When your estate is mostly cloud, the true up stops being a server count and becomes a question of which rights apply where. That is where exposure hides, and where a buyer side defense pays for itself.
A cloud heavy estate does not true up the way an on premises one does. Instead of counting boxes, you are reconciling subscriptions, hybrid use rights, and the benefits that travel with Software Assurance against workloads that move and scale on their own. The exposure is rarely in the obvious places. It is in the seams between what a subscription grants and how the workload actually runs.
Teams that carry an on premises mindset into a cloud true up tend to make one of two mistakes. They over report, paying for entitlement they already hold through cloud rights, or they under report, missing usage the telemetry will surface anyway.
Three areas drive most cloud true up exposure. The first is hybrid use, where a license with Software Assurance covers both an on premises and a cloud instance, and double counting either way distorts the number. The second is identity, where a user may hold a premium tier on paper but exercise only a lower one in practice. The third is workload placement, where a server licensed in one environment is actually running somewhere its entitlement does not reach.
Each of these is invisible to a simple count and visible to Microsoft through Azure, Microsoft 365, and management tooling. The defense is to map them yourself first.
Microsoft reconciles a cloud true up against its own telemetry, and its calculation governs where it differs from your tool. Azure Arc can reveal servers outside your recorded inventory. Microsoft 365 activity shows real tier usage. Your own view has to draw on the same sources, or you are defending a narrower picture than the one you will be measured against.
Done well, this works in your favor. Telemetry that shows a premium tier sitting unused is evidence to right size before you submit, not after Microsoft prices it.
| Workload | Apparent need | After cloud rights |
|---|---|---|
| Hybrid SQL Server | 320 cores | 180 cores |
| Windows Server in Azure | 1,100 cores | 760 cores |
| M365 premium seats | 3,800 | 3,200 |
Hybrid use rights and genuine tier usage close most of the gap. The remaining difference is the only part you should be paying for.
On a large cloud estate the difference between a raw count and a reconciled position is routinely measured in seven figures, repeated across the renewal term. That is why a buyer side defense is structured to carry no downside. We work on a Fixed Fee from $18,000 or on Gainshare, a share of verified savings or avoided penalty with zero retainer, so you pay only from what we remove.
Our guarantee sits behind both models. If our defense does not reduce your exposure, we reimburse our service fee in full.
Cloud true up exposure is specific to how your estate is built, so the right next step is a scoped quote rather than a generic estimate. Tell us your agreement type, your rough estate size, and your renewal timing, and we will tell you where the exposure most likely sits and how we would defend it.
We sit on your side of the table and never take vendor money.
If an auditor is already asking questions, our EA true up defense team verifies the numbers before they become contractual.
Weekly intelligence on Microsoft and SPLA audit moves and the buyer side defenses that work.