Visual Studio Licence for a Medium Orginization

Microsoft is making me go crazy and here is why

I am working a developer for a mid-sized (100 employees) company who is mainly into accounts. I am a member of a small team IT of 8 people that manage the activity and build custom software for the client. We are working on VS express 2013.

Also, We have 5 cal licence for SQL Server 2014. Only 4 people are developing on it and rest 4 (Server side and front end developers) are coecting it using the VS application.No other user uses the SQL Server or even know if it exists.However, everyone is on the same LAN and we don't have servers set up.

All was going well but we got a call from one of the Microsoft compliance vendor that we are using VS and we are under licenced.

My organization has put me up to answer the questions and I being a developer have no clue what is happening.

So,

1. Do I really need to buy VS professional 2013 instead of Express edition even when the number of users for vs is only 6 out of 100?
2. For SQL Server do I need to buy 95 more cals for users that don't even use SQL Server?

Please help