Free guide

Nothing bought off-contract

Purchase order controls that people actually follow: five signs your process is being bypassed, eight controls that change behaviour, and how to measure compliance.
10 pages · 8 controls · No sign-up needed

At a glance

Make the right way the easy way

  1. 01Most PO policies aren’t broken. They’re bypassed. When the rules are slow, unclear or easy to get round, the order goes in first and the PO comes later.
  2. 02Eight controls that change behaviour. From no PO, no pay to showing the budget before anyone approves.
  3. 03Measure by department, not by person. The aim is to find where the process is too hard, not who to blame.

1. Why PO policies get ignored

Almost every finance team has a purchase order policy. Far fewer have one people follow.

It’s not that people want to break the rules. It’s that the rules are slow, unclear or easy to get round. The PO takes three days to approve, so the order goes in first and the PO comes later. Nobody’s sure whether a £400 software subscription needs one. And the preferred supplier list lives in a spreadsheet nobody can find.

The result is off-contract spend: buying from the wrong supplier, at the wrong price, without approval. Finance finds out when the invoice arrives, which is too late to do anything except pay it.

2. Five signs your process is being bypassed

  1. Retrospective POs. The PO is raised after the invoice arrives, so the approval is a formality.
  2. Invoices with no PO number. Suppliers have learned they get paid without one.
  3. Lots of small POs to the same supplier. Purchases split to stay under someone’s approval limit.
  4. Suppliers you’ve never heard of. Spend going to suppliers that aren’t on the approved list.
  5. Prices above contract. You have a negotiated rate, but invoices come in at list price.

Recognise two or more? Your policy is written down, but the process isn’t doing the work. The approval chain audit will show you where approvals slip.

3. Eight controls that change behaviour

The principle behind all of them: make the right way the easy way.

  1. Raise it before you commit. Approval has to happen before the order is placed, not after the invoice arrives. That’s the only point where saying no still saves money.
  2. No PO, no pay. Tell suppliers that invoices without a valid PO number will be returned, then do it. Suppliers start asking your people for the PO.
  3. Route approvals by role and value. Approvals go to the right person based on amount, spend type and cost centre, without anyone having to work out who that is.
  4. Show the budget before approval. An approver who can see what’s left in the budget makes a better decision than one approving blind.
  5. Make approved suppliers the default. Catalogues with approved suppliers and contract prices already filled in. If the easy option is the compliant one, most people take it.
  6. Plan for absence. An approver on holiday shouldn’t be the reason a PO waits a week. Set up cover and reminders so requests keep moving.
  7. Have a route for genuine emergencies. Allow urgent purchases with retrospective sign-off, but log every one so emergencies don’t become a habit.
  8. Match the invoice to the PO. The PO is only a control if the invoice is checked against it. See Two-way, three-way, no-way for how.

4. What a PO policy needs to say

Keep it short enough that people read it. It should answer:

QuestionWhat to cover
What needs a POA value threshold, plus categories that always or never need one
Who can approve whatLimits by role, not by named person
Which suppliers to useWhere the approved list lives and how to add a new supplier
What happens without a POFor suppliers and for staff
How emergencies workWho can authorise them, and how they’re logged
Blanket POsWhen they’re allowed, for how long and up to what value

Start from our purchase order policy template, and give staff the plain-English version in How to raise a purchase order.

5. Measuring compliance

Share the numbers by department, not by person. The aim is to find where the process is too hard, not who to blame.

MeasureWhat good looks like
Spend covered by a PORising month on month for the categories that need one
Retrospective POsFalling, and explained when they happen
Spend with approved suppliersMost of it
Time to approve a POHours, not days
Invoices returned for no POHigh at first, then falling as suppliers adapt

If approval times are long, compliance won’t improve however often you send the policy round. For a wider view of control from request to payment, try the Purchase-to-Payment Control Score.

With Webexpenses Purchase Orders, requests follow your delegation of authority, approvers see the budget impact first, and preferred suppliers and contract prices are the default.

Written for the people who sign it off and the people who make it work

For the decision-maker

Financial Controller, Finance Director

Why your PO policy is being bypassed, and the controls that bring spend back on contract.

For the team doing the work

Procurement, AP and budget holders

What a workable PO process looks like, and what changes for the people raising and approving requests.

See it on your own process

Book a discovery call and we’ll talk through how your team works today. Then we’ll tailor a demo to what matters to you.