Invoice approval with a digital workflow: from the manager's signature to the audit trail

The manager's physical signature worked for decades with 30 invoices a month and a single approver. Today volume arrives by email, several managers approve by amount and the auditor asks for traceability of every step. The handwritten signature no longer scales.

This article describes the operational design of a digital approval workflow: tiers, segregation of duties, audit trail and connection with touchless AP. No marketing. What a CFO can implement at a Spanish SME.

Why the physical signature stops scaling

The classic process has four weak points:

• Personal bottleneck. If the approver is travelling, the invoice waits. Late payment or lost discount.
• Zero traceability. A signature on paper does not say when it was signed or what was compared before.
• Role mixing. Whoever requests the purchase is often the one who approves. A classic weakness COSO identifies.
• Document loss. The invoice gets misfiled and reappears with a different recording date.

AEAT requires internal control to ensure integrity and authenticity of the received invoice. Without traceability, justifying it is hard.

Classic vs digital flow

The difference is easier to see in a table.

Stage	Classic flow (paper)	Digital flow
Receipt	Email → print → physical tray	Single inbox → automatic ingestion
Data capture	Manual re-keying into ERP	Structured OCR/IDP, signed data first
Validation	Visual matching against filed PO	Automatic line-by-line three-way matching
Approval	Manager's handwritten signature	Approval by amount and category, with timestamp
Payment	Manual, uncertain date	Scheduled at due date
Filing	Physical folder + later scan	Digital repository with e-signature
Audit	Reconstruct the trail after the fact	Audit trail always available

The critical change is not getting rid of paper. It is that each decision is recorded with who, when and against what data.

Approval tiers and segregation of duties

A digital workflow stands on two pillars:

1. Tiers by amount. Three tiers cover 95% of SME cases:

Tier	Amount (pre-VAT)	Approver	SLA
L1	EUR 0-1,000	Department head	24 business hours
L2	EUR 1,000-10,000	Head + CFO	48 business hours
L3	> EUR 10,000	CFO + CEO	72 business hours

The amounts are indicative. The universal rule is that the approver's limit covers their contractual spending power and no more.

2. Segregation of duties. Whoever orders does not approve. The COSO internal control framework is clear: separate authorisation, recording and custody. In a small SME, segregation is softened with a compensating control: the final approver is not the buyer and a fourth eye (CFO) reviews everything over a threshold.

Typical roles

• Buyer: issues the PO, receives goods, records the delivery note. Does not approve the invoice.
• Approver L1/L2/L3: validates that the invoice matches what was agreed and authorises payment.
• Administration / AP: records the invoice, does not decide amounts, executes the scheduled payment.
• Auditor (internal or external): reads, does not write.

Digital vs paper audit trail

A defensible audit trail needs these fields per event:

• Invoice ID + PO ID + delivery note ID.
• User executing the action (not a generic role).
• Exact action: ingested, matched, approved L1, approved L2, rejected, payment scheduled, paid.
• UTC timestamp with second precision.
• Immutable document hash or reference of the approved document.
• Mandatory comment field on rejections and out-of-tolerance approvals.

An external audit asks three things: who approved, when and against what data. If the three fit on one screen, the control is well designed.

Workflow integration with touchless AP

Approval does not live in isolation. It fits within the full accounts payable process:

1. Ingestion from Gmail with dedupe by hash.
2. Structured reading of PDF, XML and FacturaE.
3. Three-way matching line by line against PO and delivery note.
4. Routing by amount and category to the right approver.
5. One-click approval with audit trail.
6. Export to Holded, Sage or A3 for accounting record.
7. Scheduled payment at due date.

When matching is clean (zero line-by-line variance), the invoice can be approved automatically up to the L1 threshold without human intervention. IOFM publishes annual benchmarks: top-quartile teams approve in hours, not weeks.

Approval and Spanish tax compliance

Three regulatory fronts touching the flow:

• SII (AEAT). Invoices in the ledgers are reported in 4 business days. A traceable digital flow meets the deadline without a marathon.
• Verifactu. Verifiable invoicing system. The receiver approving must be able to validate the Verifactu QR on the payer side. The audit trail captures QR and hash.
• Crea y Crece (Law 18/2022). Mandates B2B e-invoicing. Anyone with a digital workflow has a smooth transition.

The control AEAT expects (integrity, authenticity, legibility, retention) is generated by a digital workflow out of the box.

Risks of not having a digital workflow

It is not just efficiency. There are quantifiable risks:

• Duplicate payment. Without digital dedupe, the same PDF gets paid twice.
• Fraud. IBAN changes without traceability, fake invoices, overcharges netted across lines.
• Lost discounts. Prompt-payment terms expire before the invoice reaches the approver.
• SII penalties. Reporting out of deadline costs money per invoice.
• Audit findings. "Missing approval evidence" is typical when there is only a handwritten signature.

Example: SME with 300 invoices/month

Distributor with 25 employees, 300 invoices/month and one admin person. Here is the flow:

1. Single inbox invoices@company.com connected to the system. Zero manual forwarding.
2. Each invoice is cross-checked with PO and delivery note. The variance-free block passes as touchless candidate.
3. Below EUR 1,000 with zero variance: automatic approval for recurring catalogue suppliers.
4. Exceptions route to the right manager: procurement for price variance, warehouse for quantity, CFO for > EUR 1,000.
5. Each step records user, timestamp and document reference.
6. Month-end: the auditor reads the audit trail in a single report.

The bottleneck shifts from "who signs" to "who resolves exceptions".

Controller checklist before rollout

• Current map of the approval flow: who signs what and since when.
• Amount tiers defined in writing and approved by the board.
• Approver list with backups for holidays and absences.
• Clear segregation policy: buyer ≠ approver.
• Documented three-way matching tolerance (2% / EUR 1.50 OR-mode by default).
• Migration plan: which suppliers go first (top 20 by volume).
• Filing plan: how prior paper invoices coexist with the digital flow.
• Connection with accounting (Holded, Sage, A3) and bank for scheduled payments.
• Approver training: what variance and duplicate flags mean.
• Quarterly review of the approval matrix.

Frequently asked questions

Do I need a qualified e-signature to approve invoices internally?

Not for internal approval. Authenticity is guaranteed by the system through login, audit trail and access control. The qualified signature applies to the issuer in B2G e-invoicing and, progressively, B2B with Crea y Crece.

How do I cover segregation if I only have two people in administration?

With compensating controls. The system separates roles even if the people are few: the tool prevents a PO creator from approving the associated invoice and requires a fourth eye (CFO or manager) above a threshold.

What if the L2 approver is on holiday?

A backup is configured with the same authority. The audit trail records that the approval is signed by the backup and why. With no backup, the SLA fires and the system escalates to the higher level.

Does it work for paper invoices arriving by postal mail?

It does. They are digitised by scanning and enter the same flow. The AEAT accepts certified digitisation as a substitute for the original.

What benchmarks does IOFM use to evaluate workflow maturity?

Touchless processing rate, cost per invoice, average approval-to-payment cycle, exception percentage, duplicate detection rate. They publish percentile ranges; top-quartile approves in hours and processes most untouched.

Who decides the amounts for each tier?

The board or financial leadership. Best to formalise them in a signed spending policy reviewed annually. The system only executes what the policy defines.

How does the digital auditor fit with a human auditor?

The digital auditor does not replace the external one. It hands over the full trail in a queryable format. The human validates samples and conclusions; the digital provides the evidence.

Three things to remember

1. The digital flow stands on tiers by amount + segregation of duties + audit trail. All three at once. Miss one and the control is weak.
2. The shift to digital is not archiving PDFs. It is recording every decision with who, when and against what data.
3. Start with the top 20 suppliers. They cover 80% of volume and let you test the flow risk-free. Then extend.

To see how all this fits on your real invoices, try ininvoice. You can also check pricing and features.

Related content

• Three-way matching: cross-checking invoice, PO and delivery note line by line
• Touchless accounts payable: what it means and how to measure it
• Price variance between invoice and PO: how to compute it