Counsel is structural, not optional, in audit defense
Customers routinely treat SAP audits as a procurement matter or an IT matter. The audit is in fact a contractual dispute that produces a settlement with material financial and legal consequences. Treating the audit accordingly, with legal counsel involved as a structural element rather than as a late stage escalation, materially improves the customer position.
This article maps when counsel should engage, how the in house and external split typically works, the privilege considerations that shape audit communications, and the role counsel plays in settlement. See our SAP license audit complete guide for the broader framework and the contractual audit rights guide for the citation library.
When to involve counsel
Counsel should engage on the day the audit notification arrives. The notification itself is a contractually triggered event with response deadlines and procedural implications. The first 14 days of an audit set the trajectory and define the customer position. Counsel engaged on day one establishes the response posture. Counsel engaged on day 60 inherits a posture that may be difficult to repair.
The triggers for elevated counsel involvement include any audit demand above 1 million USD, any audit referencing indirect access or digital access, any audit that touches M and A transactions, and any audit where SAP requests data beyond the scope authorized by the contract. Cross reference our audit notification response guide and the audit timeline guide.
In house counsel versus external counsel
In house counsel typically leads the audit response with external counsel engaged for specialist support. The in house team brings contract familiarity, internal stakeholder relationships, and continuity. External counsel brings deep specialization in software licensing disputes, courtroom experience that informs settlement, and independence from internal organizational dynamics.
The optimal split varies by audit size and complexity. Audits below 2 million USD typically use in house counsel only with an SAP advisory team. Audits above 2 million USD typically engage external counsel with software licensing dispute experience. Audits that may proceed to litigation or arbitration always engage external counsel. Cross reference our audit defense expertise for the engagement model.
An audit is a contractual dispute that produces a settlement with legal consequences. The customers who treat it as a contractual dispute from day one typically negotiate settlements that the customers who treat it as an IT matter negotiate two years later under different circumstances.
Privilege and the audit response posture
Audit related communications, analyses, and strategy documents become discoverable in any subsequent litigation or arbitration unless they are protected by privilege. Customers who do not establish privilege early in the audit produce a document trail that can be used against them in any post audit dispute. Customers who establish privilege correctly produce a defensible document trail.
The privilege posture typically includes routing analysis through counsel, marking documents appropriately, and limiting circulation. Counsel sets the privilege posture, the SAP advisory team operates within it, and the customer compliance team produces evidence that supports it. See our audit data collection guide for the operational implications.