What is being tested
Was a connector subscription charged for distinct sources rather than repeated source aliases? The boundary for this investigation is security connector subscription source counts. Begin with the disputed transaction or population, then identify which connector source registry establishes the observed position and which alias mapping supports the comparison. A difference in totals should not replace this question.
Evidence: connector source registry
For security connector subscription source counts, connector source registry must be linked to alias mapping. Preserve the source owner, transaction reference, period and accepted version. Explain which field answers the financial question and which facts still require confirmation. Incomplete supporting records should create a named evidence gap rather than an assumed quantity, price or entitlement.
Evidence: alias mapping
For security connector subscription source counts, alias mapping must be linked to source-count pricing rule. Retain stable identifiers and their effective relationships. Current labels are insufficient when assets or accounts changed during the period. Explain one-to-many relationships explicitly and preserve the history needed to distinguish an alias, replacement or reassignment from a genuinely additional item.
Evidence: source-count pricing rule
For security connector subscription source counts, source-count pricing rule must be linked to subscription invoice. Retain the applicable wording, effective dates and scope of covered transactions. Identify the event or population that controls the calculation. Do not silently replace a contractual definition with a dashboard label, customary practice or the latest published rule.
Evidence: subscription invoice
For security connector subscription source counts, subscription invoice must be linked to connector source registry. Keep the issued document version and line-level quantity, currency and service period. A header total cannot establish which component is being tested. Retain later corrections as linked versions, so a replacement does not create a second liability.
Reconciliation logic
Collapse aliases only where the agreement defines one source and check whether independently managed environments remain separate. Build the comparison at the level identified by connector source registry and retain the governing version from alias mapping. Show intermediate classifications and excluded items separately; a net total can hide an unsupported component or a correctly offset correction.
Exception conditions
Production and test sources may legitimately count independently. Treat the item as an unresolved exception only when the comparison described here cannot be supported by the linked connector source registry, alias mapping, source-count pricing rule, subscription invoice. Document the conflicting input or rule. A plausible operational explanation requires validation, but it should not be discarded to maximize an apparent financial difference.
Human review and outcome
Security engineering confirms source identity and permitted deduplication. Document source equivalence and question unsupported duplicated connector charges. Keep the reviewer's reason and source references with that disposition. A supported correction should be followed to the revised record or settlement; an accepted explanation can close the question with no adjustment. Missing authority or evidence should remain an open task rather than a confirmed recovery.
Limitations and processing boundary
Do not infer license removability from activity alone or describe a proposed configuration change as confirmed savings. The authoritative spend, license and contract producer is not complete; customer evidence and processing validation are prerequisites to production conclusions. In this scenario, absence of connector source registry or alias mapping limits whether the comparison can be completed. The review method describes what people should validate, not a promise that AuditRes automatically detects or executes this specific outcome.
AuditRes pathway
Discuss security connector subscription source counts in the Technology Spend workspace. Review current plans, the shared platform and secure evidence requirements; use the existing contact path to confirm the sources and validation this scope requires.
AuditRes Technology Spend: Available for onboarding. Public previews use synthetic demonstration data; production processing remains gated until applicable customer sources and authoritative processors are connected and validated.
Neighboring financial questions
- Duplicate SaaS subscription review
- Source-control outside-collaborator seat classification
- Guest-to-member collaboration license conversion
- Concurrent floating-license peak measurement
Technology Spend resource hub · All guides in this evidence collection