Skip to content
Fixed-price invoice audit

Cloud and AI Invoice Back AuditHave you been overcharged on a cloud or AI invoice in the last 12 months?

Twelve months of AWS, Google Cloud and AI invoices checked against your contracts, with every overcharge written up as a claim

Overcharges hide in plain sight: a discount that never reached a new service, a private rate that stopped, a refund that never posted, AI usage billed at list price. We check every invoice from the last 12 months against the billing data behind it and your agreements, in about three weeks, and hand you a claim for each overcharge while it can still be claimed. A fixed fee, or 25% of what the providers actually credit you.

Your team's time: about an hour to gather your agreements and invoice register, and two 45-minute calls.

Price
From $3,900, or 25% of credits
Time
About 3 weeks
Covers
AWS, Google Cloud, OpenAI, Anthropic
Access
Read-only, no keys

Is this right for you?

A good fit if

  • You have an enterprise discount, private pricing, a Google Cloud commitment or negotiated AI rates, and nobody has checked the invoices against them.
  • You are about to renew or renegotiate an agreement and want the facts first.
  • A new controller, CFO or procurement lead wants a clean baseline before the next close.
  • You want to see what monthly reconciliation would find before you commit to it.

Probably not for you if

  • You pay list price with no agreements, so there is little to check against. The Cloud Cost Audit finds waste in what you use instead.
  • Your bill is mainly Microsoft Azure. Azure invoices are not checked.

What you walk away with

01

Every overcharge in 12 months, priced

Each one with the invoice, the billing lines and the clause of your agreement behind it, so there is nothing to argue about.

02

Claims ready to send, in time

A drafted claim for every overcharge, sorted by its dispute deadline, for your team to send from your own account.

03

A baseline for the year ahead

Where each commitment stands against its contract year, every credit and private rate with its end date, and an accrual model your close can use from next month.

What the findings look like

The audit report has the same sections as our monthly report, for each of the 12 months: the invoice tie-out, the findings largest first with what to do about each, and the claims ready to send.

Example report

Northwind Analytics, September 2026

An excerpt from a real run of our reconciliation engine on a made-up company, Northwind Analytics, whose September bill was built with problems we see in practice. Your report has the same sections, on your own invoices.

Billed in the month
$165,260
Invoices matched
5 of 6
To claim from providers
$19,448
At stake, still avoidable
$118,697

Invoice tie-out

ProviderInvoiceInvoicedBilling dataStatus
AWSEUS20260901$87,750.00$87,750.00Matched
AWS Marketplace (Anthropic)MPANT202609$7,200.00$7,200.00Matched
AWS Marketplace (Snyk)MPSNYK202609Not in AP$1,500.00Find and accrue
Google CloudGCP-202609$52,460.00$52,460.00Matched
OpenAIOAI-202609$8,088.00$7,550.00$538.00 over
AnthropicANT-202609$4,800.00$4,800.00Matched

Findings, largest first

  • CloudFront private rate not applied

    To claim $13,000

    AWS

    200,000 GB billed at the public $0.085 per GB instead of the agreed $0.02, although the private pricing runs to June 2027.

  • Commitment on course for a shortfall

    At stake $96,120

    AWS

    Three months into the contract year, spend is on pace for $1,003,880 against a $1,100,000 commitment.

  • Promised refund never arrived

    To claim $2,400

    AWS

    Agreed on a support case for September 15; no refund or adjustment on the bill since.

  • Sales tax despite an exemption

    To claim $1,200

    AWS

    Tax on one account; the exemption certificate is missing for it.

  • BigQuery billed without the contract discount

    To claim $900

    Google Cloud

    $15,000 of BigQuery analysis with no 6% contract discount, which every other service received.

  • Claude billed at list price

    To claim $480

    Anthropic

    Tokens priced at the negotiated 10% discount come to $4,320; the cost report bills $4,800.

  • Claude on Bedrock at the public rate

    At stake $450

    AWS Marketplace

    A second account started using Claude on Amazon Bedrock without the private offer, paying 11% more per token than production.

  • Marketplace invoice entered twice

    To check $4,000

    AWS Marketplace

    The same invoice number appears twice in accounts payable: remove one before the payment run.

The full report also has the remaining 9 findings (among them $20,977 of credits about to expire unused and a discount missing from a new service), the change from last month by component, the dispute deadline for each invoice, the commitments and credits table, the checks that ran, the draft claims ready to send, and the accrual file for your close.

What is included

What the service covers. Each package under Pricing lists exactly which of these it includes and how much of your estate it covers.

Twelve months of invoices, tied out

Every invoice and credit memo matched to the billing data behind it: AWS invoice by invoice, including Marketplace sellers; Google Cloud by invoice month; OpenAI and Anthropic against their own cost reports.

Contract rates, checked line by line

Your enterprise discount checked service by service and month by month, so every new service or SKU billed without it is found. Private pricing and Google Cloud contract prices checked unit by unit.

Commitments, credits and refunds

Commitment drawdown with the Marketplace cap applied, credits that expired or were used where you did not intend, Savings Plan and committed use discount fees with no usage behind them, and every refund a provider promised.

Support fees and tax

The support fee recomputed for every month on gross charges before discounts and credits, as AWS and Google calculate it, and tax checked against your exemptions.

AI provider invoices

OpenAI and Anthropic usage priced at your negotiated rates, model by model, including cached tokens and batch discounts, and compared with what was billed.

Marketplace and Bedrock private offers

Each Marketplace product, including Claude and other models on Amazon Bedrock, compared across your accounts, so an account that used it without the private offer and paid the public rate is found.

Claims and deadlines

A claim drafted for every overcharge, with the figures behind it and the last day to send it: before the payment due date at Google Cloud, 30 days from the invoice at OpenAI, and the end of the second billing cycle for AWS outage credits.

What we hand over

  • A findings register: every finding with the invoice, the billing lines and the contract clause behind it
  • Draft claims for every overcharge, ready to send from your own account
  • A 12-month invoice tie-out
  • The support fee recomputed for every month
  • A commitment, credit and renewal calendar
  • A baseline accrual model for your close
  • A preliminary readout, a final readout and the report

How it works

  1. Week 0

    Scoping call and order

    We agree providers, accounts and AI vendors, fixed fee or contingency, and send a one-page order.

  2. Week 0 to 1

    Agreements and data

    Your agreements, 12 months of billing data or read-only access, the invoice register, and the AI providers' reports, which your team pulls with its own keys. We confirm our reading of the agreements with you.

  3. Week 2 to 3

    Preliminary readout

    The findings so far, largest first, with the claims whose deadlines are closest ready to send. On the fixed fee, 50% is invoiced here.

  4. Week 3 to 4

    Final report and claims

    The full register, every draft claim and the calendar. On the fixed fee, the second 50% is invoiced here.

  5. For 6 months

    Claims followed

    We track each claim until its credit posts, and on the contingency option invoice our share at the end of the month each one does.

Pricing

One fixed fee per audit, agreed before work starts, and nothing is paid upfront: 50% is invoiced at the preliminary readout and 50% with the final report and claims. Or, on Growth and Scale, choose the contingency option: no fixed fee, and 25% of the credits and refunds the providers actually post for our findings within 6 months, invoiced at the end of the month each one posts. Prices are in US dollars and exclude applicable taxes.

Starter

One payer or billing account, up to 2 AI providers

Up to $75,000 a month in cloud and AI invoices

$3,900USD, one-time

  • 12 months of invoices from one payer or billing account
  • Up to 2 AI providers
  • Every check, for every month
  • Findings register and draft claims
  • Preliminary and final readouts
Request Starter
Recommended

Growth

Up to 3 payer or billing accounts, up to 4 AI providers

$75,000 to $300,000 a month

$6,900USD, one-time

  • Everything in Starter
  • Up to 3 payer or billing accounts
  • Up to 4 AI providers
  • Marketplace sellers and private offers
  • Commitment drawdown and shortfall forecast
  • Or pay 25% of credits received instead of the fee
Request Growth

Scale

Up to 8 payer or billing accounts, every AI provider we cover

$300,000 to $1,000,000 a month

$11,900USD, one-time

  • Everything in Growth
  • Up to 8 payer or billing accounts
  • Every AI provider we cover
  • Several invoicing entities and currencies
  • A renewal brief for each agreement
  • Or pay 25% of credits received instead of the fee
Request Scale
  • Invoices above $1,000,000 a month: from $17,500, quoted on a call.
  • Prefer a mix? Half the fixed fee plus 12.5% of the credits received.
  • Sign monthly Invoice Reconciliation, Pro or Enterprise, for 6 months within 30 days of the final report, and the second half of the audit fee is waived.

Worth its fee, or the second half is free

On the fixed fee, if the audit does not identify overcharges to claim worth at least its fee, we do not invoice the second half. On the contingency option you pay nothing unless a provider actually credits you. We count a recovery only when the provider's credit posts, never an estimate.

How ordering works

  1. We reply within one business day

    With times for a free 30-minute scoping call, or straight away with the order if your email already tells us enough.

  2. You get a one-page order

    It confirms the package, scope, dates, price and when each invoice is due. Nothing is binding until you sign it, and we sign your NDA first if you have one.

  3. Kickoff

    We send the access steps and your secure upload links, and the work starts on the agreed date.

  4. Nothing paid upfront

    Fixed fees are invoiced in two halves: 50% at the milestone your order names, usually about halfway, and 50% on completion. Monthly services are invoiced at the end of each month. Card or bank transfer.

The data we need from you

Your agreements, the billing data behind each invoice for the last 12 months, and the invoices themselves. The agreements are the basis of every claim, so we confirm our reading of them with you first.

  • Agreements: your AWS Enterprise Discount Program or private pricing addendum and its amendments, your Google Cloud agreement and commitment schedule, Marketplace private offers, AI provider order forms, your support plan, tax exemption certificates, and any billing case with a promised credit.
  • AWS: 12 months of your Cost and Usage Report (CUR) from the management (payer) account, and the invoice list for each month, which one read-only command produces.
  • Google Cloud: read access to your detailed usage cost export and pricing export in BigQuery, or 12 months of a summary query result.
  • OpenAI and Anthropic: 12 months of usage and cost reports, which your team pulls with its own admin key. We never receive the key.
  • Your invoice register: the cloud and AI invoices accounts payable received in those 12 months, with number, date and amount.

How it reaches us: Through a secure, customer-specific upload link, or, on Google Cloud, by granting our reader identity read access to the billing datasets. Agreements go through a separate upload link. Everything is stored encrypted in Finitizer's Google Cloud environment in the US, used only for your audit, deleted automatically 90 days after the final report, and sooner on request.

Step-by-step: how to export and upload this data

Access and security

Read-only, always. We check and draft; your team decides what to claim and sends it.

  • AWS: the same keyless, read-only role as our Cloud Cost Audit, one CloudFormation stack in the management account, plus read access to the bucket that holds your CUR. Or exports through the upload links.
  • Google Cloud: BigQuery Data Viewer on the billing export and pricing export datasets, granted to a dedicated Finitizer reader identity. No keys are created.
  • AI providers: nothing connects. Your team runs the report requests with its own admin key and uploads the results.
  • We never contact a provider on your behalf without your written go-ahead, and never change anything in your accounts.

Cannot grant access yet? Not ready to grant access? Exports through the upload links work for every provider.

Who does the work

A team of FinOps Engineers and FinOps Practitioners. The Finitizer platform does the scanning; the team does the judgment, and every finding is reviewed, priced and explained by a person before you see it.

FinOps Engineers

Connect the read-only access, run the analysis on the Finitizer platform, write the Terraform changes, SQL rewrites and reservation commands, and check every number against your bill.

FinOps Practitioners

FinOps-certified. Review and rank every finding, run your review calls and readouts, build the reporting and the practice around it, and lead the training.

Frequently asked questions

How far back can a claim go?

It depends on the provider and your agreement. Google Cloud asks for billing disputes before the payment due date, 30 days after the invoice unless your agreement says otherwise, and refunds billing errors as credit. OpenAI asks for disputes within 30 days of the invoice. AWS publishes no billing dispute window, but outage credits must be requested by the end of the second billing cycle, and AWS adds corrections as credits in later months. So the newest months matter most, and older findings are raised as goodwill claims with the evidence attached.

How does the contingency option work?

On Growth and Scale you can choose no fixed fee. We deliver the same audit, and invoice 25% of the credits and refunds the providers actually post for our findings within 6 months of the final report, at the end of the month each one posts. If nothing is credited, you pay nothing.

What counts as recovered?

Only money a provider has actually given back, shown in its own documents: a credit memo, a refund or credit line in your AWS cost report, or an adjustment row in your Google Cloud billing export. Lower prices from next month are never counted, and neither are estimates.

What kinds of errors do you find?

The ones that recur in enterprise bills: a contract discount missing from a new service or SKU, a private rate that stopped before its end date, credits that expired unused, a promised refund that never posted, tax charged although you are exempt, a Marketplace product billed at the public rate in an account without the private offer, invoices entered twice, and AI usage billed above negotiated rates. If your invoices are clean, the report says so.

Do you send the claims to AWS, Google or the AI providers?

No. We draft each claim with the figures behind it, and your team sends it from your own account, because the provider relationship is yours. If you want, we join the call with your account team.

What happens after the audit?

You keep the register, the claims and the calendar. Most of what an audit finds can recur, so many customers move to monthly Invoice Reconciliation; sign Pro or Enterprise for 6 months within 30 days of the final report and the second half of the audit fee is waived.

Do you need our contracts?

Yes, they are the basis of every check that can find money. We turn them into a short list of terms, you confirm it, and we only claim what the agreement supports. Contracts are stored encrypted and used only for your audit, and we sign your NDA first.

Which providers do you cover?

AWS, including Marketplace sellers billed through AWS; Google Cloud, including Google Cloud Marketplace; OpenAI; and Anthropic. Gemini and partner models billed through Google Cloud, and Bedrock models billed through AWS, are covered with those bills. Azure is not covered.

How do we pay?

Nothing is paid upfront. On the fixed fee, 50% is invoiced at the preliminary readout and 50% with the final report. On the contingency option, 25% of each credit is invoiced at the end of the month it posts. Card or bank transfer.

Ready to start?

Pick a package above, or book a free 30-minute call and we will tell you which one fits, or whether you need one at all. From $3,900 one-time fee.