What a technology audit is and what it should include

A technology audit is a review of how a company uses technology: what systems it has, how people work with them, what data there is and what state it is in, and where hours are being lost. A good one ends in a written plan that says what is worth doing, in what order and what each step will cost, and also what is not worth doing. It is not an IT security review or a financial audit, although it may touch on part of them.

Updated October 27, 2026

Book a meeting

Thirty minutes, free and with no obligation, with the engineer who would lead the project.

What it is, and what it isn’t

It is called an audit, but it is closer to a diagnosis: someone from outside looks at how you work and tells you where technology helps you, where it gets in your way and where it is missing. The result is not a pass or a fail, but a plan.

Other reviews go by the same name: the security audit (vulnerabilities, access, backups), the software license audit or the data protection audit. A business technology audit looks at a bit of each, but what it is after is where hours and money are being lost.

What it should include

Sessions with the people who carry out each process, not just with management.
A map of how work gets done today: who does what, with which tool and where it gets stuck.
An inventory of the systems: the ERP, the CRM, the website, the spreadsheets, and who holds the keys.
The data: where it is, what state it is in and whether it can be connected.
The opportunities, ordered by what saves you the most: software, automation, AI or, simply, connecting two tools you already have.
What is not worth doing, with the reasons why.

What you should get from it

A document you can use without the auditor: a phased plan, with the scope and price of each phase, the proposed architecture and what it means for the systems you already have.

If only the person who wrote the plan can carry it out, or if everything it recommends is a program they sell, it is not an audit: it is a sales proposal.

What it costs and how long it takes

It depends on the size of the company and how many systems there are. For an SME, an audit worth having takes a few days of work at the company and a few more to write the plan.

There are also free assessments, from public programs or from providers. They can be a good starting point, but a provider’s assessment tends to end up recommending what that provider sells.

How to tell a good audit

It has a fixed price and you know what you will get before it starts.
Whoever does it sells none of the programs they might recommend to you.
It talks to the people who do the work, not just to management.
It also tells you what you don’t need to do.
The plan is yours and you can carry it out with whoever you choose.

When it suits you

Before an expensive decision: switching ERPs, building custom software or commissioning an AI project.
When you have the feeling that hours are being lost but you don’t know where.
When several providers tell you different things and nobody sees the whole picture.
When you want to apply for a grant that requires a prior assessment.

How we do it at SANFELIU

At SANFELIU, a custom software consultancy in Barcelona, the audit is a week of fieldwork at your company and costs €2,000 (VAT not included). It ends in a phased plan with a fixed price for each phase, the proposed architecture and what is not worth doing. It is deducted from the first phase if you do it with us; if not, the plan is yours all the same.

We are not partners or resellers of any program, and you can carry out the plan with us, on your own or by training your team. It starts with a thirty-minute conversation, free and with no obligation, with the engineer who would carry it out.

Book a meeting

Thirty minutes, free and with no obligation, with the engineer who would lead the project.

Frequently asked questions

What is a technology audit?

A review of how the company uses technology—systems, processes and data—that ends in a written plan: what is worth doing, in what order, what each step will cost and what you don’t need to do.

How much does a technology audit cost?

It depends on the size of the company and the systems it has. At SANFELIU it costs €2,000 (VAT not included), takes a week and is deducted from the first phase if you do it with us.

How does it differ from a security audit?

A security audit looks for holes: access, backups, software that hasn’t been updated. A business technology audit looks for where hours and money are being lost, and treats security as one more part of it.

What do we need to prepare?

Very little: access to the systems so they can be reviewed, a few hours from the people who carry out each process and someone from management to take ownership of it.

Do you need an audit to apply for grants?

Some grants require a prior assessment. The Bono IA, the AI grant announced in the Spanish government’s Plan IA360, for example, will require one for each project, with a specific use case.

Tell us about your case in thirty minutes.

Book a meeting with the engineer who would lead the project: thirty minutes, free and with no obligation. If we’re a fit, we tell you how we’d start; if not, who to turn to.

Book a meeting

Or email me@joansanfeliu.com

Prefer to write?

Tell us about your case in a few lines and we’ll reply by email.