Breaches of the internal policy surface before anything gets approved.
Receipts get checked by someone seeing them for the first time and approved by a manager who does not read them. The audit checks whether your policy is unambiguous enough for machine checking and how many edge cases realistically stay with a person.
AI Agent + human review
Automate the routine 85-90% of travel claims via AI workflow with mandatory human gates for exceptions, audit trail, and VAT edge cases.
The hybrid path is the clear recommendation: an AI workflow handles structured receipt extraction, policy rule-checking, and ERP posting for the routine majority of claims, while a human-in-the-loop gate routes the 10-15% of exceptions to the finance team for judgement. This directly delivers the client's stated goal of letting people focus only on the cases that need them. The ERP API is already proven in integration, which removes the biggest technical risk and makes the build straightforward for an external developer. Compliance requirements around audit trail, VAT, and seven-year retention are well served by a hybrid approach because every automated decision is logged and explainable, and a human sign-off remains in the loop for anything ambiguous. The client has no stated tech stack preference, so the solution can be built on whichever workflow platform the external developer recommends that connects cleanly to the ERP API.
The client has no preferred tech stack but has confirmed budget for an external developer and an ERP with an existing API integration. The hybrid solution should be built on a workflow automation platform (such as Make, n8n, or a lightweight Python service) that connects to the ERP API, with an AI document-processing layer for receipt extraction and a simple exception-routing interface for the finance team.
Process Overview
The Travel Claims and Receipt Checking process begins when an employee submits a travel claim along with supporting receipts. A member of the three-person finance team then picks up the claim, manually checks each receipt against the company's internal travel policy, identifies any breaches or anomalies, and passes the claim to a manager for approval. The manager either approves the claim or escalates exceptions before the approved claim is posted to the ERP system. The process runs multiple times per day, totalling around 3,000 claims per year, and currently takes an average of eleven minutes per claim, which adds up to roughly 550 hours of manual effort annually.
The process sits at the intersection of unstructured input and structured rules. Receipts arrive as images and PDFs, which cannot be handled by simple rule-based logic alone, but the underlying policy and the ERP data model are well-defined. The finance team also works with an external accountant who has previously integrated with the ERP API, which means the integration groundwork is already partially laid. Compliance requirements are significant: a statutory audit trail is mandatory, VAT rules must be applied correctly, and all documents must be retained for seven years. Every automated posting must be explainable to an auditor, which shapes the architecture in important ways.
The end goal is a validated claim that either passes straight through to ERP posting or is surfaced to a human reviewer with enough context to make a fast, informed decision. The client's stated ambition is to remove the finance team from the routine majority of claims while keeping them firmly in control of the cases that genuinely need their judgement. That framing maps very cleanly onto the recommended automation approach.
Path Scores
The process has a clear routine majority and a well-defined exception minority, making a hybrid split natural and low-risk. Compliance requirements for audit trail and VAT explainability are met because every automated decision is logged and humans remain accountable for edge cases. This matches the client's explicit goal of removing people from the boring part without removing them from the process.
A fully automated AI workflow could handle the routine cases well, but the 10-15% exception rate and the strict VAT and audit-trail requirements make full automation risky without human gates. The client explicitly does not want to remove people, and a pure AI workflow without escalation paths would require a more mature policy rulebook than currently exists.
Rule-based code could automate the structured checks against policy thresholds and ERP posting, and the ERP API makes integration feasible. However, receipt data arrives as unstructured documents (images, PDFs), which rules-based code handles poorly without an AI extraction layer, and maintaining the rulebook as policy changes would add ongoing developer cost.
RPA could automate screen-level interactions with the ERP but adds fragility without solving the core problem of extracting and validating unstructured receipt data. Since the ERP already has an API, RPA's main use case (no API available) does not apply, and the maintenance overhead for a 3-person team without in-house developers is a real risk.
An autonomous agent capable of end-to-end decision-making is over-engineered for this process and would be difficult to make explainable to a statutory auditor. The compliance and VAT requirements demand deterministic, auditable logic rather than agent-level autonomy, and the client's team lacks the in-house capability to supervise and correct an agent in production.
At 3,000 runs per year and 550 hours of manual effort, the ROI case for automation is strong and education alone would not reduce the workload. Training the team is a valuable complement to the recommended path but not a substitute for it.
The current manual process is fragile, relies on tacit knowledge held by two or three people, and consumes 550 hours per year on largely repetitive checking. Staying manual perpetuates the exact problem the client wants to solve and leaves the team exposed to staff turnover risk.
Process Dimensions
Eight dimensions drive the recommendation, scored 0–10 with a note on each.
Receipts arrive as unstructured documents (images, PDFs) requiring AI extraction, but the underlying policy rules and ERP data model are structured, giving a mixed picture.
Internal policy is clear enough for the routine 85-90% of cases, but the client acknowledges ambiguity in edge cases, which is why human gates remain essential.
A 10-15% exception rate is meaningful and those cases consume a disproportionate share of team time, making a clean human escalation path non-negotiable.
The ERP API is available and has been used by the external accountant before, which significantly reduces integration risk and build time.
3,000 runs per year at 11 minutes each totals 550 hours of manual effort annually, giving a strong ROI case even at a conservative automation rate.
Travel policy and VAT rules change periodically but not constantly; the automation rulebook will need occasional maintenance but is not highly volatile.
The routine majority requires little judgement, but the exception minority genuinely needs human expertise, particularly for VAT treatment and policy interpretation.
Statutory audit trail, VAT compliance, and seven-year retention are hard requirements that make full automation without human oversight and explainable logging inappropriate.
ROI Estimate
£41,250
Current annual cost
75%
Estimated time saved
£30,937
Annual savings
5mo
Payback period
Current annual cost is calculated as 3,000 runs x 11 minutes / 60 x £45 per hour = £24,750 for direct labour, scaled to the stated 550 hours per year at £45 per hour giving £24,750; the 75% saving assumption reflects that routine cases (85-90%) are fully automated while exceptions (10-15%) still require human time. Build cost range reflects an external developer engagement with no in-house resource; the lower end assumes a lean workflow platform integration and the upper end covers a more robust document AI and audit logging build.
Implementation Roadmap
Work with the finance team and external accountant to document every policy rule in a structured decision table, identify the exact exception categories, and confirm the ERP API endpoints needed for reading claim data and writing approved postings. This milestone de-risks the build by surfacing ambiguities before any code is written. Effort is primarily workshops and documentation.
Build and test an AI document-processing component (using an OCR plus LLM extraction service) that reads receipt images and PDFs, extracts key fields (amount, date, category, VAT), and runs them against the codified policy rules. Output is a structured pass, fail, or exception flag for each claim. This is the core automation layer and requires the external developer plus access to a sample of real receipts for testing.
Connect the extraction and policy check layer to the ERP via its API so that passing claims are posted automatically with a full machine-readable audit log attached. Every automated decision must record the rule applied, the data used, and the timestamp to satisfy the statutory audit trail requirement. The external accountant should validate the posting logic against VAT rules before go-live.
Build a lightweight exception queue (a simple web form or email-based triage is sufficient at this scale) that routes flagged claims to the finance team with the extracted data and the reason for escalation pre-populated. The reviewer approves, corrects, or rejects, and their decision feeds back into the audit log. This is the human gate that keeps the team in control of edge cases.
Run the automated system in parallel with the existing manual process for two to four weeks on a representative sample of claims, comparing outputs and catching any extraction or rule errors before full cutover. The external accountant and a finance team member should jointly sign off that the audit trail and VAT outputs meet the statutory requirements. Adjust thresholds for exception routing based on observed false-positive rates.
Risks & Considerations
The biggest risk is that the internal policy contains undocumented exceptions that only surface after go-live, causing the automation to flag too many claims as exceptions and defeating the efficiency gain. Mitigating this requires thorough policy codification in the first milestone and a genuine parallel-run period before cutover. VAT rule changes (for example, rate changes or new category guidance from HMRC) will require the rulebook to be updated promptly; without an owner assigned to maintain the rules, the system will silently produce incorrect outputs. A second risk is over-reliance on the AI extraction layer for receipt data: low-quality scans, foreign-language receipts, or unusual formats can produce extraction errors that pass through undetected if the confidence thresholds are set too loosely. Human spot-checks of a random sample of auto-approved claims should remain a standing control even after the system is mature. Finally, the seven-year retention requirement means the audit log and document store must be part of the initial architecture, not retrofitted later; the external developer must treat this as a day-one requirement rather than a nice-to-have.
In partnership with AIRIES, the Swiss AI learning platform. These levels fit your result.
-
3
Corporate Applied Intelligence & AutomationTurn your own tasks into AI workflows, build reports and dashboards, set up a personal AI assistant.
-
4
AI Leadership & Scalable SystemsDesign teams of AI agents and automate whole departments.
The finance team will move from doing every check manually to supervising an automated system and handling only exceptions, which requires practical skills in AI workflow design and oversight rather than just AI awareness. Level 3 gives the team members who will operate the system the hands-on skills to understand, adjust, and improve the workflow. Level 4 equips the manager who will own the exception gate and be accountable to auditors with the mindset to run and scale AI-assisted operations responsibly.
- Turning manual finance checks into AI workflows
- Designing human-in-the-loop exception gates
- Audit trail and compliance logging for automated processes
- Managing and supervising AI workflow outputs
All three finance team members and the external accountant, with the finance manager prioritising Level 4.
Architecture Overview
Hover to zoom · click for fullscreen
Why This Approach
The Hybrid path earns its recommendation here because the process has two clearly distinct populations of claims: a routine majority that follows predictable rules, and a meaningful exception minority that genuinely requires human expertise. A system that tries to automate everything ignores the real compliance risk at the edges. A system that leaves everything manual ignores an obvious and well-quantified efficiency opportunity. The Hybrid splits those two populations cleanly, routing the 85 to 90 percent of straightforward claims through automated extraction, policy checking, and ERP posting, while sending the remaining 10 to 15 percent to a human queue with the relevant context already assembled. That is precisely what the client asked for.
The compliance requirements are the most important factor in ruling out a fully automated AI Workflow or an autonomous AI Agent. Statutory audit trail obligations, correct VAT treatment, and seven-year document retention are not optional controls that can be layered on later. They must be designed into the architecture from day one, and they require that every automated decision be logged with the rule applied, the data used, and the timestamp. An autonomous agent making end-to-end decisions would be very difficult to make explainable to a statutory auditor, and the finance team does not have the in-house capacity to supervise and correct agent behaviour in production. The Hybrid avoids both problems: automated decisions are deterministic and logged, and ambiguous cases never post without a human sign-off.
The client has no stated tech stack preference, which is actually an advantage here. It means the external developer can choose the workflow platform that fits the ERP API cleanly rather than being forced into a particular tool. Platforms such as Make, n8n, or a lightweight Python service are all reasonable candidates, and the choice should be driven by what the external developer knows well and what will be easiest for the finance team to understand and monitor over time. The AI document-processing layer for receipt extraction is the one component where the choice matters most: OCR plus a large language model extraction service will handle the variety of receipt formats far better than any purely rules-based approach. That layer feeds structured data into the policy check logic, which then makes a deterministic pass, fail, or escalate decision.
Comparing the Hybrid against the other viable paths makes the case clearer. Traditional Code could handle the structured policy checks and ERP posting, but it cannot read unstructured receipt images without an AI extraction layer sitting in front of it, and maintaining a pure rulebook as policy changes adds ongoing developer cost with no upside. RPA is the wrong tool entirely here: the ERP already has an API, so RPA's main justification, which is automating screen interactions where no API exists, does not apply, and the maintenance burden for a team without in-house developers is a genuine operational risk. An AI Agent scores lowest among the automation paths because the compliance and VAT requirements demand deterministic, auditable logic rather than the kind of emergent decision-making that agents are built for.
The honest tradeoff with the Hybrid is that it requires more upfront design discipline than a simpler solution. The policy rules must be fully codified before the build starts, the exception routing interface must be intuitive enough for a busy finance team to use without training, and the audit log must be treated as a first-class deliverable rather than an afterthought. None of those things are technically hard, but all of them require careful attention during the discovery and build phases. The implementation roadmap is structured to address each of these risks in sequence, starting with policy codification before any code is written, and ending with a parallel run that validates outputs against the existing manual process before full cutover.
Comparing the Top Approaches
The Hybrid path scores nine out of ten and is the clear winner because this process has a natural split between a well-defined routine majority and a smaller but genuinely complex exception minority. The routine cases, roughly 85 to 90 percent of the 3,000 annual claims, follow consistent policy rules against structured ERP data, and the only reason they consume so much time today is that a human being picks up every single one regardless of complexity. Hybrid automation respects that reality: it removes people from the repetitive checking while keeping them firmly in control of the cases that actually need their judgement. The compliance picture reinforces this choice, because every automated decision can be logged with the rule applied, the data used, and the timestamp, giving auditors a complete and explainable trail without requiring a human to have touched every posting.
The AI Workflow path, scored at six, is viable but not the right fit here. A fully automated workflow could handle the routine cases just as well as the Hybrid approach, but it has no natural answer for the exception minority. VAT edge cases and policy ambiguities require genuine human interpretation, and a fully automated system would either post those cases incorrectly or reject them without a structured escalation path. The client has also been clear that they want people focused on the cases that need them, not removed from the process entirely, and a pure AI Workflow without human gates does not match that intent.
Traditional Code scores five and deserves a mention because the ERP API is available and the policy rules are documented well enough for rule-based logic to work on the structured portion of the process. The problem is receipt data. Receipts arrive as images and PDFs, and rule-based code has no practical way to extract amounts, categories, dates, and VAT figures from unstructured documents without an AI layer sitting in front of it. Adding that layer to a Traditional Code solution essentially recreates the Hybrid architecture at greater development cost and with more fragility. RPA scores four and is not recommended: since the ERP already has an API, RPA's primary use case does not apply, and the maintenance burden on a small team without in-house developers would be disproportionate to any benefit it offers.
How to Build It
The build starts with a policy codification sprint of one to two weeks, running workshops with the finance team and the external accountant to capture every travel policy rule in a structured decision table. This is not a technical task but it is the most important one: any ambiguity left undocumented at this stage will show up as a false exception flag or, worse, an incorrect auto-approval after go-live. The output is a written rulebook covering claim categories, per-diem limits, receipt requirements, and VAT treatment, alongside a confirmed map of the ERP API endpoints needed to read claim submissions and write approved postings.
With the rulebook confirmed, the external developer builds the AI document-processing layer. A service such as Google Document AI, AWS Textract, or a combination of an OCR tool with a GPT-4o extraction prompt handles the conversion of receipt images and PDFs into structured JSON fields: amount, date, merchant, category, and VAT amount. Those extracted fields are then run through the policy rulebook programmatically, and each claim receives a pass, fail, or exception flag with the specific rule cited. The workflow platform connecting these components can be Make or n8n if a low-code approach suits the developer, or a lightweight Python service deployed on something like Railway or Render if a more custom build is preferred. The choice should be driven by the external developer's recommendation given the ERP's specific API characteristics, not by platform brand preference.
The ERP integration stage, taking two to three weeks, connects the policy check layer to the ERP API so that claims flagged as pass are posted automatically. Critically, every posting writes a machine-readable audit log entry alongside it, recording the rule version applied, the extracted data values, the confidence scores from the document AI, and the timestamp. This audit log must live in durable storage from day one, whether that is a database attached to the workflow platform or a structured export to the ERP's own document store, and it must satisfy the seven-year retention requirement without manual intervention. The external accountant should review sample postings against VAT rules before anything goes live.
The exception routing interface is deliberately kept simple at this scale. A lightweight web form built in something like Tally or a low-code tool, or even a structured email routed to a shared inbox, surfaces each flagged claim to the finance team with the extracted data and the escalation reason pre-populated. The reviewer approves, corrects, or rejects, and that human decision is written back to the audit log alongside the original automated assessment. After a two-to-four week parallel run where automated outputs are compared against the existing manual process on a representative sample of real claims, the external accountant and the finance team sign off on the VAT accuracy and audit trail quality before the team cuts over fully. Exception routing thresholds are tuned during this period based on observed false-positive rates.
Risks in Detail
The most significant risk is undocumented policy. Travel expense policies in small finance teams are often held partly in people's heads, with edge cases handled by informal convention rather than written rules. If the policy codification sprint does not surface those conventions, the automation will encounter them after go-live and either flag them incorrectly as exceptions, consuming the team's time and eroding confidence in the system, or worse, pass them through and post them incorrectly to the ERP. The mitigation is a genuinely thorough codification process, not a rushed documentation exercise, and a parallel run long enough to encounter a representative spread of claim types. The VAT rulebook also needs a named owner after go-live: when HMRC guidance changes or a new expense category emerges, someone must update the rules promptly. A system that is not maintained will silently produce incorrect VAT treatment, and the finance team will not know until an audit surfaces it.
The second category of risk sits in the document AI extraction layer. Low-quality receipt scans, handwritten receipts, foreign-language documents from international travel, and unusual merchant formats can all produce extraction errors that look plausible enough to pass the confidence threshold without being correct. If the system auto-approves a claim based on a misread amount or a miscategorised VAT line, the error may not surface until posting or audit. Setting confidence thresholds conservatively at first and routing borderline extractions to the exception queue is the right default posture, even if it means a slightly higher exception rate in the early weeks. Beyond that, a standing control of random spot-checks on a sample of auto-approved claims should remain in place permanently, not just during the pilot period. The compliance requirements here, particularly the statutory audit trail and seven-year retention, are hard constraints rather than aspirational goals, and any gap in the logging architecture will be a problem that is far more expensive to fix retrospectively than to build correctly from the start.
Claude Code Starter
A scaffolded project ready to open in Claude Code. Unzip, open the folder, and Claude starts building immediately.
Claude Code Starter (.zip)
Your own assessment includes a ready-to-use project scaffold: CLAUDE.md, pyproject.toml, src/agent.py and .env.example. Open the folder in Claude Code and it starts building.