Four-Eye Principle in Procurement: How Buyers Reduce Approval Risk

Many procurement mistakes happen before a supplier delivers anything.

A contract may be approved by the wrong person. A purchase order may be released with the wrong price, quantity, delivery term, or cost center. A supplier change may be made without enough control. A buyer may also create a financial commitment that has not been properly reviewed.

The four-eye principle in procurement helps reduce these risks by making sure that at least two authorized people review or approve important procurement actions before they become binding.

For buyers, this principle is not only an administrative rule. It is a practical control that protects the organization, the supplier relationship, and the buyer from avoidable errors, unauthorized commitments, fraud risk, and compliance problems.

In this article, we will explain what the four-eye principle means, why it matters in procurement, where it fits in the procurement process, and how it can be used in contract approval and purchase order approval.


Article framework

Role: Operative
Supporting role: Tactical
Process: Procure-to-Pay, contract approval, purchase order approval, approval workflow
Level: Basic
Related course: The Purchase Order (Operative)
Supporting course: The Sourcing Engine (Tactical)


Quick answer: What is the four-eye principle in procurement?

The four-eye principle in procurement means that at least two people must review or approve an important procurement action before it is completed.

It is commonly used for contract approval, purchase order release, supplier changes, payment-related controls, and high-value commitments.

The purpose is to reduce errors, prevent unauthorized decisions, improve compliance, and create accountability in procurement.


What is the four-eye principle?

The four-eye principle is a control method where one person cannot complete an important decision alone.

Instead, a second person must review, approve, or verify the action before it is finalized. The name comes from the idea that “four eyes” are better than “two eyes” when checking important information.

In procurement, this principle is used to make sure that important purchasing decisions are not based only on one person’s judgment.

For example, one person may create a purchase order, but another person must approve it before it is sent to the supplier. One person may prepare a contract, but another person must review and approve it before signature.

This does not mean that every small purchase needs a complicated approval process. The four-eye principle should be applied where the risk, value, or business impact justifies an additional check.


Why the four-eye principle matters in procurement

Procurement creates commitments on behalf of the organization. A signed contract, a released purchase order, or an approved supplier change can create financial, legal, operational, and reputational consequences.

That is why control matters.

The four-eye principle helps procurement reduce several common risks.

Incorrect contract terms

Contracts may include wrong prices, unclear responsibilities, missing clauses, incorrect delivery terms, or unfavorable payment terms.

A second reviewer can help identify these issues before the contract is signed.

Unauthorized commitments

A buyer may not always have the authority to commit the company to a certain value, contract length, supplier, or risk level.

The four-eye principle helps make sure that commitments are approved by someone with the right authority.

Wrong supplier, price, or quantity

In purchase order approval, simple mistakes can create real problems.

A wrong supplier, incorrect quantity, outdated price, or incorrect delivery date may lead to delays, disputes, invoice mismatches, or unnecessary cost.

A second review reduces the likelihood of these errors.

Compliance and audit risk

Procurement is often audited because it controls external spend.

If one person can request, approve, and release a purchase without review, the process becomes weak from a control perspective.

The four-eye principle creates a clearer audit trail and shows that important decisions have been reviewed.

Fraud and conflict of interest

No control principle can remove all fraud risk, but the four-eye principle makes it harder for one person to manipulate the process alone.

It can help reduce risks connected to supplier setup, bank account changes, unusual purchases, or decisions involving personal relationships.

Lack of accountability

When procurement decisions are not properly reviewed, it can be difficult to understand who was responsible for what.

A good approval process makes accountability clearer.


Where the four-eye principle fits in the procurement process

The four-eye principle can be used in several parts of the procurement process. It is especially useful when decisions create financial commitments, legal exposure, supplier risk, or exceptions from normal policy.

Contract approval

Before a contract is signed, it should normally be reviewed by more than one person.

The second reviewer may check:

  • Commercial terms
  • Payment terms
  • Delivery terms
  • Contract value
  • Contract duration
  • Risk exposure
  • Legal terms
  • Deviation from standard terms
  • Correct supplier information
  • Approval authority

In some organizations, legal, finance, procurement management, and the business owner may all be part of the contract approval process.

The important point is that the contract should not move from draft to signature without proper review.

Purchase order approval

The four-eye principle is also common in purchase order approval.

An operative buyer may create the purchase order, but the order may need approval from a manager, budget owner, or another authorized person before it is released to the supplier.

The second reviewer may check:

  • Supplier name
  • Price
  • Quantity
  • Delivery date
  • Delivery address
  • Payment terms
  • Cost center
  • Budget
  • Contract reference
  • Approval limit
  • Compliance with purchasing policy

This protects both the buyer and the organization.

Supplier setup and supplier changes

Supplier master data is a sensitive area in procurement and finance.

If one person can create or change supplier information without review, the organization may be exposed to fraud, duplicate suppliers, incorrect payment data, or compliance issues.

The four-eye principle is especially important when changing:

  • Supplier bank details
  • Legal entity information
  • Tax information
  • Payment terms
  • Contact details
  • Supplier status
  • Critical supplier classifications

A second review helps confirm that the change is legitimate and properly documented.

Exceptions and deviations

The four-eye principle is particularly important when a buyer wants to deviate from normal rules.

Examples include:

  • Buying from a non-preferred supplier
  • Accepting non-standard contract terms
  • Ordering above approval limits
  • Making urgent purchases outside the normal process
  • Changing payment terms
  • Skipping competitive sourcing
  • Accepting supplier terms and conditions
  • Approving a price increase

These situations may be justified, but they should not be handled without review.


Four-eye principle, signatories, and power of attorney

The four-eye principle is related to approval, but it is not the same as signature authority or power of attorney.

This distinction is important.

A person may be allowed to review a contract but not allowed to sign it. Another person may be allowed to approve a purchase order but not allowed to approve a contract. A manager may have authority up to a certain financial limit, but not above that limit.

Procurement therefore needs both:

  • A clear review and approval process
  • A clear authority structure for signing or committing the company

The four-eye principle answers the question:

Has this decision been reviewed by more than one appropriate person?

Power of attorney or signature authority answers the question:

Is this person legally or internally authorized to commit the company?

Both are needed.

A contract may be reviewed by several people and still require signature from a specific authorized signatory. A purchase order may be checked by procurement but still require budget approval before release.

For buyers, the practical lesson is simple: approval and signature are not always the same thing.


How digital workflows support the four-eye principle

Digital procurement systems can make the four-eye principle easier to apply.

In manual processes, approvals may depend on emails, spreadsheets, or informal confirmation. This can work in small organizations, but it often creates weak documentation and unclear accountability.

A digital approval workflow can help by:

  • Routing approvals automatically
  • Applying approval limits
  • Preventing the same person from approving twice
  • Creating an audit trail
  • Showing who approved what and when
  • Escalating high-value approvals
  • Supporting sequential or parallel approval
  • Blocking release until approval is complete
  • Reducing manual follow-up

For example, an ERP or procurement system can require a purchase order above a certain value to be approved by a manager before it is sent to the supplier.

A contract management system can require legal review before a contract moves to signature.

An e-sourcing system can require approval before a sourcing award is communicated to suppliers.

The system should support the control principle, but it should not replace procurement judgment. A workflow only works well if the approval rules, authority limits, and responsibilities are clear.


Practical example: Purchase order approval

Imagine that an operative buyer creates a purchase order for a supplier.

The purchase order includes:

  • Supplier name
  • Item or service description
  • Quantity
  • Unit price
  • Delivery date
  • Delivery address
  • Cost center
  • Payment terms
  • Contract reference

Before the purchase order is sent to the supplier, the system requires approval from the budget owner.

The budget owner checks that the purchase is needed, the cost center is correct, the price matches the agreement, and the value is within budget.

Only after approval is the purchase order released.

This is a simple example of the four-eye principle in procurement. The buyer prepares the order, and another authorized person confirms that the order is correct and acceptable before the company is committed.


Practical example: Contract approval

A tactical buyer has completed a sourcing process and negotiated a contract with a supplier.

Before the contract is signed, it is reviewed by:

  • The buyer
  • The internal stakeholder
  • Legal
  • Finance
  • Procurement management
  • The authorized signatory

Each role checks the contract from a different perspective.

The buyer checks the commercial agreement and supplier understanding. The stakeholder checks the business need. Legal checks legal risk. Finance checks financial exposure and payment terms. Procurement management checks compliance with procurement strategy and policy. The signatory confirms whether the company can be formally committed.

This prevents the contract from becoming dependent on one person’s judgment alone.


Common mistakes with the four-eye principle

The four-eye principle is simple, but it is often misunderstood or poorly applied.

Here are common mistakes to avoid.

Mistake 1: Thinking four-eye approval means any two people

The second reviewer must be appropriate for the decision.

A second review has limited value if the reviewer does not understand the purchase, has no authority, or does not know what to check.

For example, a high-value contract may need review from legal, finance, procurement management, or an authorized business owner. It is not enough that “someone else” has looked at it.

Mistake 2: Allowing the same person to request and approve

The principle becomes weak if the same person can request, approve, and release the purchase.

Good procurement control normally separates key responsibilities. This is often called segregation of duties.

For example, the person creating a supplier should not be the only person approving changes to that supplier’s bank information.

Mistake 3: Using approval workflows without clear authority limits

A workflow is not enough if the organization has not defined who may approve what.

Approval limits should be clear.

For example:

  • Who can approve low-value purchases?
  • Who can approve high-value purchases?
  • Who can approve contracts?
  • Who can approve urgent exceptions?
  • Who can approve supplier changes?
  • Who can sign on behalf of the company?

Without this clarity, the workflow may create administration without real control.

Mistake 4: Adding too many approvals for low-risk purchases

The four-eye principle should be risk-based.

If every small and low-risk purchase requires several approvals, procurement becomes slow and inefficient. This can frustrate stakeholders and encourage people to work around the process.

The approval model should match the risk and value of the purchase.

Mistake 5: Forgetting exception rules

Every procurement process will face exceptions.

Urgent repairs, production stops, safety issues, or critical customer needs may require faster handling.

The organization should define how exceptions are approved, documented, and reviewed afterwards. Otherwise, urgent situations can become a loophole in the control process.

Mistake 6: Not reviewing approval logs

A digital workflow creates an audit trail, but that audit trail only has value if it can be reviewed.

Procurement and finance should occasionally check whether approvals follow the rules.

For example:

  • Are approvals made by the right people?
  • Are approval limits respected?
  • Are emergency approvals used too often?
  • Are the same people always approving exceptions?
  • Are purchases split to avoid approval limits?

This helps improve the process over time.

Mistake 7: Confusing review, approval, and signature authority

Review, approval, and signature are connected, but they are not identical.

A legal review does not always mean commercial approval. A manager’s approval does not always mean legal signature authority. A buyer’s recommendation does not always mean the company is authorized to commit.

Procurement should make these roles clear.


How this connects to the operative buyer role

The four-eye principle is highly relevant for operative buyers.

Operative buyers work close to daily purchasing activity. They create purchase orders, follow up order confirmations, handle changes, communicate with suppliers, and support internal stakeholders.

Because they work close to transactions, they are also close to many practical risks.

Examples include:

  • Wrong price on a purchase order
  • Incorrect delivery date
  • Missing contract reference
  • Supplier changes
  • Urgent purchase requests
  • Quantity changes
  • Order confirmations that do not match the PO
  • Purchases outside agreed contracts
  • Invoice mismatches caused by incorrect order data

The four-eye principle helps protect the operative buyer by making sure that important decisions are reviewed before they create problems.

It also helps the organization maintain control without making the buyer personally responsible for every approval decision.


How this connects to the tactical procurement role

The four-eye principle is also relevant for tactical procurement.

Tactical buyers and sourcing professionals often work with RFQs, supplier selection, negotiation, contracts, and implementation. These activities may involve larger values, longer commitments, and higher risk than daily purchase orders.

For tactical procurement, the four-eye principle can be used when:

  • Approving sourcing strategies
  • Approving supplier selection
  • Reviewing negotiated terms
  • Approving contracts before signature
  • Managing deviations from standard terms
  • Approving supplier awards
  • Implementing new agreements
  • Handling sourcing exceptions

This makes the four-eye principle part of sourcing governance.

The tactical buyer may recommend a supplier, but the award decision, contract approval, or final signature may require additional review.


How to apply the four-eye principle in practice

A good four-eye process should be clear, risk-based, and easy to follow.

Procurement can start by answering a few practical questions.

What needs a second review?

Not every action needs the same level of control.

The organization should define which actions require four-eye approval. Examples may include:

  • Purchase orders above a certain value
  • Contracts
  • Supplier setup
  • Supplier bank changes
  • Non-standard payment terms
  • Purchases outside preferred suppliers
  • Urgent purchases
  • Contract deviations
  • Sourcing awards
  • Price increases

Who is allowed to approve?

The organization should define approval authority.

This can depend on:

  • Purchase value
  • Budget responsibility
  • Contract value
  • Risk level
  • Category
  • Legal exposure
  • Type of purchase
  • Business unit
  • Power of attorney
  • Internal policy

The approval role should match the decision.

What should the reviewer check?

A second reviewer should know what to look for.

For a purchase order, this may include supplier, price, quantity, delivery date, terms, cost center, and contract reference.

For a contract, this may include commercial terms, legal terms, risk, responsibilities, duration, value, and signature authority.

For supplier changes, this may include supplier identity, bank details, supporting documentation, and fraud risk.

How should the approval be documented?

Approvals should be traceable.

A good approval record should show:

  • Who requested the action
  • Who reviewed it
  • Who approved it
  • When it was approved
  • What was approved
  • Whether any exceptions were made
  • Which documents were included

This is especially important for audit, compliance, and later dispute handling.


A simple buyer checklist for four-eye approval

Before releasing a purchase order or moving a contract forward, a buyer can use a simple checklist.

Ask:

  • Is the supplier correct?
  • Is the price correct?
  • Is the quantity or scope correct?
  • Are the delivery terms clear?
  • Are payment terms correct?
  • Is the correct contract or agreement referenced?
  • Is the cost center or budget owner correct?
  • Is the approval limit respected?
  • Has the right person reviewed the decision?
  • Is the approval documented?
  • Are there any deviations from policy?
  • Is signature authority required?

This checklist will not replace the company’s formal approval process, but it helps buyers think in a structured way.


Learn more about purchase order control

If you want to understand how purchase orders work in daily procurement, the Learn How to Source course The Purchase Order gives you a structured foundation.

The course explains how the purchase order supports the buying process and why correct order handling is important for suppliers, stakeholders, invoices, delivery follow-up, and procurement control.

For tactical procurement professionals who want to understand how approval control connects to sourcing and contract implementation, The Sourcing Engine is also a relevant next step.


FAQ: Four-eye principle in procurement

What is the four-eye principle in procurement?

The four-eye principle in procurement means that at least two people review or approve an important procurement action before it is completed. It is used to reduce errors, unauthorized commitments, fraud risk, and compliance problems.

Why is the four-eye principle used in contract approval?

It is used in contract approval to make sure that commercial terms, legal terms, risk, value, responsibilities, and signature authority are checked before the contract is signed.

Is the four-eye principle the same as power of attorney?

No. The four-eye principle is a review and approval control. Power of attorney or signature authority defines who is allowed to legally or internally commit the company. Both may be needed in the same process.

How does four-eye approval work for purchase orders?

In purchase order approval, one person may create the purchase order and another authorized person reviews and approves it before it is sent to the supplier. The reviewer may check supplier, price, quantity, delivery date, cost center, budget, and approval limit.

Can the same person approve twice?

No, that would normally defeat the purpose of the four-eye principle. The idea is that a second person provides an independent review or approval.

Is the four-eye principle always needed?

No. The four-eye principle should be used where the value, risk, or business impact justifies it. Low-value and low-risk purchases may use simpler approval rules, depending on company policy.

What is the difference between review, approval, and signature authority?

A review means checking the content. Approval means accepting the decision according to internal rules. Signature authority means having the right to formally sign or commit the company. These roles can be held by different people.

How does the four-eye principle reduce fraud risk?

It reduces fraud risk by making it harder for one person to create, approve, and complete a sensitive transaction alone. It is especially useful in supplier setup, bank account changes, purchase order approval, and exception handling.

What is segregation of duties in procurement?

Segregation of duties means separating key responsibilities so that one person does not control the full process alone. For example, the person creating a supplier should not be the only person approving payment-related supplier changes.

What should a buyer check before sending a purchase order?

A buyer should check that the supplier, price, quantity, delivery date, delivery address, cost center, payment terms, contract reference, and approval status are correct before the purchase order is released.


Conclusion

The four-eye principle in procurement is a simple but important control.

It helps buyers and procurement teams reduce errors, avoid unauthorized commitments, improve compliance, and create stronger accountability in contract approval, purchase order approval, supplier changes, and exception handling.

For operative buyers, the principle is especially relevant because many daily procurement risks appear in purchase orders, supplier data, confirmations, and order changes.

For tactical buyers, it supports sourcing governance, contract approval, and supplier award decisions.

The most important lesson is that the four-eye principle should not be treated as unnecessary administration. When used correctly, it protects the buyer, the organization, and the supplier relationship.

A good next step is to review one current procurement approval process and ask:

Which decisions should never be completed by one person alone?

Four eye principle in procurement
Four eye principle in procurement