Invoice Matching & Approval is where ERP discipline either begins or breaks.
Three-Way PO/Receipt/Invoice Match and Auto-Approval looks operational from far away. In a real finance team, it is a chain of assertions: the right actor started the work, the required records existed, the control policy was applied, the state change was preserved, and the outcome can be explained later without rebuilding the transaction from emails and spreadsheets.
The expected business outcome is specific: ≥ 90 % of invoice volume processed without manual touch; duplicate-work and late-payment penalties eliminated for matched invoices; full GL posting accuracy with zero orphaned accruals.
The control flow a finance team actually needs.
Step 1
Link Invoices To PO By Exact Or Fuzzy...
Step 2
Three-Way Match Compare Invoice Qty,...
Step 3
Configurable Tolerance Bands Per Vendor...
Step 4
Auto-Approve And Auto-Post When All...
Step 5
Route Non-Matching Lines To Exception...
The ERP surface involved.
Module
Invoice Matching & Approval
Actors
Accounts Payable Clerk, Receiving Clerk, Purchasing System, ERP Matching Engine
Tier
Tier 1
Finance area
Accounts Payable & Procure-to-Pay
Region lens
US and UK finance teams
Publication date
March 8, 2026
System must link invoices to PO by exact or fuzzy PO number match; three-way match must compare invoice qty, unit price, and extended amount against PO and GRN at line level; configurable tolerance bands per vendor class (absolute amount and percentage); auto-approve and auto-post when all lines match within tolerance; route non-matching lines to exception queue with diff detail; post matching journal entry atomically with invoice approval; support partial-receipt scenarios where GRN covers only a subset of invoice lines; audit trail records match result, tolerance applied, and approver identity; response time for match evaluation ≤ 2 seconds per invoice.
US and UK teams have different compliance hooks, but the same control problem.
US teams usually care about clean evidence for audit support, vendor records, payment controls, tax reporting, and management review. UK teams usually care about VAT-ready records, approval evidence, digital-record discipline, and traceable postings. The country-specific details differ, but the operating pattern is the same: the ERP needs controlled records, explicit ownership, defensible state changes, and evidence that survives beyond the person who completed the task.
The control matrix.
| Control area | Requirement | Acceptance proof |
|---|---|---|
| Control 1 | System must link invoices to PO by exact or fuzzy PO number match | Given a GRN and PO exist for the same lines |
| Control 2 | three-way match must compare invoice qty, unit price, and extended amount against PO and GRN at line level | when a vendor invoice is submitted with qty and unit_price within configured tolerance bands |
| Control 3 | configurable tolerance bands per vendor class (absolute amount and percentage | then the invoice is auto-approved, a matching JE (debit AP-accrual-reversal/expense, credit AP) is posted atomically, and invoice status is APPROVED |
| Control 4 | auto-approve and auto-post when all lines match within tolerance | negative) when any line exceeds tolerance then status is EXCEPTION and invoice is routed to exception queue with per-line diff detail, returning 422 with error code MATCH_TOLERANCE_EXCEEDED. |
| Control 5 | route non-matching lines to exception queue with diff detail | ≥ 90 % of invoice volume processed without manual touch; duplicate-work and late-payment penalties eliminated for matched invoices; full GL posting accuracy with zero orphaned accruals. |
| Control 6 | post matching journal entry atomically with invoice approval | ≥ 90 % of invoice volume processed without manual touch; duplicate-work and late-payment penalties eliminated for matched invoices; full GL posting accuracy with zero orphaned accruals. |
Audit evidence is a chain, not a folder.
| Evidence layer | What should be preserved |
|---|---|
| Business event | |
| Control rules | System must link invoices to PO by exact or fuzzy PO number match; three-way match must compare invoice qty, unit price, and extended amount against PO and GRN at line level; configurable tolerance bands per vendor class (absolute amount and percentage); auto-approve and auto-post when all lines match within tolerance; route non-matching lines to exception queue with diff detail; post matching journal entry atomically with invoice approval; support partial-receipt scenarios where GRN covers only a subset of invoice lines; audit trail records match result, tolerance applied, and approver identity; response time for match evaluation ≤ 2 seconds per invoice. |
| Acceptance proof | Given a GRN and PO exist for the same lines; when a vendor invoice is submitted with qty and unit_price within configured tolerance bands; then the invoice is auto-approved, a matching JE (debit AP-accrual-reversal/expense, credit AP) is posted atomically, and invoice status is APPROVED; (negative) when any line exceeds tolerance then status is EXCEPTION and invoice is routed to exception queue with per-line diff detail, returning 422 with error code MATCH_TOLERANCE_EXCEEDED. |
| Data record | |
| System event | |
| Lifecycle state | |
The useful version of this workflow is not only fast. It is inspectable. A controller, auditor, or operator should be able to move from source event to system record to state transition to final business outcome without guessing.
Implementation contracts.
Reference data model
`invoices` { id: string, vendor_id: string, po_id: string, status: enum(PENDING_MATCH|MATCHED|EXCEPTION|APPROVED|PAID|VOID), total_amount_minor: int64, currency_code: char(3), external_id: string }; `invoice_lines` { invoice_id, po_line_id, grn_line_id, qty: decimal, unit_price_minor: int64, match_result: enum(MATCHED|PRICE_VARIANCE|QTY_VARIANCE) }; `match_tolerances` { vendor_class, price_variance_pct, price_variance_amount_minor, qty_variance_pct }; (reference, product may differ).API and events
`POST /v1/invoices` { vendor_id, po_id, lines: [{po_line_id, grn_line_id, qty, unit_price_minor, currency_code}], external_id } -> 201 { id, status, match_result }; `GET /v1/invoices/{id}`; `GET /v1/invoices/{id}/match-result`; emits `ap.invoice.matched` or `ap.invoice.exception` event; idempotent via `external_id`.State transitions
`PENDING_MATCH -> MATCHED -> APPROVED -> SCHEDULED -> PAID`; branch `PENDING_MATCH -> EXCEPTION -> APPROVED` (after resolution); terminal `VOID`; guard: PAID invoice cannot transition to VOID without void-and-reissue workflow.Common implementation traps.
Treating the workflow as data entry
If the ERP only stores the final record, the team loses the decision trail that explains how the record became valid.
Hiding exception logic
Exceptions need owners, reason codes, and time stamps. A vague pending state is not a control.
Posting without recovery design
Retries, duplicate submissions, and partial failures must be explicit so the system does not create inconsistent records.
Skipping evidence design
A workflow that cannot produce evidence on demand will eventually push finance teams back into manual screenshots and spreadsheets.
Where Rivane fits.
Rivane is built for finance workflows where automation must stay tied to source documents, approvals, state transitions, ledger impact, reporting, and audit evidence. Use this guide as a checklist for evaluating whether an ERP workflow is merely digitized or actually controlled.
References and source basis.
These sources provide the standards, regulatory, or government context around the flow. They are included so the guide is useful to finance operators, auditors, and implementation teams, not only buyers reading software copy.