Purchase Approval Limits: Build an Approval Matrix (Free Template)
An approval matrix decides who approves which purchase, by amount, department and category. Example threshold ladders by company size, escalation and out-of-office rules, what an auditor will ask for, and a free template.
An approval matrix is a table that says who can approve a purchase, based on its dollar amount, the department (or project) it's charged to, and the category of spend. A typical small-business matrix has three to five dollar tiers: for example, a department manager up to $2,500, the controller up to $10,000, the CEO above that, and the board for anything over a set ceiling. Some categories, like new vendors, IT and contracts, always need an extra approver. A free Excel approval matrix template is below, along with example limits for 20, 80 and 300-person companies and the escalation rules that keep it from stalling.
How Foxpedite does it: your matrix, enforced
A matrix on paper only works if people route requests correctly. Foxpedite turns it into rules, for the organization still running purchasing on spreadsheets, email and QuickBooks.
- Build the matrix once in the visual workflow builder: dollar tiers, departments or projects, and category overrides (capex, software, contractors, grant-funded).
- Gate 1: budget at draft (Draft-Stage Budget Lock). The moment someone drafts a purchase, Foxpedite reserves it against the department, project or grant budget, so the approver sees the budget impact before saying yes.
- Gate 2: routing by amount, department and category. Every request goes to the right approver automatically. Approvers act from the email. Backups and escalation timers keep requests moving when someone is out.
- Audit trail. Who requested, who approved, when, and under which rule, in one export instead of 40 inbox searches.
- Gate 3: pay on match. The invoice pays only when PO, receipt and invoice agree. Approved POs and bills sync to QuickBooks Online.
Pricing, published: Regular $390/month (10 users included) covers POs, budgets and three-way match. Advanced $740/month (20 users included) adds approval workflows, approve-from-email, QuickBooks Online sync and AI document scanning. Extra users are $39/month. The 14-day trial includes every Advanced feature and needs no credit card. The approval routing and QuickBooks Online sync described here are on Advanced.
Try Foxpedite free for 14 days
Load your thresholds into the workflow builder and watch this week's requests route themselves. Every Advanced feature, no credit card.
Start your free trial → · Prefer to start by hand? Get the free Approval Matrix Template
Approval matrix vs delegation of authority vs approval workflow
These three terms get used interchangeably. They're layers of the same thing.
|
Delegation of authority (DoA) |
Approval matrix |
Approval workflow |
| What it is |
Policy: which roles hold what authority, granted by the board or owner |
Table: the specific dollar limits per role, department and category |
Process: how a request actually moves to the right approver |
| Who owns it |
Board / owner |
Controller / finance |
Ops / finance, in a tool or by email |
| Changes how often |
Rarely (annually) |
When budgets or roles change |
Whenever the team changes |
| Covers |
Spending, contracts, hiring, banking |
Purchasing and payment approvals |
Routing, reminders, escalation, audit trail |
| Example |
"The CFO may commit the organization up to $50,000" |
"IT purchases $2,500–$10,000: IT lead + controller" |
"Request → IT lead (email) → controller (email) → PO issued" |
Write the DoA once, build the matrix from it, then make the workflow follow the matrix. If you're designing the workflow layer, our guide to designing a purchase order approval workflow people actually follow is the companion to this one.
Setting dollar thresholds by company size
There's no universal right number. The thresholds should reflect two things: how much a single wrong purchase would hurt, and how many approvals a senior person can handle without becoming a queue.
A useful test: the top approver should see no more than about 10–15% of requests. If the CEO approves half of all POs, the thresholds are too low.
Example scenarios: three threshold ladders (illustrative)
Example scenarios. These are starting points, not benchmarks.
| Tier |
~20 employees |
~80 employees |
~300 employees |
| Auto-approve (within budget, preferred vendor) |
Under $250 |
Under $500 |
Under $1,000 |
| Tier 1: manager / budget owner |
$250–$2,500 |
$500–$5,000 |
$1,000–$10,000 |
| Tier 2: controller / finance lead |
— |
$5,000–$15,000 |
$10,000–$50,000 |
| Tier 3: owner / CEO / ED |
Over $2,500 |
Over $15,000 |
$50,000–$150,000 |
| Tier 4: board / finance committee |
Over $25,000 |
Over $50,000 |
Over $150,000 |
Worked example: a grant-funded nonprofit with 80 staff (illustrative)
Example scenario. A nonprofit with 80 staff, $9M annual budget, three programs funded by federal and foundation grants. Last year it processed about 1,900 purchase requests. Before the matrix, the executive director approved every request over $500, which worked out to about 640 approvals a year, around 12 per week, each one interrupting her.
The new matrix uses the 80-person ladder above:
| Request size |
Share of requests (from last year's data) |
Requests / yr |
Approver |
| Under $500 |
66% |
1,254 |
Auto (within budget, preferred vendor) |
| $500–$5,000 |
27% |
513 |
Program director |
| $5,000–$15,000 |
5% |
95 |
Controller |
| Over $15,000 |
2% |
38 |
Executive director |
The ED goes from ~640 approvals a year to 38, under one a week. The controller picks up 95, which is where finance judgment matters most. Program directors take the 513 mid-sized requests, which are charged to the budgets they're accountable for anyway.
Cost check: at Ardent Partners' 2025 benchmark of $9.40 average cost to process an invoice (Ardent Partners, via Thomson Reuters), 1,900 invoices is about $17,860 a year in processing. The matrix doesn't remove that cost, but routing requests to the right approver the first time removes the rework of invoices that arrived with no approval on record.
Routing by department, category and project
Dollar thresholds alone miss risk. A $1,200 laptop is a different decision from a $1,200 box of paper. Add two more dimensions.
| Category |
Extra approver |
Why |
| IT hardware & software |
IT lead |
Security, licensing, duplicates |
| New vendor (first purchase) |
Controller |
Vendor verification; see our vendor onboarding checklist |
| Contracts / subscriptions over 12 months |
Owner / ED |
Commits future budget |
| Capital equipment |
Controller |
Capitalization and depreciation |
| Grant-funded spend |
Program director for that grant |
Allowability |
| Travel |
Department head |
Policy compliance |
Prefer to start by hand? Free: Approval Matrix Template (Excel)
Dollar thresholds × department × category, pre-filled with the 20 / 80 / 300-person ladders above, plus a delegation-of-authority page and an escalation table. Change the numbers, keep the structure.
Get the template →
Or skip the manual version: try Foxpedite free for 14 days
Escalations, backups and out-of-office rules
A matrix that names one person per cell will stall the first time that person goes on vacation. Every matrix needs four rules:
- Backup approver per tier. Named in the matrix, not decided on the day.
- Escalation timer. If an approval sits for, say, 48 business hours, it goes to the backup or the next tier up, automatically if your tool supports it.
- No self-approval. Nobody approves their own request. If the requester is the budget owner, it goes up one tier.
- No splitting. Two $2,400 POs to the same vendor in the same week are one $4,800 purchase. Say so in the policy, and check for it monthly.
In Foxpedite, backups, delegation caps and escalation timers are settings on the workflow, so the vacation problem is handled without anyone updating a table.
Audit trail: what an auditor will ask for
Approval matrices exist because of internal controls, and weak controls are expensive. In the ACFE's 2024 study, a lack of internal controls was the primary weakness behind 32% of occupational fraud cases (ACFE, Occupational Fraud 2024: A Report to the Nations).
When an auditor or funder tests purchasing, expect them to sample transactions and ask for:
- [ ] The approved matrix and DoA in force on the transaction date (keep version history)
- [ ] Who requested the purchase and who approved it, with timestamps
- [ ] Evidence that the approver was within their limit for that amount and category
- [ ] Evidence of segregation of duties: requester ≠ approver ≠ person paying
- [ ] For grants: evidence the cost was charged to the right award and followed your written procurement procedures
- [ ] The PO, receipt and invoice matched before payment; see our three-way matching guide
If approvals happen by email, this is where it gets painful. The evidence exists, but it's scattered across inboxes. A year-end sample of 40 transactions can mean 40 inbox searches. The AP month-end close checklist includes a monthly step to file approvals so year-end isn't a scavenger hunt.
The workaround: rolling out a spreadsheet matrix (and where it breaks)
The template has four tabs: DoA (roles and authority), Matrix (tiers × departments), Category overrides, and Escalation & backups.
Rollout in four steps:
- Pull last year's purchases (from QuickBooks or your bank export) and bucket them by dollar range. That gives you your own version of the share-of-requests table above.
- Set tiers so the top approver sees ≤10–15% of requests. Adjust.
- Get board or owner sign-off on the DoA page. Date it.
- Announce it with the "why": faster approvals for small things, fewer interruptions for leaders. Then review it after 90 days.
Where it breaks: a spreadsheet matrix tells people who should approve. It can't stop a purchase that skips it, it doesn't escalate on its own, and the audit trail is whatever you can find in email. In Foxpedite, the same table is the routing logic, so there's no way around it.
Stop routing approvals by hand: start your 14-day Foxpedite trial
Your matrix as routing rules by amount, department and category, approvals from the email, escalation built in, and a complete audit trail. Every Advanced feature, no credit card.
Start free, no card →
Not ready yet? The free Approval Matrix Template is the manual version: download it. Or take the 1-minute fit check, or book a demo.
Common questions
What is an approval matrix?
A table showing who can approve a purchase based on its dollar amount, the department or project it's charged to, and its category. It turns a delegation-of-authority policy into specific, checkable limits.
What are typical purchase order approval limits for a small business?
For an ~80-person company, a common starting ladder is: auto-approve under $500 within budget, manager to $5,000, controller to $15,000, CEO above that, board over $50,000. Set yours so the top approver sees at most 10–15% of requests.
What's the difference between an approval matrix and a delegation of authority?
The delegation of authority is the policy that grants authority to roles. The approval matrix is the detailed table of limits by amount, department and category that puts that policy into practice.
How do you stop people splitting purchases to stay under a limit?
State in the policy that related purchases from one vendor in a short window count as one. Then review POs monthly by vendor and date. Some purchasing tools flag split orders automatically.
What should an audit trail for approvals include?
Who requested and approved each purchase, with timestamps; proof the approver was within their limit; segregation of duties; the matrix version in force; and the matched PO, receipt and invoice.
Can I enforce an approval matrix automatically?
Yes. In Foxpedite, the matrix becomes routing rules in a visual workflow builder: by amount, department and category, with backups and escalation. Approvers approve from the email and every step is in the audit trail. Approval workflows are on the Advanced plan ($740/month, 20 users); the 14-day trial needs no card.
Related reading
Sources
- Ardent Partners, AP Metrics that Matter in 2025, via Thomson Reuters (May 12, 2025). https://europe.thomsonreuters.com/blog/3-ap-metrics-that-matter
- ACFE, Occupational Fraud 2024: A Report to the Nations. https://www.ivey.uwo.ca/media/kjljj5cy/2024-report-to-the-nations.pdf
- Electronic Code of Federal Regulations, 2 CFR Part 200 (Uniform Guidance). https://www.ecfr.gov/current/title-2/subtitle-A/chapter-II/part-200