Having a corporate expense policy is a good governance practice that applies to companies of any size, whether they have five, fifty, or more corporate cards in circulation. It can be a more elaborate or more basic document; the essential thing is that whoever receives the card knows the rules and understands what the company expects from them. This guide brings together recommendations on the most common and relevant items to build a clear policy that is appropriate for your operation.
Why are more and more companies replacing reimbursement policies with structured corporate expense management rules? The answer combines three factors (fiscal, operational, and human) that reinforce each other and are worth understanding before drafting any conditions.
This guide begins with the economic and operational motivation behind this migration and moves on to the terms that, in practice, form the heart of a good policy: card ownership, rules of use, safekeeping and password protection, accountability, prohibitions, and consequences of non-compliance. In seven short chapters, you can leave here with a practical reference for writing, or revising, your company's policy, regardless of its size.
The new equation between reimbursement and corporate card.
The migration that many companies are undertaking is not driven by trends, but by a response to three pressures that have shifted in recent years.
Money saving
The Consumption Tax Reform, currently in the testing phase in 2026 and fully implemented from 2027 onwards, introduces the concept of broad financial credit: practically all operational expenses linked to the company's activity will generate tax credits that offset the tax due on sales. However, for the credit to exist, the invoice must be issued under the company's CNPJ ( Brazilian corporate tax ID ) and not the employee's CPF (Brazilian individual tax ID). This is precisely where the reimbursement model structurally fails.
With the new rules in effect, every properly documented expense translates into money in the company's coffers. Managing expenses becomes strategic, fiscally, and financially important. Even in companies with a small volume of corporate expenses, a well-implemented policy brings benefits. And the economic return, with the utilization of tax credits, is evident and quantifiable.
Time savings, transparency and tools
Reimbursement is a process that involves a lot of rework: the employee advances money, gathers receipts, fills out a spreadsheet, sends it to the manager, the manager checks it, the finance department approves it, and HR deposits the funds. Each expense goes through several hands before being finalized. With a corporate card, the company pays directly, and the expense automatically enters a structured verification workflow. This not only saves time but also provides greater transparency about what is being spent, in which categories, and at what rate, in addition to the possibility of using control, classification, and prevention tools that the reimbursement model does not allow.
The employee gains autonomy.
Reimbursement, in practice, means that the employee lends money to the company while waiting for the deposit. For many, this is a real obstacle, especially for travel, events, or larger expenses. A corporate card eliminates this friction: the employee pays with company funds, within clear rules, and focuses on work instead of financing operations.
THE WINDOW IS NOW OPEN
2026 is the transition year for the Tax Reform. It's worth taking advantage of this moment to make adjustments (tools, policies, CNPJ [Brazilian company tax ID], team behavior) and enter 2027 with everything running smoothly. The sooner the company structures itself, the more tax credits it captures when the new regime fully comes into effect.
Once the reason is understood, the question becomes "how". The following sections cover the terms that typically structure a good policy, starting with the fundamental one.
Card and resource ownership
The first thing that policymakers need to establish, without beating around the bush, is who owns the card. This seems like a legal formality, but it's the basis for almost all the difficult conversations that follow: deactivation, disputed transactions, lost cards, misuse.
The recommended wording is straightforward: the card is the exclusive property of the company and is only entrusted to the employee for professional use. The funds available on the card belong to the company and must be used exclusively for its benefit. The employee is merely an authorized user, with no ownership rights over the card or the balance.
This principle underpins everything that follows: the obligation to return the card upon termination, the possibility for the company to block the card at any time, the prohibition of personal use even "with reimbursement later," and civil and criminal liability in case of misuse.
WHY IT MATTERS
Without this explicit condition, discussions about "the card was mine, I can use it however I want" or "the balance was a benefit" become more difficult to resolve. With clear ownership from the start, the company maintains control and the employee understands exactly the purpose of the tool they receive.
Rules of proper use
It is the heart of the policy, with four main practical rules that the employee needs to follow on a daily basis.
For professional purposes only.
The card must be used exclusively for professional expenses authorized by the company, in accordance with its policy. Personal purchases, even with a promise of reimbursement or "I'll return it later," are not permitted. This makes the rule clearer and avoids the "gray area" that always becomes a problem during audits.
Function compatibility
The employee should only make purchases that are compatible with their role and job needs. A store employee pays for maintenance and supplies; a salesperson pays for meals with clients and travel; an administrative employee pays for office supplies. The policy doesn't need to list every scenario, but it does need to state the principle.
Limits and settings
The policy can also specify parameters under which the card can be used, such as transaction limits, permitted hours, blocked establishment categories, specific weekend rules, and geographic scope. In systems like PagCorp, these parameters are configured by the company and applied at the time of the transaction. Anything outside the rules is automatically rejected, without the need for subsequent review. Smaller companies often adopt a single policy that applies to all cardholders; larger companies can, if necessary, create different settings for each group of employees.
Safeguarding your card and protecting your password.
The security of the payment method is the responsibility of the employee, and the policy, along with training at the time of delivery, is a good opportunity to reinforce rules that most people already know about the use of payment methods. The main rules worth remembering are:
- Keep the card in a safe place and in your personal possession. The card accompanies the employee; it doesn't stay in an office drawer or in the car's glove compartment.
- Do not share your card, number, security code (CW), or password with anyone. This applies to family members, colleagues, and service providers. Even if it seems more practical at the moment, any sharing of information negates individual responsibility.
- Memorize the password and never write it down in easily accessible places. No sticky notes, no notes on my phone, no photos of the password in my photo album.
- Do not allow the card to be photographed, copied, or recorded. The employee doesn't leave their possession to "take a quick photo."
In case of loss, theft, robbery, or misplacement, the employee must immediately block the card through the app and then inform their manager and the finance team. Quick blocking is the main protection against fraudulent transactions. Every minute counts!
Accountability and supporting documents
Without proper documentation, the rest of the policy loses its meaning. The company knows what was spent, but doesn't know the reason, and loses the chance to take advantage of the expense for tax purposes. This agreement needs to establish three points: what needs to be documented, by what deadline, and what happens when the deadline is not met.
Invoices should always be issued under the company's CNPJ (Brazilian tax ID).
This is the most important rule in all expense reporting and the one that has gained the most weight with the tax reform. For each purchase, the employee must request an invoice issued under the company's CNPJ (Brazilian corporate tax ID), not their own CPF (Brazilian individual tax ID). In hotels, restaurants, gas stations, and suppliers in general, simply request it at the time of issuance. It may seem like a detail, but it's what separates an expense that generates tax credits from an expense that becomes a sunk cost.
It's important to highlight this guideline in the policy and reinforce it when the card is issued. When an employee forgets and issues a card with their CPF (Brazilian tax ID number), the company loses credit for that specific expense. And in terms of volume, that makes a difference.
Required fields and submission deadline
In addition to attaching the invoice, the employee must fill in information that allows the company to correctly classify and account for the expense: cost center, expense classification and, when applicable, project, client, participants or other information relevant for accounting and tax purposes.
The policy can also set a deadline for submitting proof of expense, which can be defined as a fixed date (for example, by the end of the month) or counted from the moment the expense is incurred. This is the easy part for the employee, provided the company has a good system: simply take a photo of the receipt and upload it through the app, or even send it via WhatsApp, and the proof is provided in seconds.
In parallel, the company can configure the platform to automatically block the card when the deadline or proof-of-sale rule is not met. This ensures that the accounting closing happens on the scheduled date, without the finance department needing to chase up employees every month. Automated discipline, not manual follow-up.
Mechanisms for tracking generated credits
Requesting invoices with a CNPJ (Brazilian company tax ID) is the first step, but it only makes sense if the company has a way to capture, classify, and track the tax credits generated by expenses. This involves receiving digitally linked invoices for each transaction, identifying the tax regime for each expense, separating what generates credit from what does not, and feeding the accounting records with structured data instead of loose PDFs.
IMPORT SYSTEM
An expense reporting policy only works when there's a system capable of enforcing it. Modern expense management platforms allow for customizing approval rules at the time of purchase (limits, categories, time, geographic scope) and automatically reviewing receipts after the expense, verifying the issuer's CNPJ (Brazilian tax ID), value, establishment category, and receipt legibility, with intelligent sorting that separates what is automatically approved, what needs human review, and what should be rejected. A policy without tools is just a decorative policy.
For travel expenses, the same care is needed, but with extra attention: keep all receipts (invoices, receipts, coupons), even those of small value, and attach them to the system as soon as possible.
What is expressly prohibited
Even with well-written rules for proper use, it's worthwhile to explicitly list what is not allowed. Transparency with employees about the rules is always a good practice. The clearer the expectations, the less room for misunderstandings in daily interactions.
- Personal expenses, own, from family members, friends, or any third party, even with a promise of reimbursement to the company.
- Cash withdrawals above established limits or without clear professional justification.
- Salary advance, personal loans or any unauthorized financial transaction.
- Artificial division of a purchase in multiple transactions to circumvent the limit per transaction.
- Lending the card to third parties, even to other company employees.
- Making expenses on behalf of another employee. or from a supplier.
- Buying gifts or items for personal use, any expense not related to professional activity.
- Transactions that constitute a conflict of interest, undue advantage, act of corruption or violation of current legislation, including the Anti-Corruption Law (Law 12.846/13).
It's important to remember that many of these behaviors, in themselves, can constitute serious misconduct by the employee or even a crime, regardless of what the company policy states. In this sense, the policy also has an educational and informative character: it explicitly states what applies and makes it clear that this type of expense can represent a violation not only of internal rules but also of Brazilian law, potentially resulting in disciplinary sanctions, mandatory reimbursement to the company, and, depending on the severity, civil or criminal liability.
Disconnection and return
The card is linked to the professional relationship with the company. In the event of termination, change of role, or any other situation determined by the company, there are three obligations:
- Physically return the card. to HR or finance on your last day of work.
- Attach all pending receipts. before the return, completing the accounting of open transactions.
- Do not carry out any transaction. after notification of termination, even if the employee still physically possesses the card.
After the return, the company requests the cancellation of the card. Attempts to use the card after the card has been deactivated are automatically rejected by the system.
Politics without tools is merely decorative politics. Tools without politics is a false sense of security.
Everyone wins.
A well-designed and well-implemented policy, in addition to being a control instrument, is what allows the company to give employees more autonomy with security. Those who receive the card know exactly what they can and cannot do, operate smoothly within the rules, and don't need to advance money from their own pocket or wait for reimbursement to do the work.
For the company, it provides peace of mind through real-time visibility into expenses, receipts issued under the company's tax ID (CNPJ) that generate tax credits, timely accounting closing without manual follow-up, and a finance team that moves away from spreadsheet-based audits and focuses on more strategic decisions. With a well-coordinated policy and system, the corporate card ceases to be a source of concern and becomes a concrete operational advantage.
Ready to structure your company's policy?
The PagCorp team can help you configure and customize the system so that it is 100% aligned with the policy that makes sense for your operation: from defining rules to technical implementation on the corporate card. Talk to a PagCorp specialist.
