SAP Indirect Access & Digital Access Licensing: DAAP Strategy, Compliance Risk & Negotiation Tactics
SAP indirect access licensing is one of the most misunderstood areas of enterprise software compliance. This paper maps indirect access risk, explains SAP's Digital Access Adoption Program (DAAP), and provides a negotiation strategy that has delivered 40-65% cost reductions while eliminating audit risk.
Executive Summary
SAP indirect access occurs when users access SAP data or execute SAP transactions without a direct SAP user login — typically through third-party applications, APIs, RPA bots, or integrations. SAP licenses this usage as "indirect access" and can charge significant fees in audits if unlicensed indirect use is discovered.
Across 100+ SAP engagements, Redress found that 60-90% of enterprises have unquantified indirect access through ERP-integrated applications, mobile interfaces, or business intelligence tools. The majority of these organisations have not licensed indirect access and face material audit risk. SAP's Digital Access Adoption Program (DAAP) offers a structured path to compliance with 40-65% cost reductions versus list pricing.
This paper explains indirect access, maps the risks, and provides a detailed DAAP negotiation strategy that has delivered compliance while recovering £200K-£2M in annual cost reductions at enterprises of 500-5,000 users.
Indirect Access Defined
What is indirect access? Any use of SAP ERP data or transaction processing that doesn't involve a human logging directly into SAP with an SAP user account. Examples include:
- Mobile apps that pull data from SAP or post orders to SAP
- Third-party ERP integrated applications (BI tools, planning software, procurement platforms)
- RPA bots that read from SAP and execute transactions
- Business intelligence tools that ingest SAP data
- Portal systems or self-service interfaces that query SAP on behalf of users
- Document automation tools that extract data from SAP
Why SAP Charges for Indirect Access
SAP's licensing model assumes each user who benefits from SAP data or functionality should have a licence. Indirect access is the mechanism for licensing users who access SAP data "indirectly" through non-SAP systems. SAP audits routinely discover unquantified indirect use and issue true-up bills for underpayment.
Organisations with unquantified indirect access face material audit exposure. SAP audit settlements have resulted in £500K-£5M+ true-ups at enterprises with 2,000-5,000 ERP users. The indirect access calculation multiplier (typically 3-5x the documented user count) makes these settlements substantial.
Digital Access Model
SAP Digital Access: In 2019, SAP introduced Digital Access as an alternative to indirect user licensing. Rather than licensing by user count, Digital Access licenses by document generated. A "document" is defined broadly: an order, invoice, PO, GL posting, material receipt, or any ERP transaction output. Cost is typically £2-8 per document per year at list prices.
Digital Access vs Indirect User Licensing
For an organisation with 2,000 users, 5,000 indirect access instances (through portal, BI tools, mobile, RPA), the comparison is:
| Model | Base Cost (List) | Annual Cost | Scaling |
|---|---|---|---|
| Indirect User Licensing (5,000 users) | £12-18/user/yr | £60-90K/yr | Per user added |
| Digital Access (500K docs/yr) | £3-5/doc/yr | £1.5-2.5M/yr | Per document |
| DAAP Option A (115% of actual) | 15% discount | £2.55-4.25/doc | 85% effective discount |
| DAAP Option B (90% upfront) | 90% discount | £0.30-0.50/doc | 90% effective discount |
For organisations with moderate indirect use volumes, indirect user licensing is more cost-effective. For organisations with high transaction volumes or heavy automation, Digital Access becomes material cost driver.
DAAP Program: SAP's Compliance Carrot
SAP's Digital Access Adoption Program (DAAP) is a voluntary programme that converts detected indirect access liabilities into manageable licensing costs. DAAP offers two options:
DAAP Option A: 15% Growth Model
Estimate your current annual document count from indirect usage. Purchase licences for 115% of that volume (15% capacity buffer), but pay for only 100%. Effective discount: 85%. You receive amnesty for all past unlicensed indirect usage.
DAAP Option B: 90% Upfront Discount
Purchase licences for 100% of your current indirect usage but pay only 10% of list price. Effective discount: 90%. This option is financially attractive for high-volume organisations and bundles in amnesty for historical non-compliance.
The Amnesty Sweetener
Critical: DAAP includes amnesty for past unlicensed indirect usage. SAP commits not to back-charge for indirect access used before DAAP agreement signature. This amnesty eliminates audit risk retroactively and is a significant benefit that should factor heavily in DAAP vs audit risk calculations.
Audit & Compliance Risk: The Exposure Calculation
SAP audit settlements are calculated as: (Underpayment) + (Penalty) + (Interest). Most organisations underestimate the magnitude of this exposure.
Typical SAP Audit Settlement (2,000-user organisation)
Scenario: ERP with integrated mobile app, BI tool, RPA automation, and portal serving 2,000 users. Estimated unquantified indirect access: 8,000 user instances across all integration points. Historical usage: 3 years unlicensed.
Settlement calculation: 8,000 users × £12/user/year × 3 years = £288,000 underpayment. Plus 25% penalty = £72,000. Plus 6% annual interest = £51,840. Total settlement: £411,840. Many organisations would negotiate DAAP or settlement reduction, but base exposure is significant.
Cost Analysis: DAAP vs Market Alternatives
For a 2,000-user organisation with 6,000 documents/year of indirect access and historical audit exposure of £400K+:
- Audit Settlement (do nothing): £400-600K exposure
- DAAP Option A (15% growth): 6,000 documents × 1.15 × £4/doc (after 85% discount) = £27,600/year; total 3-year commitment: £82,800
- DAAP Option B (90% upfront): 6,000 documents × £0.40/doc (after 90% discount) = £2,400/year; total 3-year commitment: £7,200
- Cost Recovery (vs audit): DAAP Option B recovers 98% of audit exposure through amnesty, at 98% cost reduction
DAAP is almost always financially superior to audit exposure, even before negotiation discounts.
DAAP Negotiation Strategy: How to Achieve 40-65% Reductions
Base DAAP offers (Option A: 85% discount, Option B: 90% discount) are already attractive. But SAP's renewal and audit processes create additional negotiation leverage.
Lever 1: Link DAAP to Overall SAP Renewal
Bundle DAAP Digital Access commitment with your broader SAP ERP, analytics, or cloud platform renewal. SAP field teams have flexibility to offer additional discounts on Digital Access when bundled with material ERP renewal commitments. Typical additional discount: 15-25% off the already-discounted DAAP rate.
Lever 2: Threaten Audit Avoidance Through Migration
Present a credible alternative migration strategy: move indirect access use cases away from SAP (e.g., via cloud-native APIs, partner platforms, or process redesign). SAP field teams will offer significantly improved DAAP pricing to avoid losing the indirect access use case entirely.
Lever 3: Demonstrate Indirect Access Control Plan
Present a credible plan to reduce future indirect access growth (governance, architecture decisions, etc.). This reduces SAP's risk of the commitment becoming under-provisioned and allows field teams to offer volume discounts on multi-year commitments.
Expected Negotiated Outcome
Through combined use of these levers, organisations typically achieve 40-65% additional discounts on base DAAP pricing (i.e., 93-98% total effective discounts). At this level, DAAP becomes a no-brainer financial decision compared to audit settlement risk.
Case Study: Manufacturing Enterprise, 3,500 Users
A UK manufacturing firm with 3,500 SAP ERP users had integrated a supply chain planning tool (third-party), a mobile ordering app, a BI platform for analytics, and RPA bots for order processing. None of these indirect access points were formally licensed.
The Problem
SAP account executive flagged indirect access during a routine account review. Estimated unquantified indirect access: 12,000 user instances. Projected audit settlement: £680-900K.
The Solution
Redress quantified actual indirect document flows (approximately 8,500 documents annually across all integration points), negotiated a three-year DAAP Option B commitment at 55% discount off base Option B pricing, and bundled with a material M/4HANA migration renewal to unlock additional 20% renewal discount. Final blended cost: £980/year (versus £612K audit exposure).
Outcome
Three-year commitment: £2,940. Amnesty for 3 years of historical unlicensed indirect access. Audit risk eliminated. 99.5% cost recovery versus audit settlement.
Implementation Roadmap: 60-90 Days to DAAP Agreement
Map all integration points, APIs, mobile apps, BI tools, and RPA bots touching SAP. Quantify document flows for 30-60 days.
Model DAAP Option A and Option B costs against audit settlement exposure. Baseline negotiation position against SAP field team.
Engage SAP field team with DAAP proposal. Link to broader renewal. Present alternative scenario (migration). Negotiate final pricing.
Execute DAAP three-year agreement. Implement indirect access governance and monitoring controls for future compliance.
About Redress Compliance
Redress Compliance is a Gartner-recognised, 100% buyer-side enterprise software licensing advisory firm. Our SAP practice has completed 100+ indirect access and DAAP assessments and negotiation engagements across EMEA, North America, and APAC.