi quarter renegotiation. The signed deal closes earlier, and the relationship survives the next renewal cycle with less friction.

What are the recurring overpayment patterns?

Across roughly 180 to 220 enterprise estates we benchmarked between 2024 and 2025, the same six patterns appeared again and again. They are not equally large in every estate, but they are almost always all present in some form. Naming them is the first move in any recovery program.

The reason they recur is that each one is a normal consequence of a procurement decision. Seat counts are rounded up. Higher tiers get sold in at signing. Cloud commits are signed against optimistic forecasts.

AI add ons are rolled out by department. Renewals are rolled forward with quiet additions. The patterns are not exotic. They are the procurement process talking to itself.

The exception that proves the rule is the estate where one of these patterns is genuinely absent. We have seen a few estates with no shelfware on a tightly managed Salesforce footprint, or no cloud over commit on a buyer that refused multi year commits on principle.

They are rare, and they confirm that the patterns are made by procurement decisions, not by vendors.

The estates that hold a clean line on one pattern usually do so because a senior finance or procurement leader set a personal rule that is older than the current contracts. The rule is the discipline. The contracts followed the rule, not the other way around.

The same logic works in the other direction. An estate that has drifted on every pattern usually has no senior rule on any of them. The recovery program in that estate starts with naming the rule, not with naming the renewal.

RECOVERABLE SHARE OF THE LINE, BAND MIDPOINT0%10%20%30%Shelfware (unused licenses)10 to 30% →Tier drift (over featured SKUs)8 to 18% →Over commit on cloud10 to 25%AI attach over scope8 to 20%Scope creep at renewal5 to 15%Metric mismatch5 to 12%Auto renew at vendor list5 to 10%
Overpayment patterns ranked by typical recoverable share of the affected line, band midpoint. Shelfware and tier drift are usually the largest. AI attach over scope is the fastest growing entry in our file.

Pattern one. Shelfware

Shelfware is the simplest pattern and usually the largest by dollar. Licenses are paid for and not used in a way that justifies the cost.

Salesforce (the Salesforce list pricing page shows the per edition list rates), ServiceNow, and Adobe estates carry the highest shelfware bands. The affected line typically runs 10 to 30 percent over measured use.

The recovery move on shelfware is rightsizing against measured use, not against the forecast that sized the contract. The measurement window is the prior twelve months of active sessions, not a survey of who would still like to keep their seat.

Sized this way, the recovery list is short and defensible. The renewal team can name the rightsized seat count by department and the recoverable dollar against the current invoice. The conversation with the vendor stops being a negotiation and starts being a fact pattern.

The trick with shelfware is that it is invisible inside a flat seat count. The contract says one number. The active use says a smaller one. The renewal then anchors on the larger number, and the gap is paid for again.

Pattern two. Tier drift

Tier drift is the steady creep of a fleet up the SKU ladder without a measured reason. Microsoft 365 (see the Microsoft 365 enterprise pricing page for the edition ladder), Workday, and ServiceNow are the venues.

A seat moves from a lower edition to a higher edition because the higher edition contains a feature someone might use, not because the feature is actually used.

The fix on tier drift is mix, not blanket. A measured feature audit identifies the seats that genuinely need the higher edition and the seats that do not. The renewal then carries a defensible tier mix rather than a single tier applied to the whole fleet.

The recoverable share runs 8 to 18 percent on the affected line. The variation across estates depends almost entirely on whether the feature audit happened before the renewal or never happened at all.

The recoverable share on tier drift runs 8 to 18 percent of the affected line. The recovery move is a measured feature audit per tier, not a blanket downgrade, because some seats genuinely need the higher edition. The pattern is mix, not blanket.

Pattern three. Over commit on cloud

Over commit is the cloud version of shelfware. A buyer signs a multi year commit at a discounted unit rate against a forecast that the business cannot ultimately consume. The unused commit is paid for as a true up at year end or burned off through inefficient consumption to avoid the true up.

AWS, Azure, and Google Cloud commit programs are the typical venues. The recoverable share runs 10 to 25 percent of the cloud line on estates that signed without a documented consumption forecast and a swap right. The recovery move is in commit shape and swap rights, not seat count.

The harder version of this pattern is the over commit that the buyer is actively burning off through inefficient consumption. The unused commit is paid for either way. Burning it off through wasteful workloads is not a recovery, it is the cost rolling forward in a different guise.

The honest recovery move is to acknowledge the over commit, reshape it for the next term, and accept the haircut. The alternative, an even larger commit at a deeper discount, usually just defers the same problem with a bigger base.

Pattern four. AI attach over scope

AI attach over scope is the fastest growing overpayment category in our file. AI add ons are rolled out by seat rather than by measured action, so a meaningful share of the paid AI seats show fewer than five actions in the prior ninety days. Salesforce Agentforce, M365 Copilot, and ServiceNow Now Assist are the most exposed.

This pattern is structurally different from shelfware because the seat cost is higher and the AI add on usually carries its own renewal cliff on top. Recovery means narrowing the AI rollout to measured action thresholds and renegotiating the AI line on its own term.

The measured action threshold matters. A reasonable threshold is five or more meaningful AI actions per user per ninety days. Seats below the threshold are returned to a non AI tier and the AI budget is redeployed to the seats that produce measured value.

This is also the only overpayment pattern that gets larger every quarter if it is not addressed. AI rollouts expand by default. Recovery on AI attach is a time sensitive move, not one that can wait for the next renewal cycle.

Pattern five. Scope creep at renewal

Scope creep is the quiet addition at renewal. Oracle, SAP, and IBM are the typical venues. A renewal letter arrives with a slightly different metric, a small added module, or a different definition of an included support level. None of the additions are large individually. Together they raise the base for every future renewal.

The recoverable share runs 5 to 15 percent of the affected line. The recovery move is to read the renewal letter line by line against the prior order form, every cycle, with the same reading discipline used for a new contract.

The reason this pattern persists is that the renewal letter looks routine. Procurement processes treat the renewal as a price negotiation rather than a contract review, and the quiet additions slide through. A line by line read is slow, but it is also the cheapest recovery move per dollar in the report.

How the patterns stack across a real estate

The patterns rarely show up one at a time. A typical large estate carries shelfware on three or four platforms, tier drift on the seat heavy ones, cloud over commit on the largest hyperscaler line, AI attach over scope on the most recent rollout, and renewal scope creep on the oldest contract.

The stack effect is what makes the total recoverable share material. Each pattern recovers a band on its own line. Stacked across the estate, the bands aggregate to a number that is meaningful at the operating budget level. That is why a pattern audit beats a single big negotiation.

Pattern six. Metric mismatch

Metric mismatch is a measurement error rather than an over purchase. A buyer is paying against a metric the vendor defines and the buyer interprets, and the two definitions do not always match. Oracle per employee metrics, IBM sub capacity metrics, and SAP indirect access metrics are the high risk lines.

The recoverable share runs 5 to 12 percent of the affected line when the buyer establishes the metric calculation from first principles before the renewal. The recovery move is technical and slow. It is also the cheapest of the six to run.

The metric audit is also the recovery move most at risk of vendor pushback. Vendors built the metric definition. They expect to interpret it. The buyer side reading is rarely welcomed, which is exactly why an independent, dated calculation matters.

Where each overpayment pattern hits hardest, by vendor cluster

PatternWorst hit vendorsWhy it lands thereTypical recoverable band
ShelfwareSalesforce, ServiceNow, AdobeSeat overshoot at signing, no rightsize at renewal10 to 30%
Tier driftMicrosoft 365, Workday, ServiceNowUpsell to higher tiers without measured use8 to 18%
Over commit on cloudAWS, Azure, Google CloudEDP, MACC, or commit signed without swap rights10 to 25%
AI attach over scopeSalesforce Agentforce, M365 Copilot, ServiceNow Now AssistAdd on rolled out by seat, not by measured action8 to 20%
Scope creep at renewalOracle, SAP, IBMQuiet metric or module additions at renewal letter5 to 15%
Metric mismatchOracle, IBM, SAPPer employee, sub capacity, or core metrics misread5 to 12%
Auto renew at listAdobe, smaller SaaS vendorsQuiet rollover without a benchmarked counter5 to 10%
  • Shelfware: paid licenses with no measured use, the largest pattern by dollar in most estates.
  • Tier drift: a fleet that has crept up the SKU ladder without a measured reason.
  • Over commit on cloud: a multi year minimum the business cannot consume cleanly.
  • AI attach over scope: AI seats rolled out without a measured action threshold.
  • Scope creep at renewal: quiet additions in the renewal letter that the buyer did not notice.
  • Metric mismatch: a definition gap between the vendor metric and the buyer interpretation.

How much of the typical bill is recoverable, in bands?

The honest answer is a range, not a number. The recoverable share varies by category, by vendor mix, and by how much measurement the buyer can stand behind. In our engagement file the bands are wide enough to be useful as a planning anchor and narrow enough to stand behind in a finance review.

Tier 1 platforms sit at 8 to 15 percent. AI add ons sit at 10 to 25 percent. Cloud commit programs sit at 10 to 20 percent. Tier 2 and 3 SaaS sit at 12 to 25 percent. Maintenance and support sit at 5 to 12 percent.

The right way to read these numbers is as a floor on what a disciplined pattern audit can return, not a ceiling.

The variance across estates is wide because the patterns stack differently in each one. An estate with deep tier drift but no cloud over commit looks very different from an estate with a clean software side and a poorly shaped cloud commit. The bands are the average. The specific estate sits somewhere inside them.

Entitled (paid)Actually used (12 month)Salesforce sales seats100%72%ServiceNow ITSM seats100%68%Microsoft 365 E5100%55%Adobe Creative Cloud all apps100%60%Workday HCM modules100%78%
Entitled seat count against actually used seat count over a rolling twelve months, by major platform. The gap is the shelfware band. The recovery move is to rightsize the entitled count against the used count, not against the original forecast.

Tier 1 platforms

Tier 1 platforms are the largest line in most estates. Microsoft, Salesforce, ServiceNow, Oracle, SAP, and Workday usually sit here.

The recoverable share is smaller as a percent than on tier 2 SaaS, but the absolute dollars are usually the largest because the line is the largest. The recovery move is rightsize plus capped uplift, at the next renewal anniversary.

The tier 1 recovery is also the recovery with the highest political cost. Resetting a flagship vendor relationship is harder than resetting a small SaaS contract. Most programs front load the tier 1 work for exactly this reason. The political capital spends best at the start of the program.

AI add on layer

The AI add on layer reprices fastest at renewal, so it carries the widest recovery band. M365 Copilot, Salesforce Agentforce, and ServiceNow Now Assist are the largest venues.

The recovery move is to treat the AI add on as a separately termed contract, with its own cap, exit right, and renewal clock. Rolling it into the platform renewal hides the increase inside the bundle.

Cloud commit programs

Cloud commits are the line where commit shape matters more than commit size. The AWS EDP, the Azure Consumption Commitment, and the Google Cloud commit programs reward commitment with discount and punish a bad shape with true up cost.

The recovery move is to reshape the commit against measured consumption and add a swap right between services.

Tier 2 and 3 SaaS

Tier 2 and 3 SaaS is the fastest recovery. The contracts are smaller, the cycles are shorter, and the consolidation opportunity is largest.

The recovery move is a pattern audit across the long tail of SaaS contracts, with consolidation onto fewer vendors where the feature overlap is real, and a drop list where it is not. The recoverable share is the widest band in the report.

The long tail is also the easiest place to start a recovery program. The contracts are small enough that the operating teams can decide a drop or a renew without a long stakeholder process. Quick wins on the long tail build the credibility that the larger contracts will need.

How much of a typical bill is recoverable, by category

Spend categoryRecoverable bandTypical recovery horizonRecovery move
Tier 1 software platform8 to 15%Next renewal cycleRightsize plus capped uplift
AI add on layer10 to 25%First AI renewalSeparate term, cap, exit right
Cloud commit program10 to 20%Next commit anniversaryRe shape commit, add swap right
Tier 2 and 3 SaaS12 to 25%30 to 90 daysPattern audit, consolidate, drop
Maintenance and support5 to 12%Next renewal cycleVerify metric, negotiate uplift cap

How does cloud overpayment differ from software overpayment?

Software overpayment usually shows up as a paid license that no one uses. Cloud overpayment usually shows up as a commit shape that does not match the consumption shape. The first is a count problem. The second is a contract architecture problem, and it does not get fixed by reducing the count.

The mechanic that makes cloud overpayment different is the meter. A software seat is a fixed annual cost. A cloud line is a metered consumption that the buyer signed to spend at a minimum rate.

The discount on the cloud commit is real, but it is only earned if the consumption shape lands inside the commit shape. When the two shapes diverge, the discount has been bought with scope the business cannot use.

The cloud overpayment is also an architecture problem

A meaningful share of cloud overpayment is not a contract problem at all. It is a workload that runs on the wrong tier of service, or a workload that should be running fewer hours, or a stale resource that should have been turned off months ago. The contract did not cause the overpayment. The architecture did.

This is why the cloud overpayment audit has two arms. The contract arm reshapes the commit. The architecture arm rightsizes the running workloads. Both are needed. Neither alone is enough to recover the full recoverable share.

The two arms also have different owners. The contract arm sits with procurement and finance. The architecture arm sits with platform engineering and FinOps. A program that uses both arms reports into a finance leader who can hold both arms accountable to a single recovery number.

Why commit shape matters more than commit size

A buyer who oversigns the commit pays for unused capacity at year end. A buyer who undersigns the commit forgoes a tier of discount. The shape of the commit, allocated by service and by year, determines whether the actual consumption lands inside it. Most overcommitments are a shape problem, not a size problem.

The recovery move is to model the commit against a measured baseline rather than a forecast, allocate the commit by service and year, and write swap rights into the contract so capacity can move between services as workload patterns change. The AWS Savings Plans documentation is the clearest public reference on how commit shape interacts with realized cost.

Azure and Google Cloud commit programs have similar mechanics with different language. The general principle is the same: the discount is bought against a shape, and the shape is what determines whether the discount is real or paid back through unused capacity.

Tier mismatch on cloud lines

Tier mismatch on cloud looks different from tier drift on software. On software a seat is on a higher edition than the user needs.

On cloud a workload is on a higher tier of storage, compute, or database than the access pattern requires. The fix is technical, the savings are real, and the recovery does not require any contract change.

The recoverable share on cloud tier mismatch usually sits inside the 10 to 25 percent over commit band rather than as a separate line. The audit step is to read the consumption telemetry against the tier list and flag every workload running on a tier that exceeds its measured access pattern.

Egress and adjacency costs

The least examined cloud line is egress, the cost of data leaving the cloud platform. Most large cloud bills carry an egress line that nobody owns and nobody benchmarks. The recoverable share is smaller than commit shape, but the line is almost always above where it should sit because no one is measuring it.

The recovery move is a per service egress audit and a default architecture review for any data heavy workload. Egress is not where the largest dollars sit, but it is where the easiest dollars sit, because the recovery does not require any vendor conversation.

A second line on the cloud bill that almost never gets benchmarked is the support tier. Enterprise support contracts default to the highest tier on the largest committed spend, often without a measured incident rate to justify it. A tier review usually recovers a sliver of the line.

Where the common advice on chasing the biggest contract for the biggest discount is wrong

The standard advice is to consolidate spend into the largest possible contract to earn the deepest volume discount. We disagree. Across roughly 180 to 220 enterprise estates, the largest contracts also produce the largest shelfware, the worst tier drift, and the deepest over commit, because the discount was bought with scope the business cannot consume. In our file, the recoverable share on the largest contract ran 1.4 to 1.8 times the share on the average mid sized contract. The buyer side move is the opposite. Right size before the contract, accept a smaller discount on a verifiable base, and recover spend at every renewal.

Editorial photograph of a finance and procurement team mapping software and cloud overpayment patterns
Overpayment follows a small set of repeatable patterns. Naming them is how a buyer recovers the spend.
Patterns
Few, repeatable, named
Recoverable
A material share of the bill
Compounds
Every renewal, every cycle

Source: Redress Compliance advisory engagement file, 2024 to 2025.

How do you find overpayment without slowing the business?

The constraint is real. Most overpayment audits never start because the operating teams cannot afford to slow down for them. The audit that succeeds is the audit that does not pull the operating teams into a long discovery exercise. It pulls the data, runs the patterns, and gives the operating teams a short list of decisions to make.

The right shape is a six to ten week pattern audit with a clear data ask up front, a fixed scoring framework, and a ranked recovery list at the end. The audit does not need a clean estate model. It needs the right cuts of the data, named against the recurring patterns, with bands on the recoverable share.

The minimum data the audit needs

The audit needs the current contracts, the last twelve months of utilization data per major line, and the last two renewal letters per major vendor. Nothing more, and nothing less. If the data does not exist, the audit names that explicitly and treats the missing data as the first recovery move.

The mistake is to ask the operating teams for a perfect estate model up front. The estate model is the output of the audit, not the input. Asking for it before the audit starts is how an overpayment recovery program stalls in the discovery phase and never reaches a vendor conversation.

The data ask should be a short, fixed list with deadlines. The audit team chases the missing data on a parallel track rather than blocking on it. A contract or utilization extract that arrives in week six is still useful. An audit that pauses for clean data never restarts on time.

The scoring framework

The scoring framework scores each major contract on each of the six recurring patterns, in bands. The output is a single page per contract that names the pattern, the recoverable band, and the recovery move. The single page is the artifact the renewal team and the finance team use. It is not a long deliverable.

The framework is intentionally simple. Six patterns, a band per pattern, a recovery move per pattern. The simplicity is the point. A complex scoring framework produces a deliverable that nobody uses. A simple framework produces a deliverable that the renewal team can execute against.

The audit team is small by design. Two or three analysts with a finance background, supported by a procurement and a platform engineering counterpart, is the right shape. Larger teams produce longer deliverables. Longer deliverables miss the renewal window.

  1. Pull contracts, utilization, and renewal letters. Two weeks. The data ask is fixed.
  2. Score the top five contracts against the six recurring patterns. Two to three weeks. Bands not precision.
  3. Rank the recovery list by recoverable dollar. One week. Sequence by renewal anniversary.
  4. Brief the finance and operating leads with a one page per contract. One week. The single page is the artifact.
  5. Hand off to the renewal team with the recovery move named per contract. The audit is done.

Why pace matters more than depth

An audit that runs longer than ten weeks usually loses the operating teams. The recovery list lands on a quarter that no longer matches the renewal calendar, and the program stalls. A shorter, banded audit that produces a ranked list inside the renewal window is more valuable than a longer, more precise audit that misses it.

This is the single most counterintuitive finding in our engagement file. Pace beats depth on overpayment recovery, because the recoverable dollars are in the next renewal, not in the perfect estate model.

The audit that runs at the right pace also keeps the operating teams engaged. A short, banded deliverable lands while the renewal is still live. A long, precise deliverable lands after the renewal closed, which is a recovery that did not happen.

The artifact discipline is what makes the audit reusable. A one page per contract template that names the pattern, the recoverable band, and the recovery move travels well between teams. The first audit takes a quarter to build the template. Every audit after that uses it.

How does overpayment compound across renewals?

Overpayment compounds because the next renewal anchors on the last bill. A bill that drifts five percent above where it should sit becomes the new baseline. The vendor uplift is then applied to the inflated base.

Five years of unexamined renewals can put the buyer 25 to 35 percent above a benchmarked estate, before any rate increase. Gartner has noted that much of software spend growth now reflects price increases on the same products rather than new deployment.

8498112126140154168100Baseline110Renewal 1121Renewal 2133Renewal 3146Renewal 4161Renewal 5COMPOUNDING OVERPAYMENT IF UNTOUCHED, INDEXED 100
Compounding overpayment if left untouched at successive renewals, indexed to 100 at the baseline. A modest annual drift compounds into a meaningfully higher base over five renewal cycles.

The compounding math

The math is simple and unforgiving. A five percent drift at renewal one carries into renewal two as the new base. A five percent uplift on the new base lands at 110 percent of the original. By renewal five the base is at roughly 128 percent of the original. The drift is now a quarter of the bill.

This is also the reason a buyer who tolerates a higher uplift today in exchange for a tighter cap tomorrow usually loses. The base set today carries forward. The cap on the future is applied to a base that should never have been set in the first place.

The honest version of the conversation is that the base matters more than the cap. A clean base with a normal cap usually beats a slightly inflated base with an aggressive cap. Renewal teams that fixate on the cap and ignore the base end up paying for the same overpayment for years.

This is the reason the recovery program at renewal four is so much harder than the recovery program at renewal one. The base is wider. The vendor reference rates are higher. The buyer comparables have all drifted in the same direction. Recovery is still possible. It is just more expensive than it would have been at the first cycle.

The same logic explains why the most leveraged moment in any estate is the moment immediately after a major reorganization or divestiture. The base has been disturbed, the seat count is in flux, and the renewal anchor is open to renegotiation. Programs that capture this window recover materially more than programs that wait.

The most leveraged renewal is the next one

Because overpayment compounds, the most leveraged renewal is always the next one. The recovery move on the next renewal protects the base for every renewal after it. Delaying recovery to the renewal after next costs the compounding rate on the same base, and the cost is real money.

This is the finance argument for running the pattern audit before the renewal calendar dictates one. The audit timing is determined by the recoverable dollar at the next anniversary, not by the convenient quarter for the procurement team.

It is also why the recovery program needs a finance sponsor as well as a procurement sponsor. The recoverable dollars show up on the finance side of the house, but the audit needs to run on the procurement side. Without both sponsors, the recovery list lands but does not get executed.

The end state is a renewal calendar that runs nine to twelve months out on every major contract, with a one page per contract recovery brief at the front of every cycle. The buyer arrives with a recovery list. The vendor responds to it.

Building a program rather than a one shot audit

The recovery move that holds across cycles is not a single audit. It is a program. The pattern audit runs once a year, the scoring framework is reused across contracts, and the recovery brief is the artifact that every major renewal carries.

Run as a program, the recovery effort gets cheaper each year. The first pass is the most expensive, because the data has to be assembled from scratch. By the third year, the data flows on a fixed cadence and the audit is a fraction of the original effort. The recovery share, by contrast, holds.

This is also how the recovery program survives leadership turnover. The artifacts and the cadence carry the work, not the individual analyst. A program with named artifacts and a fixed cadence is harder to wind down than a person who knew the estate well.

The mature program reports a recoverable dollar number per cycle, tracked against the actual signed renewals. The reporting line is to finance, not to procurement. Finance owns the recovery number. Procurement executes the moves that produce it.

The biggest contract is the biggest opportunity to overpay, not the deepest place to save. The discount you bought with scope you cannot use is the most expensive line in the budget.

The recovery is in the discipline, not in the discount

Across roughly 180 to 220 estates we benchmarked between 2024 and 2025, the recovery programs that worked best did not negotiate harder than their peers. They named the patterns earlier, scored them in bands, and brought a recovery list to the table.

The discount the buyer can ask for is a small lever. The discipline of measuring use, naming patterns, and timing the renewal is a much larger lever. A buyer with average leverage and good discipline outperforms a buyer with deep pockets and no discipline.

What to do next

Treat overpayment recovery as a pattern audit, not a vendor by vendor renegotiation. The recovery list is ranked by recoverable dollar, scoped per pattern, and timed to the renewal calendar. The audit is shorter than most procurement teams expect. The recoverable share is larger.

The eight step plan below is the version we run when the buyer side team is new to pattern audits. Teams with a recovery program already in place will compress some steps, but the order is durable. Skip step three at your peril.

Step three, the pattern scoring, is where the recovery program is either real or theatrical. Buyers who skip the scoring and jump to the negotiation produce a thinner recovery and harder vendor pushback. The score is what carries the conversation.

  1. Map every renewal anniversary across the next 18 months and flag the top five contracts by spend as the audit target.
  2. Pull the current contracts, the last twelve months of utilization, and the last two renewal letters for each of the top five contracts.
  3. Score each contract against the six recurring overpayment patterns and band the recoverable share per pattern.
  4. Rank the recovery list by recoverable dollar and sequence it against the renewal calendar.
  5. For each contract, name the specific recovery move: rightsize, retier, reshape the commit, separate the AI line, read the renewal letter clause by clause, or rebuild the metric calculation.
  6. Open every renewal at least 9 months out with the recovery move on the table, not as a post quote counter.
  7. Negotiate the capped uplift, the swap rights, and the exit rights on each line at signing. The clauses hold the recovery for the next cycle.
  8. Engage independent benchmarking and renewal advisory before the first vendor conversation, not after the renewal stalls.

Frequently asked questions

Where does enterprise software overpayment come from?

Enterprise software overpayment comes from a small set of repeatable patterns. Shelfware, tier drift, cloud over commit, AI attach over scope, scope creep at renewal, and metric mismatch explain most of what we recover. None of these patterns are exotic.

What are the most common overpayment patterns?

The five most common patterns are shelfware, tier drift, cloud over commit, AI attach over scope, and renewal scope creep. Shelfware is paid seats with no measured use. Tier drift is a fleet of higher edition SKUs. Cloud over commit is a multi year minimum the business cannot consume.

How much of a typical software bill is recoverable?

A material share of the typical enterprise software and cloud bill is recoverable in the next twelve months. Tier 1 platforms sit at 8 to 15 percent. AI add ons sit at 10 to 25 percent. Cloud commits sit at 10 to 20 percent. Tier 2 and 3 SaaS sit at 12 to 25 percent.

How does cloud overpayment differ from software overpayment?

Cloud overpayment looks different because the meter never stops. Software overpayment shows up as a paid license that no one uses. Cloud overpayment shows up as a commit shape that does not match the consumption shape. The recovery is in commit shape, scope, and tier, not in seat count.

Does buying more always get a better deal?

No. The largest contracts in our engagement file produce the largest overpayment in absolute dollars, not the deepest savings. Volume discount tiers reward commitment, and commitment buys scope the business cannot always consume. The unit price falls. The total bill rises.

How do we find overpayment in our estate?

Start with a pattern audit, not a vendor by vendor renegotiation. Run each major contract against the six recurring patterns and score it in bands. The audit takes weeks, not quarters, and gives the renewal team a ranked recovery list.

How does overpayment compound across renewals?

Overpayment compounds because the next renewal anchors on the last bill. A drift of five percent becomes the new baseline. The vendor uplift is applied to the inflated base. Five years of unexamined renewals can put the buyer 25 to 35 percent above a benchmarked estate.

What is the first move to recover overpayment?

The first move is a named pattern audit on the top five contracts by spend, scored on the six recurring patterns. The audit names the recoverable share per pattern. The renewal team can prioritize by recoverable dollar. Engaging an independent advisor before the first vendor conversation is the highest return move.

How Companies Overpay 2026

Get the full overpayment recovery framework and the buyer side audit checklist.

The pattern scoring framework, the recoverable share bands per category, the per contract one page artifact, and the buyer side renewal clauses that protect the recovery for the next cycle.

Used across more than five hundred enterprise engagements. Independent. Buyer side. Built for procurement and finance leaders running the next renewal cycle.

No spam. We will only email you about this request. Privacy.
Run the software spend health check against your estate in under five minutes.
Open the Tool →
Patterns
The Recurring Ones
Recovery
The Move That Pays
500+
Enterprise Clients
$2B+
Under Advisory
100%
Buyer Side

The biggest contract is the biggest opportunity to overpay, not the deepest place to save. Naming the patterns is how the buyer recovers the spend.

Morten Andersen
Co Founder, Redress Compliance