The Accounts Payable Process
By Jack Finnegan · Updated 22 June 2026
Invoice approval workflow
Accounts payable (AP) is the process that runs from receiving a supplier invoice through to paying it and reconciling the payment, capture, validation, three-way match, exception handling, GL coding, approval, the payment run, payment execution and month-end reconciliation. It is one of the highest-fraud-risk areas in any organisation because it is where money leaves the business, so the role separation (segregation of duties) that drives the swimlanes is itself a control requirement under COSO, SOX §404 and the GAO Green Book.
- An invoice is received and its data validated.
- If it does not match the purchase order, query the supplier and re-validate.
- If it matches, check whether it is within the approver’s authority limit.
- Over-limit invoices are escalated for higher approval.
- Schedule the approved invoice for payment.
The process in depth
The steps, key risks and controls, and the KPIs.
Steps
1. Receipt / capture of invoice
AutomatableThe invoice arrives by email, EDI/e-invoice, supplier portal or paper, and is captured and digitised (OCR/IDP increasingly). The EDI/e-invoice channel maps to APQC PCF 10870 (maintain/manage electronic commerce); capturing the invoice and its key data maps to 10871 (audit invoices and key data in AP system), within 9.6.1 Process accounts payable. Handoff: vendor to AP clerk.
2. Validation / data entry
AutomatableVerify legitimacy, check for duplicates, capture header and line data, and validate the vendor against the vendor master. Maps to APQC elements 10869 and 10871. Decision #1, PO vs non-PO: PO-backed invoices go to matching; non-PO (services, utilities, subscriptions) go to coding and manual approval.
3. Three-way match (PO + goods receipt + invoice)
AutomatableFor PO-backed physical goods, match the purchase order, goods-receipt note and vendor invoice on quantity, price and line items. A two-way match (PO to invoice) is used for services and low-value items with no physical receipt. Receiving provides the GRN, Procurement owns the PO, AP matches.
4. Exception handling
AutomatableMismatches beyond the configured tolerance (a small % / $ band) are flagged and held, then investigated and resolved, contact the vendor, query procurement, correct the receipt, with escalation by dollar amount and discrepancy type. Maps to APQC element 10875.
5. Coding / GL allocation
AutomatableAssign the GL account, cost centre, tax codes and expense coding (especially for non-PO invoices). Relates to APQC element 10871 and feeds general accounting. Non-PO items hand off to the budget owner for approval.
6. Approval / authorisation
AutomatableMaps to APQC element 10872. Routine within-tolerance invoices auto-approve; above a value threshold they route to the budget owner / AP manager; above a higher threshold they need dual approval. Handoff: AP clerk to approver(s) per the approval-authority matrix.
7. Payment scheduling / payment run
AutomatableSchedule by due date and terms; optimise for early-payment discounts and avoid late fees; batch into a payment run. APQC measures the cycle time from receipt of invoice until approved and scheduled for payment. Handoff: AP to Treasury/Cash.
8. Payment execution
Disburse via ACH, wire, cheque or virtual card. This custody/execution function must be performed by someone other than whoever entered or approved the invoice (segregation of duties). Treasury executes; the vendor receives funds.
9. Reconciliation / month-end close
AutomatableRecord accruals/reversals for received-not-invoiced, reconcile the AP sub-ledger to the GL and to bank statements, and post to the GL. Maps to APQC PCF 10873 (process financial accruals and reversals), 10824 (reconcile general ledger accounts) and 10879 (adjust accounting records). Critical control: reconciliation by someone independent of AP transaction processing.
Risks & controls
Lack of segregation of duties, one person can set up a vendor, approve the invoice and release payment.
Control: Split incompatible duties across people (vendor-master vs invoice approval vs payment execution vs reconciliation); enforce via role-based ERP access.
Duplicate payments, the same invoice paid twice.
Control: Three-way match; enforce a unique invoice number per vendor; automated duplicate detection on amount, date, vendor and invoice number.
Fraudulent / fictitious vendors and AP billing schemes.
Control: Vendor-master onboarding controls: independent vendor validation (tax ID / registration / address), no employee-bank-account matches, periodic vendor-master review, vendor approval kept separate from AP processing.
Vendor bank-detail change fraud / business email compromise (BEC), an attacker emails a "new" bank account for a real supplier.
Control: Out-of-band call-back verification to a known number before any bank-detail change; dual approval of vendor-master changes (separate from invoice approval); payment hold on changed banking until verified.
Unauthorised / over-threshold payments.
Control: Approval thresholds plus a delegation-of-authority matrix; dual authorisation above limits; payments cannot exceed an approver’s documented limit.
Inaccurate coding / GL misallocation.
Control: Independent review of GL coding; automated/default coding rules per vendor/PO; reconcile the AP sub-ledger to the GL.
KPIs & benchmarks
All labour, systems and overhead to process one invoice, divided by invoice volume.
Elapsed time from invoice receipt to approved and scheduled for payment.
Share of invoices processed with no manual intervention (straight-through processing).
Share of invoices with data-entry errors (lower is better as automated capture replaces manual keying).
Share of invoices paid on or before the due date.
Throughput per full-time AP employee. Published as a relative ratio because absolute counts disagree across sources.
Share of available early-payment discounts actually captured.
Thinking about automating Accounts Payable?
See which steps can be automated, and what each one saves.
See what to automateGet it built for you
Don't want to build the Accounts Payable automation yourself? We personally match you to a vetted automation specialist who builds it for you, scoped to your systems and volume.
Vetted automation specialist
Hands-on with finance & back-office tooling; they scope, build, and hand over the working automation.
Matched to your stack
We match on your ERP / systems, process volume, and timeline, not a generic agency pool.
You stay in control
Fixed scope agreed up front. No long-term lock-in; you own the result.
Frequently asked questions
What are the steps in the accounts payable process?
Receipt/capture of the invoice, validation and data entry, three-way match (PO + goods receipt + invoice), exception handling, GL coding, approval/authorisation, payment scheduling, payment execution and month-end reconciliation. The steps map to APQC PCF element 10756, "Process accounts payable (AP)".
What is a three-way match in accounts payable?
A three-way match checks the purchase order, the goods-receipt note and the vendor invoice agree on quantity, price and line items before payment. A two-way match (PO to invoice) is used for services and low-value items with no physical receipt.
Why does accounts payable need segregation of duties?
Because AP is where money leaves the business, no single person should set up a vendor, approve an invoice and release payment. Separating those duties is a control requirement under COSO 2013 Principle 10, the GAO Green Book and SOX §404, and it is what makes the process swimlanes necessary.
What is a good cost per invoice?
Top performers process an invoice for about $2.07 versus $10 or more for the bottom quartile, with a median near $5.83 (APQC Open Standards Benchmarking, via CFO.com).
Related
How to automate accounts payable
A step-by-step guide to automating AP capture, matching, routing and reconciliation.
Is AP automation worth it?
Run your invoice volume through the ROI calculator against cited benchmarks.
Best accounts payable software
Compare Tipalti, BILL, Stampli, Medius and AvidXchange on ERP fit and verified ratings.
Want this mapped and automated for your business?
Get a process specialist to map your real AP flow and automate it around your ERP and controls, without eroding segregation of duties.
Sources
- COSO, Internal Control – Integrated Framework (2013), Principle 10
- Sarbanes-Oxley Act of 2002, §404 (PCAOB copy)
- GAO, Standards for Internal Control in the Federal Government (Green Book), GAO-14-704G (Sept 2014), Principle 10
- GAO Green Book, 2025 revision GAO-25-107721 (current), Principle 10
- GFOA, Bank Account Fraud Prevention; Payments Made by Governments
- ACFE, Occupational Fraud 2026: A Report to the Nations (14th ed., May 2026)
- FBI IC3, 2024 Internet Crime Report (BEC)
- AFP Payments Fraud & Control Survey (2025/2026 highlights)
- APQC, 8.0 Manage Financial Resources: Definitions and Key Measures (PCF v6.0.0, Nov 2012)
- APQC Process Classification Framework (PCF) Cross-Industry v7.4 (Aug 2024)
- APQC Open Standards Benchmarking, AP measure page (definition and current PCF scope; benchmark data gated)
- CFO.com, Metric of the Month: Accounts Payable Cost (published 2018; APQC tiers $2.07 / $5.83 / $10)
- Auxis, Accounts Payable Metrics: Are You a Top Performer? (APQC cycle-time / FTE ratios)
- Ascend Software, AP benchmarks every modern team should know in 2025
- APQC, Percentage of supplier invoices paid on time (benchmark data gated)
- APQC, Understanding Accounts Payable Benchmarks and Best Practices
- Ramp, What Is 3-Way Matching in Accounts Payable?
- Capterra product listing (live-fetched 2026-06-22): Tipalti
- Capterra product listing (live-fetched 2026-06-22): BILL
- BILL published pricing (bill.com/pricing); Tipalti, Stampli, Medius and AvidXchange confirmed quote-only with no public pricing on their own sites (live-fetched 2026-06-21)
- Capterra product listing (live-fetched 2026-06-22): Stampli
- Capterra product listing (live-fetched 2026-06-22): Medius
- Capterra product listing (live-fetched 2026-06-22): AvidXchange
- KPI Depot, On-time Payment Rate (KPI definition & benchmarks; freely accessible, states ideal target 95%+)
- alternatives.co, Medius Pricing and Packages (third-party listing: Professional plan $2,499/mo)