Segregation of duties sounds excessive in a small business until the first double payment. How to build supplier invoice approval when two people do everything.
Key takeaways
- The one rule that matters: whoever orders is not whoever pays. Even when it is the same two people.
- Three checks before paying: I ordered it, I received it, the price is right.
- A double payment is the most common failure, and one marking prevents it.
- One folder for supplier invoices is worth more than a system nobody fills in.
In a small business the same person orders, receives, approves and pays - and that works until the day you pay the same invoice twice, or pay for something that never arrived. Control in a two-person business is not bureaucracy but three simple rules you can apply with no system and without slowing anything down.
What do you check before paying a supplier?
| Check | The question | What proves it |
|---|---|---|
| Order | Did we order this? | An email, a message, or a purchase order |
| Receipt | Did we receive it? | A delivery note, a confirmation, or whoever took it |
| Price | Is this the agreed price? | A quote or an agreement |
Those three questions catch almost every problem: an invoice for something never ordered, an invoice for a delivery that never arrived, and an invoice at a price different from what was agreed. In a small business they take a minute, because whoever checks usually remembers.
How this works when two people do everything
Full separation is impossible, so you do partial separation:
- Whoever ordered marks it received. Not whoever pays.
- Whoever pays marks it paid. Not whoever ordered.
- Above a certain amount, both. A WhatsApp message will do; no form needed.
- Recurring payments are reviewed quarterly rather than monthly.
The third line is the right compromise: not every invoice needs two approvals, but above an amount that hurts, yes. The amount itself depends on the size of the business; what matters is that it is defined.
How to prevent double payments
This is the most common failure, and it happens three ways:
- The invoice arrived twice - by email and by post, or from the supplier and from a contact.
- It was paid and not marked, so somebody paid again.
- A forgotten partial payment completed twice.
Prevention is simple: mark every invoice as paid, immediately, in the same place it is stored. The marking can be a "paid" folder, a filename change, or a field in a system - what matters is that there is one and everybody uses it.
Where to keep supplier invoices
One folder, organised by month, with filenames including supplier and date. It is not sophisticated and it works. What does not work:
- An email inbox, because whatever did not arrive by email never gets there.
- A folder per supplier, because then you cannot see a whole month.
- Photos on somebody's phone, because they never reach anyone else.
The more modern route is capturing into a system, and some Israeli systems offer convenient intake channels - SUMIT, for example, presents document submission from desktop, mobile, email or a WhatsApp bot. Full detail in capturing supplier receipts.
What to do when something does not add up
- An invoice for something never ordered: do not pay before checking. Usually a supplier error.
- A price different from the agreement: contact the supplier before paying, not after. After payment it becomes a credit request.
- A duplicate invoice: mark it and tell the supplier, so it does not recur.
- An old invoice that resurfaces: check whether it was paid, and only then decide.
In all four, the rule is the same: clarify before paying. Once the money has left, the negotiation starts from a worse position.
What to review quarterly
Recurring payments are where money leaks quietly: a subscription you never cancelled, a service no longer used, or a supplier who raised a price without telling you. Fifteen minutes a quarter on the recurring payments list usually finds at least one - which is enough to justify the time.
What this actually saves
A business applying the three rules usually finds three things in the first months: one invoice that arrived twice and was not paid twice; one supplier who raised a price without telling anyone; and one recurring payment that should have stopped. Those three discoveries together repay the time invested several times over - which is why control in a small business is not risk management but simply saving money.
Where the process usually stalls
Not in the rules but in the marking. Everybody agrees to check before paying, and within a month somebody pays without marking because they were in a hurry. The way to hold it: make the marking part of the payment rather than a step after it - the same screen, the same minute. A control requiring an extra action after the money has gone is a control that will stop happening.
What to keep, and for how long
Supplier invoices are part of the material that gets retained, and how long is set by the rules applying to your business - a question for your accountant. What is operationally true: decide on one place and one period, rather than leaving each person to keep things as they see fit. The broader archive subject is covered in digital archives and document retention, and the principle is simple: what is not in one place is not anywhere.
What about regular suppliers
A supplier invoicing you every month is a different case: there is no point checking an order each time, because the agreement is the order. What you do need:
- Check the amount matches the agreement, not merely that it resembles last month.
- Watch for price rises arriving without notice - more common than people think.
- Check quarterly that the service is still in use. A forgotten regular supplier is the quietest expense there is.
- Confirm the commitment is still relevant, and when it renews.
The last item surprises people: many agreements renew automatically, and the moment to cancel is before renewal rather than after.
How this changes when a third person joins
Once there are three people, define roles rather than only rules: who may order and up to what amount, who confirms receipt, and who makes payments. It still needs no system - one table is enough - but it does need writing down, because with three people the assumption that everybody knows stops being true. It is also the moment to set an amount ceiling requiring approval, as described in supplier invoice approval through to Masav payment.
Sources
Frequently asked questions
Does a two-person business really need controls?
It needs three rules, not a system. Whoever ordered marks it received, whoever pays marks it paid, and above a set amount both approve. It takes seconds per invoice, and it prevents the two expensive failures: paying twice and paying for what never arrived.
What if there is no purchase order?
In a small business there usually is not, and that is fine - what replaces it is any record of the order: an email, a message, or even a call summary sent to the supplier. What matters is having something written to compare the invoice against.
How do we know we have not already paid?
By marking. Every paid invoice is marked immediately, in the same place it is stored. Without marking, the question is answered from memory - and the memory of two busy people is exactly what produces a double payment.
Is an approval system worth it?
In a two-person business, usually not. An organised folder and consistent marking do the job. A system starts paying off with three or more people touching the process, or when the monthly invoice count no longer allows visual tracking.
Keep reading
Related service
Inventory & Purchasing
SKU-level stock, reorder rules and an approval flow that leaves a record.
About the author
Yehonatan Saadia
Freelance automation, web & MVP developer
I'm Yehonatan Saadia, a senior developer who builds business automation, custom websites, and MVPs for small and mid-sized companies across the US, Europe, and Israel. These guides come from real client work, not theory.
Work with meHave a project like this?
Tell me what you're trying to automate or build and I'll tell you the fastest reliable way to ship it.
