Skip to content

Free template

Accounts payable policy template

A sample AP policy in eleven short sections, from how invoices arrive to how payments are audited. Copy it, fill in the brackets with how your team really works, and review it with your accountant before it goes live.

For AP leads, controllers and office managers · Free, no sign-up · Copy it or print it · Updated October 2026

See the template

How to use this template

  1. 01

    Write down what you do today

    Fill in each bracket with your current practice first. A policy that describes real work gets followed; an ideal one gets ignored.

  2. 02

    Close the gaps on purpose

    Where today's practice is weak (bank detail changes, duplicate checks), decide the new rule and who owns it.

  3. 03

    Review it with your accountant

    This is a starting point, not advice for your situation. Your accountant or auditor should read it before you adopt it.

  4. 04

    Publish and train

    Share it with everyone who orders, approves or pays. Walk AP and approvers through the sections that change their day.

The template

Accounts payable policy

Text in [brackets] is yours to fill in. Copy pastes with headings and tables into Word or Google Docs, and as Markdown into plain-text tools.

Accounts payable policy

Company: [Company name]
Policy owner: [Controller] · Approved by: [CFO or owner] · Effective: [YYYY-MM-DD] · Version: [1.0]
Starting point only. Review this policy with your accountant or auditor before you adopt it.

1. Purpose and scope

This policy sets how [Company name] receives, checks, approves, pays and keeps vendor invoices, so that we pay only for what we ordered and received, pay on time, and can show how every payment was approved.

  • Covers: all vendor invoices and payments to suppliers, contractors and service providers, for all [locations and entities].
  • Does not cover: payroll, employee expense reimbursements ([see the expense policy]), customer refunds and intercompany transfers.
  • Applies to: everyone who orders, receives, codes, approves or pays for goods and services.

2. Roles

RoleResponsible for
Requester or budget ownerOrders goods and services, confirms receipt, codes or checks the coding, approves within their limit
AP teamReceives and records invoices, matches them to POs and receipts, checks for duplicates, prepares payment runs
ApproversApprove invoices within the limits in the invoice approval matrix
Vendor master ownerSets up and changes vendor records, collects W-9s, verifies bank details
ControllerOwns this policy, reviews exceptions, releases payment runs

3. Receiving invoices

  • Vendors send invoices to one address: [ap@company.com] or [mailing address]. Invoices sent to individuals are forwarded to AP the same day.
  • Paper invoices are scanned on the day they arrive. The scan is the working copy; [the paper is kept or destroyed per the retention section].
  • AP records each invoice within [2 business days] of receipt, with the received date.
  • An invoice must show: vendor name and address, invoice number, invoice date, description, quantity and price, tax, total, and the PO number when there is one.
  • Invoices missing these details go back to the vendor. Statements and quotes are not invoices and are not paid.

4. Coding and matching

  • Each invoice is coded to a GL account, a cost center or department, and [project or job] where it applies.
  • PO invoices are matched to the PO and to proof of receipt (three-way match). A difference within [2% or $50, whichever is lower] may be paid; larger differences go to the PO owner.
  • Non-PO invoices are coded by AP and confirmed by the budget owner when they approve.
  • Sales tax is checked against the vendor's location and the [tax exemption certificates] on file.

5. Approval

  • Invoices are approved in line with the [invoice approval matrix], which sets limits by amount and spend type, backups and escalation.
  • Approval is given in [the approval system], never by a verbal OK. Each approval records the approver's name and the date.
  • Nobody approves an invoice for their own purchase above [$1,000], their own reimbursement, or a vendor they have a personal interest in.
  • Approvals waiting more than [6 business days] escalate as set out in the matrix.

6. Preventing duplicate payments

  • Before an invoice is recorded, AP checks for the same vendor and invoice number, and for the same vendor, amount and date.
  • Invoice numbers are compared without spaces, dashes, leading zeros or prefixes, so INV-00123 and 123 are treated as possible duplicates.
  • Only original invoices are paid. Copies, statements and reminders are matched to the original, not entered again.
  • Paid invoices are marked paid in [the AP system] with the payment date and reference.
  • AP reviews a duplicate payment report every [month] and recovers anything paid twice.

7. Vendor setup, W-9s and changes

  • New vendors are set up only by the vendor master owner, from a request approved by [the budget owner].
  • US vendors provide a signed Form W-9 before the first payment. The vendor's legal name and tax ID on the W-9 must match the vendor record.
  • Requests to change bank details, payment address or contact details are confirmed by calling the vendor at a number already on file, never a number in the request. The call is noted on the vendor record.
  • The person who sets up or changes a vendor does not approve that vendor's invoices or release payments.
  • Vendors with no activity in [18 months] are made inactive.
  • The vendor list is reviewed [every year] for duplicates, inactive vendors and missing W-9s.

8. Payment timing and methods

  • Invoices are paid by their due date under the vendor's terms, not earlier, unless an early-payment discount is worth taking.
  • Early-payment discounts (for example 2/10 net 30) are taken when [the controller decides the discount is worth the cash].
  • Payment runs happen [weekly on Thursday]. Urgent payments outside a run need [controller] approval.
  • Preferred methods: [ACH], then [virtual card], then [check]. Wire transfers need two people: one to set up and one to release.
  • Checks over [$10,000] need two signatures. Blank check stock is locked and logged.
  • The person who releases a payment run is not the person who prepared it.

9. Exceptions

  • Any exception to this policy (a payment without a PO, a rush payment, a missing W-9) is approved in writing by [the controller] before payment.
  • Each exception records the reason, who approved it and the date.
  • AP reports exceptions to [the CFO] every [quarter]. A pattern of exceptions is a reason to change the policy, not to keep making exceptions.

10. Records and retention

  • Invoices, approvals, POs, receipts, W-9s and payment records are kept together, so each payment can be traced to its approval.
  • Records are kept for the periods in [the records retention schedule], which counsel or our accountant has confirmed.
  • Records under a legal hold are not destroyed, whatever their retention period.
  • Electronic copies are stored in [the document system], with access limited to [AP, finance and auditors].

11. Review and audit

  • [The controller] reviews a sample of [25] paid invoices every [quarter] for approval, matching and coding.
  • Vendor master changes are reviewed [monthly] by someone outside AP.
  • This policy is reviewed [every year] and after any payment error or fraud attempt.
  • Questions about this policy go to [name, email].

How to adapt it

Make every rule checkable

"Invoices are approved promptly" cannot be checked. "Approvals waiting more than six business days escalate to the next level" can. When you fill in the brackets, use numbers, days and named roles, so anyone reviewing the policy can pick ten invoices and see whether it was followed.

Keep the approval limits in a separate matrix

Limits and names change more often than the policy. The template points to an approval matrix for them, so a new controller means a one-line change, not a new policy. Use the invoice approval matrix template for that part.

Point to the retention schedule, do not copy it

How long you keep invoices and payment records depends on tax rules, contracts and your industry. Name the schedule in the policy and keep the periods there. Our retention schedules show common US periods with the rule behind each one.

Scale it to your size

A five-person office does not need a quarterly sample audit of 25 invoices. It does need a rule that bank detail changes are confirmed by phone, and someone senior looking at every payment run. Keep the controls that stop real losses and drop the ones nobody will do.

The sections that prevent the costliest mistakes

SectionWhat it preventsThe one rule to keep
Vendor changesPayments redirected by a fake bank detail changeConfirm every change by calling a number already on file
Duplicate preventionPaying the same invoice twiceCheck vendor plus invoice number, compared without dashes or leading zeros
ApprovalPaying for things nobody agreed to buyEvery invoice has a named approver and a date, attached to it
MatchingPaying for goods that never arrivedMatch PO invoices to a receipt before payment
PaymentOne person moving money aloneThe person who releases a run did not prepare it

Common mistakes

  • Invoices arriving everywhere. Without one intake address, invoices sit in personal inboxes until the vendor calls.
  • Treating statements as invoices. Paying from a statement is one of the easiest ways to pay twice.
  • W-9s collected at year end. Chasing tax forms in January is harder than collecting them before the first payment.
  • Exceptions with no record. If rush payments are normal, the policy is wrong. Record each one and look at the pattern.

Where software helps

A written policy says what should happen. Software makes the routine parts happen the same way every time, and keeps the record your auditor will ask for.

  • Receiving and reading invoices: CapturePoint 6 scans or imports invoices, reads the vendor, number, dates, totals and line items on your own PC, checks the line-item math and flags anything it is unsure of for review.
  • Approval, duplicates and records: Content Central files every invoice on your own servers, warns about duplicate values while invoices are indexed, routes approvals by amount with deadlines, substitutes and escalation, and exports approved invoices to QuickBooks, Sage 50, Sage X3, Workday or Epicor.
  • Retention and legal holds: Content Central keeps a retention schedule per document type, and can keep any document indefinitely for a legal hold, overriding its schedule. Every view, change, approval and deletion is in the audit trail.

The Content Central help library has a step-by-step article on exporting approved invoices to accounting.

Next step

Put your AP policy into practice.

Book a free Content Central demo and see invoices captured, checked for duplicates, approved by your matrix and exported to accounting, with every step on record.