Counting and Evidence

The overcount risk and its cost.

Maximizing a certification count is the goal, but counting deployments you cannot defend is a trap. An overcounted number you cannot prove is future audit exposure, not secure entitlement. The discipline is to push the count as high as the evidence supports, and no higher.

Undercounting loses entitlement. Overcounting creates exposure. The right certification number is the highest one you can fully defend, supported by evidence for every deployment. A bigger number that rests on instances you cannot prove is not value secured; it is an audit finding waiting to happen in the two years after you certify. Maximization and defensibility are not opposites. They are the same discipline done properly.

What is overcounting in a ULA certification?

Overcounting is declaring deployments you cannot defend. It happens when a count includes instances that were not genuinely deployed and running before the cutoff, environments that sit outside the customer definition or territory, cloud deployments that did not meet the contract counting rule, or any deployment for which there is no evidence. The number looks impressive on the certification letter, but it is built partly on claims rather than facts. When Oracle examines the position later, the undefended portion is where the finding lands. Overcounting is the mirror image of undercounting, and it is just as expensive, because both turn the once only certification into a worse outcome than a careful count would have produced.

The Meridian principle

A number you cannot defend is not entitlement. It is exposure with a confident face. Count high, evidence everything, and let the evidence set the ceiling.

Does a higher certified count cost more in support?

No, and this is the fact that should govern the whole approach. Support continues at the ULA level regardless of the certified count, so a higher defensible number does not raise your support bill. The fear that a bigger count costs more in support is a myth, and it pushes some teams to certify conservatively for no reason. The real constraint on the number is not cost; it is defensibility. A maximized count that is fully evidenced is free permanent value. A maximized count that is not evidenced is exposure dressed as value. The discipline is therefore not to keep the number small, but to keep it provable while pushing it as high as the evidence allows.

What overcounting actually costs

The cost of overcounting shows up after certification, when it is hardest to fix. Audit risk rises in the first two years after exit, and that is precisely when an undefended count is tested. If Oracle finds that part of the certified number was not supportable, the consequences can include pressure to acquire licenses to cover genuine deployment that the certification did not properly evidence, a weakened negotiating position, and a damaged record that colours every future interaction. Unlike undercounting, which simply leaves value behind, overcounting can create a live compliance problem out of an exit that should have closed cleanly. The certification was your one chance to convert the term into a clean perpetual position, and an overcount squanders that by leaving a thread for the vendor to pull.

How do you maximize a count without overcounting?

You count every deployment you are genuinely entitled to count, and you evidence each one against the contract. There is no tension between a high number and a defensible one when both rest on real, documented deployments. The method is straightforward in principle and demanding in practice: discover the full estate including non production and disaster recovery, confirm each deployment was live before the cutoff, map cloud instances to the contract counting rule, handle virtualization deliberately, and document all of it in an evidence file. Where a deployment cannot be evidenced, it does not go in the count, even if you believe it is real, because an unprovable inclusion weakens the whole declaration. The ceiling on your number is set by your evidence, and the work is to raise that ceiling honestly rather than to claim above it.

A short worked contrast

Consider two anonymized organisations certifying similar database ULAs. The first counted aggressively, including a block of instances it could not document, and certified a headline number. Within the audit window Oracle questioned the undocumented block, and the organisation spent months and real money resolving a gap of its own making. The second counted every defensible deployment, declined to include anything it could not evidence, and certified a number that was slightly lower on paper but fully provable. When examined, it answered in days and kept its entire position. The figures are indicative and each outcome turned on the specific facts, but the lesson is durable: the provable count wins.

ApproachHeadline numberWhat happens in the audit window
Overcount, partly unevidencedHigher on paperUndefended portion challenged, cost and risk
Maximized and fully evidencedHigh and provableAnswered from the evidence file, position held
Conservative undercountLower than entitledSafe, but value left behind permanently

Where to go next

Defensible maximization depends on counting and evidence done well. Read counting production, test, and DR instances for capturing the full estate, and Oracle LMS scripts, run them or not for gathering measurement you control. For the complete mechanics, the Oracle ULA certification guide ties counting, evidence, and defense together.

Questions

Overcounting, answered.

Overcounting is declaring deployments you cannot defend, by including instances that were not genuinely deployed within the term, sit outside scope, or lack supporting evidence. It is the opposite of undercounting but just as costly, because a count you cannot prove becomes audit exposure rather than secure entitlement.

No. Support continues at the ULA level regardless of the certified count, so a higher defensible number does not raise the support bill. The risk in a high number is not cost, it is whether you can defend it. A maximized count that is fully evidenced is free value. A maximized count that is not is exposure.

Count every deployment you are genuinely entitled to count, then evidence each one against the contract. Maximization and defensibility are not in tension when the count is built on real, documented deployments. The discipline is to push the number as high as the evidence supports, and no higher.

Strictly confidential

Maximize the count you can prove.

Book a confidential assessment and we will push your certification as high as the evidence supports, document every deployment, and keep the position defensible long after exit.

Book a ULA assessment