Spend and tools
Battle testedWho may spend what, how it is approved, how to find tool waste, and what to get right in Germany.
Who approves what, and how
Six questions. The rust line is your path. Each faint branch is where the other answer leads. Turn the dial to your stage; slide or type your headcount.
Can the tool record or analyse employee behaviour or performance, for example usage logs, activity analytics, AI assistants with logging or time tracking?
- Yes: More questions
- No: More questions
Is there a works council (Betriebsrat) in the German establishment?
- Yes: Stop, involve the works council
- No: More questions
Does the vendor process personal data of staff or customers?
- Yes: More questions
- No: More questions
Is a data processing agreement signed and the vendor reviewed for security?
- Yes: More questions
- No: Block until the checks are done
Is the cost below your auto-approve limit?
- Yes: More questions
- No: More questions
Will it be paid by a virtual card with a limit, receipt capture and a tool register entry?
- Yes: Buy it, no approval step
- No: Set up the card first
Is it a commitment of more than 12 months, or above the CEO’s delegated limit?
- Yes: CEO and finance approve
- No: Budget owner approves
Stop, involve the works council
Agree a Betriebsvereinbarung before rollout. §87(1) Nr. 6 BetrVG gives the council a co-determination right, and the Einigungsstelle decides if you cannot agree.
Block until the checks are done
Get the data processing agreement signed and run a basic security check first. This is a working rule, not a cited requirement.
Buy it, no approval step
Approving every small purchase costs more than the spend. Review it in the monthly spend report. No benchmark exists for the limit, so set it from your own data.
Set up the card first
Card, limit, receipt capture and register entry, then buy. Section 147 AO sets retention periods for vouchers, so a missing receipt becomes a problem later.
CEO and finance approve
Take it to the board if it is above the limit the board delegated. Ask for a one-year term or an opt-out. Vertice, a vendor, reports average SaaS price inflation of 12.7% in August 2026.
Budget owner approves
Within one working day, with finance checking VAT and coding. Add the renewal date to the tool register.
Answer the last question to see your outcome.
Stage
How it runs
Four flows. Each step has an owner, a time cost and a document.
Check the register and ask
See whether an approved tool already does the job. If not, submit what, why, cost, term and data touched.
Budget owner decides
Approve or decline within one working day.
Privacy, security and works council gate
Only if the tool touches personal data or can monitor staff. In Germany, HR joins.
Pay by virtual card
Merchant-locked, with a limit equal to the contract.
Receipt, coding, register
Capture the invoice, mark reverse-charge vendors, code to the cost centre, and add owner, seats and renewal date to the register.
Build the inventory
Use the card feed, expense data, single sign-on and invoices. Zylo (vendor data) says 51% of applications are miscoded in finance systems, so use more than one source.
Assign owners
An owner and a purpose for every tool. Unowned tools get a 30-day notice.
Pull usage
The last 30 and 90 days. Productiv counts a seat as used with any activity in 90 days, so check what each vendor counts.
Keep, right-size, consolidate or cut
Zylo suggests utilisation of at least 90 to 95%. That is vendor data.
Calendar the renewals
Review each one 90 days ahead. Expect price rises: Vertice reports 12.7% average SaaS inflation in August 2026.
Write the AI tool policy
Allowed tools, allowed data and who pays, plus a data processing check, usage caps and a works council check in Germany. Zylo reports AI-native app spend up 108% in a year.
Export three months of spend
Card and bank transactions.
List what you would reject
Sort by value and mark the purchases you would have turned down.
Set the limit
Just below the smallest value you would have rejected.
Revisit
When headcount or burn changes materially.
Actuals against budget
By cost centre, after the close.
Explain the variances
Budget owners explain anything above an agreed percentage.
Clear the exceptions
Missing receipts, unowned tools and renewals in the next 90 days. Report savings here too.
Rules by country
Tools that can monitor staff
BetrVG §87: primary source (opens in a new tab)§87(1) Nr. 6 BetrVG: the works council has a co-determination right over technical devices meant to monitor behaviour or performance. If there is no agreement, the Einigungsstelle decides.
How wide the right is
BAG, 8 March 2022, via Hensche: secondary source (opens in a new tab)In 2022 the BAG treated Microsoft Office 365 as covered. Commentary reads “meant to” as objectively capable of monitoring, whatever the employer intends.
When a works council can exist
BetrVG §1: primary source (opens in a new tab)In establishments with usually at least five permanent employees entitled to vote, three of them eligible. You need not found one, but staff can.
§147(3) AO: 10 years for books, records and annual accounts, 8 years for accounting vouchers, 6 years for other documents.
The BMF issued a second amendment on 14 July 2025, mostly on e-invoice retention. Archiving the structured XML is enough. The readable PDF part of a hybrid invoice need only be kept if it carries extra tax-relevant information.
Reverse charge on foreign SaaS
UStG §13b: primary source (opens in a new tab)§13b UStG: for services from a supplier in another EU state or abroad, a business recipient owes the tax. The foreign supplier should not charge its own VAT.
Vendor data, EUR a month excl. VAT: Essential 49, Business 109, Enterprise 199. The Team Spend Controls add-on is EUR 39. Germany is listed.
A UK VAT-registered business buying services from an overseas supplier typically accounts for the reverse charge itself. The source is a payments company’s guide, not HMRC.
Vendor data, GBP per user per month: Start 8 (monthly billing), Build 14 and Optimise 18 (yearly, minimum 3 users). Automatic VAT recovery is on Optimise only.
Vendor data: Free USD 0, Plus USD 15 per user per month plus a platform fee, Enterprise custom. Approval workflows are on the free plan.
Capital One announced an agreement to buy Brex on 22 January 2026 for USD 5.15bn. Brex serves 25,000+ companies in 50+ countries.
General information, last checked 29 Oct 2026. Not legal or tax advice.
Who handles what
Set by the dial on the instrument. It follows your headcount until you turn it.
- Runs it
- Founder or CEO, with a co-founder as backup. A Chief of Staff or ops lead can own finance and spend from day one.
- You keep
- All approvals.
- Hand off
- Bookkeeping.
My stance
Owners spend what they think is reasonable. If the spend stops producing results, review the strategy behind it.
- Runs it
- CEO, with the first ops hire as backup. A Chief of Staff or ops lead can own the finance rhythm and spend.
- You keep
- New recurring tools and the limit.
- Hand off
- Receipts, coding, the tool register.
My stance
Company tools on one central card, so changes are managed in one place. Virtual cards for the rest.
- Runs it
- Head of finance or a fractional CFO, with an ops lead for tools. Chief of Staff as backup.
- You keep
- Contracts over 12 months and the delegated limit.
- Hand off
- Everyday approvals to budget owners.
My stance
Budget owners approve their own budget. The founder should not approve a EUR 300 subscription. Run the first full SaaS audit here.
- Runs it
- CFO, with a procurement lead or ops. Finance business partners as backup.
- You keep
- The board delegation and big contracts.
- Hand off
- Vendor negotiation, renewals, security review.
My stance
The teams that use AI tools choose them. Policies for personal spend, like equipment and travel, start around here.
- Runs it
- CFO and procurement, with IT and security for risk. Entity controllers as backup.
- You keep
- The policy and escalation.
- Hand off
- Operations.
My stance
A delegation-of-authority matrix is normal at this size. Keep it to one page.
Efficiency savers
What each step saves. Where nobody publishes the number, it says so.
Reclaim unused licences
Vendor data, and it disagrees. Zylo: 54% of licences used, 46% unused or underused. Productiv: 53% unused in 2023. Gartner via Torii: up to 30%. Your estimate is seats x unused share x price. For example, 40 seats at EUR 30 a month with 25% unused saves EUR 3,600 a year.
Zylo 2026 SaaS Management Index (vendor data): primary source (opens in a new tab)Virtual card per vendor, with a limit
No independent data. Vendor case studies only.
Practice: practiceAuto-approve below a data-derived limit
No published data. Removes most routine approvals from the founder’s week.
Estimate, no published data: estimateRenewal calendar, 90 days ahead
No published saving. Prices rise: Vertice reports 12.7% average SaaS inflation in August 2026 and 14.3% preliminary for September. Vendor data.
Vertice SaaS inflation index (vendor data): primary source (opens in a new tab)Offboard through single sign-on
No published data.
Practice: practiceConsolidate overlapping tools
No data on how much overlap there is. Zylo reports a median portfolio of 240 apps and an average of 305. Vendor data.
Zylo 2026 report page (vendor data): primary source (opens in a new tab)
How spend control goes wrong
Failure modes
- Control costs more than the spend
Approval for every EUR 20. Set a limit from your own data.
- Shadow tools
Productiv’s 2023 vendor data put shadow apps at about 51% of the portfolio. Use single sign-on and card discovery, then an amnesty and a register.
- Tool live before the works council
A tool that can log staff goes live without the §87(1) Nr. 6 BetrVG step. Make it a gate.
- Reverse charge missed
Foreign SaaS booked with the wrong VAT treatment. Flag the vendor at coding and have a Steuerberater review it.
The biases behind them
- Sunk cost
You renew a tool because of the time spent rolling it out. Ask: would I buy this today at this price?
- Planning fallacy
Adoption and return are overestimated. Pilot with a small group and a usage target.
- Parkinson’s law
The budget gets spent because it exists. No use-it-or-lose-it.
- Status quo bias
Auto-renewal becomes the default. Review each renewal 90 days ahead and ask for a competing quote.
Where the evidence disagrees
How big is SaaS waste
Zylo
Its 2026 index. Other Zylo pages and partner guides give 36% or 53%.
Zylo 2026 SaaS Management Index (vendor data): primary source (opens in a new tab)Productiv
A 2023 figure, on a 90-day activity test.
Productiv State of SaaS 2023 (vendor data), via Help Net Security: secondary source (opens in a new tab)Gartner
From a talk, cited by Torii.
Gartner talk cited by Torii (vendor data): secondary source (opens in a new tab)All vendor data. These companies sell optimisation tools, use different definitions, and none is independent. Treat 30 to 53% as a range.
Tight control or speed
Control
ACFE estimates organisations lose about 5% of revenue to fraud.
ACFE 2024, via Ohio CPA: secondary source (opens in a new tab)Speed
Approval for small items costs more than the spend. This is practice, not data.
Practice: practiceNo benchmark exists for approval thresholds by stage. One vendor template uses USD 5,000 for manager approval alone, and that is one example, not a norm.
Disagree with a stance, or have data that should be here?
Email me