← KYSLAN.COM
LEAK REPORT · SAMPLE

Meridian IT Group
March 2026

Every active agreement read against 90 days of tickets, time entries, and invoice lines. Read-only. This is a real report format filled with sample data from a composite 40-client MSP, so you can see exactly what lands in your inbox.

TOTAL UNBILLED, MARCH
$7,785
RECURRING, PER MONTH
$1,080
FINDINGS
12
CLIENTS AFFECTED
4 of 40

What we read

18 active agreements (PDF and PSA contract records), 1,412 tickets, 2,867 time entries, and 40 invoices covering 1 January to 31 March 2026. No writes, no agents installed, access revoked at the end of the scan.

Summary by client

Baxter Logistics
OUT-OF-SCOPE WORK · 3 FINDINGS
$2,140
Hillcrest Dental
UNBILLED TIME · 5 FINDINGS
$4,565
Nova Partners
AGREEMENT DRIFT · 2 FINDINGS
$1,080/mo
Orchard Group
MARGIN LEAK · 2 FINDINGS
−$1,900/mo

The findings

Four of the twelve, in full. Each one carries the evidence it came from and a draft you can send as-is.

OUT-OF-SCOPE WORK

Three on-site visits under a remote-only agreement

Baxter's managed services agreement covers remote support and after-hours phone. Three site visits were logged in March, all closed, none invoiced.

Agreement "Baxter MSA 2025-11", clause 3.2: "Support is delivered remotely. On-site attendance is billed at the prevailing hourly rate."
Tickets #4471 (2 Mar, 3.5 h on-site), #4522 (14 Mar, 4.0 h on-site), #4610 (27 Mar, 3.0 h on-site).
Invoice 2264 contains no on-site line.

CHANGE ORDER, DRAFT Client: Baxter Logistics Period: March 2026 On-site attendance, 10.5 h @ $185/h .......... $1,942.50 Travel, 3 visits @ $65 ....................... $ 197.50 Total ........................................ $2,140.00 Reference: MSA 2025-11 clause 3.2. Tickets #4471, #4522, #4610.
UNBILLED TIME

41.5 hours closed in March that never reached a billing run

Time entries marked billable, attached to closed tickets, absent from every March invoice. The common thread: tickets closed after the 25th, when the billing run had already been prepared.

2,867 time entries checked; 63 flagged billable-and-unbilled; 41.5 h belong to Hillcrest Dental.
Largest single gap: ticket #4588, server migration, 11.0 h, closed 29 Mar.
Invoice 2271 totals 12.0 billable hours against 53.5 delivered.

INVOICE ADDENDUM, DRAFT Client: Hillcrest Dental Period: March 2026 Project and support hours delivered, not previously billed 41.5 h @ $110/h ............................. $4,565.00 Detail: 5 tickets, entries listed in appendix A.
AGREEMENT DRIFT

Twelve seats provisioned, invoice unchanged for fourteen months

Nova Partners is on a per-seat agreement last amended in January 2025 at 34 seats. The tenant now carries 46 licensed users. The monthly invoice has never moved.

Agreement "Nova per-seat 2025-01": 34 seats @ $90.
Onboarding tickets adding users: #4103, #4188, #4290, #4356 (12 users total, Jun 2025 to Feb 2026).
Invoices Feb 2025 to Mar 2026: $3,060 every month, unchanged.

CHANGE ORDER, DRAFT Client: Nova Partners Effective: next billing cycle Seat count corrected 34 -> 46 12 additional seats @ $90 ............... $1,080.00 / month Backdating not proposed. Forward-looking only.
MARGIN LEAK

Ticket volume at 2.3× what the contract assumed

Not unbilled work: underpriced work. Orchard Group's flat fee was set against roughly 40 tickets a month. They have averaged 92 since January, and the account has been margin-negative for three months.

Q1 tickets: 88 (Jan), 95 (Feb), 93 (Mar). Labour at loaded cost: $4,180/mo average.
Contract value: $2,280/mo. Net: −$1,900/mo.
Top driver: 38% of tickets are password resets from one department.

RENEGOTIATION BRIEF, DRAFT Client: Orchard Group Current: $2,280/mo flat, assumes ~40 tickets Actual: 92 tickets/mo average, Q1 2026 Options a) Reprice to $4,450/mo at current volume b) Hold price, add self-service password reset (removes ~35 tickets/mo) c) Tiered: $2,280 to 50 tickets, $38/ticket thereafter

What we did not find

36 of 40 clients came back clean for the period. Contract terms matched delivery, time entries reconciled to invoices, and seat counts were current. That is worth knowing too, and it is what most of the report looks like when billing hygiene is working.

How to read the numbers

One-off findings ($7,785 here) are money you can invoice this month. Recurring findings ($1,080/mo here) are money you were going to keep losing every month until someone noticed. The margin leak (−$1,900/mo) is the one most MSPs never quantify, because nothing in the billing stack is looking for it.

YOUR TURN

Get this report for your own book.

Free, read-only, about fifteen minutes to set up. On HaloPSA we connect directly. On anything else we run the same audit from a CSV export. You keep the report either way.

Request your free audit
Ten audit slots this month · hello@kyslan.com

Sample data. "Meridian IT Group" and every client named here are fictional composites built from the patterns these audits keep finding. No real customer data appears in this document. © 2026 Northbeams Inc.