# Auditing purchasing and supplier invoice processing > From purchase request to payment: matching, approvals above a threshold, bookkeeping, and risks, with bank details redacted on screen. Source : https://tellmehow.io/en/use-cases/procure-to-pay · Updated on : 2026-10-18 Requesters, buyers, receiving, and accounts payable each hold part of the cycle. TellMeHow interviews them, sees their screens, and rebuilds the process through to payment, with its approval thresholds and its risks. For a firm auditing a client’s purchasing cycle, TellMeHow runs voice interviews from purchase request to payment while seeing the shared screen, then rebuilds the process with its approval rules, matching steps, and risks, each finding linked to its evidence. ### A cycle full of assumed controls A department raises a purchase request, a buyer places the order, receiving checks the delivery, and accounts payable matches the invoice against the order and the receipt before scheduling payment. On paper, every step has its control. In practice, some invoices arrive with no purchase order, approvals above a threshold happen over email, and matching ends up in a spreadsheet. The process for changing supplier bank details is rarely documented at all. ### Why this process is hard to audit #### Risks hide in routine actions Changing a supplier’s IBAN on the strength of an email, with no call-back and no second approval, feels routine to the person doing it. It does not come up in a general question; it shows when you ask to see the supplier record. #### Matching slips outside the tools Price differences, partial deliveries, invoices with no order number: exceptions are often handled outside the ERP, with rules only accounts payable knows. #### Sensitive data on screen Showing the accounting software means displaying IBANs and third-party details. You need to see the process without exposing that data more than necessary. ### The approach, in four steps The guide comes from your method; TellMeHow follows it and adds what the screen reveals. #### Prepare the guide for the cycle Create one population per role in the cycle and make the topics that matter to you mandatory: approval thresholds, invoices without a purchase order, changes to supplier data. Set the demonstrations you expect. #### Watch the cycle in action Each participant takes the interview from their own desk, at their own pace. The AI interviewer asks to see an invoice being matched or a supplier record. IBANs and card numbers detected on screen are blurred by default before images reach the vision model. #### Surface rules and gaps The analysis rebuilds the cycle, records the thresholds actually applied, and compares them with what other teams describe. When two versions of the same approval conflict, it suggests a targeted follow-up. #### Deliver well-supported findings Publish under your brand the map of the cycle, the internal control risks found, estimated volumes, and opportunities, each backed by the excerpt or screenshot it rests on. ### Example: a business services group Illustrative example, not a client case. Business services group with 250 employees, four subsidiaries, and centralized accounting. - Requesters in operating teams - Purchasing - Accounts payable - Treasury - Stating the need and raising a purchase request - Ordering and receiving - Matching and exception handling - Approval and payment scheduling - Creating and changing suppliers - Matching an invoice to its order and receipt - Changing a supplier’s bank details Supplier IBANs are changed upon receipt of an email, with no call-back and no second approval. About 120 supplier invoices a month, a significant share of them received without an order number, according to two participants. Above €5,000, the invoice is approved by the subsidiary director, who signs a printed copy. ### What you deliver - The cycle from purchase request to payment, with its roles, tools, and actual approval thresholds. - The internal control risks found, such as IBAN changes without a second approval, each linked to its evidence. - Estimated volumes and durations, with their ranges and sources. - Opportunities prioritized by your scoring grid: paperless invoicing, automated matching, stronger controls. ### Frequently asked questions **How does TellMeHow protect IBANs visible on screen?** Before an image is sent to the vision model, TellMeHow detects sensitive data with rules, including IBANs and card numbers, and blurs those areas. Blurring is on by default and can be adjusted per engagement. No detection is perfect, and participants can also mask an area of their screen themselves. **Can TellMeHow replace an internal control audit?** No. TellMeHow collects and consolidates descriptions of processes from the people who run them, with evidence. It surfaces risks such as a missing approval, but assessing controls and making recommendations remain the firm’s work. **Can quantitative data be added to the interviews?** Yes. You can upload exports, such as a quarter’s invoice list, as engagement artifacts. The analysis uses them to confirm or qualify the volumes mentioned in interviews, and every passage it uses becomes citable evidence. **Can participants withdraw what they showed?** Yes. At the end of each chapter, participants review what the AI interviewer captured, correct or remove points, and can delete part of the recording. Anything removed disappears from the analysis, the evidence, and the deliverable. --- - Français : https://tellmehow.io/cas-usage/achats-factures-fournisseurs.md