Gross margin is the share of revenue left after direct costs of delivering a product or service are paid. In software business models, it is often used to compare how efficiently different delivery approaches convert revenue into profit before sales, marketing, and R&D expenses.
Gross Margin as a unit economics measure
Gross margin shows how much revenue remains after direct delivery costs are removed, so it is a core unit economics measure rather than a broad profitability figure. In software and recurring-revenue businesses, it helps separate delivery efficiency from sales efficiency, overhead, and growth investment.
Because it focuses on direct costs, gross margin is useful for comparing products, packaging, hosting models, support intensity, and service mix. A product can grow revenue quickly and still have weak gross margin if delivery costs scale too fast.
What gross margin includes and excludes
Gross margin is usually built from revenue minus cost of goods sold, or the closest direct cost category used by the business. That typically includes costs tied to delivering the product or service, such as infrastructure usage, payment processing, fulfilment, and direct support where those costs are treated as delivery costs.
It does not include operating expenses such as sales, marketing, general administration, or research and development. That distinction matters because gross margin measures the economics of delivery, not the full cost of running the company.
Why gross margin differs across business models
Different delivery models naturally produce different gross margins. Software delivered at low marginal cost often supports higher gross margin than services, hardware, logistics-heavy offerings, or products with significant third-party pass-through costs.
Within software, gross margin can still vary widely depending on cloud spend, customer support burden, data-processing intensity, usage-based pricing, and the degree to which external services are embedded in the offering. The metric is therefore most useful when compared within a similar business model, not across unrelated industries.
How practitioners use gross margin in analysis
Practitioners use gross margin to test whether a revenue stream is structurally efficient and to identify where direct costs are eroding value. It is commonly reviewed alongside revenue growth, retention, CAC, and operating margin to understand whether scale is improving or worsening economics.
It also helps evaluate product and channel decisions. A higher-priced product with expensive delivery may contribute less value than a lower-priced product with stronger gross margin, especially if the latter scales more predictably.
Common misunderstanding: gross margin is often treated as a proxy for overall profitability, but it only describes profitability after direct delivery costs. A business can have a strong gross margin and still be unprofitable because sales, marketing, or platform costs are too high.
Practitioner note: the most useful gross margin analysis is consistent, definition-driven, and tied to the same cost policy over time. Changing what counts as direct cost can make trends look better or worse without changing the underlying business economics.
Standards & Framework Alignment
This section maps relevant standards and security frameworks to the operational risks and controls described in this guidance.
NIST CSF 2.0 sets the technical controls, while ISO/IEC 27001:2022 defines the regulatory obligations.
| Framework | Control / Reference | Relevance |
|---|---|---|
| ISO/IEC 27001:2022 | A.8.12 — Data Leakage Prevention | Controls delivery-cost data exposure that can distort service economics and reporting. |
| Recommendation — Protect sensitive operational and financial data that feeds gross-margin analysis. | ||
| NIST CSF 2.0 | GV.RM-01 — Risk Management Strategy | Gross margin is a business-performance metric that informs resource and risk trade-offs. |
| GV.OC-01 — Organizational Context | Gross margin depends on how the business defines delivery costs and operating boundaries. | |
| Recommendation — Use gross margin trends in risk and investment decisions. Define gross-margin cost boundaries consistently across teams and periods. | ||
Related resources from NHI Mgmt Group
- How can MSPs move from commodity support to higher-margin identity services?
- Why do fragmented AI deployments create margin risk?
- Who is accountable when automated access causes pricing or margin distortion?
- Why do AI gateway metrics matter when organisations are trying to control AI spend and margin pressure?