VendorSpendDrift — Actual vs Budgeted Spend + Renewal Alerts
28 vendor contracts × actual vs budgeted spend × renewal-window clock. Per vendor: monthly burn, YTD spend ratio, contract end date, auto-renewal flag, lock-in clauses, alternates. Surfaces 4 vendors over budget (AWS +17%, Datadog +17%, Twilio +23%, Atlassian +11%) + 6 with renewal in <60 days + 1 auto-renewing legacy contract that locks us in within 27 days unless we give notice.
What it is
The shape behind every healthy SaaS-spend-management program — Vendr, Tropic, Spendflo. Most companies don’t notice budget drift until annual close — by then they’ve over-spent across 12-15 vendors. VendorSpendDrift surfaces it monthly + flags renewal windows before lock-in.
What’s in it
- 28 vendor contracts spanning infra (AWS, Cloudflare, Vercel), payments (Stripe), data (Snowflake, Mixpanel, Heap), observability (Datadog, Sentry, PagerDuty), dev-tools (GitHub, Atlassian, Linear, Notion), identity (Auth0, 1Password), CRM (Salesforce, HubSpot), communications (Slack, Twilio, SendGrid), compliance (Persona KYC, TaxVendor, LegalVendor outside-counsel).
- Per-vendor shape:
- Annual budget vs YTD actual (with %-of-budget burn)
- Monthly burn vs monthly budget
- Renewal date + days-to-renewal
- Auto-renew flag + cancellation-notice lock-in
- Negotiable / locked
- Alternate vendors documented
- Worst-offender findings:
- VS-001 AWS — +17% over budget driven by GenAI workloads. Renegotiate at next EDP.
- VS-004 Datadog — +17% over budget on logs ingest. Tighten log filters.
- VS-016 Twilio — +23% over budget. Cross-references DSARStandingOrder Twilio gap + IncidentLog INC-05103. Migration in queue.
- VS-028 LegalVendor — +22% over budget driven by active legal matters (DOJ subpoena, SEC TCR).
- VS-025 LegacyVendor X — AUTO-RENEW with 60-day cancellation notice required. Lock-in window in 27 days.
- VS-023 Mixpanel — sunsetting; let auto-renewal LAPSE (cross-references DPADeskbook D32).
Why this shape
SOC2 CC9.2 (vendor risk + spend) + ASC 842 (operating leases — for multi-year SaaS) + FinOps Foundation framework all demand the same shape: monthly drift visibility + renewal-window alerts. The killer finance-ops failure: an auto-renewing contract locks the company in another year because nobody knew the window was closing. VendorSpendDrift surfaces those by default.
How it ships
Single HTML file, ~16KB. Zero dependencies. 28 vendors × budget-burn math + lock-in-window detection in 200 lines of vanilla JavaScript.