SPLA is pay as you consume and the monthly report is the product. Here is how a clean month is built and where exposure is created.
SPLA is pay as you consume, and the report is the product. Every month a hoster measures usage, applies the Services Provider Use Rights, and submits a count to its reseller. Because the program verifies every monthly cycle across a 36 month lookback, the discipline of that monthly report is the whole compliance story. This top of funnel article explains how SPLA monthly reporting actually works so you can see where exposure is created.
SPLA does not buy licenses up front. You deploy Microsoft software to external customers, you measure how much you used during the month, and you report it. The two common units are the Subscriber Access License, which counts users with access, and processor or core counts for products licensed by capacity. You report the peak usage for the month, not an average, and you report it whether the customer paid you or not.
| Product | Unit | Peak in month | Reported |
|---|---|---|---|
| Windows Server Datacenter | Cores | 64 cores active | 64 cores |
| Remote Desktop Services | SAL | 320 named users | 320 SAL |
| SQL Server Standard | Cores | 16 cores active | 16 cores |
| Microsoft 365 hosted apps | SAL | 180 users | 180 SAL |
The reconciliation looks simple on one line, but the risk hides in the detail: a customer that grew mid month, a server that moved editions, or a component that was switched on for a trial and never counted.
Misapplied SPUR drives both. Under reporting is a compliance problem that surfaces as back fees and a penalty uplift at audit. Over reporting is a margin problem, because you pay for usage you never owed. A good monthly process protects both sides. It reports every licensable user and core, and it stops you paying for editions or components you did not actually use.
When a Big Four firm audits you under the MBSA audit clause, they rebuild your position from your data. If your monthly reports are complete, on time, mapped to customers, and backed by sealed counts, the auditor has little room to assume the worst. Reporting discipline is not paperwork, it is the structural defense against the 36 month lookback.
Get the SPLA Audit Defense Guide for hosters, the buyer side reference our analysts use inside live engagements.
Download the SPLA Audit Defense GuideIf the timeline is already running, our SPLA reporting discipline team hardens your monthly reports so the lookback holds.
Weekly intelligence on Microsoft and SPLA audit moves and the buyer side defenses that work. Prefer to talk first? Ask us to Book a Strategy Call in your message above.