SAP Audit Defense Framework · The response protocol, the measurement traps, and the defense lines that cut SAP audit findings. Download →
Part of our SAP licensing services practice. Independent advisory across the full SAP estate.
SAP audit findings review and defense
Advisory / SAP Audit Defense

SAP audit defense, led by former SAP insiders

Redress Compliance provides SAP audit defense for enterprises facing a license audit, a USMM and LAW request, or an indirect access claim, working only for the buyer. We control what reaches SAP, remeasure the estate, and challenge every finding on evidence for a fixed fee agreed up front. In three published cases, claims fell 89 to 93 percent.

Get a second opinion on your quote → Download the SAP Audit Defense Framework
93%Claim Cut, Published Case
500+Enterprise Clients
Fixed fee, agreed up front. Audit defense is always a fixed fee scoped to the work, never hourly and never a share of the claim, so every dollar removed from the finding stays with you.
Home/SAP Services/SAP Audit Defense
How this engagement works2:13

What audit defense covers, and what it costs

Two minutes: how an SAP measurement becomes a claim, the four steps that answer it including indirect access, and why the fee is fixed while the claim is not.

Get a second opinion on your quote →

The presenters in this briefing are AI generated avatars. The service, the commercial terms, and the guidance are real, produced by Redress Compliance analysts from our client engagements.

Watch the briefingResearch briefing · 3:48

Optimize the Estate First: The SAP Work That Pays for the Negotiation

SAP prices your future from your present, so a bloated estate converts into a bloated subscription. The user cleanup, engine and shelfware rationalization, resolving indirect access on your terms, and converting clean with the credits you earned.

Open the briefing with transcript and chapters Browse the full video library →
500+ Enterprise Clients Industry Recognized $2B+ Under Advisory 11 Vendor Practices 100% Independent
Who needs this

Who needs SAP audit defense, and when?

You need SAP audit defense the moment SAP announces an audit or enhanced measurement, requests USMM and LAW results, or sends findings with a settlement figure attached. Legal wants the process controlled, IT wants the measurement checked, and finance wants the number tested before anyone concedes it.

It also serves companies that can see an audit coming: a renewal declined, a RISE pitch rebuffed, a divestiture in flight, or the periodic audit cycle coming due. Preparing the position before the letter arrives is the cheapest defense there is.

General counsel and legalCIO and IT leadershipSAP basis teamsIT asset managersCFO and finance
What we solve

Where do SAP audit findings come from?

SAP audit findings come from five repeatable ingredients, and each one can be challenged. SAP audits are largely self reported, so an uncorrected measurement becomes the vendor’s opening number in your own handwriting.

  • Measurement methodology: USMM and LAW outputs read in the way that maximizes the finding, with classification defaults doing the heavy lifting.
  • User classification: named users graded into expensive types on activity assumptions, not on what people actually do.
  • Indirect and digital access: document counts layered onto the audit that include updates, line items, and documents created by licensed users.
  • Engine and package metrics: measured against readings of decades old contract language.
  • Timing: findings that land just before a renewal or RISE negotiation, so settlement pressure serves the sales agenda.

Across roughly 50 to 60 SAP audits we defended in 2024 and 2025, the opening compliance number averaged 2 to 4 times the figure the customer could defend after a clean entitlement review.

How we do it

How does SAP audit defense work, step by step?

SAP audit defense runs four workstreams: the audit goes under a communication protocol, the measurement is reanalyzed independently, each finding is challenged on its merits, and the settlement is negotiated on terms that close the matter. The response protocol is installed in the first week, because early disclosures decide late outcomes.

Workstream 01
Audit control and protocol
All SAP and auditor correspondence reviewed, a communication protocol installed, contractual audit obligations separated from voluntary disclosures, and every response reviewed before it is sent.
Workstream 02
Measurement review
USMM and LAW outputs reanalyzed independently, classification defaults corrected against actual usage, and the entitlement position rebuilt from your contracts rather than SAP's summary.
Workstream 03
Findings challenge
Each finding contested on measurement, classification, entitlement coverage, and contract language, with a strength rating so you know where to hold and where exposure is real.
Workstream 04
Settlement and close
Resolution paths costed, target and walk away figures set against SAP's fiscal calendar, and settlement terms negotiated with release language that prevents the findings from resurfacing.

A typical engagement, week by week

Workstream
W1W2W3W4W5W6W7W8W9W10W11W12
Audit response protocol
Correspondence control and reviews
Measurement review and position rebuild
Findings challenge and defense position
Settlement strategy and cost models
Negotiation to close
The response protocol is installed in the first week, because early disclosures decide late outcomes. The remaining pacing follows the audit's own clock, managed against your deadlines rather than SAP's. Navy bars are analysis and build, gold diamonds mark a deliverable handover, gray bars run on demand. Weeks are indicative for a typical estate; renewal dates and vendor deadlines set the real clock.
DeliverableWhat it contains
Audit response protocolWho communicates with SAP and its auditors, what is shared and when, and written reviews of every data request before release.
Independent measurement analysisUSMM and LAW outputs reanalyzed, classifications corrected, and the entitlement position rebuilt from contract evidence.
Defense position memoThe challenge to each finding with strength ratings and the recommended line on every element of the claim.
Settlement strategy paperResolution paths costed, target and walk away figures, and the required release terms.
Proposal assessments to closeWritten assessments of every SAP proposal and preparation briefs ahead of each meeting through to resolution.
Why it works

Why do SAP audit findings shrink under independent review?

SAP audit findings shrink because most of the claim rests on defaults nobody checked: user types assigned at implementation, document counts that cannot tell a creation from an update, and contract readings chosen to maximize the number. Correcting those is evidence work, not negotiating charm.

The defense draws on everything else we do with SAP: RISE negotiations, S/4HANA conversions, and indirect access settlements. In more than half of our recent audit files, a RISE offer arrived within 60 days of the compliance number, so we settle audits in ways that protect the negotiation that follows.

Independence matters most under pressure. We have no reseller agreements and no vendor money, and nothing to gain from the purchase that makes the problem quietly disappear at your expense.

Client results

What results has our SAP audit defense delivered?

Published SAP audit defense outcomes include an $18M claim settled at $1.2M and exposure cut 89 to 90 percent in two further cases. Every figure below comes from a case study on this site.

✓ Published case study
$18M to $1.2M

A global industrial manufacturer settled an $18M SAP audit claim, 80 percent of it indirect access, at $1.2M after fourteen weeks of document level validation. The backdated maintenance demand was removed.

 ✓ Published case study
90% exposure cut

A Swiss multinational cut SAP audit exposure by 90 percent without litigation or a settlement purchase, mostly by correcting user classification.

 ✓ Published case study
89% of claim removed

A US food manufacturer removed 89 percent of an SAP indirect access claim by counting only externally created initial documents.

 ✓ Published case study
81% below opening

A UK engineering firm settled an SAP indirect access claim 81 percent below the opening demand after measuring real document creation.
Your senior team

Who leads your SAP audit defense?

Fredrik Filipsson, co founder and Group CEO, leads SAP audit defense with Mietske van Ravesteijn, our SAP Commercial Lead. Fredrik has run license audits from the vendor side.

Fredrik Filipsson, Co Founder of Redress Compliance
Engagement leadFredrik FilipssonCo Founder and Group CEO · ex Oracle, IBM, SAP

Fredrik’s career began at Oracle in license management services, running audit and compliance engagements for Fortune 500 customers across Europe, the Middle East, and Asia. He went on to senior commercial roles at IBM and SAP, then co founded Redress Compliance in 2018 to work the other side of the table.

Read Fredrik’s profile or meet the management team.

SAP commercial leadMietske van RavesteijnSAP Commercial Lead, Redress Compliance
Fees

How much does SAP audit defense cost?

SAP audit defense is a fixed fee, scoped to the audit and agreed before we start. It covers all four workstreams, up to four advisory calls, and email support through to settlement, and we never bill by the hour.

We do not take a percentage of the claim. The 25 percent success fee (you keep 75 percent, and pay nothing if we save nothing) applies only to negotiation work, such as a RISE or renewal deal that follows the audit.

Compare your options

Who should defend your SAP audit: Redress, a Big Four firm, an SAP partner, or your own team?

The main differences are independence and whether the advisor gains from the purchase that often ends an SAP audit. Each option can work; the table sets out the tradeoffs neutrally.

TestRedress ComplianceBig Four consultancySAP partner or resellerIn house team
Independence100 percent buyer side: zero vendor affiliations, no reseller agreements, no referral feesIndependent of SAP sales; other units of the firm may hold SAP alliance or implementation workPart of the SAP sales channelFull
Conflicts of interestNone; the fee you pay is the only revenueWorth checking before engagingEarns margin or project revenue from the purchase that follows the settlementNone, but internal deadlines can push toward settling early
SAP specific experienceFormer SAP commercial staff and a file of SAP audits, indirect access claims, and RISE dealsStrong technical benches; SAP commercial depth varies by teamDeep product knowledge, seen from the sell sideKnows the estate best; sees SAP claims rarely
How fees workFixed fee agreed up front; 25 percent success fee option on negotiation work; never hourlyUsually day rates or time and materialsOften folded into license or project pricingStaff time

For a neutral checklist, read our guide on how to choose a software licensing advisor.

What changed

What changed for SAP audits in 2025 and 2026?

SAP audits now land inside the migration conversation, and indirect access is still the largest line. Four points matter for a defense this year:

  • RISE conversion audits: audits increasingly arrive during a RISE or S/4HANA sales cycle, and in more than half of our recent files the RISE offer followed the compliance number within 60 days.
  • Short response windows: SAP often holds the response window to 30 days, so the baseline has to exist before the letter arrives.
  • API driven exposure: new external APIs that write to SAP add to the digital access count, and in our reviews they grew measured document volume 10 to 30 percent within a year of go live.
  • Maintenance rights: since July 2026, EU commitments let on premises customers terminate maintenance on unused licenses in defined scenarios, which changes what a settlement should include.

For the full picture, read the SAP audit defense guide and the SAP indirect access guide. If you need the license position before any letter arrives, our SAP licensing consultants build it.

Frequently asked questions

What do buyers ask about SAP audit defense?

How much does SAP audit defense cost?

SAP audit defense from Redress is a fixed fee, scoped to the audit and agreed before work starts. We never bill by the hour and never take a percentage of the claim, so every dollar removed from the finding stays with you.

What should we do first when SAP announces an audit?

Control the information flow before anything else. Acknowledge professionally, commit to nothing, and put every response and data submission under review. The audit response protocol is installed in the first week of the engagement for exactly this reason.

Do we have to run USMM and LAW when SAP asks?

Your contracts define your measurement obligations, and they are narrower than SAP's requests imply. We separate what SAP is entitled to demand from what it is merely requesting, and the measurement runs on terms you understand before results leave the building.

How long does an SAP audit defense take?

The response protocol is in place in week one, and the defense follows the audit's own clock. In the published $18M case, an eight week settlement ultimatum became a fourteen week evidence driven process that closed at $1.2M.

Can SAP audit findings really be reduced?

Yes. Published cases show an $18M claim settled at $1.2M, a 90 percent exposure reduction, and 89 percent of an indirect access claim removed, because findings rest on classification defaults and document counts that rarely survive independent analysis.

Why do SAP audits so often come before a RISE pitch?

Because the audit is leverage. Findings create budget urgency that SAP's sales team offers to relieve through a RISE conversion or bundle, so we settle audits in ways that protect the negotiation that follows.

Are you independent of SAP?

Yes. We have zero vendor affiliations, no reseller agreements, and no referral fees. Nothing we earn depends on you buying more SAP licenses to close the audit.

What do you need from us to start?

The audit letter and all SAP correspondence, your SAP contracts and order forms, and any measurement output already produced. Send them before replying to SAP if you can.

Advisory team preparing a vendor negotiation

The finding is the start, not the bill

Protocol first, measurement checked, findings challenged, settlement closed with release terms. That is how SAP audits end well.

Get a second opinion on your quote → Download the SAP Audit Defense Framework

Negotiation intelligence, monthly

One letter a month. Negotiation moves, audit signals, and price book shifts.