Key points
- Nobody sets out to build shadow IT. A team needs a whiteboard tool before Thursday's workshop, the manager has a corporate card and a $5K threshold, and the path of least resistance does what paths of least resistance do.
- A team needs a whiteboard tool by Thursday, the manager has a corporate card and a $5K threshold, and the path of least resistance does its work.
- The arithmetic favors the watchdog too: one duplicate contract at $40K a year killed while it is still a request, plus one $300K shadow renewal caught before its notice window closed, pays for years of the discipline.
- Each finding arrives priced, because a duplicate that costs $8K a year and one that costs $300K a year deserve different meetings.
The front door: one request channel, triaged by AI in minutes
Purchase intake on the platform takes a short form or a plain email, deliberately lighter than a vendor's own signup flow, and the AI triage runs the moment the request lands. Every request gets classified four ways.
Duplicate? The request is checked against the estate you already own, by capability rather than by name, because the requester asking for "Miro" does not know the company owns Mural. This is the check that pays for the whole system: the answer "we already have a tool that does this, here is your license by Thursday" kills the shadow purchase by being faster than it.
Renewal in disguise? A surprising share of "new" requests are expansions or re-buys of something under an existing agreement, where the negotiated rate already applies and buying outside it pays list for no reason.
Over threshold? Requests above your approval lines route into the proper process automatically, with the benchmark attached from the first touch, so the negotiable purchases get negotiated from day one.
Genuinely net-new? Then it flows into sourcing with the groundwork already done: category, alternatives from the estate and the market, and the security review queued. The requester gets a tracked request instead of a black hole, which is the entire difference between a front door people use and one they route around.
app.isvcosell.com/sourcing
The front door: form or email in, AI triage out, and the duplicate caught while it is still a request.
THE SAME JOB, TWICE
TODAY, BY HAND
A team needs a whiteboard tool by Thursday, the manager has a corporate card and a $5K threshold, and the path of least resistance does its work.
Asking procurement means a form and three weeks, so the sanctioned path loses the usability contest and the request never happens.
Three years later the company owns four whiteboard tools and two e-signature platforms, each auto-renewing off-book, none security reviewed.
Someone eventually runs a discovery project through expense reports and invoices, and the crackdown that follows teaches teams to hide purchases better.
Ten minutes per shadow purchase, three weeks per sanctioned one
WITH ISVCOSELL
Route requests through intake, a short form or a plain email, deliberately lighter than a vendor signup flow.
Let the AI triage classify each request on arrival: duplicate by capability, renewal in disguise, over threshold, or genuinely net-new with the benchmark attached.
Answer the duplicate with a yes: we already own a tool that does this, here is your license by Thursday, faster than the credit card.
Let the weekly anomaly watchdog surface the sprawl that already happened, tool overlap and shadow spend, each finding priced, then fold discoveries onto the renewal calendar without a witch hunt.
Triage in minutes, the duplicate answer in hours
What changes: the request gets answered in hours instead of three weeks, which is the entire reason the front door wins. The arithmetic favors the watchdog too: one duplicate contract at $40K a year killed while it is still a request, plus one $300K shadow renewal caught before its notice window closed, pays for years of the discipline.
"The sanctioned path lost a usability contest with a credit card. Winning it back is a product problem, not a policy problem."
PART TWO
The sprawl that already happened: finding it without a witch hunt
Intake protects the future. The past is already in your systems, and two of the background jobs surface it without anyone running a project. The weekly anomaly watchdog flags tool overlap, multiple products in the estate doing the same job, and shadow spend, recurring software charges in the invoice and expense stream that match no known contract. Each finding arrives priced, because a duplicate that costs $8K a year and one that costs $300K a year deserve different meetings.
What you do with the findings matters more than finding them. The wrong move is the amnesty-free crackdown, which teaches teams to hide purchases better. The right sequence is gentler and pays more: fold the discovered tools into the estate first, onto the renewal calendar, into the security review, under negotiated terms, and consolidate second, at natural renewal boundaries, when the switching conversation has a date and the usage data to stand on. Shadow IT that has been adopted is just IT. The problem was never that teams chose tools. It was that the company was paying retail for chaos.
app.isvcosell.com/insights/anomalies
The watchdog's overlap and shadow spend findings: the sprawl, priced, without a witch hunt.
PART THREE
Making the front door win, in four rules
1 Beat the credit card on speed. The duplicate answer in hours and the small approval in a day or two. Every week of intake latency is a week of shadow purchases you asked for.
2 Answer with a yes whenever possible. "Yes, here is the license we already own" or "yes, at the negotiated rate" builds the habit that policing never will. The front door's reputation is the control.
3 Reharvest before you approve a purchase. Intake wired to the shelfware radar means the idle license fills the request before a purchase order does, which is the cheapest procurement outcome that exists.
4 Amnesty the past, calendar the future. Fold discovered tools in without ceremony, then let consolidation happen at renewal boundaries where it is a negotiation instead of a confiscation.
The honest limit: no intake process reaches the purchase that never becomes a request, the free tier quietly holding company data, the personal subscription expensed as "software, misc." That tail is a security tooling problem as much as a procurement one. What the front door and the watchdog reliably end is the expensive middle: the duplicate contracts, the retail-priced repeat purchases, and the renewals nobody owned. Which, for most companies, was most of the bill all along.
About the author
Fredrik Filipsson, Cofounder, ISVCOSELL
Fredrik has spent more than twenty years in enterprise software, with time at Oracle, IBM, SAP, and Salesforce before moving to the buy side. He structured and priced the kind of large agreements most buyers only see once or twice in a career, which taught him where the leverage sits and how far a vendor will actually move. He started ISVCOSELL to hand that knowledge to every sourcing team.
More posts by Fredrik Connect on LinkedIn →
See it in the product
How benchmarking works → Browse the use cases → Every feature → Calculate your time saved →
FREE TRIAL · FULL PLATFORM · NO CARD REQUIRED
Open a front door faster than the workaround.
The free trial opens the benchmarking database, 1,483 vendors deep, plus the negotiation guides, playbooks, and talking points for your own renewals. No card needed, a corporate email is all it takes.
Start your free trial → Or decode a contract free, no account
Free for 30 days, no card needed. Your data stays isolated at the database, and you can export or delete it any time.
Watch it in action
The invoice does not match What do we even own? Prove what sourcing saved
Browse the full demo library →
THE ISVCOSELL AI BRIEF · WEEKLY
The week in enterprise software buying, in one email.
What shipped on the platform, and the pricing and licensing moves worth knowing before your next renewal. One email a week, to your work address. Unsubscribe any time.
Subscribe