Every hotel runs on purchasing. Food and beverage, operating supplies, linens, maintenance and repair, contract services, technology, and utilities all flow through the purchasing and accounts payable function. Across a full year, that spend represents one of the largest controllable cost categories at the property.
It is also the process most likely to be managed informally. Many properties operate without an approved vendor list, without purchase orders, without competitive bidding thresholds, and without a systematic match between what was ordered, what was received, and what is being paid. When those controls are missing, money leaves the property in small, repeated increments that never trigger an alarm.
Why Purchasing Is Your Most Exposed Process
Three characteristics make purchasing uniquely vulnerable. First, the volume of transactions is high, which makes individual exceptions hard to notice. Second, the people closest to the spending, department managers and purchasing staff, often have both the authority to commit spend and the knowledge to work around whatever controls exist. Third, the financial impact is invisible in normal reporting. An overcharge does not appear as an exception on a P&L. It simply appears as a slightly higher cost of goods sold that nobody questions.
That combination produces the pattern we see repeatedly in hotel audit engagements: significant cumulative leakage that was never detected because no one was ever comparing what should have been paid to what actually was.
The Gaps That Leak the Most Money
No Approved Vendor List
When any department can source from any supplier, the property loses volume leverage and pricing discipline at the same time. An approved vendor list concentrates spend, which strengthens negotiating position, and it ensures every supplier has been vetted for pricing, insurance, and reliability. Without it, comparable goods are bought at several different prices depending on who ordered them.
Verbal Orders and Unauthorized Purchases
Verbal orders are the most common control failure in hotel purchasing. When goods arrive that were never formally requested or approved, the property loses the ability to verify price in advance, confirm the purchase was necessary, or hold anyone accountable for the commitment. The invoice then arrives and is paid because the goods are already on site.
Purchasing Without Competitive Bids
Recurring services and large purchases should be periodically re-bid. In practice, many vendor relationships are established once and then continue for years without competitive review. Market pricing moves, and a rate that was competitive when signed may be well above current market. Without a bidding threshold that forces periodic competition, those relationships drift upward unchallenged.
Receiving Without Verification
This is the quietest gap of all. When delivery acceptance is handled by whoever is available rather than by a defined procedure, there is no reliable confirmation that the quantity and quality invoiced is what actually arrived. A delivery that consistently arrives short of the invoiced amount is a direct loss on every cycle, and it will never appear anywhere in the financial statements.
Invoice Approval Without a Three-Way Match
The three-way match compares the purchase order, the receiving record, and the vendor invoice before payment. When any of the three is missing, the match cannot happen and the invoice is typically approved on the strength of the vendor's paperwork alone. That is how duplicate invoices, price increases above contracted rates, and charges for goods never received all get paid.
Department-Level Autonomy Without Limits
Managers need the ability to spend to run their departments. The problem is autonomy without limits. When there is no dollar threshold above which approval is required, no requirement to route purchases through a central function, and no visibility at the ownership level into who is spending what, the property loses both cost control and procurement integrity.
What a Controlled Purchasing Process Looks Like
A well-designed purchasing cycle is straightforward. It does not require expensive software, though a system helps at scale. It requires that five steps happen in order, every time:
- Requisition. A department identifies a need and submits a formal request.
- Purchase order. The purchasing function sources the item from an approved vendor at an agreed price and issues a numbered PO.
- Receiving. Goods are counted and inspected against the PO by someone independent of the person who ordered them, and the receipt is documented.
- Three-way match. Accounts payable matches PO, receipt, and invoice before approving payment.
- Payment. The invoice is paid only when all three documents agree.
The discipline is not in the design. It is in the consistency. A process that is followed most of the time is functionally the same as no process at all, because the exceptions are exactly where the losses occur.
Setting Approval Thresholds That Actually Work
Approval thresholds should scale with the property and should be low enough to catch meaningful spend. A common structure routes small routine purchases through the department head, mid-range purchases through the purchasing manager or controller, and larger commitments through the general manager or ownership representative. The specific figures matter less than having defined thresholds, documenting who approved what, and reviewing the pattern of approvals periodically for anomalies.
The Vendor Relationship Risk Nobody Talks About
Purchasing authority creates the opportunity for inappropriate vendor relationships. Kickbacks, gifts, and undisclosed personal interests in supplier businesses are difficult to detect through normal reporting because they leave no obvious trace. They surface through transaction pattern analysis: a vendor that consistently wins without competition, pricing that runs above market, or a purchasing employee unusually resistant to process changes. This is one of the specific areas our loss prevention work examines, and it is a reason purchasing controls matter beyond simple cost savings.
Auditing Your Purchasing Function
An independent review of purchasing tests whether the process is designed correctly and whether it is actually being followed. It examines invoice pricing against contracted rates, looks for duplicate payments, verifies that receiving procedures exist and are used, reviews contract currency and competitive bidding history, and analyzes transaction patterns for signs of control override. A vendor audit is the most direct way to quantify what the gaps are currently costing you.
Taking Action
Purchasing leakage does not announce itself. It accumulates quietly, month after month, in amounts small enough to escape attention and large enough to matter. The only way to know what your gaps are costing is to test the process against the transactions.
Bones Hospitality Solutions reviews purchasing and accounts payable controls as a standard component of our cost control and loss prevention engagements. Contact our team to discuss a review for your property.