Shadow spendUK · 2025
1 in 10
pounds spent by UK businesses slips past procurement oversight
Source: Ivalua survey of 300 UK decision-makers, via Accountancy Age
Spend Leakage
Spend leakage starts before the invoice.So should your controls.
Most spend leakage happens long before an invoice lands in your AP inbox. Blackbee AI catches it at the source, the moment someone asks to spend, and keeps every step inside the controls you set.
- Contract leakageAug 2025~9%
of contract value is lost each year, on average, through poor contract management
- Approval delays202549%
of AP teams name delayed approvals as a key barrier to processing invoices
- Shadow IT20241 in 3+
of a company's apps are shadow IT
Source: Zylo 2024 SaaS Management Index
What is spend leakage?
Spend leakage is money your company pays out that slips past the controls meant to govern it. That covers purchases made off-contract, purchases made without approval, suppliers nobody vetted, and prices that don't match the deal you negotiated.
It's the gap between what finance agreed to and what actually got spent.
Bigger than most teams think. When Ivalua surveyed 300 UK procurement decision-makers, 87% said up to a quarter of their spend escapes procurement oversight. More than half (57%) said it raises their compliance risk too.
Usually not. Someone needed something fast, and the approved route was slower than their corporate card. That's most of the story, right there.
The six types of spend leakage
They go by different names, but they all have one thing in common. Each one gets committed before finance has a chance to act on it.
Any purchase made outside your approved buying policy or approval route. Most of it is well-meant. Someone needed it now and the proper process felt like a detour. The cost adds up, though: Ivalua puts the savings companies lose to maverick spend at up to 10–20%.
Example: A marketing lead signs a $25,000 agency retainer over email and skips the approval route.
Finance usually finds it: when an invoice turns up with no PO behind it.
Spend finance can't see at all. There's no request, no PO, no contract on file and often no vendor record. It mostly lives on corporate cards and expense reports. Software is the classic case: Zylo's 2024 SaaS Management Index found more than a third of a company's apps are shadow IT, and 67% of IT leaders called rogue software purchases a top challenge.
Example: A $400-a-month tool on someone's card that's quietly renewed for two years.
Finance usually finds it: at month-end close, or when the renewal hits.
The huge number of small purchases spread across lots of suppliers. Each one looks harmless on its own, and most of it's even allowed. Nobody manages it, though, so pricing and supplier risk go unchecked.
Example: Dozens of one-off suppliers, each billing under $1,000 a year.
Finance usually finds it: in a spend analysis, if anyone ever runs one.
The CIPS glossary defines it as buying an item without a contract when a contract for that item already exists. Put simply, you negotiated a deal and then didn't use it.
Example: Ordering laptops from a retailer instead of your contracted reseller.
Finance usually finds it: when the contracted supplier's volumes fall short and the discount tier slips.
We use it for the deliberate version: working around a control on purpose, usually to dodge an approval threshold.
Example: One $18,000 purchase split into three orders so each one stays under a $10,000 approval limit.
Finance usually finds it: in an audit, if someone spots the pattern.
Paying more than your contract allows. Think rates above the agreed price, volume discounts nobody claimed, rebates that never came back, and auto-renewals nobody caught. World Commerce & Contracting puts the average loss at 9.2% of contract value.
Example: A supplier bills $112 a unit against a contracted $100. The invoice still matches the PO, so it sails through.
Finance usually finds it: rarely. The PO matches the invoice, and nobody checks either one against the contract.
Think of it like a leaky bucket. You can keep topping it up at month-end, or you can go find the holes.
Why it happens
Why does spend leak? Because control shows up late.
Most finance controls kick in at the invoice inbox. By the time an invoice arrives, the supplier's been picked and the price agreed. Finance gets handed the job of processing a decision someone else already made.Two things keep that gap open:
So what's the fix? Move the control earlier, to the moment someone first says “I need this”. That's exactly where Blackbee AI starts.
The approved route is slower than the workaround.
In Ardent Partners' State of ePayables 2025, 49% of AP teams named delayed approvals as a key barrier. If getting a yes takes a week and a corporate card takes a minute, which one would you pick?
Invoices get checked against the PO, and the PO rarely gets checked against the contract.
So a clean three-way match can still carry the wrong price. Contracts sit in a shared drive while the invoice sails through.
Where leakage gets in, and where most controls start
Map the life of a single purchase and the pattern jumps out. Almost every kind of leakage sneaks in before the invoice, yet most controls only start at it.
Blackbee AI starts here
Blind zone
- 01
Spend intent
Someone needs to buy something.
The Intake Agent picks up the request from email, chat, Teams or wherever people ask.
- 02
Approval
The request goes for sign-off.
The Route Agent routes on risk and policy.
- 03
Supplier and commitment
A supplier is picked and a PO or contract is raised.
The Commit Agent and Trust Agent cover this stage.
- 04
Contract terms
Price, volume and renewal terms are set.
The Clause Agent turns those terms into active guardrails.
Traditional AP controls start here
- 05
Invoice
The supplier bills. This is where traditional AP controls start.
The Parse Agent checks every field against the contract as well as the PO.
- 06
Payment and ERP
Finance pays and posts.
The Sync Agent posts validated data to your ERP, and the Signal Agent watches for anomalies.
Catch spend at intent, then keep it in check all the way to your ERP
Blackbee AI is an agentic Intake-to-Pay platform that sits above your ERP. It picks up spend intent right where it starts, whether that's an email, a Slack or Teams message, or a quick chat. From there it handles everything in between. It routes approvals, checks suppliers, reads contracts and validates invoices until clean, structured data lands in your ERP.
Leakage controls
6 leakage types, each caught before the invoice
| Leakage type | Caught at | Agents | How it's stopped |
|---|---|---|---|
| Maverick spend | Spend intent | Intake AgentRoute Agent | The request gets captured before anyone commits, then routed on risk and policy, so a big ask can't slip through on a small-sounding description. |
| Shadow spend | Spend intent | Intake AgentSignal Agent | People keep asking for things wherever they already ask, and the request lands in one governed flow. Signal's anomaly detection flags unusual spend for review. |
| Tail spend | Supplier and commitment | Trust AgentSignal Agent | New suppliers go through onboarding and continuous risk scoring. Spend analytics shows you where your supplier list is quietly sprawling. |
| Off-contract spend | Supplier and commitment | Commit AgentClause Agent | Vendor commitment is governed from approval through to PO, with your contract terms in view when the supplier gets picked. |
| Rogue spend | Approval | Route Agent | Approvals weigh risk and policy, so staying just under an amount limit doesn't get a purchase waved through. |
| Contract leakage | Contract terms | Clause AgentParse Agent | Contracts become active guardrails. Every invoice field gets validated and confidence-scored against what you actually agreed. |
Your ERP stays the system of record. The Sync Agent posts validated decisions back to NetSuite, Sage Intacct, Microsoft Dynamics 365, Workday or SAP.
Showing 6 of 6What changes when control starts at intent
| Invoice-first controls | Blackbee AI (intent-first) | |
|---|---|---|
| Where control starts | Invoice-firstThe AP inbox | Blackbee AIThe spend request |
| What the invoice is checked against | Invoice-firstThe PO and goods receipt | Blackbee AIThe PO, the receipt and the contract |
| How approvals route | Invoice-firstAmount thresholds | Blackbee AIRisk and policy |
| Supplier risk | Invoice-firstChecked once, at onboarding | Blackbee AIScored continuously |
| When finance sees spend | Invoice-firstAfter it's committed, often at month-end | Blackbee AIBefore anyone commits |
| Why a decision was made | Invoice-firstA rule fired | Blackbee AIThe reasoning is shown on every decision |
| How it's priced | Invoice-firstOften tied to invoice volume | Blackbee AIPriced on control, with no per-invoice fees |
Put simply, you get a say in the spend before it happens.
Is spend leaking out of your business?
Six quick questions. Be honest, nobody's watching.
0 of 6 answered
Answered "no" to two or more? Then leakage is probably getting through before finance ever sees it.
Can finance see a spend request before a PO is raised?
Does every new supplier get approved before their first invoice arrives?
Do invoices get checked against contract terms as well as the PO?
Do approvals route on risk and policy, beyond just the amount?
Do you know how many suppliers bill you less than $1,000 a year?
Do auto-renewals show up on someone's radar before they renew?
Want to go deeper?
From Blackbee AI
- Tail spend managementKeeping small purchases in check without slowing teams down.
- Spend Intelligence 101How agentic AI turns AP data into CFO strategy.
From elsewhere
- Raconteur, June 2025Three minute explainer on shadow spending (opens in a new tab)
- World Commerce & Contracting, Aug 2025Contract Management: An Overlooked Driver of Business Agility and Financial Performance (opens in a new tab)
- Ardent PartnersState of ePayables 2025: AP's Unfinished Journey (opens in a new tab)
- CIPSGlossary of procurement and supply chain terms (opens in a new tab)
Questions people ask us
What is maverick spend?
Maverick spend is any purchase made outside your approved buying policy or approval route. You'll also hear it called non-compliant spend, and rogue spend often gets used as a synonym. Most of it isn't malicious. Someone needed something fast, and the proper route felt slower than buying it directly.
What's the difference between maverick spend and tail spend?
Maverick spend breaks a policy. Tail spend is about size: the long list of small purchases spread across lots of suppliers. A $75 order from your preferred office supplier is tail spend, yet perfectly compliant. A $25,000 contract signed without approval is maverick spend, even though it's large.
What is shadow spend?
Shadow spend is spend finance can't see at all. There's no request, no PO, no contract on file and often no vendor record. It mostly lives on corporate cards and expense reports. In an Ivalua survey of 300 UK businesses, shadow spend averaged about one in every ten pounds spent.
What is off-contract spend?
The CIPS glossary defines it as buying an item without a contract when a contract for that item already exists. It chips away at the volume commitments your negotiated pricing depends on.
What is contract leakage?
Contract leakage is paying more than a contract allows. Think rates above the agreed price, missed volume discounts, unclaimed rebates and silent auto-renewals. World Commerce & Contracting estimates the average business loses almost 9% of contract value a year this way, while the best performers lose about 3%.
How do you measure spend leakage?
Start with 12 months of AP and card data and compare it against your approved suppliers, contracts and requests. Flag spend with no request or PO behind it, purchases from non-contracted suppliers, invoice prices that differ from contract rates, and split orders sitting just under approval limits. Then track the total as a share of your addressable spend.
How do you reduce maverick spend?
Make the compliant route the fastest one. Capture requests where people already ask for things, route them on risk and policy, put contract terms in view when a supplier gets picked, and show people why a request was flagged. That works better than another policy reminder.
Are finance teams really using AI for this?
More and more, yes. Gartner predicts 90% of finance functions will deploy at least one AI-enabled solution by 2026. In a Wolters Kluwer survey of 392 finance leaders, 6% already used agentic AI and a further 38% planned to within a year.
Does Blackbee AI replace our ERP?
No. Your ERP stays the system of record. Blackbee AI is an agentic Intake-to-Pay platform that sits above NetSuite, Sage Intacct, Microsoft Dynamics 365, Workday or SAP. It handles spend from intent to payment, then posts validated decisions back to your ERP.
Find the leaks before they turn into costs.
Let's look at where spend slips past your controls today. Book 30 minutes with our team and we'll show you how Blackbee AI handles it, above the ERP you already run.
Priced on control, with no per-invoice fees.
EXPLORE MORE