If you can sit with accounts, or get invoices, best way to go. However, if they push back on that, I fall back to "industry standards" from a TCO site like FM audit or LDI. When they question my numbers, I then use that to ask for their actual invoices so we can verify.