The True Cost of Shadow Spend (with a Calculator)

Ask a CFO how much shadow spend costs and most will give you the total of the invoices that came in without a PO. It's a fair place to start. It's also the smallest number in the room.

The real cost of shadow spend sits around those invoices. It's the discount you didn't get because someone bought off contract, the licences nobody uses, the hours your AP team spends chasing approvals after the fact, and the risk that comes with a vendor nobody vetted. None of that shows up as a line item, so it rarely gets counted.

This post breaks the cost down bucket by bucket, with the latest data for each one. We've also built a free calculator so you can put a number on your own leak. It takes about two minutes and you'll need four figures you probably already have.

If you're new to the term, start with our guide on what shadow spend is and where it hides.

Why the invoice total understates the cost

When a purchase goes through your approved process, a few things happen before any money moves. Someone checks whether there's already a contract. Someone checks whether you already own a tool that does the same job. The vendor gets vetted, and the cost lands in a budget someone is accountable for.

Shadow spend skips all of that. So the cost you pay is the invoice, plus everything those checks would have saved you.

The gap is bigger than most teams expect. Ardent Partners' 2025 research found that every additional dollar brought under procurement's management yields savings of 6% to 12% in the first contract period. Flip that around and every dollar of shadow spend is a dollar where you've likely given up that 6% to 12%, before you count any of the other costs below.

And there's a lot of it. The same research puts average spend under management at about 71%. That means close to 30 cents of every dollar a typical company spends goes out without procurement's involvement.

The six places shadow spend costs you money

1. Lost negotiated savings

This is usually the biggest bucket. Procurement negotiates a rate, and then a team buys the same thing somewhere else, or from the right supplier without quoting the contract. The savings exist on paper and never reach the P&L.

Ardent Partners found best-in-class procurement teams hit 79.5% contract compliance, while everyone else averages 56.2%. That 23-point gap is spend going to the wrong price.

Tail spend makes it worse. The Hackett Group's 2025 study puts tail spend at about 20% of enterprise spend across 80% of suppliers. Companies currently capture 7% to 10% savings on it, while the potential is 16% to 20%. Most of that difference is money left on the table because the spend was never routed through anyone who could negotiate it.

2. Wasted and duplicate licences

Shadow software buying often means several teams each pay for the same tool, each at a different price. Then half the seats go unused. Zylo's 2026 SaaS Management Index found that organisations leave 36% of their SaaS licences unused on average. Zylo puts the average annual waste at $19.8M per organisation, though that figure leans towards larger enterprises in its dataset.

Usage-based and AI pricing adds another layer. The same Zylo index found that 78% of IT leaders were hit with unexpected charges from consumption or AI pricing in the past 12 months. When nobody approved the tool, nobody set a cap on it either.

3. Extra processing cost

An invoice that arrives without a PO can't match automatically. Someone has to work out who ordered it, chase an approval, find a GL code, and sometimes raise a PO after the fact so it can be paid. That's an exception, and exceptions are expensive.

Ardent Partners' AP Metrics that Matter in 2025 report found best-in-class teams process an invoice for $2.78, while everyone else pays $12.88. The average invoice exception rate sits at 14%. Shadow spend feeds that exception queue directly, because PO-less invoices are exceptions by design.

4. Duplicate and erroneous payments

When the same supplier exists twice in your vendor master, or an invoice turns up by email and again by post, it's easy to pay it twice. Shadow vendors are especially prone to this because nobody set them up properly in the first place. APQC's open benchmark puts the median share of disbursements that are duplicate or erroneous at 1.5%, across 1,686 organisations. Some of that gets clawed back. Recovery takes time and money, and some of it never comes back at all.

5. Security and compliance exposure

Every unapproved tool that touches company data is a risk your security team doesn't know about. IBM's 2025 Cost of a Data Breach research found that one in five organisations reported a breach due to shadow AI. Organisations with high shadow AI use saw breach costs $670,000 higher on average. Only 37% had policies in place to manage AI or detect shadow AI.

Gartner expects this to grow. A survey of 302 cybersecurity leaders found 69% of organisations suspect or have evidence that employees use prohibited public GenAI, and Gartner predicts that by 2030 more than 40% of enterprises will have a security or compliance incident linked to unauthorised shadow AI.

6. Fraud risk

A vendor that skips onboarding also skips bank-detail checks and the basic question of whether the company is even real. The ACFE's Occupational Fraud 2024 report estimates organisations lose about 5% of revenue to fraud each year. Billing schemes make up 22% of cases, with a median loss of $100,000. A lack of internal controls contributed to 32% of the frauds it studied.

A worked example: what it looks like at a $100M company

Let's put real numbers on it. Take a mid-market company with about $100M in revenue. The assumptions below are illustrative, so swap in your own using the calculator further down.

• $40M a year in third-party spend
• 29% of that spend goes out without procurement's involvement (the inverse of Ardent's 71% average)
• $1M a year in software bought outside IT or procurement
• 12,000 supplier invoices a year

That's about $1.1M a year, and it's a conservative figure. It uses the low end of Ardent's 6% to 12% savings range. At 12%, the lost savings line alone doubles to $1.39M. It also leaves out duplicate payments and fraud, along with any security incident, because those are risks rather than steady annual costs. A single shadow AI breach, at IBM's $670,000 average premium, would add more than half again on top.

The extra processing line is the smallest of the three. That's worth pausing on, because it's usually the only one AP teams measure. The money sits upstream, in decisions made before an invoice ever existed.

Calculate your own cost of shadow spend

Try the free Shadow Spend Calculator

The calculator uses four inputs. If you don't have an exact figure, the defaults are based on the research above, and you can adjust them as you go.

Two more assumptions sit behind the scenes, and you can change them too. The savings rate defaults to 6%, the low end of Ardent's 6% to 12% range. The unused licence rate defaults to 36%, from Zylo's 2026 index.

Here's the maths, so you can check it or rebuild it in a spreadsheet:

Lost savings = Spend × Unmanaged % × Savings rate
Licence waste = Shadow software spend × Unused rate
Extra processing = Invoices × Unmanaged % × $10.10

The $10.10 is the difference between what an average AP team pays to process an invoice ($12.88) and what a best-in-class team pays ($2.78), according to Ardent Partners. We use it as a proxy for the extra handling a PO-less invoice needs.

Your total is the sum of the three lines. Treat it as a floor. It doesn't include duplicate payments or the cost of a fraud or breach, and those can easily be bigger than everything else combined in a bad year.

How to shrink the number

Look back at the worked example. Almost 97% of the cost came from decisions made before an invoice existed: who to buy from and whether the company already owned something similar. That's where the fix has to go.

Catch the request at intent. Most shadow spend starts as a Slack message or a free trial. If people can ask for what they need in the channels they already use, and get a quick answer, they stop going around the process. Blackbee AI's Intake Agent picks up requests from email, Slack, Teams and forms, and checks them against policy before anything is committed.

Point requests at the contract you already have. If a request matches a supplier you've negotiated with, it should go there automatically. The Contract Intelligence Agent reads your agreements and flags any request or invoice that's drifting off the agreed terms, including renewals coming up.

Make approvals fast for low-risk spend. Slow approvals are one of the main reasons people skip them. The Approval Orchestration Agent routes by risk and policy, so a routine renewal moves quickly while a new vendor touching customer data goes to the right people.

Watch for what slips through. No process catches everything. The Spend Intelligence Agent looks across invoices and card spend for split purchases, duplicate tools, new merchants and off-contract pricing, and flags them while they're still small.

You stay in control of all of it. You choose which steps Blackbee AI handles, and it does only those, and does them well. Everything sits above your ERP, so your ERP stays your system of record and gets clean, structured data at the end.

Find out what shadow spend is costing you

The calculator gives you a number. Getting it down means seeing requests at the moment someone decides to spend, while there's still a choice to make. If you'd like to see how Blackbee AI does that on top of your ERP, book a 30-minute demo and bring your calculator result with you.