SaaS Governance: A Complete Framework for IT Leaders in 2026
Build a SaaS governance framework that reduces risk, controls costs, and accelerates adoption. Proven policies and implementation strategies.
SaaS sprawl costs mid-market companies millions in wasted spend and unmanaged risk. Learn what causes it and seven proven strategies to control it.
SaaS sprawl is the uncontrolled growth of software-as-a-service applications across an organization. It occurs when departments, teams, and individual employees adopt SaaS tools independently — without centralized oversight, approval, or tracking.
The result is a bloated, overlapping, and largely invisible software portfolio that drains budgets, creates security gaps, and makes IT governance nearly impossible.
In 2025, the average mid-market company uses over 200 SaaS applications. IT is typically aware of 40-60 of them. The rest — purchased on department credit cards, signed up with free trials, or adopted through word-of-mouth — constitute the sprawl.
SaaS sprawl is not the same as having a lot of software. A company can use 300 applications effectively if they are known, managed, and justified. Sprawl specifically refers to the unmanaged, untracked, and often redundant growth of the SaaS portfolio.
The scale of SaaS sprawl has grown significantly over the past five years:
| Metric | 2020 | 2023 | 2025 |
|---|---|---|---|
| Average SaaS apps per company (200 employees) | 80 | 150 | 210+ |
| IT visibility (% of apps known) | 45% | 35% | 30% |
| Average annual SaaS spend per employee | €2,800 | €4,200 | €5,500 |
| Wasted SaaS spend (% of total) | 25% | 30% | 32% |
| Average duplicate tool categories | 3-4 | 5-7 | 7-10 |
The trend is clear: companies are adopting SaaS faster than they can manage it. And the gap between adoption and governance is widening.
The single biggest driver of sprawl is decentralized SaaS procurement. When every department has a budget and a credit card, software purchasing happens without IT involvement.
Marketing buys its own analytics stack. Sales chooses its own CRM. HR adopts its own recruitment platform. Each decision makes sense in isolation, but collectively they create a fragmented portfolio with no central oversight.
The trigger: Most organizations shifted to decentralized purchasing to avoid slow, bureaucratic IT procurement processes. The speed gained came at the cost of control.
Modern SaaS products are designed to spread virally. Free tiers and trials let anyone sign up with a corporate email address — no purchase order, no credit card, no approval required.
An employee signs up for a free project management tool. They invite their team. The team starts depending on it. Six months later, someone upgrades to a paid plan on a department card. IT never knew the tool existed.
The scale: Studies show that for every paid SaaS application in a company, there are 2-3 free or trial applications that never appear in financial tracking.
The shift to remote and hybrid work accelerated SaaS adoption dramatically. Distributed teams adopted collaboration tools independently to solve immediate communication and workflow challenges.
Without the natural oversight that comes from working in a shared office — where IT can observe what people use and colleagues share tool recommendations in person — remote employees adopted tools in isolation, leading to fragmentation across teams.
Most mid-market companies do not maintain an approved software catalog. Without a clear list of "here's what we already have," employees default to searching for new tools rather than checking whether an existing solution meets their needs.
The missed opportunity: A well-maintained software catalog with clear categories prevents duplicate purchases and gives employees a starting point before they go tool-shopping independently.
When IT procurement takes weeks, employees bypass it. If requesting a new tool means filling out a form, waiting for security review, attending a committee meeting, and waiting some more — most people will just sign up on their own and expense it later (or not at all).
The paradox: Strict procurement processes designed to prevent sprawl often cause it. The more friction in the process, the more employees go around it.
SaaS sprawl is expensive in ways that are often hidden or difficult to quantify.
For a 200-person company spending €500,000 on SaaS annually, sprawl waste typically ranges from €125,000 to €175,000 per year.
These terms are related but distinct:
| SaaS Sprawl | Shadow IT | |
|---|---|---|
| Definition | Uncontrolled growth of the entire SaaS portfolio | Specifically the use of unapproved/unknown IT |
| Scope | Includes both known and unknown apps | Only unknown/unapproved apps |
| Focus | Volume, redundancy, waste | Risk, visibility, governance |
| Primary concern | Financial (cost waste) | Security (data exposure) |
| Example | Having 4 project management tools | Using an AI tool IT doesn't know about |
In practice, shadow IT is a subset of SaaS sprawl. All shadow IT contributes to sprawl, but not all sprawl is shadow IT — you can have known, approved applications that still represent sprawl if they duplicate functionality or are underutilized.
Addressing SaaS sprawl requires tackling both: eliminating redundancy in known applications and discovering and governing unknown ones.
You can't fix what you can't see. Start with a complete inventory of every SaaS application in use.
The most effective discovery method combines email metadata analysis (which catches every SaaS application that sends confirmation emails, invoices, or notifications) with identity provider integration (which shows OAuth-connected applications).
Together, these methods discover 90%+ of your SaaS landscape without requiring agents on employee devices or changes to network infrastructure.
Once you have a complete inventory, categorize every application by function and assess overlap:
Target: Reduce duplicate tool categories from 7-10 to 1-2 within six months.
Create and publish an approved software catalog that employees can reference before purchasing or signing up for new tools:
A software catalog reduces duplicate purchases by giving employees a clear answer to "what should I use for X?"
If your procurement process takes weeks, employees will bypass it. Fix the process:
The key is matching the review depth to the actual risk level, not applying the same heavyweight process to every request.
Move SaaS spending from department budgets to a centralized IT budget — or at minimum, require IT visibility into all SaaS purchases above a threshold.
This doesn't mean IT makes every purchasing decision. Departments can still choose tools that fit their workflow. But centralizing the budget provides:
Every SaaS application should have a defined lifecycle:
Without lifecycle management, applications accumulate indefinitely. The portfolio only grows — it never shrinks.
SaaS sprawl is not a one-time cleanup problem. New applications appear every week. Implement continuous monitoring to:
The goal: Shift from reactive (discovering sprawl during annual audits) to proactive (catching new sprawl as it happens).
Implementing these seven strategies manually — with spreadsheets, surveys, and expense report reviews — is theoretically possible but practically unsustainable. The data is too distributed, changes too fast, and requires too much manual effort.
A SaaS management platform automates the foundational layer:
With this foundation in place, the strategic work — rationalization, catalog management, procurement streamlining — becomes actionable rather than aspirational.
SaaS sprawl is a structural problem, not a discipline problem. Employees aren't doing anything wrong by adopting tools that help them work more effectively. The problem is the absence of systems to track, manage, and govern those adoptions.
Fixing sprawl requires a combination of visibility (knowing what you have), governance (controlling how new tools are adopted), and continuous management (keeping the portfolio rationalized over time).
The companies that manage SaaS sprawl effectively don't use fewer tools — they use the right tools, and they know exactly what they're paying for. Explore how Coax helps with cost optimization and security.
Ready to see the full scale of your SaaS sprawl? Book a demo and get a complete inventory in 15 minutes.
Build a SaaS governance framework that reduces risk, controls costs, and accelerates adoption. Proven policies and implementation strategies.
An acceptable use policy defines which SaaS tools employees can use and how. Get a practical template and guide for SaaS-first organizations.
A SaaS management platform gives IT teams visibility into every app, license, and cost. Learn what SMPs do, key features, and how to evaluate one.