GHOST TAX
GHOST TAX
INTEGRATIONS & API
10 intelligence plugins and 11 data connectors. No rip-and-replace. Ghost Tax reads from your finance, identity, and productivity systems to detect hidden exposure.
READ-ONLY
Zero write access to any connected system. Every OAuth scope is read-only. No data is modified, created, or deleted.
LEAST-PRIVILEGE
Each connector requests only the minimum scopes required for its specific detection use case. Scopes listed on every card.
NO PERSISTENCE
Connector data is used for analysis only. Raw system data is not stored. Detection runs in-memory and outputs exposure ranges.
PLUGIN SDK
Each plugin runs as a discrete analysis module inside the detection pipeline. Composable, extensible, version-controlled.
Quantifies lock-in risk, switching cost, and data portability per vendor. Flags single-vendor concentration.
DETECTS
Per-vendor: lock-in score, switching cost estimate, data portability grade
Detects auto-renewal traps, price escalation clauses, and termination penalties buried in SaaS agreements.
DETECTS
Auto-renewal detection, price escalation clauses, termination penalty quantification
Identifies zombie spend, cost creep, and per-seat anomalies across all active subscriptions.
DETECTS
Zombie subscriptions, per-seat cost creep, YoY variance flagging
Targets the 60-90 day renewal window with negotiation tactics and optimal timing recommendations.
DETECTS
60-90 day renewal window targeting, negotiation timing, discount range benchmarks
Scans unused licenses across 12 SaaS categories. Calculates recoverable spend per seat.
DETECTS
Unused licenses across 12 SaaS categories, recoverable EUR/seat calculation
Compares your spend against industry and company-size benchmarks. Percentile scoring per category.
DETECTS
Industry/size percentile scoring per category, peer spend comparison
Maps exposure against GDPR, EU AI Act, SOC 2, and DORA frameworks. Costs non-compliance in EUR.
DETECTS
GDPR, EU AI Act, SOC 2, DORA — non-compliance costed in EUR
Detects tool overlap across departments and generates a consolidation roadmap with projected savings.
DETECTS
Tool overlap detection across departments, consolidation roadmap with projected savings
Per-vendor playbooks for 10+ major vendors. Tactics, timing, typical discount ranges, and leverage points.
DETECTS
10+ vendor playbooks: Salesforce, Microsoft, AWS, Slack, Jira, Zoom, HubSpot, Datadog, GitHub, Okta
Produces board slides, CFO memos, CIO briefs, and procurement summaries from detection data.
DETECTS
Board slide, CFO memo, CIO brief, procurement brief — generated from detection data
DATA CONNECTORS
Read-only integrations that pull spend, license, and usage data. Zero write access. Each connector runs with least-privilege scopes.
Stripe Billing
RoadmapSubscription and invoice data
ACCESS SCOPE
read:subscriptions, read:invoices
DETECTS
Subscription drift, invoice anomalies, MRR vs contracted ARR gaps
QuickBooks
RoadmapAccounting expenses, vendor payments, duplicate detection
ACCESS SCOPE
read:accounts, read:purchases, read:vendors
DETECTS
Vendor payment duplication, shadow spend in expense lines, category overspend
Google Workspace
RoadmapLicense usage, active users, storage consumption
ACCESS SCOPE
admin.directory.readonly, reports.readonly
DETECTS
Inactive user licenses, Drive storage waste, Workspace seat utilization
Microsoft 365
RoadmapLicense SKUs, E5/E3 optimization, usage analytics
ACCESS SCOPE
Reports.Read.All, Directory.Read.All
DETECTS
E5/E3 license optimization, inactive users, M365 seat-to-usage ratio
AWS Cost
RoadmapCost Explorer, reserved instances, savings plans
ACCESS SCOPE
ce:GetCostAndUsage, ce:GetReservationCoverage
DETECTS
Reserved instance gaps, savings plan efficiency, idle compute exposure
Azure Cost
RoadmapCost management, Advisor recommendations
ACCESS SCOPE
Cost Management Reader
DETECTS
Advisor recommendations, untagged resources, underutilized reservations
Slack Analytics
RoadmapWorkspace usage, inactive seats
ACCESS SCOPE
admin.teams:read, analytics:read
DETECTS
Inactive workspaces, seat-to-DAU ratio, paid tier justification
Salesforce CRM
RoadmapCRM license waste, user activity analysis
ACCESS SCOPE
reports:read, users:read
DETECTS
License waste vs active CRM users, inactive seats, user activity scoring
Okta Identity
RoadmapSSO app assignments, shadow IT detection
ACCESS SCOPE
okta.apps.read, okta.users.read
DETECTS
Shadow IT in SSO app catalog, unmanaged app assignments, inactive provisioned users
Jira Projects
RoadmapAtlassian license usage, project activity
ACCESS SCOPE
read:jira-user, read:jira-work
DETECTS
Atlassian license utilization, inactive project contributors, seat-to-commit ratio
SAP Concur
RoadmapShadow IT in expense reports
ACCESS SCOPE
receipts.read, expenses.read
DETECTS
Shadow IT in expense reports, unapproved SaaS on corporate cards, duplicate tool reimbursements
API ACCESS
Full REST API for detection triggers, report retrieval, webhook subscriptions, and custom connector development. Designed for teams that need Ghost Tax embedded in their own workflows.
Our engineering team builds custom connectors for proprietary systems, ERPs, and internal tooling. Contact us to scope.
CONTACT US