Corporate Cards and Spend Controls for a Small Team

A corporate card does not control spending. It relocates the control. With reimbursement, somebody approves a purchase before the money moves; with a card, the money moves first and the review happens at month end, if it happens at all. That trade is usually worth making, but only if you build the month-end half. The company card that nobody reconciles is the most expensive control failure in a small Canadian business, and it is expensive quietly, over years.

The 60-second version

• Cards move approval from before the purchase to after it. If you do not staff the after, you have removed the control rather than improved it.
• Per-transaction limits matter more than monthly limits. They reintroduce a human decision exactly where the money is at risk.
• The statement is not a receipt. The Input Tax Credit Information Regulations require supplier details a statement does not carry [5].
• Capture at the point of sale, not at month end. Every day between purchase and capture is a day the receipt can vanish and the input tax credit with it.
• Personal charges on a company card are not neutral. They are non-deductible under 18(1)(h) and generally a taxable benefit under 6(1)(a) [1][4].
• Match every line, every month. An unmatched charge is an unsupported deduction waiting to be found by somebody else.

Should my team use corporate cards, reimbursement, or petty cash?

Choose by frequency and by who can afford to carry the float.

Reimbursement suits occasional, unpredictable spending. Its strength is that a human looks at each claim before payment, and its costs are real: the employee finances the business for weeks, claims arrive in unpredictable batches that distort your cash flow forecast, and input tax credits sit unclaimed until the paperwork arrives. Our employee expense reimbursement policy guide covers how to write the rules.

Corporate cards suit regular spending by people in roles that predictably incur costs. The business carries its own float, the transaction data arrives automatically, and nobody is subsidizing the company on a personal credit line. The cost is that the purchase happens before anyone reviews it.

Petty cash suits almost nothing in 2026. A proper float requires a named custodian, a written voucher per disbursement, and periodic surprise counts by someone other than the custodian. That is more control machinery than a low-limit card, and it produces paper instead of data.

How do I set card limits that actually hold?

Use three layers, and understand what each one is for.

The monthly limit caps total exposure per cardholder. Size it to the role, not to what the issuer offers. A technician who buys parts needs a different number than a salesperson who buys lunches, and neither needs the ceiling the bank will happily grant.

The per-transaction limit is the one that does the work. Set a threshold above which a purchase needs pre-approval, and make the approval a message that takes sixty seconds. Below the line, no friction. Above it, a human. Most spend control failures in small businesses are single large purchases that nobody would have approved if asked, not accumulations of small ones.

Category and merchant restrictions come from the card program where available. They are blunt and often frustrating, but a card restricted from cash advances and gambling has removed two categories of trouble permanently.

Then write the rules down, because a limit that exists only in the issuer portal is not a policy. The policy has to say who may spend, on what, up to how much, what needs pre-approval, when receipts are due, and what happens to a personal charge. The failure patterns are catalogued in our article on expense policy enforcement and why it fails.

What goes wrong with a card nobody reconciles?

Four things, all of them compounding.

Subscription drift. Tools renew annually after the person who needed them left. Nobody sees the charge because nobody reads the statement line by line, and the renewal is smaller than the threshold at which anyone would notice.

Personal charges that never get repaid. Usually accidental, the wrong card in a wallet. Left unrecorded, the business has deducted a personal expense, which paragraph 18(1)(h) does not allow [1], and the employee has received a benefit that paragraph 6(1)(a) generally includes in employment income [4]. CRA guide T4130 sets out the reporting obligation [6]. Where the cardholder is a shareholder, the analysis shifts to the shareholder rules, which is why our article on separating business and personal finances matters more for owner-operators than for staff.

Unsupported deductions. Charges with no receipt survive until somebody asks, and then they do not. The support standard is not the statement but the underlying document, as covered in CRA receipt requirements.

Lost input tax credits. The regulations prescribe the supplier information you must have before claiming an ITC, scaled by the value of the supply [5]. No receipt, no registration number, no claim. See our input tax credit guide for the thresholds and what each tier requires.

There is also a quieter category: fraud. Small teams tend to believe they are too small for it, which is precisely the condition under which it happens. Our article on expense fraud and internal controls covers separation of duties at the scale of four people.

Why does receipt capture have to happen at the point of sale?

Because the receipt is at its most available in the ninety seconds after the transaction and declines steadily from there. Thermal paper fades, a restaurant slip goes into a jacket, an email receipt gets filed by a mail rule. The failure is never dramatic. It is simply that the information required to support a deduction was destroyed by ordinary life.

The rule to enforce is that the receipt is captured before the cardholder leaves the counter. MapleExpense is designed around that moment: photograph the receipt, and MapleExpense reads the vendor, date, total and tax and attaches it to the card transaction, so the supporting document exists in the system from the day of purchase rather than being reconstructed at month end. Electronic images are acceptable records provided they are readable and retained properly, which our guide to going paperless with receipts and to six-year retention of digital receipts both cover.

Capture also carries the information that determines deductibility. A meal receipt without the business purpose and the attendees is just a meal, and section 67.1 limits the deduction for food, beverages and entertainment to a prescribed portion of the amount paid [3]. Capture the purpose at the same time as the image and the meals and entertainment rule becomes arithmetic rather than a year-end argument.

How does month-end card matching work?

Match three things for every line: the card transaction, the receipt, and the coding. A line is closed when all three agree.

The sequence that works is: pull the statement, auto-match receipts already captured, chase only the exceptions, code the matched lines to expense accounts consistently with your expense categorization approach, flag anything personal for repayment or payroll deduction in the current period, and then post. MapleExpense keeps every captured receipt in one place with the vendor, date, total and tax already read off the image, so working down the statement is a comparison rather than a data-entry job.

Two rules make the routine survive contact with a busy month. First, chase exceptions the same week, because a missing receipt found in seven days is usually recoverable and one found in seventy is not. Second, escalate unresolved items to a real consequence agreed in advance, whether that is withholding reimbursement of other claims or suspending the card. A deadline with no consequence is a suggestion.

Finally, remember section 67: even a genuine business outlay is deductible only to the extent it was reasonable in the circumstances [2]. Cards make unreasonable spending easy and invisible. Limits, receipts and a monthly match are what keep it visible, and visibility is the entire point of the exercise. Slot the card match into the fixed sequence in our month-end close checklist so it happens whether or not anyone remembers to ask.

Frequently asked questions

Are corporate cards better than employee reimbursement?

Corporate cards are better when spending is frequent, predictable and made by people you would not ask to carry business costs on personal credit. Reimbursement is better when spending is occasional and hard to predict, because it keeps a human approval step in front of every dollar. The real difference is where the control sits: a card moves approval to after the purchase, so it only works if someone reconciles the statement and chases missing receipts every single month.

What happens if an employee uses the company card for a personal purchase?

The purchase is not deductible to the business under paragraph 18(1)(h) of the Income Tax Act, and the amount generally becomes a taxable benefit to the employee under paragraph 6(1)(a) unless it is repaid. Where the cardholder is also a shareholder, subsection 15(1) or 15(2) may apply instead. The practical fix is a written rule that personal charges are repaid or payroll-deducted in the same pay period, and a reconciliation process that actually catches them.

Do I still need receipts if I have the credit card statement?

Yes. A card statement shows that money left an account; it does not show what was bought, who it was for, or how much GST/HST was charged. For income tax the supporting record must establish that the outlay was made to earn income, and for input tax credits the Input Tax Credit Information (GST/HST) Regulations prescribe specific supplier information that a statement does not carry. A statement is evidence of payment, not evidence of a deductible business expense.

What spending limits should I set on a company card?

Set three layers: a monthly credit limit sized to the role rather than to the bank offer, a per-transaction limit above which pre-approval is required, and category restrictions where the card program allows them. The per-transaction limit is the one that matters most, because it reintroduces a human decision before large or unusual purchases while leaving routine spending frictionless.

How many company cards should a small business issue?

Issue a card to every person who regularly spends on behalf of the business, and to nobody who does not. Under-issuing is a common and costly mistake: when staff are forced to use personal cards, the business creates a hidden payables backlog, delays its input tax credits, and pushes commingling into employees' personal accounts. Over-issuing is only a problem when reconciliation is not staffed for the extra volume.

What is the biggest risk with corporate cards in a small business?

The card nobody reconciles. Subscriptions renew after they stop being used, a compromised number keeps charging, personal purchases accumulate without repayment, and receipts go missing long enough that the input tax credits attached to them cannot be supported. The card itself is neutral; the absence of a monthly matching routine is what converts it into unmeasured spending and unsupported deductions.

When should a small business still use petty cash?

Almost never, and only for small cash outlays where cards are genuinely impractical, such as certain site or field purchases. Petty cash requires a custodian, a locked float, a written voucher for every disbursement and periodic counts by someone other than the custodian. That is more control work than a low-limit card, which produces a machine-readable record automatically.

Sources cited in this article

1. Income Tax Act, s. 18(1) (general limitations on deductions)
   Paragraph 18(1)(a) limits deductions to outlays made for the purpose of earning income; paragraph 18(1)(h) denies personal or living expenses.
   https://laws-lois.justice.gc.ca/eng/acts/I-3.3/section-18.html
2. Income Tax Act, s. 67 (reasonableness)
   No deduction is allowed for an outlay except to the extent that it was reasonable in the circumstances, regardless of business purpose.
   https://laws-lois.justice.gc.ca/eng/acts/I-3.3/section-67.html
3. Income Tax Act, s. 67.1 (meals and entertainment)
   Limits the deduction for food, beverages and entertainment to a prescribed portion of the amount paid, subject to specific exceptions.
   https://laws-lois.justice.gc.ca/eng/acts/I-3.3/section-67.1.html
4. Income Tax Act, s. 6(1)(a) (employment benefits)
   Includes in employment income the value of benefits received or enjoyed by an employee in respect of employment, subject to listed exceptions.
   https://laws-lois.justice.gc.ca/eng/acts/I-3.3/section-6.html
5. Input Tax Credit Information (GST/HST) Regulations, SOR/91-45
   Prescribes the supporting information a registrant must have before claiming an input tax credit, graduated by the value of the supply.
   https://laws-lois.justice.gc.ca/eng/regulations/SOR-91-45/
6. CRA, T4130 Employers' Guide: Taxable Benefits and Allowances
   How to determine, value and report taxable benefits and allowances, including employer-paid personal expenses.
   https://www.canada.ca/en/revenue-agency/services/forms-publications/publications/t4130.html
7. CRA, RC4022 General Information for GST/HST Registrants
   Covers input tax credit eligibility, documentary requirements and reporting periods for registrants.
   https://www.canada.ca/en/revenue-agency/services/forms-publications/publications/rc4022.html
8. CRA, Keeping records
   CRA guidance on adequate books and records, supporting documents, and electronic record keeping.
   https://www.canada.ca/en/revenue-agency/services/tax/businesses/topics/keeping-records.html

All sources verified 2026-09-23. Spotted a link that has moved? Email [email protected] and we will correct it.