Software Subscription Audit: The Stack You're Paying For vs the Stack You Use

Software is one of the few cost lines in a small business that only ever grows. Each subscription arrived for a sensible reason: the project tool for the big job, the design app for the rebrand, the upgrade someone needed once. Then it stayed, renewing on a card, priced by vendors who know exactly how rarely anyone looks. An audit reconciles what you pay for against what you actually use, and almost every business that runs one finds the gap is bigger than expected.

Step one: build the complete list

The stack is never where you think it is, so assemble the list from three sources rather than one.

• The accounting file. Search your subscriptions and IT expense categories, but do not stop there; small tools hide in sundry expenses and odd cost codes.
• Card statements. Go through the recurring charges directly, including any personal cards that staff use and expense. Recurring charges coded to the wrong category only show up here.
• Your team. This is the source everyone skips. Ask each person what tools they use that the business pays for, including anything on their own card. You will hear names that appear nowhere in your books.

For each item, capture what it is, what it costs, how many seats you pay for, who owns it internally, when it renews, and whether it bills monthly or annually. Expect to find tools you had forgotten existed, and at least one whose internal champion left the business long ago while the subscription kept renewing in their honour.

Step two: check real usage, not remembered usage

For every tool, the question is concrete: who has logged in recently, and what did they do? Most platforms have an admin view showing last-login per user. Use it rather than asking people whether they use the tool, because everyone answers that question optimistically. A tool people say they value but have not opened in months has answered the question for you.

Step three: hand down one of four verdicts

• Keep. Actively used, right plan, right seat count. Note the renewal date and move on.
• Downgrade. The right tool on the wrong plan: seats still allocated to departed staff, premium tiers bought for one feature nobody touches, or paid seats for people who only ever view and could share a report instead. This verdict often recovers more than outright cancellations do.
• Consolidate. Two or three overlapping tools doing one job, usually because different people bought their favourite. Pick one, migrate, and retire the rest. Fewer tools also means fewer places your data lives and fewer integrations to babysit, which is part of what a connected back office is about.
• Cancel. No active users, project finished, champion departed, or a free tier that covers your actual usage.

Step four: cancel properly

Cancellation deserves its own step because vendors make the journey deliberately scenic. Export any data worth keeping first. Cancel before the renewal date, not on it, since annual plans often renew early or require notice. Confirm the cancellation in writing, then check the following statement to make sure the charge actually stopped. A surprising number of cancelled subscriptions keep billing until someone notices.

The security dividend

The audit is worth doing for the money alone, but the security benefit may matter more. Every forgotten tool is a live account holding some slice of your business data, often with ex-staff credentials still active and nobody watching for a breach notice. Shrinking the stack shrinks your data footprint and your attack surface at the same time. While you are in there, confirm that the tools you keep have multi-factor authentication turned on and that departed staff have genuinely been removed.

Stop it growing back

A one-off audit decays within a year unless you change the conditions that created the sprawl. Three habits hold the line: give every tool a named owner who answers for it at renewal time; put every renewal date in a shared calendar so nothing renews silently; and add software removal to your offboarding checklist, because departed-staff seats are the single most common leak. Some businesses also route new subscriptions through one approval point, which need not be bureaucratic; a two-line request is enough to force the question "do we already own something that does this?"

Run the audit once and it pays for the afternoon many times over. Build the habits around it and it becomes one of the easier wins in your operations: a cost line that used to move in one direction, finally under management.