How to evaluate a recovery audit firm: nine questions

Executive Summary

A recovery audit engagement is easy to sell and hard to evaluate before the fact, because the pitch is always the same: we find money you did not know you were owed. What separates a firm worth hiring from one that costs more than it recovers is not the pitch. It is the fee structure, the scope boundary, the people doing the matching, and whether anything changes after the report is delivered.

Fee structure sets every other incentive in the engagement. A contingency fee rewards volume of findings. A fixed fee rewards accuracy.

Scope determines whether the firm is reading your contracts or only your invoices. Staffing determines whether a junior analyst or someone who can read a rebate clause is doing the matching. And what happens after delivery determines whether the recovery is a one-time event or the first cycle of a control that keeps paying.

None of this requires taking a firm's word for it. Each question below has a concrete, checkable answer, and a vague answer to any of them is itself the finding.

1. What questions should you ask before hiring a recovery audit firm?

Group the questions into four areas: how the firm gets paid, what it actually reviews, who does the work, and what it leaves behind. Nine questions cover those four areas without overlap. Ask them in the sales process, before scoping, and require specific answers rather than general reassurance.

A firm that cannot answer one plainly is telling you something about the engagement you have not signed yet.

The nine questions, grouped:

Fee structure: how are you paid, and does the client keep 100% of what is recovered. Scope: which vendor categories and contract types are in scope, and which are explicitly out. Method: is the matching done against the actual contract language or against a rate table built from invoice history. Staffing: who reads the contracts, and what is their background.

Evidence: what does a finding look like before it is presented to a vendor. Recourse: what happens if a vendor disputes a finding. Timeline: how long does the engagement run and what triggers the end date. Continuity: what happens to the controls after the report is delivered. Reference: can the firm describe an engagement that found less than expected, and why.

The rest of this page takes each area in turn. None of the questions requires the firm to disclose anything proprietary. They ask it to describe its own process in specific enough terms that the description can be checked against what actually happens.

• Fee structure: How is the firm paid, and who keeps the recovery.
• Scope and method: What is actually reviewed, and against what reference.
• Staffing: Who performs the matching and what they are qualified to read.
• Evidence and recourse: What a finding looks like and what happens when a vendor disputes it.
• Continuity: What, if anything, survives after the report is delivered.

2. How does the firm get paid, and what does that change about its behavior?

A contingency fee firm is paid a share of what it finds, typically 25% to 50% of recoveries, and has no reason to find less. A fixed-scope firm is paid a set amount regardless of the finding, and the client retains 100% of recoveries. Ask which model you are being offered, and ask what the firm does with a marginal finding that a vendor would likely dispute.

The incentive question matters more than it first appears. A firm paid on contingency is economically motivated to maximize the number and size of findings, including ones close to the line of what a vendor will actually accept. That does not make every contingency finding wrong, but it means the firm's interest and yours diverge exactly at the findings that are hardest to defend.

A fixed-scope engagement removes that incentive. The firm is paid for the work, not the outcome, so a marginal finding is neither more nor less valuable to it than a solid one. That changes what gets reported and how aggressively it gets pursued with the vendor.

Neither model is dishonest by default. But the model shapes behavior, and a buyer who does not ask about it is accepting whichever incentive structure the firm happens to offer. This is covered in more depth on the page comparing fixed-scope and contingency-fee pricing directly, and the client retains 100% of recoveries under the fixed-scope model.

3. What will the engagement actually cover, and what will it miss?

Ask the firm to name the vendor categories in scope, in writing, before the engagement starts. A recovery audit that reviews only accounts payable history will find duplicate payments and obvious overbilling. It will not catch a rebate clause never invoked or a surcharge that outlived its trigger condition, because those require reading the contract, not just the ledger.

AP recovery work and contract compliance work are different disciplines that use different source material. AP recovery starts from the invoice and payment history and looks for errors within that data: duplicate payments, math errors, missed credits. Contract compliance starts from the contract itself: rate cards, volume tiers, rebate clauses, surcharge schedules, not-to-exceed caps, and checks the invoice against those terms.

A firm that only does the first kind of work will describe its scope in AP terms and will not mention contract terms unless asked directly. That is not dishonesty. It is a scope boundary the firm assumes you already understand.

Ask for the scope in writing before the engagement starts, and ask specifically whether unstructured contract terms sitting in PDFs outside the ERP are part of the review. What an AP recovery audit actually finds and what it misses is worth reading in full before this conversation, since the gap between the two disciplines is exactly where the largest unclaimed findings tend to sit.

4. Who does the work, and what happens when a finding gets disputed?

Ask who performs the contract-to-invoice matching, not just who signs the engagement letter. Reading a rebate clause or an NTE cap correctly requires someone who can interpret contract language, not only reconcile numbers. Then ask what evidence package a disputed finding gets before it goes to the vendor, because a finding without a documented basis rarely survives a vendor's own review.

A firm's senior staff sell the engagement. Its analysts do the matching. The gap between those two groups is where quality is won or lost, and it is reasonable to ask directly who will actually be reading your contracts and what their background is.

A related but separate question is what a finding looks like before it reaches the vendor. A credible finding cites the specific contract clause, the specific invoice line, and the calculation connecting them. A weak finding is a dollar figure with a category label attached.

A. What good evidence looks like

A defensible finding names the contract section, quotes the relevant term, shows the invoice line it applies to, and shows the arithmetic that produces the variance. That package is what a vendor's own AP or contracts team reviews when a credit is requested, and a finding missing any one of those four elements is easy for a vendor to push back on without engaging the substance.

B. What to ask about disputes

Ask for a specific past example of a finding a vendor disputed and how it was resolved, rather than a general assurance. A firm confident in its method will have one ready. A firm that claims no finding has ever been disputed has probably not been aggressive enough to find the harder ones.

5. What happens after the audit ends, and does anything stop the drift from recurring?

A one-time recovery fixes the past without touching the future. Ask whether the firm hands over a prioritized roadmap the AP team can act on, whether it recommends specific controls such as surcharge sunset dating or rate card enforcement, and whether it offers, or can point you to, a way to keep checking new invoices against the same contract terms going forward.

The diagnostic style of engagement is designed to end with a prioritized recovery and prevention roadmap, typically within 2 to 4 weeks across ValueXPA diagnostics, rather than an open-ended retainer. That roadmap is the deliverable to evaluate: does it name specific vendors, specific contract terms, and specific control changes, or is it a summary of the dollar total.

A firm worth hiring will be candid that a single audit recovers what already happened and does little to stop next month's invoice from repeating the same error, unless the underlying contract term is fixed or a forward check is put in place. Ask what that forward check looks like in the firm's own recommendation, whether it is a quarterly internal review, an ERP configuration change, or continuous enforcement software.

The choice between periodic review and continuous enforcement is a real decision with real tradeoffs, and a firm that has thought about it will say so plainly rather than pushing you toward whatever it happens to sell.

6. How do you tell a credible firm from a plausible one during the sales process?

Compare answers across firms on the same nine points rather than asking each firm to make its own case. A credible firm answers every question specifically: named categories, named staff qualifications, a real dispute example, a written scope. A plausible one answers in generalities and redirects to the size of past recoveries, because a big number is easier to say than a defensible method.

The sales process for recovery audit services rewards firms that sound confident more than firms that are precise, because the buyer usually has no independent way to check a claim before signing. The nine questions above exist to close that gap: they ask for specifics that are either true or not, rather than impressions that are hard to dispute.

A useful test while evaluating a shortlist: ask each firm to describe an engagement where the recovery was smaller than the client expected, and why. A firm with nothing to say has probably not done enough real engagements to have a disappointing one, or is unwilling to discuss it. A firm that gives a specific, honest answer, including a category where its own method did not find much, is more likely to give you an honest scope estimate on your own engagement too.

Finally, weigh the fee model against the scope. A contingency firm charging 25% to 50% of recoveries in exchange for a narrow AP-only review is a materially different offer than a fixed-scope engagement covering both AP recovery and contract compliance where the client keeps 100% of what is found. Compare the whole package, not the headline number either firm quotes first.

For the wider pattern this sits inside, start with the margin drift guide.

7. Frequently Asked Questions (People Also Ask)

Should a recovery audit firm charge contingency or a fixed fee?

Both models exist and each has a legitimate use case. Contingency shifts risk to the firm and can suit a buyer unwilling to pay upfront. A fixed-scope engagement removes the incentive to maximize marginal findings and lets the client keep 100% of what is recovered. Compare the fee model against the scope offered, not in isolation.

How long should a recovery audit take?

A diagnostic-style engagement is typically scoped to a prioritized roadmap in 2 to 4 weeks across ValueXPA diagnostics. An open-ended engagement with no defined end date makes it harder to evaluate whether the firm is still finding real value or simply extending billable time.

Does a recovery audit review contracts, or just invoices?

That depends entirely on the firm and should be specified in writing before the engagement starts. AP recovery audits typically review invoice and payment history. Contract compliance audits review the invoice against rate cards, rebate clauses, surcharge schedules and NTE caps. Ask which one, or both, you are buying.

What should a finding from a recovery audit include?

A defensible finding cites the specific contract clause, the invoice line it applies to, and the calculation connecting them. A finding that states only a dollar amount and a vendor category is harder to defend if the vendor disputes it, and gives you less to act on even if the vendor accepts it.

Can a recovery audit firm guarantee a recovery amount?

No credible firm can guarantee a specific dollar figure before reviewing your contracts and invoices, because the amount depends entirely on what is actually in your vendor spend. Treat a guaranteed number offered before any review as a sales tactic rather than an assessment.

What happens to the findings after the engagement ends?

That depends on what you ask for. A firm that hands over a prioritized roadmap naming specific vendors and contract terms leaves you with something actionable. A firm that hands over only a summary total leaves the recurring drift unaddressed unless you separately build a control to catch it going forward.

Is a recovery audit firm the same thing as AP automation software?

No. AP automation software checks new invoices against rules at the point of receipt going forward. It does not review 12 to 18 months of historical spend for embedded leakage or interpret contract terms sitting in PDFs outside the ERP. The two are complementary, not substitutes for each other.

How do I know if a recovery audit firm's staff can actually read a contract?

Ask directly who performs the contract-to-invoice matching and what their background is, separate from who sold you the engagement. A firm confident in its staffing will answer specifically. A vague answer about "our team" without naming a role or qualification is worth following up on before you sign.

Should I ask for references before hiring a recovery audit firm?

Yes, and ask specifically for an engagement where the recovery came in lower than expected, not just a success story. A firm willing to discuss a disappointing outcome honestly is more likely to give you an accurate scope estimate for your own engagement.