Segregation of duties for equipment-rental invoice review and payment
By RentalSpend ·
Separate rental confirmation, invoice review, approval, vendor-file changes, and payment release so one person cannot create, approve, and pay the same charge. A simple preparer/reviewer model can still reduce risk when headcount is tight.
On this page
The safest way to design segregation of duties for equipment-rental invoice review and payment is to make sure no one person can create the rental obligation, approve the invoice, change vendor details, and release the payment. For most contractors and industrial operators, that means separating the operational confirmation of the rental event and off-rent record, the invoice match and exception review, the approval of rate or date changes, and the payment run and vendor-master maintenance; if staffing is limited, use a preparer/reviewer model with independent checks and duplicate-payment testing rather than allowing one person to control the full process.[1][2][3][4][5]

Check these control points in your process
- Operational confirmation: someone in the field or equipment function confirms that the rental really started, the equipment was received, and the off-rent or return record exists before AP pays the invoice.
- Invoice matching: AP matches the invoice to the rental agreement, purchase order if used, delivery or receipt record, and off-rent confirmation, and holds anything that does not reconcile.
- Exception approval: a person with business authority reviews only the exceptions, such as rate changes, extra rental days, minimum charges, delivery or pickup charges, damage, fuel, protection-plan, or environmental fees.
- Payment release: the person who releases payment is different from the person who approved the invoice, entered the exception, or created the vendor record.
- Vendor-master maintenance: bank account, address, tax ID, remit-to, and similar changes are handled by a separate role and reviewed independently.
- Duplicate-payment testing: someone independent periodically looks for duplicates by vendor, invoice number, amount, and bank-account detail combinations.
- Audit trail: system roles, approval logs, and hold reasons are retained so you can see who matched, who approved, who changed, and who paid.
- Thresholds and escalation: small differences follow a defined tolerance, but anything outside the tolerance routes to a reviewer who can investigate without also paying the item.
What each role should do
A clean design starts with role ownership. The operational owner confirms that equipment was actually rented and when it went off rent. AP verifies the math and the document match. A supervisor, project manager, or equipment manager approves only the exceptions that need business judgment. Treasury, AP payments, or another independent clerk releases the funds. In many companies, that separation is easiest when the field team handles operational confirmation, AP handles matching, and finance handles payment.[1][3][5]
| Control point | Best owner | Why it should be separate |
|---|---|---|
| Rental request and booking | Project or equipment manager | This person creates the obligation and should not also approve the payment for it. |
| Delivery and off-rent confirmation | Field or equipment owner | This person knows whether the equipment was actually on site and when it came back. |
| Invoice matching and hold creation | AP | AP should verify the invoice against the contract and supporting records. |
| Exception approval | Manager with business authority | This person decides whether the charge is valid, but should not also release payment. |
| Vendor-master changes and payment release | Separate AP or treasury role | Keeping banking and payment access separate reduces the risk of unauthorized payments. |
Use the right documents for the match
For rental invoices, the most useful documents are usually the rental agreement, the invoice, the delivery or receipt record, and the off-rent or return confirmation. Terms vary by supplier, but the contract should tell you when charges start, when they stop, whether weekends or minimum periods apply, and which fees can appear outside base rent. If your supplier uses a digital portal or consolidated billing, make sure the reviewer can see the same support that the supplier used to build the bill.[5][6][7]
- Confirm the equipment, job, dates, and quantity on the invoice against the rental agreement or PO.
- Compare the billed start and stop dates with the delivery record and off-rent confirmation.
- Check whether the agreement allows minimums, weekend billing, pickup delay charges, or after-hours handling.
- Review add-on charges separately: delivery, pickup, damage, fuel, cleaning, environmental, or protection-plan items.
- Hold the invoice if the rate changed without documented approval or if the charge period does not align with the off-rent record.
Sources: [5]
If headcount is small, add compensating controls
Small AP teams often cannot give every step to a different person. If that is your situation, do not leave the process open-ended. Use a preparer/reviewer pattern: one person prepares the match, another person reviews exception items, and a third person outside AP performs periodic duplicate-payment testing and vendor-master review. That is not the same as full segregation, but it is stronger than one person doing everything.[4]
- The preparer can assemble the invoice packet, but should not approve or pay it.
- The reviewer can clear or reject exceptions, but should not create vendors or change bank details.
- Someone outside AP should sample or scan for duplicates weekly or monthly, depending on volume.
- Management should review a log of holds, short-pays, credits, and unresolved disputes.
What to do when something does not match
When the invoice does not match the contract or support, do not let the same person who found the issue also be the final approver and payer. Route the item to a separate reviewer, document the reason for the hold, and decide whether you need a corrected invoice, a credit memo, or a formal dispute. If the issue is a rate change or extra charge, ask for the supplier support that justifies it under your agreement. If the issue is a vendor-bank change or a duplicate, freeze payment until a second person confirms the facts.[1][2][3][5]
- Rate variance: confirm the signed rate sheet, contract amendment, or branch approval before paying the higher amount.
- Date variance: check whether the rental was actually off rent when the supplier says it was, and whether the confirmation number exists.
- Duplicate invoice: compare vendor, invoice number, amount, and bank detail combinations before allowing a second payment.
- Vendor change: require independent review of bank and remit-to changes before they reach the payment file.
- Unsupported fee: ask the supplier for the charge basis and hold the item until the support is attached to the invoice packet.
Practical next steps
Map your current rental workflow from request to payment and mark who can create, approve, edit, and pay at each step. Then assign one owner to operational confirmation, one to invoice matching, one to exception approval, and one to payment release, with vendor-master changes kept separate. Finally, add a recurring duplicate-payment review and a simple exception log so management can see where controls break down and where the process needs tighter separation.[1][2][3][4]
Common questions
Who should approve a rental invoice if the project manager ordered the equipment?
Use someone independent of the person who ordered it. The project manager can confirm whether the charge is valid as a business owner, but AP or treasury should still keep invoice matching and payment release separate.
Can the same person enter a vendor and process the payment?
That is a weak control and should be avoided. Vendor-master changes and payment release should be separate whenever possible, with an independent review of bank-detail changes.
What if we only have one AP person?
Use a preparer/reviewer approach and add compensating controls: documented exception approval, periodic duplicate-payment testing, and independent review of vendor changes and payment files.
Which records matter most for rental invoice review?
Start with the rental agreement or rate sheet, the invoice, the delivery or receipt record, and the off-rent or return confirmation. Add PO, tickets, or portal records if your supplier uses them.
How often should duplicate-payment testing run?
Match the frequency to volume and risk. Many teams do it weekly or monthly, but the right cadence depends on how many rental invoices you process and how much manual entry you still have.
RentalSpend checks equipment-rental invoices against your agreed rates. Start a free invoice audit to see what to review on your own invoices.
Start a free invoice auditRelated guides
Sources
- GTAG® Global Technology Audit Guide / data analysis technologies · The IIA
- GTAG 13: Fraud Prevention and Detection in an Automated World · The IIA
- Identifying Controls · The IIA
- Audit Reports: Communicating Assurance Engagement Results · The IIA
- Rental Service Terms - US (English) · United Rentals
- Total Control® Fleet & Worksite Management · United Rentals
- Digital Solutions - Invoice & Payment · United Rentals
This guide is general information, not legal or accounting advice. Rental terms differ by agreement and supplier; check your own contract and rate sheet.