IT Asset Inventory and Software Licences: A Small Business Guide

An IT asset inventory is a simple list of what your business owns and uses: laptops, phones, servers, network equipment, software licences, cloud subscriptions, domains and the accounts that tie them together. It sounds like paperwork, yet almost every IT problem a small company has is easier to solve when this list exists. Security patches cannot be applied to a laptop nobody remembers. A renewal cannot be anticipated if nobody knows which card pays for it. A leaver’s access cannot be removed if no one knows which tools they used.

This guide explains how to build and maintain an IT asset inventory and a software licence register without expensive tools. It covers what to record, how to find what you did not know you had, how to handle different licence types, how to link the register to onboarding, offboarding and replacement plans, and how to keep it accurate. It supports the day-to-day work described on our IT maintenance page, where an up-to-date inventory is the starting point for nearly every task.

Why an Inventory Matters

You can protect, support and budget only for things you know about. A reliable inventory gives you four concrete benefits.

• Security. Unknown or forgotten devices and applications are rarely patched, monitored or protected. Inventory of assets and software is the first control in the widely used CIS Critical Security Controls, followed by the control for software assets, because everything else depends on it.
• Cost control. Unused subscriptions, duplicate tools and extra seats quietly drain budgets. A register makes them visible at renewal time.
• Compliance. Software licences carry terms about who may use them and how many may do so. Records help you show that you use software legitimately and handle personal data responsibly.
• Faster support and recovery. When something breaks, knowing the model, age, warranty and owner of a device saves time. In a disaster, an inventory is the shopping list for rebuilding.

What Counts as an Asset

Think in five groups. Many small businesses track only the first and are surprised by the rest.

What to Record for Each Item

Keep the fields few and useful. A register nobody can maintain is worse than a short one that is always right.

For hardware

• Asset name or tag, type, make and model, serial number
• Assigned person or location, and the date of assignment
• Purchase date, supplier, price and warranty end date
• Operating system and version, and whether disk encryption is enabled
• Status: in use, in stock, in repair, retired and the date of disposal

For software and subscriptions

• Product name, vendor and purpose
• Licence type: perpetual, subscription, per user, per device or concurrent
• Number of seats purchased and number in use
• Renewal date, billing cycle, cost and who pays
• Business owner and technical administrator
• Where the licence key or account login is stored (never the key itself in a shared spreadsheet)
• What data it holds and whether it is critical

For domains and certificates

• Domain, registrar, account owner, expiry date, auto-renew status and registrar lock
• Certificate issuer, domain, expiry date and who renews it

The renewal dates alone justify the effort. Expired domains and certificates take websites and email offline with little warning; see our guides to domain name management and SSL certificate renewal.

How to Build the First Version

1. Start with what you can see. Walk through the office and the remote workers’ list. Record every device with its serial number. Photos of labels on the back of devices are quick and accurate.
2. Use the network to find the rest. Your router, switch or access point management page shows connected devices. A network scan can reveal printers, cameras and forgotten equipment.
3. Use accounts to find software. Check the admin panels of your email and identity provider, which list devices and connected applications. Look at the app store purchase history for managed devices.
4. Follow the money. Review the last twelve months of bank and card statements and expense claims for recurring payments. Every subscription you find is an asset to list.
5. Ask the teams. Short questions work well: “Which tools do you log in to every week?” and “Which ones did you sign up for yourself?”
6. Review domains and certificates by checking registrar accounts and your hosting panel.

Expect surprises. Most first inventories reveal duplicate tools, abandoned accounts, devices without an owner and subscriptions paid by someone who left.

Choosing Where to Keep It

For fewer than about fifty devices, a well-structured spreadsheet with separate sheets for hardware, software, domains and certificates is enough. It is free, understood by everyone and easy to export. Protect it with proper access rights, and restrict who can edit.

As the business grows, dedicated tools become worthwhile. Mobile device management can enrol laptops and phones and report their state automatically. Remote monitoring and management tools discover and update devices. Identity providers list the applications each person uses. Whatever you choose, the rule is the same: one source of truth, one named owner and a regular review. The practical side of managing laptops and phones is covered in remote device management for teams.

Understanding Software Licence Types

A licence is a legal permission with conditions. The wording differs between vendors, so always read the terms of important products, but the common models are:

• Perpetual licence: you buy a specific version and may use it indefinitely, often with paid upgrades or support.
• Subscription: you pay regularly for access, and access ends when payment stops.
• Per user: each named person needs a seat, regardless of how many devices they use.
• Per device: each computer needs a licence, regardless of how many people use it.
• Concurrent: a limited number of people may use the software at the same time.
• Open source: usually free to use, but the licence still has conditions, particularly for redistribution and modification.

Common compliance problems are small: a team grows beyond the number of seats, a licence bought for personal use is installed on a company machine, or software from a former employee’s account is still in use. Vendors can and do audit, so reconcile the number of seats you pay for with the number actually used at least once a year.

Connecting the Inventory to People Processes

An inventory decays quickly unless it is part of everyday routines.

Onboarding

When a new person joins, assign a device, record it, create accounts and assign licences from a standard list for their role. The checklist in our article on employee onboarding and offboarding pairs naturally with the register.

Offboarding

When someone leaves, the register tells you exactly what to collect, disable and transfer: the laptop, phone, accounts, licences and shared logins. This is where an inventory pays back fastest, because forgotten access is both a security risk and an ongoing cost.

Purchasing

Make the inventory the gate for buying. Anything new, from a laptop to a free trial that needs a company card, is registered with an owner, a purpose and a renewal date before it is used.

Replacement planning

Purchase dates and warranty ends feed directly into a refresh plan. Devices past their useful life become slower, less secure and costlier to support. See computer replacement cycle and hardware lifecycle planning for how to turn those dates into a budget.

Security Benefits in Practice

A current inventory lets you answer security questions quickly. Which devices are not encrypted? Which run an operating system that no longer receives updates? Which accounts have no multi-factor authentication? Which applications can access company email? When a vulnerability is announced in a particular product, you can search the register to see whether you use it, instead of guessing.

It also improves incident response. If a laptop is lost, you can confirm what was on it, whether it was encrypted and whose accounts to reset. The software side of this control is described in the CIS guidance on inventory and control of software assets.

Retiring Assets Safely

The end of an asset’s life is where inventories prevent real harm. Before a laptop, phone, server or drive leaves the business, whether it is sold, donated, recycled or returned to a leasing company, its data must be removed in a way that cannot be reversed. For devices with encrypted storage, resetting the device and destroying the encryption keys is a strong first step; for drives that held sensitive records, physical destruction or a certified wiping service may be appropriate. Record the date, the method and the person who confirmed it.

The same discipline applies to accounts. When a tool is cancelled, export what you need, remove integrations, delete or close the account according to its terms and mark the register entry as retired. Cancelled subscriptions that still hold customer data are a quiet liability, and a closed entry with a date is the proof that the clean-up happened.

Keeping the Register Accurate

• Name an owner. One person is accountable for the register, even if several people update it.
• Review on a schedule. A quarterly review of renewals and a yearly review of everything is enough for most small businesses.
• Reconcile with reality. Compare the list to invoices, admin consoles and the network, and fix differences.
• Record retirement properly. When a device is sold, recycled or destroyed, note the date and confirm that data was wiped.
• Keep it simple. Add fields only when someone will use them.

Common Mistakes

• Recording only company-owned hardware and ignoring SaaS accounts and personal devices used for work.
• Storing licence keys and passwords in plain text in the shared sheet.
• Building a perfect register once and never updating it.
• Assigning no owner, so nobody notices when a renewal approaches.
• Letting staff buy software on personal cards without registering it.
• Forgetting domains, certificates and developer accounts until they expire.

If you want an independent view of what you own and what needs attention, you can contact our team and ask for an inventory and licence review.

Frequently Asked Questions

What is the minimum I should record in an IT asset inventory?

For each item, record what it is, who is responsible for it, where it is, when it was acquired, when it expires or renews and what it costs. That small set already supports security, budgeting and support.

Do I need special software for an asset inventory?

Not at the beginning. A spreadsheet with separate sheets for hardware, software, domains and certificates works for small teams. Move to dedicated tools when manual updates become unreliable.

How often should the inventory be updated?

Update it whenever something is bought, assigned, replaced or retired. Review renewals quarterly and reconcile the whole register with invoices and admin consoles at least once a year.

Should personal devices be included?

If staff use personal phones or laptops to access company email or data, they should be registered in some way, at least as an approved device with basic security requirements such as a screen lock, encryption and updates.

How do I find SaaS tools that staff signed up for themselves?

Review card statements and expense claims, check the list of connected applications in your email or identity provider, and ask each team which tools they use. Then register each one with an owner.

Is a software licence register a legal requirement?

Requirements vary by country and contract, but you are bound by the terms of every licence you accept. A register is the practical way to show that you use software within those terms.

The Bottom Line

An IT asset inventory turns invisible risk into a list you can manage. Record hardware, software, cloud subscriptions, domains and certificates with an owner and a renewal date for each, find the unknowns through your network, accounts and payments, and tie the register to onboarding, offboarding, purchasing and replacement. Keep it simple, review it on a schedule and treat it as the foundation for security, savings and fast recovery.