Tag: uk software subscriptions

  • Ghost Infrastructure: The Thousands of Dormant SaaS Subscriptions Quietly Draining UK Business Budgets

    Ghost Infrastructure: The Thousands of Dormant SaaS Subscriptions Quietly Draining UK Business Budgets

    There is a particular kind of financial haemorrhage that nobody notices until someone actually looks. Not fraud, not waste in the dramatic sense, just dozens of software subscriptions quietly renewing every month for tools that nobody uses, nobody cancelled, and in some cases nobody can even remember signing up for. This is SaaS sprawl, and in UK SMEs and scaleups right now, it has reached a scale that most finance teams genuinely do not have visibility over.

    I have spoken to enough ops and finance leads at growth-stage businesses over the past year to recognise a pattern. The tooling accumulates fast. A salesperson signs up for a prospecting tool on a trial that auto-renews. A developer spins up a monitoring platform at £200 a month. A product manager subscribes to a research tool, leaves the company, and nobody inherits the login or cancels the licence. Multiply that across thirty, fifty, a hundred employees, and you have a non-trivial problem. Some estimates put the proportion of SaaS spend that goes entirely unused at around 30 per cent in organisations without active software asset management. In mid-market UK companies, that can represent tens of thousands of pounds annually.

    Finance team reviewing SaaS sprawl UK business software subscriptions on laptops in open-plan office
    Photo by https://kaboompics.com/ on Pexels

    How SaaS sprawl happens in fast-growing UK businesses

    The structural cause is straightforward: SaaS purchasing has been democratised. A decade ago, buying enterprise software meant procurement committees, IT sign-off, and a capital expenditure line that finance could scrutinise. Now a line manager can put a £49-a-month subscription on a corporate card in ninety seconds. IT never finds out. Finance sees a card charge, not a software inventory entry. The procurement process, where it exists at all, is retrospective at best.

    Scaleups are especially exposed because their headcount growth outpaces the maturation of internal processes. A company that goes from twenty to a hundred and fifty employees in eighteen months tends to accumulate tooling faster than it can rationalise it. Everyone is solving an immediate problem; nobody has time to ask whether the same problem is already being solved by something the company already pays for. I have seen teams paying for three different project management platforms simultaneously, with no integration between them and no single owner for any of them.

    The vendor side of this is not passive, either. SaaS pricing models are specifically designed to reduce friction on entry and maximise friction on exit. Annual renewals that require proactive cancellation, seat minimums that lock you into more than you need, automatic tier upgrades when usage briefly spikes. These are not bugs in the system; they are revenue mechanics. UK businesses signed up to US-headquartered platforms are also navigating terms set by vendors whose primary compliance concern is not the ICO or the FCA.

    Why this is a security problem, not just a budget one

    The finance angle is the one that gets attention, but the security exposure is arguably more serious. Every active SaaS subscription is an authentication surface. If a former employee’s credentials are still live on a platform that the business has forgotten it subscribes to, that is an unmonitored entry point. Shadow IT compounds this further. As we have covered in detail before, unsanctioned tools create compliance risks that can blindside UK finance and legal teams, and the same logic applies to any subscriptions that have drifted outside IT oversight.

    There is also a data residency question that UK businesses often miss. Some of those dormant subscriptions are still syncing company data. A CRM integration that nobody actively uses may still be piping contact records to a third-party enrichment tool on a server somewhere outside the UK. GDPR obligations do not pause because you forgot about the subscription. The ICO is not especially sympathetic to “we didn’t realise it was still running” as an explanation for a data incident.

    What the SaaS management tooling landscape looks like in 2026

    The good news is that a specific category of tooling has matured considerably to address exactly this problem. SaaS management platforms, sometimes called SMP or software asset management tools, now give IT and finance teams genuine visibility into what is running, who is using it, and what it costs. Platforms like Torii, Zylo, and Productiv operate in this space globally, and UK-focused equivalents are starting to appear.

    The core mechanic is usually the same: connect the platform to your SSO provider, your email, and your finance systems, and it surfaces every SaaS application employees are authenticating against. From there you get utilisation data, spend per seat, renewal calendars, and duplicate detection. The ROI case is typically very fast to build; most businesses find they can cut SaaS spend by 20-25 per cent within the first quarter of active management. That is a real number, not a sales deck figure, and I have seen it borne out in practice at a couple of companies I know well.

    The challenge for smaller UK SMEs is that many of these platforms are priced for mid-market and above. A company with fifteen employees spending £3,000 a month on SaaS subscriptions probably cannot justify a dedicated management tool at £500 a month. For those businesses, the practical advice is simpler: monthly review of card statements against a shared inventory spreadsheet, a clear policy requiring IT visibility before any subscription exceeds £50 a month, and SSO enforcement wherever possible so that access can be revoked centrally when someone leaves. Unglamorous, but it works.

    The CFO angle: why this keeps slipping through

    Part of the problem is that SaaS spend tends to sit in operational expense budgets, spread across multiple cost centres, rather than appearing as a single line that anyone scrutinises. A £200 monthly subscription is below the threshold that triggers a finance review in most UK SMEs. Multiply it by forty subscriptions and you have £8,000 a month that nobody is actively managing. I have spoken to CFOs at Series A and B companies who genuinely did not know their all-in SaaS spend to within 30 per cent. That is not a competence problem; it is an information architecture problem.

    This connects to a broader issue around how UK growth companies think about software ROI. As I have written about before, measuring the return on technology spend remains genuinely hard for UK firms, and that difficulty creates a permissive environment where subscriptions accumulate without ever being held to account. The tooling that was bought to solve a specific problem in Q3 of last year is still renewing in Q2 of this year, even though the problem was solved, or the project was cancelled, or the team restructured.

    There is also a skills dimension here. The data literacy required to track, categorise, and rationalise software spend is higher than most people assume. Building a clean inventory, attributing spend to teams, modelling the cost of consolidating overlapping tools, these are analytical tasks that require someone to own them. In many UK scaleups, nobody owns them. The gap in data skills at the management layer is real, and software asset management is one of the places it shows up most concretely.

    What a sensible SaaS governance model actually looks like

    Getting this right is not complicated, but it does require someone to care about it. The companies doing it well tend to have a few things in common: a single owner (usually IT, sometimes RevOps or a COO-adjacent role) who holds the canonical list of approved tools; a lightweight procurement process that requires a ticket or form before any new subscription is created; SSO enforcement as the default; and a quarterly audit cycle where utilisation data from the SaaS management platform or, failing that, vendor usage dashboards, is reviewed against active headcount.

    Annual renewal flags are worth setting up calendar alerts for, at minimum ninety days in advance. That gives enough time to audit usage, negotiate on seat count, or actually cancel something before it rolls over. It sounds obvious. Most companies do not do it.

    SaaS sprawl in UK business software subscriptions is not a tech problem in the interesting sense. Nobody is going to write a conference talk about it. But the businesses that get on top of it tend to find that the financial and security benefits compound quickly, and that the discipline required to manage software spend well tends to generalise into better operational hygiene across the board. That is worth something, even if it is not very glamorous.

    Frequently Asked Questions

    What is SaaS sprawl and how does it affect UK businesses?

    SaaS sprawl refers to the uncontrolled accumulation of software subscriptions across a business, often without central IT or finance visibility. For UK SMEs and scaleups, it typically means paying for tools that are underused or completely dormant, with estimates suggesting up to 30 per cent of SaaS spend goes entirely unused in organisations without active management.

    How much money do UK companies waste on unused software subscriptions?

    It varies significantly by company size, but businesses without a SaaS management process commonly find they can cut software spend by 20-25 per cent once they do a proper audit. For a mid-sized UK company spending £15,000 a month on SaaS, that is £3,000-£4,000 a month recovered, often within the first quarter of active management.

    Is SaaS sprawl a security risk as well as a budget problem?

    Yes, and this is the part many businesses underestimate. Forgotten subscriptions often still hold active credentials, which means former employees or unmonitored integrations may have access to company data. There are also GDPR implications if dormant tools are still syncing data to third-party servers, which could create issues with the ICO.