7 Rules for a Corporate Card Policy That Keeps Your Books Clean

7 Rules for a Corporate Card Policy That Keeps Your Books Clean

Here is the math nobody runs before issuing cards to the team.

Every uncategorized charge costs you twice. Once when your bookkeeper chases it, and again when someone has to fix the coding after the chase produces a shrug. And the chase happens three weeks after the purchase, which is roughly three weeks after anyone remembers what a $340 charge at a hotel in Denver was for.

Ten cards at fifteen mystery charges a month is a part-time job you did not know you hired for. A corporate card policy is not a bureaucracy problem. It is the difference between books that close on the tenth and books that close whenever the last receipt turns up.

Seven rules, in the order they matter.

1. A Corporate Card Policy Starts With What the Card Is For

A card with no stated purpose becomes a general-purpose spending instrument, and the policy gets written after the damage instead of before it.

Write one sentence per card, or per card type, that names what it is for. The sales team card is for travel and client meals. The ops card is for software subscriptions and shipping. The founder card is for everything else and gets reviewed monthly.

This sounds trivial. It is the control that makes every rule after it enforceable, because "is this an appropriate charge" becomes a question with an answer instead of a judgment call about someone's character.

2. Set the Limits at the Card, Not in the Handbook

A policy that says "use good judgment on purchases over $500" is not a limit. It is a hope.

Modern card platforms let you set per-transaction caps, monthly caps, and merchant category restrictions at the card level. Use all three. A card that physically cannot spend $4,000 at once never generates the conversation about why it did.

Merchant category controls are the second lock and the one most teams skip. A card restricted to software and advertising categories cannot buy a flight, which means nobody has to police whether the flight was reasonable.

The tradeoff is friction. Set the limits too tight and you will spend your week approving exceptions, which trains everyone to route around the system. Set them where they catch the outlier, not the ordinary.

3. Require the Receipt at the Moment of Purchase

Month-end receipt collection does not work. It has never worked. It will not start working because you send a firmer email.

The rule that works is that the charge itself is the reminder. Card platforms push a notification within seconds of the swipe, and the receipt gets photographed then, while the person is still standing at the counter and still knows what they bought.

Set the policy as: receipt and business purpose attached within 24 hours, or the card is paused. Automated, not personal. The pause is the enforcement, and it only has to happen once or twice before the behavior sticks.

4. Write the Substantiation Rule the Way the IRS Does

Most receipt policies capture the wrong thing. A photo of a receipt proves an amount was spent. It does not establish that the expense was deductible.

For business meals and travel, the substantiation rules under Section 274(d) and the related regulations generally require the amount, the time and date, the place, the business purpose, and, for meals, the business relationship of the people present. A picture of a dinner receipt with no note attached is an incomplete record.

What most teams capture	What a substantiated record contains
Photo of the receipt	Photo of the receipt
Amount and merchant from the card feed	Amount, date, and place
Category picked at month end	Specific business purpose, written at the time
Nothing about attendees	Names and business relationship of who was there
Coding by guess	Coding tied to the stated purpose

Two more things worth knowing. The Tax Cuts and Jobs Act eliminated the deduction for business entertainment, so the game of coding a sporting event as a client meeting does not work. And business meals are generally subject to a partial deduction limit rather than being fully deductible, with narrow exceptions, so the coding matters at filing time and not just for tidiness.

Build the fields into the app. Amount and date come from the feed automatically. Purpose and attendees are two boxes someone types in for ten seconds.

5. Name the Personal-Charge Procedure in Advance

Somebody is going to buy groceries on the company card. It will be an accident the first time.

Have the procedure written before it happens: flag it, reimburse it by a stated date, and code it to a due-from-employee account rather than burying it in an expense category. That is a five-minute cleanup instead of a discovery six months later.

For owners, this is more than tidiness. Personal spending run through a company card can raise questions about whether the amount is a distribution, additional compensation, or a nondeductible personal expense, and in an entity with more than one owner it can create a real disagreement. The bookkeeping treatment and the tax treatment are two different questions, and both get harder the longer the charges sit uncorrected.

6. Map the Merchants Once, Then Review Exceptions

Coding every line by hand is how bookkeeping hours grow faster than revenue.

Set the merchant-to-account mapping once, so recurring vendors code themselves. Then your monthly review is not a thousand lines. It is the twenty transactions the rules could not match, which is exactly where the interesting items live anyway.

The caution: rules go stale. A vendor changes its billing descriptor, or a card gets used for something outside its usual category, and the rule confidently miscodes it. Review the mapping quarterly rather than treating it as permanent.

7. Close the Loop Monthly, With a Name and a Cutoff

A policy with no consequence is a suggestion.

Name one person who owns the monthly card review. Set a hard cutoff date. Publish what happens when the cutoff passes, and let it happen. Pause the card, hold the reimbursement, escalate to the manager, whatever fits your culture, but pick one and apply it consistently.

Consistency is doing most of the work here. The policy that is enforced unevenly is worse than no policy, because it teaches the team that the rule depends on who is asking.

When Your Corporate Card Policy Outgrows the Spare Afternoon

The moment a company goes from two cards to ten is usually the moment bookkeeping hours jump and nobody can explain why. The cause is almost never the volume of spending. It is the volume of unexplained spending.

Ever Ledger is a Sam's List accounting and fractional CFO firm founded in 2024 and based in Los Angeles, working with real estate investors, small business owners, solopreneurs, and clients with multi-state filing requirements. Setting up card mapping, receipt enforcement, and a monthly review calendar is the kind of recurring process work that tends to need an owner outside the founder's calendar.

Ever Ledger has 10 verified client reviews on Sam's List as of 2026-08-06. Reviews reflect the experiences of individual clients, do not represent an endorsement by Sam's List, and are not indicative of future results.

A clean card policy reduces bookkeeping cost and audit exposure. It does not make an expense deductible that would not otherwise be, and it does not substitute for a conversation with your accountant about how a specific category should be treated. Confirm scope and fit before engaging, and compare firms in the Sam's List bookkeeper directory.

Frequently Asked Questions

What should a corporate card policy actually include? At minimum: what each card is for, per-transaction and monthly limits, which merchant categories are allowed, the receipt and business-purpose requirement with a deadline, the procedure for personal charges, who reviews the statement each month, and what happens when someone misses the cutoff. Everything else is elaboration.

Do I need to keep paper receipts if the charge shows on the card statement? A card statement establishes that money moved. It does not establish the business purpose, the attendees, or the nature of the expense, which is what the substantiation rules for meals and travel generally require. Digital images are broadly acceptable, so the practical answer is to capture the receipt plus a written purpose in the card app and skip the shoebox.

How should personal charges on a company card be recorded? Flag the charge, code it to a receivable or due-from-employee account rather than an expense category, and collect the reimbursement by a stated date. For an owner, the correct treatment can differ depending on entity type and whether the amount is repaid, so raise a pattern of personal charges with your accountant rather than deciding the classification yourself.

When is a company too small for a corporate card policy? The threshold is not headcount, it is the number of people who can spend. One founder with one card needs a habit, not a policy. The second cardholder is where a written rule starts paying for itself, because that is the point at which somebody has to explain a charge to somebody else.

---

About the author: Kimberly Green is the cofounder of Sam's List, where business owners and high earners find vetted CPAs, financial advisors, and fractional CFOs. She's met one-on-one with 400+ financial professionals and writes from the real data behind thousands of client-advisor matches. Ask her anything about finding an accountant - she's heard it all, including the questions people are afraid to ask.