An agency spend audit finds hidden fees, unreturned rebates, and measurement gaps so you can recover cash and reallocate budget to higher-ROI channels. It examines what you pay agencies in fees, media buys, and passthroughs against what those dollars actually delivered. Most founders delay this until cash flow becomes an issue, but the fix is clear: gather your recent agency contracts and invoices and start there.
TL;DR:
- Conducting an audit requires verifying agency fees, media buys, rebates, and programmatic costs through detailed contracts and platform logs to uncover hidden leakage.
- Reconciliation often reveals billing mismatches in programmatic buys and unitemized rebate credits, which can be recovered if contract language explicitly assigns rebates to the brand.
- Validating findings with experiments or media mix modeling requires granular data to accurately measure true channel contribution and avoid false conclusions.
- External third-party audits are more credible for board reviews, especially when agencies resist sharing transaction-level data or ledger access.
- Recovery of rebates and correction of billing errors typically takes 30 to 90 days, making clear contract clauses and prompt data access crucial for timely reimbursement.
Table of Contents
- What does an agency spend audit cover, and who should run it?
- How do you run an agency spend audit step by step?
- What contract clauses and red flags should you check?
- How do you measure and validate audit findings?
- How long does an agency spend audit take, and what does it cost?
- How should you act on audit findings once they’re in hand?
- What founders get wrong about agency spend audits
- Get Hands-On Help Running Your Agency Spend Audit
- Where the Standards Behind This Guide Come From
- Sources
- FAQ
What does an agency spend audit cover, and who should run it?
An agency spend audit is a structured review of every dollar flowing to marketing partners, not just the invoice total. It looks at fees, media buys, rebates, incentives, influencer payments, and the programmatic supply chain that sits between your ad dollars and the platforms actually delivering impressions.
Before you touch a spreadsheet, gather the raw material. You need agency contracts and statements of work, twelve months of invoices, ad platform logs (Meta Ads Manager, Google Ads, TikTok Ads Manager), CRM and sales data for revenue attribution, and media insertion order reports. Without all five, you’re auditing half the picture.
The scope checklist looks like this:
- Agency fees: retainers, hourly rates, and performance bonuses, checked against the scope of work actually delivered.
- Media buy reconciliation: does what you were billed match what platforms actually charged and delivered?
- Rebates and credits: volume discounts or agency-of-record incentives that platforms pay agencies, which contractually may belong to you.
- Influencer and creator payments: rates, deliverables, and whether disclosures meet FTC standards.
- Programmatic transaction costs: the fees taken by ad exchanges, DSPs, and data providers between your budget and the final impression.
- Creative and production fees: whether costs match deliverables and aren’t double billed across campaigns.
- Passthroughs: third-party tools or data costs marked up before reaching your invoice.
Running this internally works if your finance team has time and your agency relationship is transparent. But internal reviewers often lack access to agency-side ledgers, which is where the real leakage hides. If you’re heading into an investor conversation or a board review, a third-party auditor carries more weight precisely because they have no stake in the agency relationship surviving the findings.
How do you run an agency spend audit step by step?
A spend audit moves through five phases, and skipping the order usually means redoing work later.
- Prepare. Assign one owner (not a committee), centralize every contract and invoice in a shared folder, and request raw data extracts from finance and marketing operations rather than summary reports.
- Reconcile. Match every invoice against your general ledger, ad platform spend logs, and media insertion records. Flag any gap between what you were billed and what platforms show as delivered.
- Inspect rebates and incentives. Search for agency credit notes, volume rebates, and platform incentives that never appeared as line items on your invoices.
- Validate measurement. Review whatever incrementality experiments or media mix modeling the agency has run, and check whether their attribution assumptions hold up against your own sales data.
- Report and act. Quantify the recoverable dollar amount, then draft specific contract language and governance changes to prevent the same leakage next quarter.
Pro Tip: Ask your agency for a full transaction-level export, not a summary dashboard, before you start reconciling. Summary reports are built to look clean; transaction logs are where the discrepancies actually live.
The reconciliation phase alone typically surfaces the biggest surprises. Billing versus delivery mismatches are common in programmatic buys, where the number of impressions purchased rarely lines up cleanly with what you’re invoiced for.
What contract clauses and red flags should you check?
Most audit friction traces back to contract language written years ago, before anyone thought to specify who keeps a rebate. Fix the contract and you fix future audits before they start.
Four clauses matter more than the rest:
- Explicit rebate-return language. The contract should state, in plain terms, that any volume discount, vendor incentive, or agency-of-record credit belongs to you, not the agency.
- Itemized invoicing. Line items for fees, media spend, and passthroughs separately, not bundled into one number you can’t reconcile.
- Audit rights with real access. The right to inspect not just your invoices but the agency’s own transaction records and ledger entries tied to your account.
- Principal versus agent language for media buys. This determines whether the agency owns the media relationship (and any rebates) or is acting strictly on your behalf.
An auditor NDA exhibit attached to the master services agreement is what makes audit rights enforceable in practice. Industry guidance from the Association of National Advertisers recommends this exhibit specifically because agencies routinely resist opening their books without one, citing confidentiality with other clients. A signed NDA removes that objection.
Watch for ambiguous “opt-in” clauses buried in amendments. These sometimes quietly waive your audit rights or cap the recovery window, and they’re worth flagging to legal counsel before you sign anything new.
How do you measure and validate audit findings?
Numbers on a spreadsheet mean nothing until you’ve validated them against a credible counterfactual. That’s the difference between an audit finding and a hunch dressed up as one.
Use controlled experiments (geo holdouts or incrementality tests) when you need certainty on a specific channel’s true contribution. Use media mix modeling when you need a fuller picture across many channels but can tolerate more statistical noise. The IAB’s incremental measurement guidelines recommend matching the rigor of your method to the size of the decision. Don’t run a full experiment to validate a $2,000 line item.
Whatever method you choose, the data has to be granular: daily spend by channel, placement-level detail, and a clean link to your CRM or sales system. The MRC’s Outcomes and Data Quality Standards set the baseline for what “reliable” measurement actually requires, and most agency-reported ROAS numbers fall short of it.
A single experiment proves less than founders assume. Think with Google’s experiments playbook recommends repeated testing over time, because one clean result can still be noise.
How long does an agency spend audit take, and what does it cost?
A quick triage audit, focused on rebate recovery and obvious billing mismatches, takes a few weeks. A full reconciliation with a programmatic supply-chain review can take several weeks to a few months, depending on complexity.
Plan to involve three people at minimum:
- Finance, to pull invoices and reconcile against the general ledger.
- Marketing operations, to export platform logs and campaign data.
- Legal, to review contract language once red flags surface.
Data quality drives most of the cost variance. Clean, centralized records make a triage audit fast; scattered invoices across five agencies and a tangled programmatic stack push you toward the longer timeline and often require external forensic access. A simple rule of thumb: if your annual agency and media spend exceeds $500,000, the potential recovery almost always justifies the audit cost.
How should you act on audit findings once they’re in hand?
Prioritize in three tiers. Cash-first recoveries (unreturned rebates, billing errors) come first because they’re fastest to collect. Efficiency gains (reallocating spend toward higher-performing channels) come second. Strategic changes that touch brand positioning come last, since they take longer and carry more risk.
Fix governance while you’re at it: monthly invoice reconciliation, a standing audit-rights exhibit in every new agency contract, and a recurring experiment cadence instead of one-off tests.
If you want outside help acting on findings, Commerce Catalyst’s DTC Operator Diagnostic and Financial Health Assessment are both built around this exact prioritization work. On a discovery call, ask any consultant or auditor three things: what data they need on day one, how they’ve handled agency resistance to audit rights before, and what a realistic recovery range looks like before they start.
What founders get wrong about agency spend audits
Most brands are surprised by where the money actually was: unreconciled rebates buried in agency credit notes, programmatic fees nobody itemized, and media mix models built on attribution assumptions nobody stress-tested. Rebate recovery is usually the fastest fix, often landing cash within 30 to 90 days once the contract language forces the issue.
Get Hands-On Help Running Your Agency Spend Audit
This approach offers an alternative to hiring a traditional agency to police itself. The diagnostic work uses experience and aims to bypass the learning curve typical in consulting engagements.
The DTC Operator Diagnostic walks through your agency contracts, invoices, and platform data to flag recoverable cash and measurement gaps within days, not months. If you need a faster gut check first, book a Founder Hour for $500 to walk through your specific agency setup before committing to a full engagement. For brands where cash flow is the immediate constraint, the Financial Health Assessment digs deeper into how agency spend connects to your broader margin picture. Start with the diagnostic if you want a clear-eyed answer to what your agency relationships are actually costing you.
Where the Standards Behind This Guide Come From
- ANA media transparency guidance covers audit rights, NDA exhibits, and contract recommendations.
- FTC Endorsement Guides set disclosure requirements for influencer and creator payments.
- MRC Outcomes and Data Quality Standards define reliable measurement and ROI reporting.
- IAB incremental measurement guidelines explain when to use experiments versus modeling.
- ANA & TAG programmatic transparency benchmarking quantifies programmatic supply-chain leakage.
Sources
- FTC: Disclosures 101 for social media influencers (Endorsement Guides brochure)
- Think with Google: The experiments playbook: media effectiveness
- ANA & TAG TrustNet: programmatic transparency benchmarking (press release)
- ANA: Media transparency: prescriptions and audit recommendations
FAQ
How Long Does an Agency Spend Audit Take?
A quick triage audit focused on obvious billing mismatches and rebate recovery takes two to four weeks. A full reconciliation covering the programmatic supply chain typically runs six to twelve weeks, depending on how many agencies and platforms are involved.
Can You Actually Recover Unreturned Rebates?
Yes, if your contract includes explicit rebate-return language and you have audit rights to inspect agency records. Recovery depends heavily on contract terms, which is why reviewing rebate clauses before you sign new agreements matters as much as the audit itself.
Do You Need an Outside Auditor, or Can You Do This Internally?
Internal teams can run a basic reconciliation if they have full access to invoices and platform logs. A third-party auditor becomes worthwhile when you need agency-side ledger access, board-level credibility, or when your internal team lacks bandwidth. Commerce Catalyst’s DTC Operator Diagnostic is built for founders who want that outside view without a lengthy consulting engagement.
What if the Agency Resists Sharing Data?
Resistance to sharing transaction-level data or agency-side ledgers is itself a signal worth investigating. An NDA exhibit attached to your contract, combined with clearly stated audit rights, removes most of the confidentiality objections agencies raise.
What Does an Agency Spend Audit Typically Cost?
Cost varies with data quality and the number of agencies and channels involved. Commerce Catalyst’s Founder Hour costs $500 per hour and offers a low-cost starting point for founders who want an initial assessment before committing to a full audit engagement.