Process map · controls · benchmarks

The Expense Management Process

The end-to-end expense management process, from receipt capture to manager approval and reimbursement, as a BPMN map, with the roles, controls and KPI benchmarks that make it auditable.

By Jack Finnegan · Updated 22 June 2026

Get expert help

Open in editor

Expense report approval workflow

Expense management (employee expense reimbursement) is the process that runs from an employee incurring a business expense through to reimbursing them and posting it to the general ledger: capture the receipt, itemise the report, check it against the travel-and-expense policy, return out-of-policy items, code it to the GL, get manager approval, escalate higher-value claims to finance, reimburse the employee and reconcile at close. Because it is where company money flows to individuals, it is a recognised fraud-risk area, expense-reimbursement schemes appear in 13% of occupational-fraud cases (ACFE 2024), so the role separation (no self-approval, segregation of duties) that drives the swimlanes is itself a control requirement under COSO, SOX §404 and the GAO Green Book, and reimbursements must meet IRS accountable-plan rules to stay non-taxable.

An employee submits an expense report with itemised receipts.
Receipts are captured and matched against the travel and expense policy.
Out-of-policy items are returned to the employee to correct and resubmit.
In-policy reports are routed to the manager for approval.
Higher-value claims are escalated to finance for review.
The approved expense is reimbursed to the employee and posted to the general ledger.

Opens this exact map in the BA Copilot editor, edit it with AI, no setup.

The process in depth

The steps, key risks and controls, and the KPIs.

Steps

1. Incur expense / capture receipt
Automatable
The employee makes a business purchase (travel, meals, mileage, subscriptions) and captures the receipt at the point of spend, by photo, email forward, corporate-card feed or paper. Capturing at source is what later allows substantiation under the IRS accountable-plan rules. Handoff: employee originates.
2. Create and itemise the expense report
Automatable
The employee assembles line items, attaches receipts, enters merchant, date, amount, attendees and business purpose, and selects the expense category. Card-led tools pre-populate most lines from the transaction feed; manual processes re-key from receipts. Handoff: employee to system.
3. Policy check against the T&E policy
Automatable
Each line is checked against the travel-and-expense policy: per-diem and mileage caps, receipt thresholds, allowed categories, missing-receipt rules and duplicate detection. Decision #1, in policy vs out of policy: out-of-policy items are flagged for return or justification.
4. Return / correct out-of-policy items
Automatable
Flagged items go back to the employee to add a missing receipt, supply a business-purpose justification or remove a disallowed charge, then resubmit. The GBTA Foundation found roughly one in five reports contain errors or missing information that must be corrected. Handoff: system to employee and back.
5. GL coding / cost-centre allocation
Automatable
Assign the GL account, cost centre, project/job code and tax treatment (including recoverable VAT/GST where applicable) to each line. Card-led and rules-based tools default the coding by merchant category and employee, with finance reviewing exceptions. Handoff: employee/system to finance.
6. Manager approval
Automatable
The line manager (budget owner) reviews the report for legitimacy and budget fit and approves or rejects. Approval must sit with someone other than the claimant, no self-approval, and the approver must hold the spend within their delegated authority. Handoff: employee to manager / approver.
7. Finance review / threshold escalation
Automatable
Higher-value claims, or claims above a configured threshold or risk score, escalate to finance or audit for a second review before payment. Maps to the delegation-of-authority matrix. Handoff: manager to finance / controller.
8. Reimbursement / payment
The approved amount is paid to the employee by payroll or ACH (or settled directly on the corporate card for card spend). Payment execution must be performed by someone other than whoever entered or approved the claim (segregation of duties). Handoff: finance to payroll / treasury; employee receives funds.
9. Post to GL / reconcile and close
Automatable
Post the expense to the general ledger, reconcile the corporate-card statement and reimbursements against the sub-ledger and bank, and retain receipts for tax and audit. Reconciliation should be performed by someone independent of expense entry and approval. Handoff: finance / controller closes.

Risks & controls

Risk

Mitigating control & framework

Expense-reimbursement fraud: inflated, fictitious, duplicate or personal claims dressed up as business expenses.

Control: Receipt substantiation, automated duplicate and policy detection, risk-scoring/audit sampling, and approval by someone other than the claimant. ACFE found expense-reimbursement schemes in 13% of occupational-fraud cases with a $50,000 median loss.

FrameworkACFE Occupational Fraud 2024; COSO 2013 Principle 10

Self-approval / lack of segregation of duties: a claimant approves or pays their own expenses.

Control: Enforce no self-approval; split claim entry, approval and payment across different people; role-based system access; delegation-of-authority matrix for escalations.

FrameworkCOSO 2013 Principle 10; GAO Green Book Principle 10; SOX §404 (2002)

Non-compliant reimbursements taxed as wages: payments that fail the IRS accountable-plan tests.

Control: Require business connection, substantiation (receipt, date, amount, purpose) within a reasonable period, and return of any excess advance; otherwise reimbursements become taxable W-2 wages.

FrameworkIRS Publication 463; Treas. Reg. §1.62-2 (accountable plans)

Out-of-policy and over-threshold spend slipping through unchecked.

Control: Codify the T&E policy as automated rules (per-diem, mileage, category and receipt caps) with hard blocks or justification, plus threshold-based escalation to finance.

FrameworkCOSO 2013 Principle 10; GAO Green Book Principle 10

Corporate-card data exposure when card numbers and statements flow through the expense tool.

Control: Handle cardholder data under PCI DSS: tokenise card feeds, restrict access, and avoid storing full PANs in the expense system; prefer direct, secure card-network feeds.

FrameworkPCI DSS v4.0.1

Inaccurate GL coding / cost-centre misallocation distorting departmental budgets.

Control: Default coding rules by merchant category and employee, independent review of exceptions, and reconciliation of the expense sub-ledger to the GL.

FrameworkCOSO 2013 Principles 10 & 12; GAO Green Book Principle 10

KPIs & benchmarks

Cost per expense report (fully loaded)

~$5–15Automated

vs ~$58 avg

All labour, systems and overhead to process one expense report, divided by report volume.

GBTA Foundation, How Much Do Expense Reports Really Cost a Company? (2015) for the $58 manual baseline; the ~$5–15 automated figure is a vendor estimate, not a GBTA number, 2015

Processing time per report

~20 min

Manual baseline; automation collapses most of the hands-on time

Average hands-on time to prepare, check and process one expense report.

GBTA Foundation, How Much Do Expense Reports Really Cost a Company? (2015), 2015

Error / rework rate

~19% of reports

+$52 and +18 minutes to correct each

Share of reports containing errors or missing information that must be corrected before payment.

GBTA Foundation, How Much Do Expense Reports Really Cost a Company? (2015), 2015

Expense-reimbursement fraud exposure

$50,000 median loss

13% of cases; ~18 months to detect (ACFE 2024)

Frequency and severity of expense-reimbursement fraud schemes across occupational-fraud cases.

ACFE, Occupational Fraud 2024: A Report to the Nations, 2024

% of reports out of policy

Track your own

No clean free benchmark; use COSO-style exception monitoring and track your own

Share of submitted reports with at least one line that breaches the T&E policy.

COSO, Internal Control - Integrated Framework, Control Activities

Reimbursement cycle time (submit to paid)

Track your own

No reliable free benchmark; use GBTA manual processing effort as context and track submit-to-paid cycle time

Elapsed time from report submission to the employee being reimbursed.

GBTA Foundation, How Much Do Expense Reports Really Cost a Company? (2015)

Thinking about automating expense management?

See which steps can be automated, and what each one saves.

See what to automate

Best-in-class benchmarks

Cost per expense report

~$58to~$5–15

manual baseline to automated(GBTA Foundation, How Much Do Expense Reports Really Cost a Company? (2015) for the $58 manual baseline; the ~$5–15 automated figure is a vendor estimate, not a GBTA number)

Error / rework cost per report

+$52to≈$0

manual correction to caught at entry(GBTA Foundation, How Much Do Expense Reports Really Cost a Company? (2015))

Get it built for you

Don't want to build the expense management automation yourself? We personally match you to a vetted automation specialist who builds it for you, scoped to your systems and volume.

Vendor-neutral

Vetted automation specialist

Hands-on with finance & back-office tooling; they scope, build, and hand over the working automation.

Matched to your stack

We match on your ERP / systems, process volume, and timeline, not a generic agency pool.

You stay in control

Fixed scope agreed up front. No long-term lock-in; you own the result.

BA Copilot automation concierge

We match you to a vetted automation specialist who builds it

Frequently asked questions

What are the steps in the expense management process?

Incur the expense and capture the receipt, create and itemise the report, check it against the travel-and-expense policy, return out-of-policy items, code to the GL, get manager approval, escalate higher-value claims to finance, reimburse the employee and post to the GL / reconcile at close.

What is the difference between expense management and accounts payable?

Expense management handles money owed back to employees for business costs they paid (travel, meals, mileage), governed by your T&E policy and IRS accountable-plan rules. Accounts payable handles money owed to suppliers against POs and invoices. They share controls (segregation of duties, approval thresholds) but differ in who is paid and how spend originates.

Why does expense management need segregation of duties?

Because expense reimbursement is where company money flows to individuals, no one should approve or pay their own claims. Expense-reimbursement schemes appear in 13% of occupational-fraud cases with a $50,000 median loss (ACFE 2024). Separating claim entry, approval and payment is a control requirement under COSO 2013 Principle 10, the GAO Green Book and SOX §404, and it is what makes the process swimlanes necessary.

What does an expense report cost to process?

The GBTA Foundation put the manual baseline at about $58 and 20 minutes per report, with roughly one in five reports needing a correction that costs a further $52 and 18 minutes (GBTA, 2015). Automated capture and policy checks bring per-report cost down to a single-digit-to-low-teens range.

How to automate expense reports

A step-by-step guide to automating expense capture, policy checks, routing and reconciliation.

Is expense automation worth it?

Run your report volume through the ROI calculator against cited benchmarks.

Best expense management software

Compare SAP Concur, Expensify, Ramp, Zoho Expense and Navan on ERP fit and verified ratings.

The accounts payable process

The sibling AP process as a BPMN map with controls and KPI benchmarks.

Want this mapped and automated for your business?

Get a process specialist to map your real expense flow and automate it around your cards, ERP and controls, without eroding segregation of duties.