Guide
How to Handle Out-of-Policy Invoices
By Keelstar Team · Updated June 1, 2026
The short answer
Define what 'out of policy' means in your org, route those invoices to a dedicated exception queue with required fields and approvers, document the business justification, and apply elevated approval per the matrix. Silent exceptions — paying anyway without trail — are how fraud and audit findings accumulate.
Define categories of exceptions
Write down exception types AP sees weekly: emergency purchase, PO mismatch, new vendor, capital not on capex plan, duplicate submission. Each category gets a routing rule and required documentation — not ad hoc judgment in the inbox.
Exception queue design
Out-of-policy invoices should not sit in the standard approver's queue without context. Flag them visually, capture reason codes, and require attachment of approval email, business case, or procurement waiver. Standard approvers may still need to sign off — plus an exception reviewer.
Elevated approval thresholds
Treat exceptions as higher risk by default. A $2,000 invoice without a PO might need department head plus finance ops. Document who can grant recurring exceptions vs one-time waivers.
SLA and visibility
Exceptions take longer — set explicit SLAs and report aging weekly. Leadership should see volume and top reason codes. Spikes in 'emergency purchase' often signal training gaps or policy mismatch with how people actually buy.
Close the loop to policy
Track repeat offenders by vendor, department, and requester. Feed patterns back to procurement — maybe the PO process is broken, not the users. Exceptions are data; ignoring them recreates the same friction every month.
Frequently asked questions
- What counts as out of policy?
- Common cases: no PO when PO required, invoice over PO amount, non-approved vendor, wrong GL or cost center, duplicate invoice, or services outside contract scope.
- Can managers approve their own exceptions?
- Avoid it. Exception paths should add a finance or procurement reviewer so budget owners cannot unilaterally bypass procurement policy.
Related guides
Put this into a monitored workflow
Invoice Approval handles this continuously — with reminders and an audit trail.