LIVE INDEX 214 verified firms 41 countries $1.4B+ in disputed claims defended
Index/SAP/SAP in Australia
SAP × AUSTRALIA

SAP audit defense in Australia

Organisations in Australia facing an SAP audit are tested most on indirect, or digital, access — the document-based charge that arises when third-party systems read SAP data — alongside named-user classification and the S/4HANA conversion. This page covers the SAP audit climate in Australia, the local legal context, and the firms that defend the pair, listed alphabetically with pros and cons, not ranked.

Last reviewed: 5 June 2026

01 — THE SAP CLIMATE

SAP audits in Australia

SAP runs annual system measurement through USMM and LAW and pursues compliance via its Global License Audit & Compliance group, with around 30% of organisations reporting at least one SAP audit (2025 surveys; indicative). Australia has a concentrated SAP base in mining and resources, utilities, government and large retail, where SAP often sits at the centre of the estate and is surrounded by integrations — precisely the pattern that generates indirect-access exposure.

The signature Australian risk is third-party systems — Salesforce, e-commerce, bespoke integrations and bots — reading or writing SAP data and triggering document-based digital-access charges. With the 2027 ECC end-of-mainstream-maintenance deadline driving S/4HANA and RISE conversions, measurement is increasingly tied to migration, so the timing of any conversion shapes the licence position as much as the raw user count.


02 — THE MECHANICS

How a SAP audit is measured

The named-user, engine and digital-access mechanics that decide the number, the same worldwide but enforced locally.

METRIC

Named users & engines

ECC and S/4HANA named-user types plus engine metrics; user misclassification inflates the count.

INDIRECT

Digital access

Third-party systems reading SAP data trigger document-based digital-access charges — the signature high-value finding.

MEASUREMENT

USMM / LAW

Annual system measurement runs via USMM and LAW; what it reports shapes the claim.

CONVERSION

S/4HANA 2027

The S/4HANA conversion and 2027 ECC deadline drive conversion-linked measurement.

USERS

User-type optimization

Reclassifying over-provisioned named-user types is the most common reduction lever.

DELIVERY

SAP GLAC

Audits run through SAP Global License Audit & Compliance (GLAC).


03 — LOCAL LEGAL CONTEXT

Australia: contract, limitation and data handover

Australia is a common-law jurisdiction in which limitation periods are set by each state and territory; for a simple contract claim the period is commonly six years (for example under the Limitation Act 1969 in New South Wales), running from when the cause of action accrues. SAP agreements in Australia are usually contracted through the local SAP entity and frequently carry an Australian governing-law clause, so the audited period and back-charges turn on the specific agreement and its measurement provisions.

Data handover is constrained by the Privacy Act 1988 and the Australian Privacy Principles, which regulate how personal information is used and disclosed and place conditions on sending it offshore to an auditor. Government buyers procure through panel arrangements that add an approval layer to any settlement. Commercial disputes are often routed to arbitration. This page is information about the Australian environment and SAP’s practices, not legal advice.

⚠ INFORMATION, NOT ADVICE

This page is general information about the Australia legal and procurement environment and SAP’s audit practices, not legal advice for your situation. SAP’s program is described factually; figures are labelled indicative.


04 — THE FIRMS

Firms covering SAP in Australia

Listed alphabetically with balanced pros and cons — a directory, not a ranking.

Cadena Independent

HQ US · Serves US · UK · Germany · Netherlands · Australia · Singapore

ServiceNow-centric licensing and estate-reconciliation practice that also covers Salesforce, Oracle, Microsoft, SAP, IBM and Adobe. Reconciles entitlement against actual consumption ahead of renewals and reviews.

Pros
  • Independent advisory with no reseller relationship
  • Strong ServiceNow and SaaS reconciliation depth, a growing renewal-uplift pressure point
  • Broad multi-vendor coverage suited to mixed estates
Cons
  • Depth is weighted toward ServiceNow; other vendors are covered more lightly
  • Mid-size team rather than a global bench
  • Public outcome data is limited and not yet independently verified
ServiceNowSalesforceOracleMicrosoft
View profile

Datacom IT services / procurement

HQ New Zealand · Serves AU · NZ

One of the largest SAM teams in Australia and New Zealand, offering multi-vendor software asset management, licensing consultancy and procurement. ANZ-native with on-the-ground presence across the region.

Pros
  • Largest dedicated SAM bench in the ANZ region with local presence
  • Multi-vendor SAM and optimization experience across Microsoft, Oracle, SAP and IBM
  • Offers independent optimization advice as a distinct service line
Cons
  • Also an IT-services and procurement provider, a potential conflict of interest with strictly buyer-side audit defense
  • Coverage concentrated in Australia and New Zealand rather than global
  • SAM and advisory focus rather than dedicated litigation-grade audit defense
MicrosoftOracleSAPIBM
View profile

Deloitte ✓ Verified Big Four

HQ Global · Serves Global (all major markets)

Big Four professional-services network offering multi-vendor SAM and license-compliance advisory. Deloitte member firms are also appointed by publishers, including IBM and SAP, to run license audits of their customers.

Pros
  • Global scale and one of the widest in-country footprints in this directory
  • Multi-vendor SAM and compliance methodology able to handle large, complex estates
  • Deep resourcing for multinational, multi-jurisdiction exposure
Cons
  • Not independent: Deloitte is appointed by IBM and SAP to conduct audits, so the same network operates on the publisher/auditor side — a direct conflict of interest a buyer should weigh
  • Financial-statement-audit independence rules can restrict which services it may provide to existing audit clients
  • Big Four engagement model tends toward higher cost and broader scope than a focused audit-defense boutique
MicrosoftOracleSAPIBM
View profile

Invictus Partners ✓ Verified Independent

HQ Australia (Melbourne / Sydney) · Serves Australia · UK · Europe · Middle East · US · Singapore

Independent enterprise-software advisory founded in 2014 by Doug Gibson. Explicitly does not resell, implement, or audit software, and runs a structured three-phase audit-defence methodology across the major publishers.

Pros
  • Independent and vendor-agnostic — does not resell, implement, or run audits for vendors, and takes no commission
  • Broad vendor coverage (Oracle, SAP, Microsoft, IBM, VMware, ServiceNow, Salesforce, hyperscalers)
  • Structured three-phase methodology (mock internal audit, remediation, negotiation), available unbundled
  • Multi-region footprint with named SAP and IBM practice leads
Cons
  • Audit-defence team is composed substantially of former vendor auditors — useful insight, but a vendor-side pedigree to note
  • Roots and centre of gravity are in Australia; New York and London are smaller satellite offices
  • Heavy reliance on anonymised testimonials and self-reported headline figures ($1.2B saved, ~21% average savings)
  • Strongly adversarial “fight the software vendors” branding may not suit buyers wanting a low-key advisor
OracleSAPMicrosoftIBM
View profile

ITAA ✓ Verified Independent

HQ United Kingdom · global · Serves North America · Europe · Middle East · Asia · Australasia

Independent, vendor-neutral software advisory formed by uniting IBM, Microsoft, Oracle, and SAP specialists under one alliance, with a defined Tier-2 practice for Adobe, Autodesk, Micro Focus, Quest, TIBCO, Veritas, and VMware.

Pros
  • Independent — states it never resells software or takes vendor incentives, and does not run audits for vendors
  • Dedicated IBM, Microsoft, Oracle, and SAP audit-defense, compliance, and negotiation practices
  • Combines audit defense with SAM managed services and full procurement support
  • Global delivery footprint with named publisher service directors
Cons
  • Audit-defense team is drawn substantially from former vendor auditors and negotiators — a vendor-side background to note
  • Distributed alliance structure with no single prominent office; in-country on-site bandwidth is less clear
  • Published named-client and quantified-outcome evidence is limited
IBMMicrosoftOracleSAP
View profile

KPMG Big Four — runs IBM/SAP audits

HQ United States · Serves US · GB · DE · FR · NL · AU · SG · JP

Big Four professional-services firm with a multi-vendor software-advisory practice and global delivery in every major market.

Pros
  • Global footprint with large delivery capacity
  • Multi-disciplinary teams across contract, tax and technology
  • Board-level brand recognition
Cons
  • Appointed by IBM and SAP as an audit firm, a direct conflict of interest with buyer-side defense
  • Not an independent boutique
  • Premium rates with frequently junior delivery
IBMSAPOracleMicrosoft
View profile

Redress Compliance Independent listing in review

HQ Global (US / IE / AE) · Serves Worldwide

Independent, buyer-side enterprise licensing advisory with the broadest multi-vendor coverage in this directory.

Pros
  • Fully independent: no vendor partnership, reseller relationship or commission
  • Broadest multi-vendor coverage (Oracle, Microsoft, SAP, IBM, Broadcom, Salesforce, ServiceNow, Workday)
  • Covers audit defense, negotiation, renewals, advisory and ELP worldwide
Cons
  • Boutique advisory scale rather than a global Big-Four footprint
  • Breadth across many vendors rather than a single deep niche
  • Any quoted outcome figures are self-reported and not independently audited
OracleMicrosoftSAPIBMSalesforce
View profile

UpperEdge ✓ Verified Independent

HQ United States (Boston) · Serves Global

Independent IT sourcing and negotiation advisor working on large SAP, Microsoft, Oracle, Salesforce, ServiceNow, and Workday deals, renewals, and contract resets, with no vendor ties.

Pros
  • Fully independent with no vendor partnership, reseller relationship, or commission
  • Deep IT sourcing and negotiation expertise across the largest enterprise publishers
  • Strong on renewal strategy, deal benchmarking, and contract terms
Cons
  • Centre of gravity is negotiation and sourcing rather than deep audit-measurement defense
  • Enterprise-scale focus rather than mid-market
  • Headline outcome figures are self-reported
SAPMicrosoftOracleSalesforce
View profile

DEMO — listings are compiled from public information and labelled demo until the verified registry is live. Firms are listed alphabetically, never ranked. Independence is shown as a pro; reseller, Big Four or vendor-side audit ties are shown as a con — each a factual trade-off for you to weigh.


05 — SETTLEMENT DYNAMICS

How SAP findings resolve in Australia

SAP claims in Australia typically resolve through negotiated settlement, and SAP frequently prefers to convert exposure into an S/4HANA or RISE migration commitment rather than collect a one-off back-charge. What moves the number is a clean USMM/LAW reconciliation, contesting or re-scoping the digital-access document count, reclassifying over-provisioned named users, and timing the conversation against SAP’s quarter and 31 December year-end.

Indicative outcomes vary widely by estate and are not scored here: independent firms report meaningful reductions where the digital-access scope is challenged or named-user types are corrected, but any figure a firm cites is self-reported and indicative until independently verified.


06 — RELATED

Related pages

Up to the SAP hub and the Australia hub, across to sibling markets and services.


FAQ

Frequently asked questions

What is SAP indirect or digital access?

It is the charge that arises when third-party systems — a CRM, an e-commerce front end, a bot or a bespoke integration — read or write SAP data without a named-user licence. Under the 2018 digital-access model the exposure is measured by document counts, which is why mapping and scoping the integrations is central to the defence. This is information, not legal advice.

How are digital-access documents counted?

SAP counts the initial creation of certain document types generated through indirect access. The count is sensitive to how integrations are designed and to which document types are in scope, so an independent review of the document model frequently changes the number materially.

Does S/4HANA conversion reset our licence position in Australia?

It can. Moving from ECC to S/4HANA or RISE re-bases the licence model and is often the point at which SAP ties measurement to the migration, so the timing and structure of a conversion shape the licence position and the settlement options.

How far back can SAP claim under Australian law?

SAP’s reach is set by your agreement, usually with the local SAP entity under an Australian governing-law clause; separately, state limitation periods — commonly six years for a simple contract claim — apply. Confirm the position for your specific contract and state with qualified counsel.

Are the firms on this page ranked?

No. Every firm covering SAP in Australia is listed in neutral alphabetical order with balanced pros and cons. Independence is shown as a pro and Big Four or vendor-side audit ties as a con, never a ranking or a recommendation.

Free for buyers · confidential

Facing a SAP audit in Australia?

Tell us your situation and we route your brief to firms covering SAP in Australia. The directory and matching are free for buyers, no vendor ever sees your brief, and no firm is recommended over another.

The Licensing RadarWEEKLY

Our weekly dispatch on vendor audit programs, regional developments and one buyer move. Subscribe to The Licensing Radar.