Approval Matrix Template: Set Rules by Amount, Risk, and Department
Use this approval matrix template to route decisions by request type, amount, risk, department, backup approver, escalation rule, and required documentation.

What is an approval matrix template?
An approval matrix template is a reusable table, often called a schedule of authority, that maps request type, conditions, and approvers so decisions route to the right person at the right time. Nutrient describes an approval matrix as a table of business rules for routing approval tasks based on preset conditions, and notes that it is sometimes called a schedule of authority. A useful template includes amount threshold, risk level, department, primary and backup approvers, escalation rules, required documentation, and audit status.
Leading workflow platforms define an approval matrix template as a workflow document that standardizes who is authorized to approve specific actions, decisions, or documents. Common workflow guidance describes the basic version as decision categories down the left side, roles across the top, and authority limits in each cell. The stronger version captures the rules that change the route.
That distinction matters in daily operations. A directory of approvers is not a matrix. A matrix says, “If this request is for this department, above this threshold, with this risk trigger, then route it here, require these documents, and escalate after this deadline.”
A useful approval matrix does not only answer who approves. It explains why the request belongs on that path.
What should your approval matrix template include?
Your approval matrix template should include the workflow name, department, request type, amount threshold, risk level, primary approver, backup approver, approval type, escalation rule, required documentation, audit status, and review owner. Common approval matrix template fields include threshold, primary approver, backup approver, escalation rule, and required documentation, while leading workflow platforms highlight authority levels, department permissions, escalation protocols, and compliance requirements.
| Field | What to capture | Example |
|---|---|---|
| Workflow name | Keep each matrix tied to one process | Purchase approval workflow |
| Department | The function that owns the request or budget | Procurement, Finance, HR, Sales, Legal |
| Request type | The decision category | Purchase order, vendor invoice, new hire, contract, expense report |
| Amount threshold | The dollar band or non-dollar limit that changes authority | Under $5,000, over $50,000, or company-set bands |
| Risk level | The risk trigger that changes the route | New vendor, regulated contract, emergency purchase, policy exception |
| Primary approver | The role with decision authority | Department manager, budget owner, CFO, legal reviewer |
| Backup approver | The named role that approves when the primary is unavailable | Deputy manager, finance controller, HR director |
| Approval type | How decisions happen | Sequential, parallel, or conditional |
| Escalation rule | When and where stalled requests move | Escalate after the company’s approval deadline |
| Required documentation | Files or evidence required before approval | Quote, invoice, job requisition, contract, business case |
| Audit trail and status | How the organization proves what happened | Submitted, approved, rejected, escalated, withdrawn |
| Review owner | Who maintains the matrix | Finance operations, HR operations, procurement owner |
Those fields match common guidance from leading workflow platforms: strong approval matrices define authority levels, department permissions, escalation protocols, compliance requirements, backup approvers, required documentation, and the type of approval process. Industry best practice describes sequential, parallel, and conditional approval as common approval matrix patterns.
If you already have an approval workflow template, use this matrix as the rules layer. The workflow shows the path. The matrix explains the authority logic behind each turn.
How do you build an approval matrix one workflow at a time?
Build an approval matrix by choosing one workflow, listing request types, defining the conditions that change approval authority, assigning decision-makers, adding backups and escalation rules, testing sample requests, and publishing one maintained version. BILL recommends designing a matrix for just one workflow to avoid confusion and keep it easy to follow.
- Name the workflow. Start with one process, such as purchase orders, expense reports, hiring requisitions, vendor contracts, or document review. BILL lists vendor invoices, employee hiring, capital expenditures, purchase orders, and expense reports as common uses for approval matrices.
- List decision categories. For procurement, this might include office supplies, software licenses, equipment, and capital expenditures. For HR, it might include backfill hires, new headcount, compensation exceptions, and offer letters.
- Define condition columns. At minimum, use amount threshold, department, risk level, and request type. If the workflow touches regulated data, vendors, customer terms, or headcount, add a compliance or policy-exception flag.
- Assign authority by role, not by person. Use “Finance Director” or “HR Business Partner,” not “Maya,” unless the organization is very small. Role-based matrices survive vacations, promotions, and reporting-line changes.
- Add backup and escalation rules. A matrix without backups becomes a bottleneck. A matrix without escalation teaches people to chase approvals in chat.
- Require evidence before approval. Do not let approvers make decisions from thin descriptions. Require a quote, invoice, contract draft, hiring plan, policy exception note, or business case before the approval can proceed.
- Test with real examples. Run a small purchase, a large purchase, a new vendor, an urgent request, a department transfer, and a missing-document case. If two operators route the same request differently, the matrix is not clear enough.
- Publish one source of truth and set a review cadence. The owner should review the matrix after org changes, policy changes, budget resets, or repeated escalations.
How should rules change by amount, risk, and department?
Approval rules should change when a request crosses a financial threshold, creates extra business risk, or belongs to a department with specialized review needs. Moxo describes approval authority as a framework based on criteria such as roles, responsibilities, and financial thresholds. Amount sets the authority level. Risk sets the control depth. Department decides who has the context to judge the request.
Amount thresholds set the approval authority ladder
Amount-based approval is the easiest part of the matrix to explain and the easiest to abuse. Industry best practice gives a procurement example where purchases under $5,000 require only a department manager, while anything over $50,000 needs CFO sign-off. Common workflow guidance states the broader rule: higher dollar amounts typically require higher-ranking approvers.
Use those thresholds as a pattern, not your permanent policy. Your actual limits should match budget size, cash controls, fraud risk, and governance requirements. A 40-person services firm and a 1,500-person manufacturer should not share the same authority ladder.
| Amount rule | Typical authority logic | Approval path | Control note |
|---|---|---|---|
| Under $5,000 | Manager-level authority can cover low-value procurement in Moxo’s cited example | Requester to department manager | Still require a quote or receipt when policy calls for it |
| Company middle band | Authority moves above the manager when spend exceeds the manager cap | Manager to department head or finance owner | Use your budget policy to set this band |
| Over $50,000 | Moxo’s cited procurement example sends large purchases to the CFO | Manager to finance leader to CFO | Consider board review if your governance policy requires it |
| Any amount with high risk | Risk can override dollar value | Manager to specialist reviewer to finance or executive approver | New vendor, emergency spend, or regulated work should trigger extra review |
Risk triggers prevent low-dollar mistakes from slipping through
A $900 software tool can carry more risk than a $4,000 office purchase if it stores customer data, creates a long contract commitment, or duplicates a system the company already uses. The matrix should tell requesters when dollar limits are not enough.
- New vendor: require vendor onboarding, tax or banking verification, and finance review before payment or purchase approval.
- Emergency purchase: route to the budget owner and finance, then log the reason so urgency does not become a loophole.
- Regulated contract: add legal, compliance, security, or data review before signature.
- Above-headcount hire: add finance and executive approval even if the hiring manager has budget authority.
- Policy exception: require written rationale and an approver outside the requester’s chain when independence matters.
Department rules keep specialists in the decision
Department-based routing is where many matrices get sloppy. Moxo describes approval matrices as useful across procurement, finance, HR, and project management. Procurement needs supplier and budget controls. Finance needs expense and invoice controls. HR needs headcount, compensation, and policy controls. Project teams need scope, timeline, and resource controls. Content and legal review need brand, contractual, or compliance sign-off.
For deeper spend examples, pair this matrix with a dedicated purchase approval workflow so operators can see how purchase requests move from requester to manager, finance, and executive review.

What are practical approval matrix examples for spend, hiring, discounts, and policy exceptions?
Practical approval matrix examples should show the rule, not just the approver. For each row, state the request type, threshold or risk trigger, approval path, required documentation, and escalation rule. Use separate rows for procurement, vendor contracts, software, travel, hiring, discounts, projects, and content review.
| Department | Request type | Trigger | Approval path | Required documentation | Escalation rule |
|---|---|---|---|---|---|
| Procurement | Purchase order | Under $5,000 and standard vendor | Requester to department manager | Quote or purchase request | Backup manager if primary is unavailable |
| Procurement | Capital expenditure | Over $50,000 | Manager to finance leader to CFO | Business case, quote, budget confirmation | Escalate to CFO office after the company deadline |
| Finance | Vendor invoice | Amount matches approved purchase order | Budget owner to finance approver | Invoice and purchase order | Route to finance controller if mismatch appears |
| Finance | Travel expense report | Inside travel policy | Manager to finance review | Receipts and trip purpose | Return to requester if documents are missing |
| IT or Operations | Software license | New system, new vendor, or data access | Manager to budget owner to security or finance reviewer | Business need, vendor details, data-use note | Escalate to operations owner when risk review stalls |
| HR | Backfill hire | Role replaces an approved seat | Hiring manager to HR to finance if compensation changes | Job requisition and compensation range | Route to HR director if headcount status is unclear |
| HR | Above-headcount hire | New seat outside plan | Hiring manager to HR to finance to executive approver | Business case, budget impact, org placement | Escalate to executive staff review |
| Sales | Customer discount | Discount outside standard sales policy | Sales manager to finance or revenue owner | Deal terms and margin note | Escalate before quote expiration |
| Project Management | Project approval | Budget, scope, or timeline exceeds plan | Project owner to department head to finance if budget changes | Project brief, budget, timeline | Route to steering owner if unresolved |
| Legal or Content | Contract or public content review | Nonstandard terms, claims, regulated content, or customer commitments | Owner to legal, compliance, or brand reviewer | Draft, source material, risk note | Escalate to legal lead for high-risk language |
Notice the table avoids a common failure mode: “Legal approves contracts.” That is too vague to run. The useful row says when legal joins, what they review, which document they need, and where the request goes if it stalls.
For hiring, connect the matrix to your job requisition approval process. The requisition should prove that the role is approved, funded, placed in the org structure, and routed to the right decision-makers before recruiting begins.
Which approval model fits each approval rule?
Use sequential approval when authority follows a hierarchy, parallel approval when several specialists can review at the same time, and conditional approval when routing depends on amount, risk, department, vendor status, or project type. Industry best practice describes sequential, parallel, and conditional approval as common approval matrix patterns, and common workflow guidance describes parallel approval as a process where multiple decision-makers review a request at the same time.
| Approval model | Best fit | Example | Watch for |
|---|---|---|---|
| Sequential | Spend authority, hierarchy-based decisions, executive sign-off | Manager approves first, then finance, then CFO for over $50,000 | Slow chains if every request climbs too high |
| Parallel | Cross-functional review where reviewers do not depend on each other | Legal, security, and finance review a software contract at the same time | Conflicting feedback unless one owner consolidates the decision |
| Conditional | Rules that change based on amount, risk, department, vendor, or project type | Known vendor under manager cap goes to manager; new vendor adds finance review | Hidden exceptions if conditions are not written clearly |
Most mature matrices use all three. A purchase request can start conditionally, move sequentially through the authority ladder, and send legal or security review in parallel when the vendor or contract creates risk.
Document review works the same way. A routine policy update might go from owner to HR. A customer-facing contract, compliance statement, or regulated claim might add legal review. A dedicated document approval workflow keeps those paths visible.
How do you create an approval matrix in a spreadsheet without letting it decay?
Create a spreadsheet approval matrix by putting request types down the rows, conditions and limits across the columns, and approver roles in the cells. Tallyfy describes the basic spreadsheet structure as decision categories, roles, and authority limits; it also warns that spreadsheet-based matrices can break down through errors and maintenance problems.
A spreadsheet is a reasonable starting point when the company is small, the workflow is stable, and one owner maintains the file. It breaks down when people save local copies, add exceptions in comments, or forget to update approvers after a reorg.
The hidden risk is not only formula error. It is behavior. If people do not trust the matrix, they ask around. Once approval paths move into private messages, the company loses auditability and speed.
When should you automate an approval matrix instead of using a spreadsheet?
Automate an approval matrix when routing depends on multiple conditions, approvers miss requests, evidence is required before approval, audit trails matter, or the matrix changes with the org chart. At that point, the real problem is not the template. It is enforcing the rules every time.
The automation threshold usually shows up as friction before it shows up as risk. Finance asks why managers approved above their limit. HR waits on headcount approvals no one owns. Legal sees contracts after the commercial promise is already made. Operations spends time chasing instead of improving the process.
- Move beyond a spreadsheet when more than one condition controls routing, such as amount plus vendor status plus department.
- Automate when requests need documents before approval, not after.
- Automate when backup approvers and escalations are part of the policy, not informal favors.
- Automate when audit evidence must show who approved, when they approved, and which documents they reviewed.
- Automate when org changes frequently and approver resolution depends on manager, group, grade, or department.
In Cogniver, a directed-graph workflow builder can turn a matrix into branching approval paths with multi-step chains, required document uploads, and an AI workflow agent that routes and chases approvers. If you are evaluating tools, use an approval workflow software checklist that tests routing, escalation, documentation, and audit needs against your real matrix.
Build an approval matrix rule as a live workflow
A miniature of Cogniver's visual workflow builder with demo data: steps drop onto the canvas, connectors wire the branches, and a request routes itself to approval under rules your team sets. Hover or tap any AI step to see the rules it follows; a human can always override. Real builders add escalation windows, document requirements, and AI routing.
Do not automate bad rules. First clean the matrix. Remove duplicate approvers, define the actual threshold bands, add backup ownership, and test the strange cases: emergency request, missing document, new vendor, policy exception, and executive approver out of office.
How Cogniver helps you turn an approval matrix template into live approval workflows
Cogniver turns the approval matrix from a reference table into the operating path itself. Purchase, leave, and document approvals route through a visual builder, so the amount rule, department rule, risk branch, and approval chain live where requests actually move. The directed-graph builder supports branching, merging, and multi-step approval chains.
For matrix controls that depend on evidence, steps can require document uploads before an approval proceeds. That matters for invoices, contracts, expense reports, hiring documents, and policy exceptions where the approver should not be allowed to decide from a vague description.
Every workflow gets its own isolated AI agent. Org admins train that agent on the workflow’s rules and configuration, then the agent answers questions, routes requests, and chases approvers so people do not have to. An AI agent can also sit as an approver step inside the flow itself.
Cogniver also keeps approver resolution tied to the same org chart other modules use. Groups and grades on the chart drive approver resolution and module access, while drag-and-drop org changes keep the structure readable as the company grows.
Frequently asked questions
What is the difference between an approval matrix and a delegation of authority matrix?
An approval matrix maps request types, conditions, approvers, and routing rules for a workflow. A delegation of authority matrix focuses on who has authority to approve decisions within defined limits. In practice, many companies use the terms together, especially for spend, contracts, hiring, and policy exceptions.
Who should approve purchases at different dollar amounts?
Moxo gives a simple procurement pattern: purchases under $5,000 can go to a department manager, while purchases over $50,000 can require CFO sign-off. Treat those as example thresholds. Your final limits should reflect budget size, risk, cash controls, and governance requirements.
How do risk levels affect approval routing?
Risk levels add controls beyond dollar value. A new vendor, regulated contract, emergency purchase, above-headcount hire, or policy exception should trigger extra approvers, documentation, or specialist review even when the amount is low.
What is the difference between sequential, parallel, and conditional approvals?
Sequential approvals move step by step through a chain, such as manager to finance to CFO. Parallel approvals send the request to multiple reviewers at the same time. Conditional approvals change the path based on rules such as amount, department, vendor status, risk level, or project type.
When should a company automate an approval matrix?
Automate when routing depends on several conditions, approvers need reminders, documents must be collected before approval, audit trails matter, or org changes make spreadsheet maintenance unreliable. The goal is to make the matrix self-enforcing instead of advisory.


