Business payment cards · 1% donated on every transaction
EXPENSES

Company expense policy: structure and spending limits

How to structure a company expense policy: eligibility, spending limits by profile, approval workflows, enforcement, corporate cards and expense report software.

Without written rules, every expense becomes a negotiation. The sales rep who pays €45 for a client lunch, the CFO who approves a four-star hotel, the HR manager who buys office supplies out of pocket. If nothing governs these decisions, accounting ends up arbitrating case by case, at the cost of wasted time and recurring friction. A company expense policy exists precisely to move beyond guesswork: a short, enforceable document that states what is eligible, up to how much, and who approves it. Here is how to structure one that protects cash flow without slowing your teams down.


Three key takeaways:
  • An expense policy rests on four pillars: eligibility (what), spending limits (how much, by category and profile), approval workflow (who controls) and enforcement (what happens when rules are breached).
  • Spending limits should be segmented by role and seniority level, not by individual. Otherwise accounting spends its time managing exceptions.
  • The policy is worthless without enforcement tools: a corporate card and expense report software that apply the rules at every transaction.

What an expense policy is for

An expense policy (sometimes called an "expense charter" or "professional expense guidelines") is a document drafted by accounting or HR that governs costs incurred by employees on behalf of the company[1]. Its purpose is not micromanagement. It is the opposite: set a clear framework so employees know what they can spend without asking, and finance knows what to reimburse without debate.

In practice, it achieves three things. First, cost control: without a ceiling, excessive spending becomes the norm — a €50 business lunch gradually becomes the average. Second, eliminating abusive behaviour and personal misuse, which expose the company to tax and social security reclassification. Third, securing VAT recovery and correct accounting treatment: without a compliant receipt and clear eligibility rules, VAT simply cannot be reclaimed.

The four pillars of a solid policy

A sustainable expense policy rests on four pillars. Skip any one of them, and the entire system cracks at the first disputed claim.

1. Eligibility rules. This is the list of what is permitted and what is not: travel costs, business meals, accommodation, mileage reimbursement, office supplies, client gifts. Also specify what is excluded in principle: personal expenses, fines, luxury goods, alcohol outside a professional context. Eligibility is qualitative ("economy class for journeys under 2 hours"), and it sets the stage for spending limits, which are quantitative.

2. Spending limits by category and profile. See the next section. This is the core of the policy.

3. Approval workflow. Every expense above a threshold must be approved by a line manager and reviewed by finance. The key principle of internal control is segregation of duties: the person who authorises an expense must not be the person who records it or pays it[2]. Combine any two of these three functions in the same individual and you open the door to fraud — fictitious purchases, fake suppliers, concealed duplicate payments.

4. Enforcement and non-compliance handling. A policy without consequences is a suggestion. Define what happens: partial reimbursement (the portion above the limit stays with the employee), outright rejection, and for repeat offences or clear misuse, disciplinary action up to and including dismissal. Case law recognises fraudulent use of a corporate card as serious misconduct[3]. The framework must be written, communicated to all employees, and applied consistently.

Core principle

Always separate the three functions: authorisation, recording, payment. No single person should hold two of these three functions on the same transaction: this is the minimum control that prevents an individual from initiating, approving, or concealing an operation.

Setting spending limits: by category, profile and geography

Spending limits are where a policy lives or dies. The golden rule: segment by role and seniority, never by individual. A sales director, a field sales rep and an inside sales rep do not have the same spending needs[4]. Distinguishing these profiles allows for fair, appropriate rules, and prevents support teams from having to memorise individual rules for every employee.

For meals, which account for more than a quarter of all employee expense claims, a proven method is to calculate the limit from actual spending: the average meal spend over six months, multiplied by 1.5[4]. Above that limit, reimbursement is partial — the excess stays with the employee. Refine further between lunch and dinner (typically €20 at lunch, €26 for dinner) and, crucially, state in black and white that overspending will not be reimbursed.

Three other segmentation levers are worth configuring. First, geography: a meal capped at €20 in regional cities can rise to €27 in Paris or €35 abroad, to account for the cost of living without penalising the employee[4]. Second, expense category: transport, accommodation, plus meals follow different logics: for transport, quantitative rules (a train ticket capped at €100 for a given route) work better than qualitative ones ("economy class"), since first-class tickets can now be cheaper than economy on some routes. Third, the approval threshold: below €X, automatic submission. Above it, mandatory line-manager approval.

ProfileMeal limit lunch / dinnerAccommodationApproval trigger
Inside sales€15 / €20N/A (limited travel)Any expense > €50
Field sales rep€20 / €26€90 (regional) / €130 (Paris)Meals & hotel auto, transport > €150
Executive (C-suite)€30 / €35€180Higher threshold, post-hoc review
HR / support€15 / €20€80Office supply purchase > €100

These figures are illustrative. The point is to demonstrate the mechanics. Same role = same rules: that is the condition for accounting to process expense reports without reopening every file, and for avoiding tension between employees in similar positions.

Compliance considerations: VAT and social security risk

A well-maintained expense policy is not just an internal management tool — it is also a tax and social security shield. On the VAT side: VAT on an expense report is only deductible if the expense is business-related, supported by a compliant invoice, and gives rise to a right of deduction for the company. A poorly documented expense report or one missing its receipt means no VAT recovery, and in the event of an audit, a risk of reassessment with penalties[5].

On the social security side, the risk is subtler. A reimbursed expense with no direct link to a business activity, or one that exceeds the exemption thresholds, can be reclassified as a benefit in kind and added back into the social security contribution base[6]. Typical examples: a meal reimbursed in full with no business justification, or a meal allowance above the exemption ceiling. Reclassification costs twice: additional employer contributions and the social tax. An expense policy that requires a business purpose and caps allowances neutralises this risk upstream.

Watch out

A non-business expense report can become a benefit in kind. Without a written policy requiring a business purpose and supporting documentation, social security authorities may add the expense back into the contribution base, triggering a reassessment and penalties.

Profile-based rule examples

To make this tangible, here is how rules translate across three very different profiles: the sales rep, the finance director and the HR function. These profiles have distinct expense types, limits, as well as approval workflows: that is precisely what segmentation is designed to capture.

The field sales rep. This is the profile that incurs the most expenses: fuel or fleet management, tolls, client meals, overnight stays. Their rules rest on per-category limits (€20 lunch, €90 hotel in regional cities), a dedicated fuel card with a monthly per-vehicle cap, and mileage reimbursement at the applicable tax rate. The approval trigger focuses primarily on client meals and entertainment, which often exceed the standard limit and must be justified (client name, purpose). The characteristic risk: creeping client meal inflation — hence the importance of the 1.5× average cap.

The CFO. Higher limits (€30/€35 for meals, €180 for accommodation) and lower travel frequency, but larger individual amounts. The critical point here is not the limit. It is traceability and cost-centre allocation: the CFO must be able to allocate every expense to the correct cost centre or project. For this profile, the policy typically requires an expense management solution with a payment card that automatically feeds the right budget line, rather than manual entry prone to errors.

HR and support teams. Limited travel, occasional expenses: office supplies, shipping, internal events, sometimes training. Their rules focus less on meal limits than on the procurement workflow: purchases via a preferred supplier where possible, and above a threshold (often €100), a purchase order approved by the line manager. The characteristic temptation: undeclared micro-purchases that add up over the year, hence the value of a corporate card with per-transaction limits and category blocking for ineligible spend.

Enforcement tools: corporate cards and expense report software

A written policy without tooling is a dead policy. The moment it actually takes effect is at the transaction — not at the accounting review stage, which comes too late. Two levers do the work.

First, the corporate card. A properly configured corporate payment card is the most powerful tool for enforcing the policy in real time: monthly limit per cardholder, per-transaction limit, blocking of ineligible merchant categories (MCC codes: casinos, dating, certain leisure categories), per-department limits. The card physically prevents what the policy prohibits on paper. The employee cannot spend because they cannot pay. On the fraud prevention side, the card also enables remote blocking, real-time transaction monitoring and anomaly detection.

Second, expense report software. A configurable expense report solution embeds the policy directly into the submission workflow: it alerts the claimant when a limit is exceeded, blocks certain categories based on the employee's role, automatically calculates VAT (including multi-rate VAT, as on a hotel bill), and notifies the correct approver according to the reporting line[4]. The benefit is not just control: it also recovers accounting time and eliminates the back-and-forth of "your claim is over the limit, please resubmit."

The three levels of expense control Where does control take effect? Transaction Submission / Expense report Accounting review Manual post-hoc Preventive expense software Blocking corporate card The earlier control acts, the less fraud and error get through. The closer control is to the transaction, the more preventive, rather than corrective, it becomes.
The corporate card acts at the exact moment of the transaction (blocking). Expense software acts at submission (preventive). Accounting review only acts after the fact (corrective). Prevention beats correction.

The ideal, of course, is the combination: the card enforces limits and blocks categories at the transaction, while the software handles receipts and the approval chain. That is what the Greenway suite offers: a corporate card and expense management platform run from a single back-office, with eligibility rules and limits configured by profile, native analytical reporting, and 1% of every transaction donated through the 1%ForAll® programme.

Implementing and maintaining the policy over time

A few principles for an expense policy that holds up over time. Keep it short. A thirty-page charter nobody reads is useless: aim for a one-to-two-page document, easy to read, with a limit schedule as an appendix. Communicate it to everyone — formal acknowledgement at onboarding and at each update, as this is the condition for enforceability. Apply it consistently: a rule waived for a senior executive loses all authority. And review it every year, in light of actual spending and inflation: a meal limit set in 2022 has become unrealistic by 2026.

For ongoing management, track three simple metrics: the out-of-policy claim rate (the percentage of expense reports rejected or clipped, a rising figure is a warning sign), average reimbursement turnaround (a long delay demotivates claimants and pushes them to front their own cash), and effective VAT recovery (the ratio between theoretical deductible VAT and VAT actually recovered, a gap signals missing receipts). These three metrics give you an instant read on whether your policy is respected, runs smoothly and stays tax-efficient.

Frequently asked questions

What is a company expense policy?

It is a document, typically drafted by accounting or HR, that governs costs incurred by employees on behalf of the company: what is eligible, spending limits by category, required documentation and reimbursement procedures[1]. Its purpose: eliminate misuse and simplify administrative management.

How do you set a business meal spending limit?

A proven method is to calculate the average meal spend over six months and multiply by 1.5[4]. Above that limit, reimbursement is partial. Refine further between lunch and dinner (typically €20 at lunch, €26 for dinner).

Should spending limits differ by employee profile?

Yes, that is the recommendation: segment by role and seniority (field sales rep, executive, HR…), not by individual. Individual rules create tension between employees and increase the accounting workload[4].

What is segregation of duties in internal control?

It is the principle that the person who authorises an expense must not be the same person who records it or pays it[2]. Combining any two of these three functions in one individual opens the door to fraud: fictitious purchases, fake suppliers, concealed duplicate payments.

Can an expense report become a benefit in kind?

Yes. A reimbursed expense with no direct link to a business activity, or one above the exemption thresholds, can be reclassified as a benefit in kind and added back into the social security contribution base[6]. An expense policy neutralises this risk by requiring a business purpose and capping allowances.

What tools help enforce an expense policy?

Two complementary levers: a configured corporate card (per-cardholder and per-transaction limits, blocking of ineligible categories) that acts at the point of transaction, and expense report software that applies the rules at submission and notifies approvers. The combination makes the policy executable rather than decorative.

Pillar article: this guide is part of our expense management white paper, which connects expense policy, digital transformation, professional payment cards and VAT recovery.

References

  1. Lucca, Expense policy: how to define and customise it (expense charter, eligibility, limits, supporting documents). lucca.fr. ↩
  2. Trustpair, Segregation of duties: a barrier against fraud (separation of authorisation, execution and recording functions in the procurement cycle). trustpair.com. ↩
  3. Gdroit, Unlawful use of a card by its holder (penalties and disciplinary misconduct in cases of corporate card misuse). gdroit.fr. ↩
  4. N2F, Expense policy: how to segment professional expenses by employee type (segmentation by role/seniority, meal limit calculation at 1.5× average, geographic limits, expense software). n2f.com. ↩
  5. Emburse, Expense reports: definition, rules, VAT, social security: 2026 guide (VAT deduction conditions and reassessment risk). emburse.com. ↩
  6. Manager.one, When does an expense report become a benefit in kind? (reclassification as benefit in kind and reinstatement into the social security contribution base). manager.one. ↩

Related reads

Let's talk about your payment programme.
Response within 48 h · dedicated onboarding
Request a demonstration

The newsletter that sheds light on your spend.

One email a month: our best guides, no spam. One-click unsubscribe.