Skip to content
Enjoy complimentary data migration when switching from your existing bookkeeper or CPA to Institution.

Choosing a provider

Test a business card's spending controls before relying on its limits

Inspect card and cardholder rules, merchant categories, time boundaries and later adjustments so finance understands what an authorization control can enforce.

By Institution5 minute readPublished View sources
In this guide

Turn the spending policy into testable decisions

A card limit can control a transaction, a period, a particular card or a person holding several cards. Before selecting a card-management platform, state which decision the company expects the control to make. A monthly budget shown on a dashboard does not establish that an authorization exceeding it will be declined.

Write a few representative rules in plain language. For example, a particular employee may need a total travel allowance across cards while a dedicated subscription card has a separate per-purchase limit. Identify the amount, scope, time period and permitted exceptions for each rule.

Ask the vendor to demonstrate those rules in its supported test environment. Do not use uncontrolled live purchases to discover what the program permits. The demonstration should include an expected approval, an expected decline and a case where two rules overlap.

Keep purchase authorization separate from accounting approval. A card transaction that passes the issuing controls may still need a receipt, business-purpose review and correct ledger classification. The software proposal should describe which of these stages it performs and how the results connect.

Find the scope and precedence of each limit

Stripe's Issuing documentation provides examples of controls at both card and cardholder level, with the most restrictive overlapping control applying in its system. It also describes category and country restrictions. These product-specific rules illustrate why the buyer needs to inspect scope and precedence rather than compare only advertised limit features.

Create two test cards for one person and apply the intended combined allowance. Spend through each using supported simulations and inspect the shared remaining amount. A separate limit on each card can permit more total spending than a company intended for the person.

Use a hypothetical $500 monthly allowance and a $200 per-authorization limit. A $250 test authorization should fail the per-authorization rule even when the monthly allowance is untouched. Two approved $180 authorizations would leave $140 under the monthly amount before any other transactions or adjustments in this simplified example.

Test a replacement card and a newly issued additional card. Ask which historical spending follows each and which settings are inherited. The buyer should know whether replacing a damaged card preserves the intended allowance or requires an administrator to repair the control manually.

References: Stripe: Issuing spending controls and limitations

Understand what a merchant restriction identifies

Ask the provider to show the merchant information available at authorization and the exact field used for a restriction. A merchant category, merchant country and specific merchant identifier are different concepts. The company's policy should be translated into the controls the program actually supports.

Use examples where a merchant sells several kinds of goods or where the name on a statement differs from the trading name employees recognize. Determine how the administrator investigates an unexpected approval or decline. The platform should make the relevant authorization evidence available without encouraging guesses about the merchant's classification.

Check the difference between allowing selected categories and blocking selected categories. In one design, unlisted categories are excluded; in the other, they may remain permitted. Have the ordinary administrator explain the configured behavior before relying on it.

Identify features that are limited to a preview, a particular program or separately approved access. A salesperson's demonstration of a merchant-specific restriction should not be treated as a standard entitlement unless the proposal confirms availability for the company's program.

Challenge timing and later settlement amounts

Find the time zone and boundary used to reset a daily, weekly or monthly allowance. Stripe's documentation, for example, uses midnight UTC for date-based intervals. The relevant business day for an employee elsewhere can therefore differ from the control's accounting interval.

Test two supported authorizations near the chosen boundary and inspect their assigned periods. The purpose is to explain the actual rule, not to encourage employees to work around it. Finance should decide whether the available interval fits the company's policy or needs another review control.

Ask how pending authorizations, reversals, refunds and expired holds affect availability. A released hold and a settled refund can be different events. The employee and administrator should be able to understand why displayed availability changes without assuming that every correction immediately restores the full amount.

Stripe also notes that spend aggregation can lag and that later tips or fees can cause a limit to be exceeded. Use the proposed provider's documented limitations to define what the control can promise. Ask it to demonstrate supported cases involving later amount changes and explain how finance receives the final transaction.

References: Stripe: Issuing spending controls and limitations

Inspect declines and temporary exceptions

Trigger a deliberate decline in the test environment and view it as the employee, administrator and support team. The message should help the authorized person identify the relevant rule without exposing unnecessary information. A generic payment failed message can send employees to the merchant when the company control caused the result.

Demonstrate a temporary approved increase with an expiry or defined reversal process. Record who requested it, who authorized it and what changed. An exception that stays active indefinitely can become a permanent policy change nobody intended.

Check the permissions for changing limits, replacing cards and modifying cardholder assignments. Those actions should fit the company's administration model. A manager who can approve a business expense does not automatically need unrestricted access to all program settings.

Ask how the company reviews repeated declines and recurring exceptions. The pattern may indicate an unsuitable policy, a merchant-data problem or employee behavior needing follow-up. The software should provide the evidence needed to distinguish those explanations.

Accept the control with its known limits

Retain the rules, test outcomes and documented exceptions from the evaluation. Have an internal administrator reproduce a small subset after configuration. This gives finance evidence that the purchased program matches the demonstration and that the team can maintain it.

Include any required approval workflow, real-time authorization service or reporting component in the commercial scope. Clarify support responsibility when a transaction fails because of a company rule, issuer decision or another part of the payment chain.

Choose the platform whose controls fit the company's actual spending decisions and whose limitations are understandable. The goal is a reliable authorization boundary combined with visible exceptions and normal expense review, supported by evidence about what the system approved and why.

Sources

Requirements and product details can change. Check the linked guidance for the facts that apply to your situation.

Related reading

Need help with this work?

General information, not personalized accounting, tax, legal, or investment advice. Have the appropriate qualified professional review decisions that depend on your circumstances.