The CFO & the AI budget
The AI Waste Audit: A CFO's Checklist to Find AI Spend Waste
Run this 6-step AI waste audit to find where AI spend burns: unused seats, high cost-per-outcome teams, rework, shadow AI, duplicate tools, model mismatch.
TL;DR
- You can find most of your wasted AI spend this quarter with a six-part audit: unused seats, high cost-per-outcome teams, high-rework use cases, shadow AI, duplicate tools, and model-to-task mismatch. This checklist gives you how to spot each, what evidence to pull, and the fix. Run it before you approve another AI renewal.
- The pressure is real and near-universal.
98%of FinOps practitioners now manage AI spend (FinOps Foundation, 2026), yet78%of finance executives still can't fully tie that spend to outcomes and66%of boards now gate further AI funding on proof of return (CloudZero, Jun 2026). An audit is how you produce that proof — and cut the waste while you're at it. - The single most-missed line of waste is rework: AI output that looks done, ships, and gets redone.
41%of workers received such "workslop" in the prior month, at roughly~$186per employee per month, self-reported (BetterUp/Stanford, HBR 2025). It never appears on a cost dashboard. - Tie the whole audit to one view: Cost × Rework. Waste isn't just spend that's high — it's spend that's high and produces work that gets redone. Cost alone finds the easy waste; cost-with-rework finds the expensive kind.
- Be honest about the limits. Some items — discovering shadow AI, for instance — need expense, SSO, and network signals an ROI layer doesn't fully own yet. This checklist tells you which steps a tool can run and which are an org exercise.
What is an AI waste audit?
An AI waste audit is a structured review that finds where AI spend produces no return — unused licenses, teams whose AI cost per outcome is high, use cases where AI output is routinely redone, unsanctioned tools, overlapping subscriptions, and premium models used on low-value tasks — and attaches an evidence trail and a fix to each. It is the AI-era equivalent of a SaaS-license or cloud-cost audit, with one addition: it counts rework, not just spend. The reason the addition matters is that AI waste hides in two places, not one. Some is classic waste — a seat nobody logs into, two tools that do the same job. That kind sits on invoices and shows up in a normal cost review. But the larger, quieter waste is AI rework — spend that buys output that then gets redone by a human. That never appears as a line item. A complete audit has to look at both.
Why run it now: the board is already asking
The mandate to prove AI return has arrived at the CFO's desk. 66% of boards now condition further AI funding on evidence of return, and 43% of finance leaders say they've already been asked for a number they can't yet produce (CloudZero, Jun 2026). Meanwhile AI-cost management has become standard practice — 98% of FinOps practitioners now steward AI spend, up from 63% in 2025 and 31% in 2024 (FinOps Foundation, 2026) — and still 78% of finance executives can't fully connect the spend to outcomes.
That combination is the reason to audit. Cost visibility is nearly universal; return proof is missing; and the board wants the second, not the first. An audit produces both a defensible number and a list of cuts you can make before the next renewal. For the broader frame this fits into, see how a CFO builds a defensible AI budget.
The organizing view: Cost × Rework
Before the steps, one lens ties them together. The Cost × Rework matrix is a 2×2 that plots each team on AI cost (high or low) against AI rework (high or low), yielding a per-team verdict — scale, keep, fix, or cut. It exists because "high spend" is not the same as "waste." A team can spend a lot and produce clean, shipped work — that's not waste, that's leverage. Waste is the combination: spend that is high and produces output that gets redone.
| Low rework | High rework | |
|---|---|---|
| Low AI cost | Keep — efficient, quietly working | Fix — cheap, but the output isn't landing |
| High AI cost | Scale — expensive and earning it | Cut / fix first — the expensive waste |
| The audit below is really a way of populating this matrix. Each step finds a different flavor of the bottom-right and top-right cells: spend that isn't returning. The metric underneath every cell is output-per-dollar-net-of-rework — the business output a team produces per dollar of AI spend, after subtracting the cost of redoing flawed AI work. |
The AI Waste Audit: 6 steps
Each step has the same shape: how to spot it · the evidence to pull · the fix. Run them in order; the later steps depend on the cost and output picture the earlier ones build.
Step 1 — Unused and underused seats and licenses
Spot it: the classic waste, and the fastest win. Look for paid AI seats with zero or near-zero activity, licenses provisioned in a rollout that never landed, and tiers bought for usage the team never reached.
Evidence: per-seat last-active dates and usage counts from each vendor's admin console; seats assigned vs. seats active; license tier vs. actual consumption. A seat with no activity in 30–60 days is a candidate; a whole cohort of them is a failed rollout.
Fix: reclaim or downgrade dormant seats at the next billing cycle, right-size tiers to real usage, and move from per-seat to usage-based pricing where a vendor offers it and consumption is spiky. This is pure denominator reduction — cost out, no output lost.
Step 2 — Teams with high AI cost per outcome
Spot it: the first step that needs output, not just cost. A team can be fully active — no dormant seats — and still be waste if what it spends buys little that ships. You are looking for a high cost per outcome: total AI cost divided by the accepted, delivered units of work that team actually produced. Evidence: granular AI cost by team (ideally by skill and model, not one lump), set against that team's delivered output — merged code, resolved tickets, closed deals, shipped briefs. The tell is a team whose AI cost rose materially while its delivered output didn't move. Compare each team only to its own history, never across functions — output isn't comparable between engineering and support. Fix: this is a top-of-matrix diagnosis, not an automatic cut. High cost with high output is leverage — leave it. High cost with flat output moves you to Step 3 (is it rework?) and Step 6 (is it model mismatch?). The audit's job here is to flag the cell, not swing the axe blindly. To turn these verdicts into allocation, see how to allocate the AI budget team by team.
Step 3 — High-rework use cases (looks productive, gets redone)
Spot it: the most expensive and most-missed waste. These use cases look like wins — high adoption, lots of AI output, people report time saved — but the output routinely comes back for correction. The cost meter shows a cheap, fast AI call; it never shows the expensive human hour spent fixing what that call produced.
Evidence: rework signals sitting next to the AI spend. In engineering these are concrete — code churn, reverts, reopened tickets, extra review rounds on AI-assisted changes. Across the wider org, the industry proxy is workslop: 41% of workers received plausible-but-substandard AI output in the prior month, taking roughly ~1h 56m to fix each instance, about ~$186 per employee per month, self-reported (BetterUp/Stanford, HBR 2025). Pull the rework rate per use case and set it beside the spend.
Fix: don't cut the tool reflexively — fix the workflow that generates the rework (better prompts, review gates, model routing, tighter scoping), then re-measure. If rework stays high after the fix, then the use case is a cut. This is the heart of the matrix's right-hand column; see why cost visibility isn't the same as return for why a cost tool can't see this on its own.
Step 4 — Shadow and unsanctioned AI
Spot it: AI tools employees use and expense outside any sanctioned list — personal ChatGPT subscriptions on expense reports, browser-extension assistants, unmanaged API keys. Shadow AI is waste in three ways at once: unmonitored spend, duplicated capability you already pay for centrally, and unmeasurable output. Evidence: expense-report line items matching AI vendors; single sign-on and identity logs showing sign-ups to AI apps; network or egress logs to known AI endpoints; procurement records cross-checked against what's actually in use. The gap between "AI tools we sanctioned" and "AI tools we're paying for somewhere" is the shadow estate. Fix: consolidate discovered tools onto sanctioned, governed licenses (often cheaper per seat and safer), kill true duplicates, and set a lightweight intake path so the next tool doesn't go underground. An honest limit: this discovery step leans on expense, SSO, and network signals that an AI-ROI layer does not fully own today — it's largely a finance-plus-IT exercise. AIReturn measures return on the AI in its view; comprehensive shadow-AI discovery is a place where it doesn't yet do the whole job, and this checklist won't pretend otherwise.
Step 5 — Duplicate and overlapping tools
Spot it: two or more AI tools bought to do substantially the same job — often across different teams that each procured independently. Overlap is common after a year of decentralized AI buying, and it's easy waste once you can see the whole estate in one place. Evidence: an inventory of every AI tool, its owning team, its core capability, and its annual cost, laid side by side. Look for the same capability (code assistant, meeting summarizer, content generator, support copilot) paid for two or three times over. Step 4's discovery output feeds this inventory. Fix: standardize on the tool with the better output-net-of-rework — not the cheaper sticker or the louder internal champion — consolidate seats onto it, and cut the rest at renewal. Consolidation also improves your negotiating position: one larger contract usually beats three small ones.
Step 6 — Models mismatched to the task
Spot it: paying premium-model prices for low-value work. A frontier model handling a task a smaller, cheaper model would complete just as well is waste on every call — invisible per call, large in aggregate. The mirror case also counts: a too-weak model on high-stakes work that then generates rework (which loops you back to Step 3). Evidence: AI cost broken down by model and by skill, so you can see which expensive model is doing which job — and whether that job's output would survive on a cheaper one. This is why granularity matters: a single blended token bill can't reveal model-to-task mismatch; per-skill, per-model, per-product attribution can. See how AIReturn attributes AI cost by skill, model, and product. Fix: route each task to the cheapest model that ships acceptable, low-rework output — and re-test as models and prices change. Downgrading a high-volume, low-stakes task off a premium model is often the single largest cost cut in the audit, with no loss of delivered work.
The audit at a glance
| # | Waste type | How to spot it | Evidence | The fix |
|---|---|---|---|---|
| 1 | Unused / underused seats | Zero-activity paid seats, failed rollouts | Per-seat last-active + usage | Reclaim, downgrade, right-size |
| 2 | High cost per outcome | Active team, little that ships | Cost per team vs. delivered output (own baseline) | Diagnose (→ 3 or 6), don't blind-cut |
| 3 | High-rework use cases | Looks productive, gets redone | Churn/reverts/reopens; workslop rate | Fix the workflow, re-measure, then cut |
| 4 | Shadow / unsanctioned AI | Expensed personal tools, unmanaged keys | Expense, SSO, network logs (org exercise) | Consolidate to sanctioned licenses |
| 5 | Duplicate / overlapping tools | Same job paid for twice | Tool inventory by capability + cost | Standardize on best output-net-of-rework |
| 6 | Model-to-task mismatch | Premium model on low-value work | Cost by model × skill | Route to cheapest acceptable model |
The mistake that undoes an AI audit
The failure mode is auditing cost alone. A cost-only pass finds Steps 1, 4, 5 and part of 6 — real savings, worth taking. But it is structurally blind to Steps 2 and 3, which is where the expensive waste lives: spend that looks fine on the invoice and is quietly funding work that gets redone.
This is why the audit is framed as Cost × Rework, not cost alone. Drive a team's AI cost per call down 30% and a pure-FinOps view calls it a win — even as rework rises and real output-per-dollar falls. The cost chart looks like a win; the work is a loss. You only know which is true when the rework sits beside the spend. That pairing is precisely why cost visibility isn't the same as return.
How AIReturn supports the audit (and where it doesn't)
AIReturn runs this audit as a continuous view rather than a once-a-quarter scramble. It captures AI cost granularly — by skill, by model, and by product, even several products at once, via OTEL — and sets it against each team's output net of rework, plotting every team on the Cost × Rework matrix. Granular attribution is table stakes — FinOps-for-AI tools already do it — so AIReturn holds the cost side to a FinOps bar instead of claiming it as a moat: the number reconciles to the provider invoice and is confidence-labeled (exact or estimated), with per-team cost modeled from traced usage then reconciled, since providers expose no per-user dollars. A "Cut" verdict therefore rests on a figure finance can audit, not an estimate it can wave away. This is deliberately the skeptic's instrument: AIReturn is as willing to flag cut this spend as to justify it — a return layer a CFO can trust precisely because it surfaces where AI isn't paying off, not one that only ever confirms the purchase. That directly powers Steps 2, 3, 5, and 6: cost per outcome, high-rework use cases, tool comparison on output-net-of-rework, and model-to-task mismatch. The output is a per-team verdict — scale, keep, fix, or cut. You can see the shape of that verdict in a sample per-team AI ROI report. Two honest boundaries, because this brand runs on precision. First, shadow-AI discovery (Step 4) depends on expense, SSO, and network signals that AIReturn does not fully own — that step stays a finance-and-IT exercise; AIReturn measures return on the AI it can see, not the AI hiding on someone's personal card. Second, rework attribution is most concrete in engineering (churn, reverts, reopens, review rounds) and still maturing as a per-function proxy elsewhere; separating AI-caused rework from baseline rework is an open, actively-developed part of the model. The scope of spend AIReturn holds accountable has a name — AI-spend-under-management (AISUM), the token and usage costs it measures today, extensible to AI-tool subscriptions and agent compute. Human/salary cost is deliberately out of scope in v1.
FAQ
Q: How do I find wasted AI spend?
Run a six-part audit: unused seats, high cost-per-outcome teams, high-rework use cases, shadow AI, duplicate tools, and premium models on low-value work. For each, pull the evidence (usage logs, cost-per-outcome, rework rate, expense records) and apply the fix. The largest hidden waste is rework — AI output that ships then gets redone — which costs roughly ~$186 per employee per month, self-reported (BetterUp/Stanford, 2025), and never shows on a cost dashboard.
Q: How can a CFO reduce AI costs without killing adoption?
Cut the waste, not the usage. Reclaim dormant seats, consolidate duplicate tools, and route low-value tasks to cheaper models — none of which touches teams that produce clean, shipped work. Only cut a tool after fixing the workflow that generated its rework and re-measuring. The test is output-per-dollar-net-of-rework per team, so you cut spend that isn't returning and protect spend that is.
Q: What evidence do I need for an AI waste audit?
Per-seat usage and last-active dates; AI cost attributed by team, skill, and model; delivered output per team against that team's own baseline; rework signals (code churn, reverts, reopened tickets, or workslop rate); and an inventory of every AI tool with its cost and owner. Expense, SSO, and network logs surface shadow AI. The pairing that matters is cost sitting next to rework.
Q: Why doesn't our FinOps tool catch AI waste?
FinOps tools measure cost precisely — that's the denominator, and they own it. They can't see the numerator: whether the work the spend paid for shipped or got redone. Rework isn't a token or compute line; it's a human hour spent fixing AI output, invisible to a cost meter. That's why 78% of finance execs still can't tie AI spend to outcomes (CloudZero, 2026) despite near-universal cost tracking.
Q: What is a high-rework AI use case?
One where AI output looks finished, gets used, and then routinely comes back for correction — high adoption and apparent time savings masking a redo cost. In engineering it shows as churn, reverts, and reopened tickets on AI-assisted work; org-wide, the proxy is "workslop," received by 41% of workers monthly (BetterUp/Stanford, 2025). The fix is to repair the workflow first and re-measure before cutting the tool.
Sources
- CloudZero — Finding the ROI of AI: The Finance Perspective:
78%of finance execs can't fully tie AI spend to outcomes;66%of boards gate funding on proof (Jun 2026). https://www.prnewswire.com/news-releases/cloudzero-survey-says-78-of-finance-execs-cant-fully-tie-ai-spending-to-business-outcomes-302808711.html - FinOps Foundation — State of FinOps 2026:
98%of practitioners now manage AI spend (up from63%in 2025,31%in 2024). https://www.linuxfoundation.org/press/state-of-finops-survey-ai-value-and-skills-top-priorities-as-finops-matures-across-technology-value-98-manage-ai-90-saas-64-licensing-48-data-center-1 - BetterUp Labs + Stanford Social Media Lab (HBR) —
41%received "workslop"; ~1h 56mto fix each; ~$186/employee/month, self-reported (Sep 2025). https://hbr.org/2025/09/ai-generated-workslop-is-destroying-productivity
Related
See the return on your own numbers.
Get a clear, per-team return-on-AI picture in weeks — output net of rework, reconciled to your invoice.