Audit & Compliance

States tax SaaS under three incompatible frameworks, requiring invoice-level compliance.

Compliance rules vary by country, clock start, and storage format.

Pricing rule changes need formal review gates to prevent retroactive re-rating errors.

Metered charges demand complete audit trails that subscription billing never required.

Billing systems must comply with the same data residency laws as core applications.

Controls must account for changing consumption patterns, not just the amount billed initially.

Billing vendors face harder security reviews because they handle financial data, PII.

Billing systems need Processing Integrity and Confidentiality controls to pass SOC 2 Type II audits.