Stackrate

How Expensify works

Expensify is evaluated on Stackrate in Expense Management and AP Automation.

Stackrate has evaluated Expensify against 46 specific requirements across 16 published comparisons: 1 supported, 25 partial, 20 not supported. Each finding below explains the mechanism, states its limitations, and cites the vendor documentation it rests on. Counts are evaluated requirements, not a score.

Last rebuilt 2026-09-27 from published reports. Methodology

Expensify: Matching & Exception Management

AP Automation. 10 requirements evaluated: 2 partial, 8 not supported.

Partial

Requirement evaluated: Non-PO invoice routing: automatic GL coding suggestions based on vendor history and invoice description

For a multi-location services company processing 1,800 invoices/month through Sage Intacct, Expensify offers two mechanisms that partially address non-PO GL coding. First, Workspace Merchant Rules let an admin configure vendor-name-based coding rules that automatically apply category, tag, reimbursable status, and description fields when an incoming bill matches a configured merchant name pattern; <cite index="17-3,17-4">these rules are designed to standardize how expenses from common merchants are coded across the workspace, running automatically in the background.</cite> Second, Expensify's Concierge engine applies pattern-based learning: <cite index="23-1,23-2,23-3,23-4">categories repres …

Limitations: Workspace Merchant Rules require the AP team to manually configure a rule for every vendor upfront; the system does not learn from invoice history or adapt automatically, so new vendors and multi-line invoices with mixed expense types will receive no automatic coding suggestion until a rule is explicitly built. …

Not Supported

Requirement evaluated: Clear exception categories: price variance, quantity variance, missing PO, missing receipt, duplicate, vendor mismatch

For a $120M services company routing 1,800 invoices per month through Sage Intacct and needing discrete exception categories (price variance, quantity variance, missing PO, missing receipt, duplicate, vendor mismatch), Expensify does not provide this mechanism in its AP bill-pay module. Expensify's bill workflow receives vendor invoices by email or forward to a domain billing address, codes them with GL categories from the connected accounting software, routes them through a workspace approval process, and exports them to Sage Intacct once approved. …

Limitations: Expensify's AP bill module provides no PO matching layer at all (2-way or 3-way), so none of the six exception categories (price variance, quantity variance, missing PO, missing receipt, duplicate, vendor mismatch) can be generated or routed automatically. …

Not Supported

Requirement evaluated: Clear exception categories: price variance, quantity variance, missing PO, missing receipt, duplicate, vendor mismatch

For a $120M services company processing 1,800 invoices per month across two Sage Intacct entities, with 55% of invoices PO-based, Expensify's bill pay product covers three steps only: SmartScan capture of the vendor bill, routing through a workspace approval workflow, and export of GL-coded vendor bills to Sage Intacct. The help center documentation for Receive and Pay Bills describes this flow as: vendor emails a bill to a dedicated address, SmartScan creates the bill record, a primary contact reviews and approves it, and the bill is exported with GL codes from the connected accounting system. …

Limitations: All six exception categories the buyer specified require a PO matching and receipt confirmation layer that Expensify does not have: the product has no PO database integration, no goods receipt stage, and no structured exception taxonomy for invoice discrepancies. …

Not Supported

Requirement evaluated: Exception dashboard showing all unmatched/flagged items with aging and priority indicators

For a $120M services company processing 1,800 vendor invoices per month, the exception dashboard requirement calls for a centralized, real-time worklist that surfaces PO match failures, receipt confirmation gaps, and flagged vendor bills with time-in-queue aging and priority ranking. Expensify's closest mechanism is an inline violation flag: when an expense report breaks a workspace policy (missing category, duplicate receipt, over-limit amount), the Concierge AI applies a color-coded exclamation mark directly on the individual expense line, which approvers see when reviewing a submitted report. …

Limitations: Expensify does not perform PO-to-invoice or 3-way matching for vendor bills, so the concept of a 'match failure' exception is structurally absent from the product. …

Showing the 4 most recent of 10. The rest are in the comparisons listed below.

Expensify: Approval Workflows

AP Automation. 8 requirements evaluated: 6 partial, 2 not supported. See how other vendors handle approval workflows

Not Supported

Requirement evaluated: Automatic escalation: if approver has not acted within 48 hours, escalate to their manager with notification

For a 3-person AP team processing 1,800 invoices per month across two Sage Intacct entities, the buyer's requirement is a system-triggered, time-based escalation: if an approver has not acted within 48 hours, the pending item is automatically rerouted to their manager with a notification. Expensify's approval architecture does not contain this mechanism. The platform offers three approval modes: Submit and Close, Submit and Approve, and Advanced Approval. …

Limitations: For this buyer's 1,800-invoice-per-month operation, the absence of a time-based escalation engine is a material process gap: invoices awaiting approval simply sit in the queue with no system-enforced consequence for inaction beyond a manual nudge. …

Not Supported

Requirement evaluated: Batch approval capability for recurring invoices from the same vendor (e.g., monthly telecom bills across 6 locations)

For a multi-location services company processing roughly 1,800 invoices a month across 6 offices, Expensify's bill approval model routes each vendor bill individually through the workspace approval chain. When a vendor sends a bill to the company's Expensify billing address, Expensify SmartScans the document, creates a bill record, and submits it to the primary contact for review on the Reports page; from there it follows the configured workspace approval process one bill at a time. …

Limitations: There is no documented mechanism in Expensify for an approver to select a set of invoices from the same vendor (e.g., 6 location-level telecom bills) and approve them in one action; each bill moves through the approval chain individually, which replicates the sequential email-based review pattern this buyer is trying t …

Partial

Requirement evaluated: Segregation of duties enforcement: person who enters cannot approve, person who approves cannot process payment

For a 3-person AP team at a $120M multi-location services company processing 1,800 invoices per month through Sage Intacct, Expensify offers role-based separation and workflow enforcement that partially addresses segregation of duties. On the submitter-vs-approver control: Expensify's Advanced Approval mode lets workspace admins configure per-person approval chains, and a 'Prevent Self-Approval' setting explicitly blocks an approver from approving their own report, enforcing the first SoD boundary (Expensify Help: Approve Expenses). …

Limitations: The admin override clause ('Admins can still take control of reports') means the enter-cannot-approve SoD boundary is not a hard system control if the data-entry person holds Workspace Admin rights, which is common in a 3-person AP team where at least one member must be an admin to configure the workspace. …

Partial

Requirement evaluated: Our specific routing rules: under $2,500 manager, $2,500-$10K director, $10K-$50K VP, over $50K CFO

For a multi-location services company needing four discrete authority tiers tied to invoice dollar amounts, Expensify offers its Advanced Approval mode, which supports multi-level, conditional approval chains. Within this mode, each workspace member can be configured with a 'Submits To' first-level approver and an 'If report total is over $X, then Approves To' escalation rule, allowing a chain to be built where a $75K invoice escalates from manager to director to VP to CFO in sequence. Vendor bills are confirmed to follow the same workspace approval process as expense reports. …

Limitations: The buyer's four-tier DOA requires that, for example, a $60K invoice routes directly to the CFO with no manager or director involvement. Expensify's documented mechanism routes every invoice to the submitter's designated first-level manager first, then escalates up through each successive threshold rule, so lower-autho …

Showing the 4 most recent of 8. The rest are in the comparisons listed below.

Expensify: Payment Processing

AP Automation. 6 requirements evaluated: 1 partial, 5 not supported. See how other vendors handle payment processing

Not Supported

Requirement evaluated: Positive pay file generation formatted for Bank of America

Your company runs bi-weekly check runs through Bank of America and needs a positive pay file exported in Bank of America's required format after each run. Expensify's documented payment methods for vendor bills are ACH bank transfer, credit/debit card, and Venmo. Expensify's own help center documentation states explicitly that the platform does not issue checks: 'Expensify does not issue checks. Workspace Admins can select Pay elsewhere and issue a check outside Expensify.' Because Expensify has no check issuance capability, it has no check register from which to derive a positive pay file. …

Limitations: Expensify's payment infrastructure is built entirely around electronic rails (ACH, card, Venmo). Because it does not issue checks, the precondition for positive pay file generation, a system-of-record check register, does not exist within the platform. …

Not Supported

Requirement evaluated: Automatic remittance advice sent to vendors upon payment

For a $120M services company processing 1,800 invoices per month, the specific requirement is that vendors receive automatic, invoice-level remittance detail (invoice numbers, amounts, payment method) at the moment a bill is paid. Expensify's Bill Pay workflow covers the buyer side: vendors email invoices to a domain-specific Expensify address, the bill is SmartScanned and routed for approval, and payment is executed via ACH, card, or check. Once paid, the bill moves to a 'Paid' status and syncs to connected accounting software. However, across Expensify's entire bill pay documentation, no mechanism exists that sends an outbound remittance advice to the vendor upon payment completion. …

Limitations: There is no documented mechanism in Expensify Bill Pay for sending an outbound remittance advice to external vendor email addresses upon payment execution, meaning your AP team would still need to manually notify each vendor of payment details after every check run or ACH batch, exactly the manual burden this requireme …

Partial

Requirement evaluated: Payment reconciliation with automatic journal entries back to Sage Intacct

For a $120M services company processing 1,800 vendor invoices per month through Sage Intacct, Expensify does offer an Auto Sync mechanism that writes payment data back to Intacct: when Auto Sync is enabled and reimbursement is processed via Expensify ACH, the system automatically creates Bill Payment records in Sage Intacct and marks the corresponding reports as Paid on the next sync. However, this writeback mechanism is architecturally tied to Expensify's employee expense reimbursement workflow. …

Limitations: The Auto Sync payment writeback to Sage Intacct covers employee reimbursements and Expensify Card activity only; it does not extend to vendor invoice payments executed via check runs or ACH batches to third-party vendors, which is the buyer's primary AP workload. …

Not Supported

Requirement evaluated: Positive pay file generation formatted for Bank of America

Your company runs bi-weekly check runs out of two Sage Intacct entities and needs to upload a Bank of America-formatted positive pay file after each run so BoA can verify check number, date, amount, and payee before clearing. Expensify's bill pay module offers ACH transfers, credit/debit card payments, Venmo, and vendor-directed physical checks mailed by Expensify itself, but it does not generate a check issuance file that the buyer uploads to their own bank. The only reference to 'positive pay' in Expensify's help documentation is a note instructing customers to whitelist Expensify's own ACH ID with their bank when upgrading the Expensify Card, which is the inverse of the requirement. …

Limitations: Expensify has no documented mechanism for generating a positive pay check issuance file in any bank's format, including Bank of America's. Buyers running their own check disbursements through Sage Intacct and needing to push a check-issue file to BoA CashPro would need to source this capability from their ERP, their ba …

Showing the 4 most recent of 6. The rest are in the comparisons listed below.

Expensify: Invoice Capture & Data Extraction

AP Automation. 5 requirements evaluated: 4 partial, 1 not supported. See how other vendors handle invoice capture and data extraction

Not Supported

Requirement evaluated: Touchless processing target: 40%+ of PO invoices should require zero manual intervention from capture through posting

For a $120M services company processing 990 PO-based invoices per month and targeting 40%+ zero-touch throughput, Expensify does not provide the mechanism this requires. Expensify's vendor bill workflow works as follows: a supplier emails a bill to a domain-specific address, SmartScan OCR captures header-level data (amount, date, merchant), and the bill is then submitted to a primary contact who reviews it on the Reports page before it follows the workspace approval process and is exported to Sage Intacct. …

Limitations: Expensify has no PO matching engine of any kind: no 2-way match, no 3-way match, no configurable tolerance thresholds, and no auto-posting for invoices that clear a match. …

Partial

Requirement evaluated: AI/OCR-powered extraction from PDF, image, and email-embedded invoices with 95%+ accuracy on header and line-item data

For a services company processing 1,800 invoices per month, Expensify's SmartScan technology provides the capture layer. Vendors can email bills directly to a company-specific address (domain.com@expensify.cash), and Expensify automatically SmartScans the document and creates a bill record ready for the approval workflow. PDFs can also be uploaded via drag-and-drop on the web, and the receipts@expensify.com forwarding address handles email-attached documents. However, every documented source -- including Expensify's own help center -- describes SmartScan's extraction output as header-level fields only: merchant name, date, total amount, and currency. …

Limitations: SmartScan's documented extraction covers header fields (merchant, date, total, currency) only; no line-item extraction capability is documented at any plan level, which directly blocks the buyer's requirement for 95%+ accuracy on both header and line-item data and prevents automated PO-line matching for the 55% of invo …

Partial

Requirement evaluated: Support for all invoice formats we receive: standard PDF, scanned images, email body invoices, and EDI (from 3 large subcontractors)

For a services company receiving invoices across four formats, Expensify's SmartScan OCR engine handles two of the four channels this buyer requires. Standard digital PDFs and scanned image files (JPG, PNG) can be submitted by dragging and dropping files into the app, photographing them via the mobile camera, or by having vendors email their PDF invoices directly to a domain-specific capture address (yourcompany.com@expensify.cash), which SmartScan automatically converts into a bill ready for review and payment. …

Limitations: EDI invoice ingestion (ANSI X12 810) is entirely absent from Expensify's documented capabilities, meaning the buyer's 3 large subcontractor invoices would require manual re-keying or a separate, independently contracted EDI middleware solution outside Expensify. …

Partial

Requirement evaluated: Automatic extraction of: vendor name, invoice number, date, PO number, line items, amounts, tax, and payment terms

For a multi-location services company processing 1,800 vendor invoices per month in Sage Intacct, Expensify's SmartScan technology is the capture mechanism. A vendor bill is uploaded (photo, drag-and-drop PDF, or forwarded email to receipts@expensify.com), and SmartScan uses OCR to automatically extract the merchant name, date, and total amount, then creates a bill record that follows the workspace approval workflow before being coded with GL codes from the connected accounting system and exported to Sage Intacct. …

Limitations: SmartScan's documented extraction covers header-level fields (vendor name, date, total amount, currency) for the buyer's AP scenario; invoice number, PO number, individual line-item extraction, tax line separation, and payment terms are not documented as auto-extracted fields from vendor bills, meaning AP staff would n …

Showing the 4 most recent of 5. The rest are in the comparisons listed below.

Expensify: Reporting & Analytics

AP Automation. 5 requirements evaluated: 5 partial.

Partial

Requirement evaluated: Spend analytics: top vendors, spend by GL category, month-over-month trending

For a $120M services company processing 1,800 AP invoices per month in Sage Intacct, Expensify surfaces spending data through its Insights module, which provides pre-built reports including Top Merchants, Top Categories, and Spend Over Time. <cite index="1-1">The Insights dashboard provides a real-time overview of company spending across categories, employees, projects, and departments.</cite> The new Expensify platform documents these as separate Insights views: <cite index="2-1,2-2,2-3">Spend Over Time shows how total expenses change over a date range, Top Merchants shows which vendors received the most payments, and Top Categories shows the highest-spending expense types.</cite> Categorie …

Limitations: Expensify's Insights reports are built primarily around employee expense and corporate card data, not around AP invoice workflows: the buyer's 1,800 monthly vendor invoices (facilities, utilities, subcontractors) …

Partial

Requirement evaluated: Spend analytics: top vendors, spend by GL category, month-over-month trending

For a $120M multi-location services company running 1,800 invoices/month through Sage Intacct, Expensify's Insights module provides three pre-built reports that address the three sub-requirements directly. The 'Top Merchants' report shows which vendors received the most payments; the 'Top Categories' report shows all expense categories sorted by total spend (these categories map to GL accounts imported from Sage Intacct, so the view is effectively spend by GL account); and the 'Spend over time' report displays how total expenses change across a selected date range, enabling month-over-month comparison with a Line chart view option. …

Limitations: Pre-built Insights reports default to the previous calendar month and surface the top 10 results per view; broader trending requires building custom saved searches. …

Partial

Requirement evaluated: Export to Excel and scheduled report delivery to Controller and CFO

For a $120M services company whose Controller and CFO need regular AP reporting output, Expensify offers on-demand CSV export from its Expenses page, Reports page, and Insights dashboard. A user selects the relevant expenses or reports, clicks 'Export To,' and chooses a default or custom template (expense-level, report-level, category, tag, etc.); the file is either downloaded directly or, for custom templates, emailed back to the person who triggered the export. The Classic Insights dashboard also supports raw data CSV export after applying date and category filters. …

Limitations: Expensify has no documented scheduled or recurring report delivery mechanism that automatically emails AP data to named recipients such as a Controller or CFO on a weekly, monthly, or period-close basis; every export requires a user to log in and trigger it manually. …

Partial

Requirement evaluated: Spend analytics: top vendors, spend by GL category, month-over-month trending

For a $120M services company processing 1,800 vendor invoices per month, Expensify's analytics surface lives inside its Insights module and search engine. The platform offers pre-built reports covering top vendors (Top Merchants, showing which vendors received the most payments), top categories (Top Categories, showing GL-mapped expense categories ranked by total spend), and time-based trending (Spend Over Time, with a line-chart view that plots total expenses across a selected date range). Categories can be imported directly from Sage Intacct so that GL account names appear as the grouping dimension in the analytics. …

Limitations: The Top Categories and Top Merchants reports default to the prior calendar month and show only the top 10 entries; grouped summary totals cannot be exported directly (raw expense rows must be expanded and exported as CSV individually). …

Showing the 4 most recent of 5. The rest are in the comparisons listed below.

Expensify: Sage Intacct Integration

AP Automation. 5 requirements evaluated: 5 partial. See how other vendors handle vendor management

Partial

Requirement evaluated: Support for Sage Intacct dimensions: Location, Department, Class, Project, Customer, and custom dimensions

For a $120M multi-location services company running 1,800 external supplier invoices per month through two Sage Intacct entities, Expensify's Sage Intacct integration does document support for all five standard dimensions the buyer named. <cite index="10-2">The integration can import standard dimensions like Department, Class, Location, Customer, and Project/Job, as well as user-defined dimensions.</cite> Inside Expensify, <cite index="1-1,1-2">dimensions are enabled in the Sage Intacct integration settings and can be assigned as Tags or Report Fields.</cite> For custom dimensions beyond Intacct's standard set, <cite index="19-46,19-47,19-48,19-49,19-50,19-51,19-52">User-Defined Dimensions ( …

Limitations: The buyer's core use case, routing and coding externally received supplier invoices (PO-based and non-PO) through a pre-processing workflow before posting to two Sage Intacct entities, sits outside the scope of what Expensify is built to handle; Expensify's Sage Intacct connector is designed for employee reimbursements …

Partial

Requirement evaluated: Integration setup assistance included in implementation; not a separate SOW or additional cost

For a $120M multi-location services company running 1,800 AP invoices/month across 2 Sage Intacct entities, the relevant question is whether Expensify's Sage Intacct integration setup requires a separately billed engagement. Expensify's Sage Intacct connector is self-serve: the buyer creates a web services user in Sage Intacct, enables Customization Services, downloads and uploads an Expensify integration package, adds web services authorization, and configures sync options, all following a documented step-by-step guide with no stated professional services fee for the connector itself. …

Limitations: The material shortfall is product fit, not cost: Expensify's Sage Intacct integration is oriented toward expense management and corporate card reconciliation, not toward AP invoice automation. The integration setup assistance (Account Executive, self-serve wizard) …

Partial

Requirement evaluated: Integration setup assistance included in implementation; not a separate SOW or additional cost

For a $120M multi-location services company needing AP automation, this requirement has two layers: the commercial packaging question and the scope of what actually connects to Sage Intacct. On packaging: <cite index="22-5,22-6">setup specialists are included in both Collect and Control plans at no additional cost, and no published implementation fees exist.</cite> <cite index="1-35,15-1">The Sage Intacct integration itself is gated to the Control plan</cite>, and <cite index="34-5,34-6">Expensify's help documentation directs customers to schedule a free onboarding session with an Account Executive</cite> rather than purchase a separate professional services SOW. …

Limitations: The absence of a separate SOW reflects the fact that the Sage Intacct connection is self-serve and documentation-driven, with an Account Executive session available but no dedicated integration engineer configuring the connection on the buyer's behalf. …

Partial

Requirement evaluated: Real-time or near-real-time sync of: chart of accounts, dimensions, vendor master, PO data, and GL postings

For a $120M services company running 2 Sage Intacct entities, Expensify connects to Intacct via a dedicated web services user and Intacct's XML gateway API. On the import side, <cite index="12-4,12-5,12-6">chart of accounts are pulled into Expensify as Categories, where the category type maps directly to Chart of Accounts GL Codes when the export mode is set to Vendor Bills.</cite> <cite index="1-3,1-4">Intacct dimensions (departments, locations, projects, and user-defined dimensions) …

Limitations: Two of the buyer's five required sync objects, PO data and vendor master (as an AP vendor list), have no documented sync mechanism in Expensify's Sage Intacct integration, which is designed around T&E expense flows rather than AP invoice automation. …

Showing the 4 most recent of 5. The rest are in the comparisons listed below.

Expensify: Vendor Management

AP Automation. 4 requirements evaluated: 4 not supported. See how other vendors handle vendor management

Not Supported

Requirement evaluated: Vendor communication log: track every inquiry and response to eliminate the 6 hours/week our team spends on status calls

For a $120M services company fielding vendor status calls at 6 hours per week, the critical mechanism needed is one that gives vendors direct, self-service visibility into invoice status, so they never need to call AP in the first place. Expensify documents two communication touchpoints, neither of which addresses this. On the bill-pay side (the buyer's AP workflow), the help documentation states that approvers can communicate with the bill sender via a comment thread linked to the bill record; however, this is an internal approver-to-submitter mechanism, not a vendor-facing status channel. …

Limitations: Expensify has no vendor-facing self-service portal or communication log for the AP direction; vendors cannot check invoice or payment status without contacting the buyer's AP team, meaning the 6-hours-per-week problem remains entirely unaddressed. …

Not Supported

Requirement evaluated: Centralized vendor master synchronized bidirectionally with Sage Intacct

For a $120M multi-location services company running 1,800 AP invoices per month across two Sage Intacct entities, the requirement is a centralized supplier vendor master that stays in sync with Intacct in both directions: new vendors created in Expensify push to Intacct, and vendor record changes made in Intacct pull back to Expensify. Expensify's Sage Intacct integration does not operate in this space. The integration is purpose-built for employee expense management: it imports chart-of-accounts categories, dimensions (departments, locations, projects), and employee records from Intacct into Expensify, then exports approved expense reports or reimbursable vendor bills back to Intacct. …

Limitations: Expensify has no AP vendor master module at all: its Intacct integration pulls coding dimensions and employees from Intacct and pushes expense transactions outward, but supplier record creation and management for AP payables remains entirely outside its scope. …

Not Supported

Requirement evaluated: Vendor self-service portal: new vendor registration, W-9/W-8 submission, banking detail entry, invoice submission, payment status inquiry

For a $120M services company with a 3-person AP team processing 1,800 invoices/month, the vendor self-service portal requirement covers five discrete sub-capabilities: new vendor registration, W-9/W-8 collection, banking detail entry, vendor-initiated invoice submission, and payment status inquiry. Expensify's documented mechanism for vendor invoice intake is an email-inbox model: the buyer shares a dedicated billing address (domain.com@expensify.cash) with vendors, vendors email their invoices to that address, and SmartScan automatically creates a bill inside Expensify for internal AP review. …

Limitations: Expensify has no external supplier self-service portal; all five sub-capabilities in this requirement (registration, W-9/W-8, banking entry, invoice submission, and payment status inquiry) remain manual workflows handled by the buyer's AP team, which defeats the purpose of vendor self-service for this team. …

Not Supported

Requirement evaluated: Vendor communication log: track every inquiry and response to eliminate the 6 hours/week our team spends on status calls

For a 3-person AP team at a $120M services company receiving 1,800 invoices per month and spending 6 hours per week on vendor status calls, the requirement is a persistent, auditable vendor communication log tied to each inbound bill, ideally paired with a vendor-facing portal where suppliers can check payment status without calling. Expensify's bill pay workflow (the 'Receive and Pay Bills' module) does allow an internal approver to communicate with the bill sender via a comment thread linked to the bill record, but this is a lightweight, ad-hoc channel between internal users and the originating sender, not a structured log of all vendor inquiries and AP responses. …

Limitations: Expensify has no documented supplier portal, no structured two-way vendor communication log tied to inbound bills, and no mechanism for external vendors to self-serve invoice status. …

Expensify: Security & Compliance

AP Automation. 3 requirements evaluated: 1 supported, 2 partial.

Supported

Requirement evaluated: Data encryption at rest and in transit

For a multi-location services company moving invoice and financial data through Expensify, encryption is applied at both layers the buyer requires. For data in transit, Expensify enforces HTTPS+TLS across all web connections, covering browser-to-server traffic and inter-server communication within its network. For data at rest, Expensify uses a dual-control encryption key architecture: the key is split into two parts, each stored in a separate secure location and managed by different Expensify employees, so stored financial data cannot be accessed outside the vendor's secured servers. …

Limitations: Expensify's published documentation does not specify the exact cipher standard (e.g., AES-256) used for data at rest, nor does it document whether customer-managed encryption keys are available, which may matter to buyers with specific key-management requirements in their security policy. …

Partial

Requirement evaluated: Role-based access control with entity-level restrictions

For a $120M services company with 2 Sage Intacct entities, Expensify's entity-level separation works through a workspace-per-entity model: <cite index="21-1">if your Sage Intacct account supports multiple entities, you can connect each Workspace in Expensify to a specific entity or to the Top Level.</cite> Users are then added to one or more workspaces with a role assigned per workspace, so a user added only to the workspace connected to Entity 1 cannot see data in the workspace connected to Entity 2. …

Limitations: For this buyer's AP automation use case, the role set (Member/Admin/Auditor) is built around expense submission and approval, not the distinct AP staff roles (coder, approver, payment releaser) …

Partial

Requirement evaluated: SSO integration with Microsoft Azure AD

For a 200-employee, multi-location services company standardized on Microsoft Azure AD, Expensify supports SAML 2.0 federation with Azure AD (Microsoft Entra ID) as the identity provider. Expensify is listed as a pre-built enterprise application in the Microsoft Entra gallery: an IT administrator adds the Expensify app, downloads the Entra Federation Metadata XML, and pastes it into the Identity Provider Metadata field under Expensify's Domain Control settings, where SAML Login is toggled enabled and 'Required for login' can be enforced to block all non-SSO access for domain members. …

Limitations: Two material gaps apply for this buyer: first, automated deprovisioning (the offboarding loop that prevents a terminated employee from retaining Expensify access) …

Expensify compared with

Evaluate Expensify against your own requirements

Describe your process and get a cited, requirement-by-requirement comparison.

Start a comparison