Skip to main content
Growth Strategy

A systems audit checklist for owners and operating partners: inventory the stack, time the manual work, find the overlap, and turn the findings into a costed roadmap.

Isaac HarmonAuthorIsaac Harmon
The Systems Audit: How to Find the EBITDA Hiding in Your Software Stack

What is a systems audit?

A systems audit is a structured review of every tool, spreadsheet and manual workflow a business runs on, measured in dollars and hours, ending in a prioritized plan. It answers three questions: what are we paying for, what is it costing us in time and errors, and what should we change first?

It is not a security audit and not a full technology due diligence, though it borrows from both:

Systems auditTechnology due diligenceIT / security audit
Main questionWhere are we losing time and money?What are we buying, and what are the risks?Are we secure and compliant?
Who runs itOwner, operating partner or outside builderBuyer's advisors, pre-closeIT or security firm
OutputCosted roadmap of improvementsRisk findings for the dealControl gaps and remediation
WhenAny time; ideally first 30–60 days of ownershipBefore signingAnnually or for compliance

Where the EBITDA hides

Example systems audit table: CRM, scheduling app, accounting, quote spreadsheet, inventory add-on, e-signature and manual reporting, each marked keep, consolidate, cut or automate
An example stack review. Every tool and spreadsheet ends with one of four verdicts.

1. Software you pay for and don't use

According to Zylo’s 2026 SaaS Management Index, the average organization uses only 54 percent of its provisioned licenses. Smaller companies rarely track this at all: tools are bought on a credit card, seats are never removed, and two apps quietly do the same job.

2. Hours spent between systems

This is usually the larger number. Every time data is typed from one system into another, someone is being paid to be an integration. Salesforce research found sales reps spend only 28 percent of their time actually selling; operations teams in small companies often fare no better.

3. Revenue that leaks out

Leads that never get a reply, quotes nobody follows up, orders lost in an inbox. Every order that has to be retyped from an email into a system is a chance to drop one.

4. Errors and rework

Wrong prices, double bookings, inventory that doesn't match. Gartner puts the average annual cost of poor data quality at $12.9 million for organizations; at a smaller company it shows up as credits, write-offs and angry customers.

The systems audit checklist

  1. Inventory every tool and spreadsheet. Pull card statements and accounting records for software spend; ask each team what they open every day. Spreadsheets that run a process count.
  2. Record cost, seats and usage. Monthly cost, seats paid, seats active in the last 30 days, contract renewal date.
  3. Walk the core workflows. Follow lead-to-cash, order-to-delivery and hire-to-payroll with the people who do them. Watch, don't interview.
  4. Time the manual work. For each hand-off, estimate hours per week. Rough numbers are fine; zero is the only wrong answer.
  5. Map the data flows. Draw where each core record (customer, order, invoice) is created, copied and reported. Every copy is a place for errors.
  6. Check the risks. Admin access, backups, single points of failure (people and systems), anything regulated.
  7. Give every item a verdict. Keep, consolidate, cut or automate.
  8. Cost the roadmap. Each initiative gets an estimated annual impact, a cost, an effort score and an owner.

How to put a dollar figure on manual work

Use a simple formula and be conservative: hours per week × loaded hourly cost × 52.

For example, the BLS puts median pay for customer service representatives at $21.53 an hour. A task that takes six hours a week costs about $6,700 a year in wages alone (6 × $21.53 × 52), before benefits and payroll taxes. Across a dozen such tasks, you are looking at a meaningful EBITDA line, and that is before counting what those hours could be spent on instead.

Tool sprawl shows up fast in an audit. ProducifyX, a recruiting firm we work with, was stitching together eight separate tools for hiring, from applicant tracking to video interviews to e-signatures; we replaced them with one platform.

A recruiting workflow builder: a new applicant triggers an email, a video interview and an SMS
One of the recruiting workflows that replaced manual steps: a new applicant automatically triggers an email, a video interview and an SMS.

Turning findings into a roadmap

Rank initiatives on two axes: annual EBITDA impact and effort. Do the high-impact, low-effort items first; they fund the credibility for the rest.

Initiative (example)EBITDA leverEffortTiming
Remove unused seats and duplicate appsSoftware spendLowWeeks 1–4
Automate lead response and quote follow-upRevenueLow–mediumDays 30–70
Automate the weekly KPI packLabor hoursMediumDays 30–90
Consolidate operations into one source of truthLabor, errors, softwareMedium–highMonths 2–6
Deploy AI employees on high-volume rolesLabor capacityMediumMonths 3–9
An example roadmap format. Real impact estimates come from your audit.

Systems audits in due diligence and the first 100 days

The same method works before close as part of operational or technology due diligence: it surfaces key-person risk, fragile spreadsheets and integration costs while they can still affect price and the plan. After close, it is the backbone of the 100-day plan for systems and feeds directly into the value creation plan.

Frequently asked questions

What is a systems audit?

A systems audit is a structured review of a company's software, spreadsheets and manual workflows that measures what they cost in money and time, identifies overlap, errors and risks, and ends in a prioritized, costed improvement plan.

How long does a systems audit take?

For a lower-middle-market company, two to four weeks is typical: one week of inventory and data gathering, one to two weeks of workflow walk-throughs, and a final week to cost and prioritize the roadmap.

What's the difference between a systems audit and technology due diligence?

Technology due diligence is done by a buyer before closing to identify risks in what they are acquiring. A systems audit is done by owners or operators to find improvements. The methods overlap, and many sponsors run a lighter systems audit pre-close and a full one in the first 30–60 days.

Who should run a systems audit?

Someone who can sit with the team, read the numbers and knows what good systems look like: an operating partner, the CFO or COO, or an outside builder. It helps if whoever runs it can also estimate what fixes will cost.

What do you get at the end of a systems audit?

A complete inventory of tools and spreadsheets with costs and usage, maps of the core workflows, a verdict for every item (keep, consolidate, cut or automate), and a roadmap ranked by EBITDA impact and effort.

Sources

  1. SaaS usage numbers (2026 SaaS Management Index) — Zylo, 2026
  2. Sales reps spend less than 30% of their time actually selling — Salesforce, 2022
  3. How to Improve Your Data Quality — Gartner, 2021
  4. Customer Service Representatives: Occupational Outlook Handbook — U.S. Bureau of Labor Statistics
Isaac Harmon

Isaac Harmon · Founder, Harmon Digital

Isaac runs Harmon Digital, which builds custom software and AI employees for private equity portfolio companies, and built Unstack, the platform behind those builds. Finance degree from Mizzou; seven businesses started before 21, so he has been on the operator's side of messy systems.

  • Sales Automation

    Speed to Lead: The Data, the Five-Minute Rule, and How to Automate It

    Leads go cold in minutes, not days. What the research says about response time, what a good speed to lead looks like, and how to automate the first reply, qualification and booking.

    Speed to Lead: The Data, the Five-Minute Rule, and How to Automate It
  • Growth Strategy

    Private Equity Value Creation: A Technology Playbook for Portfolio Companies

    Multiple expansion won't carry returns anymore. Where technology actually moves EBITDA in a lower-middle-market portfolio company, and a practical playbook operating partners can run.

    Private Equity Value Creation: A Technology Playbook for Portfolio Companies
  • AI Automation

    AI Employees: What They Are, What They Cost, and Where They Actually Pay Off

    An AI employee is software that owns the repeatable part of a job, end to end. What one costs, which roles to start with, and how to deploy one without becoming another stalled AI pilot.

    AI Employees: What They Are, What They Cost, and Where They Actually Pay Off