Purchase Approval Workflow for Small Business: Tiers and Controls

Base tiers on the size and risk of the purchase, and pick thresholds that fit your company's cash and your team's autonomy. Here's a pattern you can adapt:

• Tier 1, small everyday spend. Employees buy within a monthly budget using a company card or a simple request. The manager approves or the budget itself acts as the approval. No purchase order.
• Tier 2, mid-size spend. A purchase order is required before you commit. The department head approves, and finance checks the budget line.
• Tier 3, large or long-term spend. Multiple quotes, finance review and a senior approver such as the CEO. Contracts get reviewed before signature.

For example, you might set tier 1 up to a few hundred dollars, tier 2 up to a few thousand and tier 3 above that, then adjust after a quarter of real data. Set the numbers with your finance lead, not by copying another company's. Make sure the rules cover purchase type too: software subscriptions, contractors and anything touching customer data may deserve a higher tier than their price suggests.

Whatever software you use, the sequence is the same:

1. Request. The employee states what, why, the vendor, the amount and the budget line.
2. Approve. The right approver, based on the tier, says yes or no within a stated time.
3. Issue the purchase order. A numbered PO goes to the vendor, so both sides agree on price and scope.
4. Receive. Someone confirms the goods arrived or the work was done.
5. Match and pay. Finance compares the invoice to the PO and the receipt before paying.
6. Close. The PO is closed, and any variance is explained.

Step 5 is the three-way match: purchase order, receipt and invoice must agree on quantity and price. It catches duplicate invoices, overbilling and payments for things that never arrived. For services, the "receipt" can be a sign-off from the person who owns the work. If you do this manually, a shared spreadsheet with one row per PO is enough to start.

Most small-company procurement problems are predictable:

• Retroactive approvals. People buy first and ask afterward. Set a rule that invoices without a PO in tier 2 or 3 aren't paid until an exception is approved and logged.
• Splitting purchases to stay under a limit. Watch for repeated purchases just under a threshold from the same vendor, and treat them as one.
• No vendor onboarding. Collect tax forms and banking details once, verify changes by calling a known number and keep a vendor list. Fraudulent bank-detail changes are common.
• Approvers who can't say no. If the approver doesn't see the budget, approval is a rubber stamp. Show them spend to date.
• Too many approvers. Each extra signature adds days. Use one accountable approver per tier and consult others.
• Approvals with no deadline. Set a response time and a backup approver for vacations.

Subscriptions escape most PO processes because they start on a credit card and renew silently. Treat them separately:

1. Require approval for any new recurring charge, whatever the amount, since a small monthly fee becomes a larger annual commitment.
2. Use virtual or dedicated cards for each vendor so charges are visible and can be capped.
3. Record the renewal date and notice period in a tracker, and review renewals monthly.
4. Ask each budget owner once a quarter whether the tool is still used.

The procurement approval matrix and spend guardrails guide goes deeper on thresholds, and the procurement policy template covers the written policy. For contracts attached to a purchase, the contract approval workflow explains who signs what.

Move when the manual process becomes the bottleneck: approvals wait days because requests get lost, finance re-keys invoices, or no one can say how much is committed to vendors right now.

Two categories of tools help. A spend management platform such as Ramp centers on cards, real-time controls and expense capture, which suits companies whose spend is mostly card-based. A procurement platform such as Procurify centers on requests, budgets, purchase orders and matching, which suits companies that buy goods and services through formal POs. Some businesses use both. Procurify vs Coupa vs Ramp compares the field.

Before you buy, write down your three tiers and your approval times. Then ask each vendor to show your exact workflow, including how it handles matching, integrations with your accounting system and audit history. Pricing and limits change, so confirm them directly.