Vendor lock-in in audit software comes from three specific, checkable things that need to be confirmed before signing, because they're nearly impossible to negotiate after: whether working papers and underlying data are stored in a proprietary format only that vendor's software can open, whether a documented, complete export path actually exists rather than being promised verbally, and how short the data retention window is after a subscription ends or is cancelled.
Why lock-in is invisible until the firm tries to leave
Lock-in risk doesn't show up anywhere in a demo, because every feature of the product works fine while the firm is a paying customer. It shows up only at the one moment the firm wants to stop being a customer — switching vendors, a client relationship ending, a regulatory retention requirement outlasting the subscription — and by then, the firm has no negotiating leverage left to fix a gap it didn't check for earlier.
1. Proprietary file formats
A working paper stored in a format that only the vendor's own application can open — rather than a standard, widely-readable format like a structured spreadsheet or PDF — ties the firm's historical files to that vendor indefinitely, since even successfully exporting the data doesn't help if nothing else can open what comes out.
2. A documented, complete export path
- Ask the vendor to show the actual export feature during a trial, not just describe it — a feature that exists on paper but is clunky or incomplete in practice is a real limitation.
- Confirm export covers everything: working papers, underlying data, prior-year comparatives, and any audit trail or change history, not just the final summary reports.
- Get the specific export format and its completeness written into the contract, since a verbal assurance evaporates the moment the relationship sours.
3. Data retention after cancellation
A short retention window after cancellation — thirty days is common — can turn an orderly, planned vendor switch into a scramble to retrieve years of historical working papers before access is cut off entirely. This is one of the easiest terms to check before signing and one of the hardest to negotiate after.
| Checkpoint | Check during trial / before signing | Risk if skipped |
|---|---|---|
| File format of stored working papers | Ask directly; request a sample export | Files unusable outside the vendor's own software |
| Completeness of the export feature | Actually use it during the trial, not just hear about it | Partial export discovered only when needed most |
| Retention window after cancellation | Get it in writing before signing | A hard deadline to retrieve years of files |
| Prior-year file accessibility without an active subscription | Ask explicitly — this is often assumed, rarely confirmed | Retained regulatory files become unreachable |
How we think about this
Lekhya states its export format, retention terms, and portability commitments plainly, on the view that a vendor confident in its own product doesn't need lock-in to keep a firm as a customer — the firm staying because leaving is easy, not because leaving is hard, is a better signal about the product.
This is practical guidance written for audit teams, not an authoritative statement of any standard or statute. Standards, forms and timelines change. Check the current text issued by the ICAI and the relevant authority before relying on anything here in an audit file.
Related resources
- Technology, data & AI in auditChoosing an audit automation vendor: a checklistThe questions that separate a vendor worth trusting with client data from one that merely demos well: security, what's computed versus generated, exit terms, pricing, and India-specific fit.
- Audit workflow & automationEvaluating audit software for an Indian CA firmWhat to test before buying: Indian data and calendar, evidence traceability, review and sign-off, data handling, and the questions vendors find hardest.
- Technology, data & AI in auditCloud audit software and data residency: what to askWhere client data physically sits, who inside a vendor can see it, and the difference between an architectural guarantee and a policy that could change tomorrow.
Free tools, no signup
Each one reads a file entirely in your browser — or, for two of them, just answers a few questions — and nothing is ever uploaded.
- Purchase register checkDuplicate payments, round-sum amounts, weekend-dated invoices, incomplete records.
- GSTR-2B reconcilerMatches your purchase register against GSTR-2B — missing invoices either side, amount mismatches.
- Bank reconciliation checkerMatches your cash book against a bank statement — what's outstanding on each side.
- Fixed asset register checkDuplicate asset codes, missing location or useful life, negative net book value.
- Payroll red-flag scannerBank accounts shared across employees, and records missing an ID, PAN or salary.
- CARO applicability checkerAnswer a few questions about the company and see which CARO 2020 clauses likely apply.
- MSME payment delay checkerMSME-flagged invoices paid — or still unpaid — beyond the 45-day Section 22 limit.
- Related-party transaction screenerTransactions above a threshold you set with no approval reference, grouped by counterparty.
- Depreciation useful life checkerCompares a useful life in use against the Schedule II, Part C indicative figure.
- Materiality calculatorOverall and performance materiality against PBT, revenue, assets or equity, with reasoning shown.
- Sample size calculatorStatistical sample size for a test of controls or a substantive test of detail.