Every interface, mapped.

Indirect access is, in our case-book, the largest single source of audit exposure across the SAP enterprise category. The leading cases — Diageo, Anheuser-Busch — set the legal framework. The day-to-day reality is that almost every SAP estate has interfaces that pre-date the contractual definition, system integrations that nobody mapped, and document flows that nobody classified.

SAP's position is that those interfaces require their own licence. The buyer-side position is that many of them do not, that the document classification is contestable, and that the right remediation is rarely a like-for-like conversion to Digital Access at list price.

The work begins with mapping. Every interface, every middleware component, every RPA bot, every EDI pipe, every custom portal. Each one classified by what it reads, what it writes, how often, and on whose behalf. The classification is what determines the licence position — and it is the classification, far more than the technology, that the negotiation turns on.

Remediation has three usable pathways: architecture changes that move the document flow back through Named-User front ends, contractual re-classification that brings the interface inside an existing licence, and a costed conversion to Digital Access with caps and floors. The right answer is almost always a mix.