Maintenance Schedule Forensics: Finding the Overpayment
Most enterprises discover their SAP support cost overpayment by accident. A CFO glances at the maintenance invoice and asks: "Why is this 22% of NLV?" Or a procurement analyst compares this year's invoice to last year's and sees a 12% escalation with no explanation. This is where forensics begin.
A maintenance schedule forensic review is a systematic audit of your SAP maintenance costs against your contract terms. It answers three questions:
- Are we paying the right percentage? Your contract states 22% of NLV for Enterprise Support. Are you actually paying 22%, or has SAP quietly inflated the NLV without your knowledge?
- Is the NLV calculation correct? NLV (Net License Value) is the cost of all your SAP software licenses. If you have 100 Named Users, each at $40K, your NLV is $4M. Is SAP calculating it correctly, or are they including legacy products you don't use?
- Are there contractual offsets we're not using? Many Enterprise Agreements include unused maintenance holidays, SAP for Me credits, or cloud migration offsets. Are you claiming them?
Step 1: Gather Your Maintenance Invoices (3 Years)
Request three years of SAP maintenance invoices from your procurement team. You're looking for patterns. Each invoice should show:
- Invoice date and amount
- NLV (the base for maintenance calculation)
- Maintenance percentage (usually 17–22% for Enterprise Support)
- Any discounts applied
- Any credits or offsets (SAP for Me, cloud migration credits, etc.)
If your invoices don't show NLV, escalate to SAP Finance. They're obligated to provide detailed invoicing on request. This is often where you find the first surprise: SAP may have been inflating NLV without itemising it.
Step 2: Run a USMM Audit in Parallel
While invoices are being gathered, run a User, Server and Support Model (USMM) audit. This is SAP's own tool for quantifying your licence position. It shows:
- Named User count (should match your NLV basis)
- Server count (for infrastructure licensing)
- Product mix (ECC, S/4HANA, BTP, etc.)
- Support model (Enterprise Support, AMS, LAW, etc.)
Many enterprises are shocked to discover they're paying maintenance on server licenses or products they decommissioned two years ago. The USMM audit exposes this. Cost of a professional USMM run: $10–15K. Typical finding: 8–12% NLV inflation.
Step 3: Calculate the "Should-Pay" Maintenance Cost
Now compare your three-year invoices to what you *should* be paying based on your USMM findings.
Example: Your invoices show you've paid $4.8M over three years in maintenance. Your USMM shows your actual NLV is $18M, not the $22M SAP has been charging against. At 22% maintenance, your correct three-year cost should be $11.9M (22% of $18M per year). You've been overpaying by approximately $1.6M—an 8% overpayment.
This forensic review takes 4–6 weeks and typically costs $20–30K if you hire a third-party analyst. But the ROI is immediate: a $1.6M overpayment discovery pays for the audit 50+ times over.
Building the Business Case for Third-Party Maintenance
A forensics review tells you what you're overpaying. But to actually *reduce* your costs, you need to build a business case for third-party maintenance (3PM). SAP will resist any alternative aggressively, so your case must be airtight.
Why SAP Resists Third-Party Maintenance (And How to Push Back)
SAP's publicly stated position on 3PM is dismissive: "Our own engineers have intimate system knowledge. Third-party providers patch slower." This is strategic positioning, not fact. The reality: third-party maintenance providers like Rimini Street and Spinnaker deliver equivalent service at 40–60% lower cost. SAP's real concern is revenue loss—maintenance is high-margin business.
Your business case needs to address SAP's concerns head-on:
- Service level commitment: Get written SLAs from your 3PM provider showing response times (4-hour critical, 8-hour high, 24-hour medium) that match or exceed SAP's.
- Security patch coverage: Request a gap analysis showing which SAP Security Notes the 3PM provider covers. Most cover 95%+; the remaining 5% are rare, platform-specific patches. Document your risk tolerance.
- Migration support: If you're moving to S/4HANA, third-party providers offer transition support. Get a proposal showing their scope and timeline.
- Regulatory compliance: If your industry requires specific audit trails (financial services, healthcare, etc.), confirm your 3PM provider meets those standards.
The Financial Model: Cost-Benefit Over 3 Years
Build a spreadsheet showing your SAP maintenance costs vs. a 3PM alternative over 3 years:
| Scenario | Year 1 | Year 2 | Year 3 | 3-Year Total |
|---|---|---|---|---|
| SAP Enterprise Support (22%) | $2,200K | $2,244K | $2,289K | $6,733K |
| Third-Party Maintenance (12%) | $1,200K | $1,260K | $1,323K | $3,783K |
| Transition Cost (consulting, testing) | $150K | $0 | $0 | $150K |
| Net Savings | $850K | $984K | $966K | $2,800K |
This model assumes a switch from 22% SAP maintenance to 12% 3PM maintenance—realistic savings based on Rimini Street and Spinnaker pricing. Your actual numbers depend on your current rate and chosen 3PM partner.
Getting RFPs from Multiple 3PM Providers
Never rely on a single 3PM proposal. Run an RFP to three providers: Rimini Street (largest player, 18+ years experience), Spinnaker (specialized in SAP, competitive pricing), and one regional or emerging player. Request:
- Maintenance percentage (% of NLV)
- Support SLAs (response and resolution times)
- Security patch coverage and frequency
- Migration support if you're moving to cloud
- Pricing for 1-year, 2-year, 3-year terms (most offer 10–15% discount for multi-year)
Typically, 3PM providers come in at 9–13% of NLV vs. SAP's 17–22%. This 8–10 percentage point spread is your negotiation window with SAP.
The Key Message to Stakeholders
Finance: "We've identified $2.8M in maintenance savings over 3 years with comparable service levels and lower risk than current SAP support."
IT/Operations: "The transition takes 60–90 days with zero downtime. Support response times match or exceed SAP's. We'll maintain full security patch coverage."
Legal/Compliance: "We've reviewed the 3PM provider's audit certifications (SOC 2 Type II, ISO 27001, etc.) and confirmed regulatory compliance for our industry."
Third-Party Maintenance Transition: Step-by-Step Mechanics
Once your business case is approved, the transition itself follows a predictable 8-12 week timeline. Here's how it works operationally.
Week 1–2: Formal Notice to SAP
Send a formal notice to your SAP account executive and SAP Contracts stating your intent to transition to third-party maintenance. This triggers several things:
- Notice period starts: Your Enterprise Agreement requires 30 days' notice (minimum; check your specific contract). From date of notice, you have 30 days to withdraw. After 30 days, the transition is locked in.
- Data export begins: Request your SAP for Me backup (all system documentation, patches, configurations). This typically takes 1–2 weeks and is critical for continuity.
- SAP escalation: Your notice triggers SAP's "retention playbook." Expect calls from account leadership offering discounts, extended terms, or migration credits to reverse your decision. Document these offers; they're leverage in your final negotiation.
Week 3–4: Parallel Testing Environment Setup
While the 30-day notice period runs, set up your 3PM provider in a test environment:
- Clone your production SAP system to a test/staging environment (if you haven't already).
- Configure 3PM access: Your 3PM provider needs remote access to your SAP systems for patch deployment and support. This requires VPN setup, security clearances, and change management approvals. Start early.
- Test patch deployment: Run a non-critical patch from the 3PM provider in your test environment. Verify it applies cleanly and your SAP system boots and functions correctly. This is your proof-of-concept.
- Establish support escalation path: Define how tickets flow from your IT team to the 3PM provider and how critical issues are escalated to SAP if needed (most 3PM contracts include escalation rights to SAP for zero-day exploits, for example).
Week 5–8: SAP Data Transition
The most time-consuming part: migrating from SAP's infrastructure to 3PM infrastructure. This involves:
- SAP for Me backup export (if you use SAP's SaaS patch management portal). Your 3PM provider needs your system history: patches applied, custom code, configuration changes. This is typically a 10–20GB export.
- Patch history audit: Confirm which Support Packages and patches you've applied. Your 3PM provider will use this baseline to synchronize their patch repository with your actual system state.
- Custom code inventory: Document any Z-code (custom enhancements) or SAP modifications you've made. This helps 3PM providers understand what *not* to touch during patching.
- Maintenance schedule lock: Coordinate with IT to freeze production changes during transition. Most organizations run this during a planned maintenance window (typically weekends for global SAP systems).
Week 9–10: Production Cutover
This is the actual transition day. Most organizations time this for a Saturday morning (lower business impact):
- Final SAP backup (in case rollback is needed).
- SAP Enterprise Support terminates (at the stroke of midnight on your contract end date).
- 3PM support goes live (your 3PM provider takes over support responsibility at 12:01 AM).
- Test critical functions (ensure your SAP system boots, users can log in, critical transactions process).
- IT on-call 24/7 for 72 hours (in case of issues). Most transitions run cleanly, but standby support is essential.
There is no downtime during this cutover. Your SAP system continues running. All that changes is who answers the phone when you call for support.
Week 11–12: Stabilization and Tuning
Post-cutover, work with your 3PM provider to:
- Verify all historical patches are in place.
- Confirm security patch coverage (run a USMM check to ensure no missing Security Notes).
- Schedule your first "maintenance window" patch with 3PM (usually 2–4 weeks post-cutover, to validate their patch deployment process).
- Document SLA performance: response time to first contact, time-to-resolution, escalation paths.
Critical Contractual Safeguards When Switching to 3PM
Your 3PM agreement is as critical as the savings projection. Here are the contractual protections you *must* have in place before signing:
1. Maintenance Holiday Clause (Post-Switch Duration)
When you transition to 3PM, negotiate a "maintenance holiday" with SAP if you return—this protects you from re-entry penalties. Your contract should state:
"If Customer transitions to third-party maintenance and subsequently returns to SAP Enterprise Support, SAP waives back-maintenance charges for the period during which third-party maintenance was active."
Without this, SAP can charge you "back-maintenance" (50–150% of missed maintenance fees) if you re-enter SAP support. This can wipe out years of 3PM savings.
2. Data Portability and SAP for Me Access
Ensure your contract explicitly allows:
- Full export of your SAP for Me data (patch history, configurations, documentation).
- Access to your SAP for Me account during the transition period (typically 90 days post-switch).
- SAP's commitment not to delete your data after transition (SAP has been known to restrict access to make re-entry painful).
3. Escalation Rights
Your 3PM contract should include escalation to SAP for critical issues (zero-day security exploits, system failures affecting business continuity). Your agreement should state:
"For critical issues where third-party maintenance provider cannot resolve within 4 hours, escalation to SAP Consulting is available at [cost per hour]."
This is rare but necessary as a safety valve. Most 3PM providers handle 99.5% of issues independently, but having this path documented removes risk.
4. Multi-Year Discount Lock
Your 3PM agreement should lock in the maintenance percentage for the full contract term:
"Provider commits to 12% of NLV maintenance cost for 3-year term, with annual escalation not to exceed 3%."
Without this, 3PM providers can creep pricing upward—defeating the savings argument. Lock it down contractually.
5. Exit Clause and Termination Rights
Ensure you have clean exit terms:
- Annual renewal (not auto-renewal): Each year, you can choose to continue or exit. Avoid multi-year contracts with penalties.
- Termination for convenience: You can exit with 60–90 days' notice if you're unsatisfied.
- No re-entry penalties: If you leave 3PM and return to SAP, SAP doesn't charge back-maintenance.
SAP Negotiation Scripts and Talking Points
When you give formal notice of a 3PM transition, SAP immediately activates its "save playbook." Expect calls from your account executive, their manager, and SAP account leadership. Here's how to respond to common objections.
SAP Says: "Third-Party Maintenance Providers Don't Have Our Engineering Talent"
Your Response: "We've reviewed detailed CVs and certifications from [3PM provider]. Their average engineer has 12+ years SAP experience—comparable to SAP staff. More importantly, we've requested specific SLAs: 4-hour response for critical issues, 8-hour for high, matching your Enterprise Support terms. We're comfortable with their technical depth and support responsiveness."
SAP Says: "You'll Face Security Patch Gaps With Third-Party"
Your Response: "We've reviewed [3PM provider]'s Security Note coverage: they cover 97% of all SAP Security Notes and 99.5% of critical patches within 30 days of SAP release. We've documented the gap analysis and identified the rare 3% of patches we'd escalate to SAP Consulting if needed. That residual risk is acceptable given the 40% cost savings."
SAP Says: "If You Leave, We'll Have Licensing Audit Exposure"
Your Response: "Our SAP licence position is fully documented via USMM audit [completed date]. We maintain that licence baseline regardless of support provider. We're not changing our usage model—just moving support externally. Our audit risk profile doesn't change."
SAP Says: "We'll Give You a Special Renewal Discount to Stay"
Your Response: "We appreciate the offer. What specific discount are you proposing? We need your offer in writing for comparison to [3PM provider]'s proposal. If you can match their 12% of NLV rate, we can consider staying with SAP. Otherwise, we're moving forward with the transition."
This is the critical moment. SAP's "special discount" often comes in at 18–20% of NLV—still 50%+ more expensive than 3PM. Force SAP to compete on the actual 3PM price. Most will refuse (they can't profitably match 12%), which validates your transition decision.
Key Talking Points to Memorize
- "We've completed a detailed RFP process comparing three 3PM providers. All offer comparable service and 40–50% cost savings." (This signals you're serious and well-prepared.)
- "The 30-day notice is formal and irrevocable unless contractual terms are materially changed." (Sets boundaries on negotiation.)
- "Our focus is total cost of support over 3 years. We're not abandoning SAP—we're optimizing our support spend." (Positions this as strategic, not punitive.)
- "We've stress-tested the 3PM service model in our test environment with live patch deployment. Performance is excellent." (Shows operational readiness.)
Internal Stakeholder Alignment: The Organizational Prerequisite
The most dangerous risk in SAP support cost reduction isn't technical—it's organizational fragmentation. If IT, Finance, and Legal aren't aligned, SAP will exploit that fragmentation to kill your initiative.
Finance: Build the Business Case
Finance owns the decision. They care about ROI and risk. Your message: "We've identified $2.8M in savings over 3 years with equivalent service levels and managed risk. The transition cost is $150K (0.5% of savings). Net ROI is 18:1."
Get Finance's signed approval *before* you notify SAP. Once they're on record, they'll push back against SAP's counter-offers.
IT/Operations: Address Service and Risk
IT is concerned about downtime, support quality, and operational burden. Your message: "The transition is 8–10 weeks with zero production downtime. Support SLAs match or exceed SAP's. Patch deployment remains automated. The operational burden on your team is minimal—you're just redirecting support tickets to a different vendor."
Involve IT early in the 3PM RFP process. Let them evaluate vendors, run tests in your environment, and build confidence in the transition plan.
Legal/Compliance: Manage Contract Risk
Legal cares about contractual obligations and exit risks. Your message: "Our Enterprise Agreement permits third-party maintenance with 30 days' notice. We've structured the 3PM contract with maintenance holiday protections, annual renewal (not auto-renew), and escalation to SAP for zero-day exploits. Exit risk is minimal."
Have Legal review both your SAP Enterprise Agreement (to confirm 3PM is permitted) and your 3PM contract (to confirm protective clauses are in place). They'll flag risks you've missed.
Procurement: Lock in Pricing
Procurement manages the vendor relationship and contract. Your message: "We've completed an RFP, selected the best-fit vendor, and negotiated 3-year pricing with annual escalation capped at 3%. The contract includes termination for convenience and audit rights. We need your sign-off to execute."
Use Procurement to formalize the vendor relationship and ensure contract compliance post-signature.
The "Alignment Moment"
Before you give formal notice to SAP, schedule a meeting with Finance, IT, Legal, and Procurement. The agenda:
- Review the business case and ROI ($2.8M savings).
- Review the operational transition plan (8–10 weeks, zero downtime).
- Review the contractual safeguards (maintenance holidays, escalation rights, exit clauses).
- Confirm alignment and decision to proceed with notice.
If any stakeholder is uncomfortable, address their concern *now*—before notice goes to SAP. SAP will call Finance, IT, and Legal directly once they hear about the transition. You need them speaking with one voice.
Integrating Support Cost Reduction with License Optimisation
The most overlooked opportunity: combining support cost reduction with SAP licence optimization. When you threaten to switch support vendors, you create a moment of leverage for licence negotiation too.
While SAP is fighting to keep your support business, you can simultaneously push for:
- Licence NLV reduction: "We're moving to 3PM for maintenance. Let's also optimize our licence count via Named User consolidation. That reduces both maintenance cost and licensing spend."
- Cloud migration credits: "If we commit to a RISE migration timeline, will you provide free migration services or cloud credits as part of our renewal?"
- Indirect Access safe harbour: "Lock our Indirect Access exposure to documented use cases, and we'll renew support with you at [3PM equivalent rate]."
SAP is vulnerable when they're fighting to retain your support business. Use that moment to also optimize licences and push for strategic concessions you'd struggle to negotiate in normal renewal cycles. See our SAP support cost reduction strategies guide for deeper integration tactics.