Home · The Audit Brief · Article
SPLA to CSP Migration · Top of funnel

Compliance Continuity During a SPLA Exit

Leaving SPLA does not close your SPLA past. The 36 month lookback still reaches the months you reported. Here is how to keep compliance continuity through a migration so no gap forms.

Published October 29, 2025Updated February 21, 2026Independent buyer side analysis · About a 9 minute minute read

Leaving SPLA, whether for a Cloud Solution Provider model or for customer owned licences, does not close the door on your SPLA past. The 36 month lookback still reaches back into the months you reported. The risk during an exit is a gap: a period where reporting stops before the new model is clean. Continuity is the defense.

Why an exit is an audit moment

SPLA is pay as you consume, verified for every monthly cycle across a rolling 36 month lookback. When you stop reporting under SPLA, those past months remain in scope for years. A change in licensing model is also exactly the kind of event that draws attention, because transitions are where reporting discipline tends to slip. The exit itself is fine. The danger is treating the switch as a clean break and letting the old record go stale while the new one is still forming.

An exit does not end your SPLA exposure. It freezes it. Every month you reported is still testable, so the record you leave behind must be as complete as the day you filed it.

The continuity gaps that create risk

During a migration, exposure tends to appear in the seams between the old model and the new one.

  • A final SPLA month reported late or estimated because attention moved to the new model
  • Workloads that ran on both models during cutover, double counted or not counted at all
  • Authentication evidence and customer mapping for the closing months left incomplete
  • Historical SPLA records archived in a way that makes them hard to produce later
  • Assumption that the new provider or model absorbs the old compliance obligation, which it does not

How to keep continuity through the exit

  1. Report the last SPLA months as carefully as the firstDo not let the closing cycles slip. They are the freshest, most testable months in the lookback.
  2. Map the cutover preciselyFor any workload that moved, record the exact month it left SPLA and entered the new model, so nothing is counted twice or dropped.
  3. Preserve the full recordKeep your monthly SAL reports, sealed authentication counts, customer mapping, and version mapping in a form you can produce on request for the full 36 month window.
  4. Close the SPLA agreement cleanlyConfirm the final reporting obligations are met and documented, so there is no ambiguous tail.
  5. Assign ownership of the legacy recordGive someone clear responsibility for the historical SPLA evidence even after the program ends.

A worked view of the continuity window

The view is indicative and shows where attention belongs, not a quote.

PhaseContinuity riskThe defense
Final SPLA monthsLate or estimated reportingReport on time with full evidence
Cutover periodDouble counting or gapsMonth by month migration map
Post exitRecords go stalePreserved, producible legacy record

The next step

An exit done with continuity in mind leaves nothing for a future auditor to reconstruct against you. If you are planning to leave SPLA, build the migration around an intact record rather than a clean break. Our SPLA audit defense guide sets out the reporting standard that protects the lookback, and the related articles below cover reporting discipline and the settlement. Download the guide and plan the exit before you make the switch.

Related reading

If the timeline is already running, our SPLA to CSP migration service moves you across without opening new exposure.

Planning an exit?

Book a strategy call and we will help you leave SPLA with the record intact and no gap in the lookback. Fixed Fee from $18,000 or Gainshare, both backed by our guarantee.

Book a Strategy Call

The Audit Brief

Weekly intelligence on Microsoft and SPLA audit moves and the buyer side defenses that work.

Get a Quote · Book a Strategy Call · The Audit Brief · About · Pricing · Blog · Contact · Privacy · Terms · New York · London Not affiliated with Microsoft Corporation. Independent buyer side advisory only.