To choose the right accounts payable outsourcing company, define your scope first, then evaluate providers on four things: AP-specific experience in your accounting system, payment and data controls (including independent SOC reports), service levels and team continuity, and transparent all-in pricing. Shortlist two or three providers, send each the same scope, and run a paid pilot on real invoices before signing a long-term contract.

Key takeaways

• Write down your invoice volume, systems, and approval rules before you talk to any vendor; otherwise every quote covers different work.
• Your team should always keep payment release authority. A provider that wants to both prepare and release payments is a red flag.
• Ask for a SOC 1 Type 2 report (controls relevant to your financial reporting) and, ideally, a SOC 2 report (security and data handling).
• Since Nacha's 2026 fraud-monitoring rules took effect, ACH originators of every size need risk-based processes to spot fraudulent payments; your provider's workflow should support yours.
• Compare quotes as an all-in cost per invoice and test the top choice with a short pilot before committing.

What does an accounts payable outsourcing company actually do?

An AP outsourcing company takes over the day-to-day processing of your supplier invoices: receiving and capturing invoices, coding them to your chart of accounts, matching them against purchase orders and receipts, routing them for approval, preparing payment runs, reconciling vendor statements, and reporting on what you owe. In a well-designed model, your team still approves invoices and releases payments; the provider handles the work in between.

That middle position is exactly why choosing the right provider matters. They will see your vendor bank details, your cash position, and your approval chain. A poor choice costs more than a missed invoice; it can create control gaps that auditors and fraudsters both notice. If you're still weighing whether to outsource at all, start with our complete guide to accounts payable outsourcing in the US.

Step 1: Define your scope before you talk to vendors

Most bad provider decisions start with a vague brief. Before your first sales call, document:

1. Volume: invoices per month over the last 12 months, including peaks.
2. Mix: the share of invoices backed by purchase orders, the number of active vendors, and how many invoices arrive on paper, by email, or through a portal.
3. Systems: your accounting software or ERP, any AP automation or bill-pay tool, and how payments are released (bank portal, ACH file, checks, cards).
4. Approval rules: who approves what, at what dollar thresholds, and how long approvals typically take today.
5. Scope boundaries: whether you want vendor onboarding, W-9 collection, vendor statement reconciliation, month-end accruals, and year-end 1099 preparation included.
6. Pain points: what's actually going wrong, whether that's late payments, missed discounts, duplicate payments, or a slow close.

Send the same document to every provider. It's the only way to get quotes you can compare line for line.

The 12-point checklist for choosing an AP outsourcing company

Expertise and fit

1. AP-specific experience, not just general bookkeeping. Plenty of firms list "accounts payable" as one service among twenty. Ask how many clients they run full-cycle AP for, what volumes those clients process, and who on their team has run an AP function before. Ask them to walk you through how they handle a three-way match exception; the quality of the answer tells you a lot.

2. Hands-on experience in your accounting system. The provider should work inside your existing system (QuickBooks Online, Xero, NetSuite, Sage Intacct, or your ERP) rather than asking you to change tools to suit them. Ask which systems their current AP staff use daily and whether they can work with your AP automation tool if you have one.

3. Experience in your industry. Construction AP (lien waivers, retainage, job costing) looks nothing like SaaS AP (subscriptions, card spend, prepaid amortization). A provider with relevant clients will already know your coding conventions and common exceptions.

Controls and security

4. Independent SOC reports. Ask for a SOC 1 report, which the AICPA describes as an examination of a service organization's controls relevant to its clients' internal control over financial reporting. Because AP flows straight into your financial statements, this is the report your auditor is most likely to ask for. A Type 2 report, which tests whether controls actually operated over a period, carries more weight than a Type 1, which only assesses design at a point in time. A SOC 2 report adds assurance on security and data handling. If a provider has neither, ask what independent assurance they can offer instead and weigh the answer carefully.

5. Separation of duties, with your team releasing payments. The provider should prepare and propose payments; your team should approve and release them. A provider that asks for authority to both prepare and release payments, or to create vendors and pay them without independent review, is collapsing the very control outsourcing should strengthen.

6. Vendor bank-change verification and fraud monitoring. Business email compromise, where a fraudster impersonates a vendor to redirect payments, remains the most common AP attack. Ask how the provider verifies a change to a vendor's bank details. The right answer is an independent call-back to a phone number already on file, never one supplied in the change request itself.

This matters more in 2026. Nacha's fraud-monitoring rules now require non-consumer ACH originators to have risk-based processes reasonably intended to identify payments that are unauthorized or made under false pretenses. The first phase took effect on March 20, 2026 for high-volume originators, and the second phase extended it to all other non-consumer originators on June 19, 2026. Your AP provider's verification steps and documentation should support your own compliance, so ask how they do.

7. Clear answers on data access and location. Ask where your data will be processed, which staff can access your systems, whether access uses individual named logins with multi-factor authentication, and how access is removed when someone leaves. For offshore providers, also ask about device controls, clean-desk policies, and whether data can be downloaded locally. Our 25-point offshore accounting security checklist goes into this in detail.

Service and people

8. Written service levels. Get turnaround commitments in writing: how quickly invoices are entered after receipt, how quickly exceptions are flagged, the deadline for preparing each payment run, and the reporting you'll receive. Ask how SLA performance is measured and what happens when it's missed.

9. A dedicated team and a continuity plan. Ask whether you'll have a named specialist and a reviewer, how often staff rotate, and who covers your work during leave or turnover. Continuity matters in AP because a lot of value sits in knowing your vendors and approvers.

10. Communication that fits your working hours. Offshore AP teams can process invoices overnight, which is a real advantage, but only if there's enough overlap with your day to resolve questions. Ask about overlap hours, how urgent issues are escalated, and how you'll communicate (email, Slack, Teams, or a ticketing tool).

Commercials

11. Transparent, all-in pricing. AP outsourcing is usually priced per invoice, per dedicated full-time equivalent (FTE), as a fixed monthly tier, or hourly. Whatever the model, ask for every fee in writing: onboarding, software licenses, exceptions, vendor setup, rush payments, and year-end 1099 work. Then convert each quote to an all-in cost per invoice so you can compare like with like.

12. Fair exit terms and clear data ownership. Check the notice period, whether there's a minimum term, and what the provider hands back if you leave: process documentation, vendor files, and work papers. Your data should stay in your systems, and the provider's documentation of your processes should be yours to keep.

Questions to ask an AP outsourcing provider (and the answers to look for)

Question	A good answer	A red flag
Who releases payments?	"Your team approves and releases; we prepare."	"We can handle payments end to end for you."
How do you verify vendor bank changes?	Independent call-back to a number already on file, documented every time	"We confirm by replying to the vendor's email."
Can we see your SOC 1 or SOC 2 report?	Shares a recent report under NDA	Vague answers, or only an internal policy document
Who will work on our account?	A named specialist plus a reviewer, with a backup plan	"Whoever is available on the team"
What isn't included in your price?	A specific written list of add-on fees	"It depends," with no written schedule
What happens if we leave?	Defined notice period and a handover of documentation	Long lock-in or fees to return your files
Can we start with a pilot?	Yes, a scoped paid pilot on real invoices	Insists on a 12-month contract upfront

Red flags to watch for

• Pricing that seems far below every other quote without a clear explanation of what's excluded.
• Reluctance to put SLAs, security controls, or fee schedules in writing.
• No independent assurance report and no willingness to answer a detailed security questionnaire.
• Shared logins, or a request for your bank portal credentials.
• A sales team that can't name who would actually do the work.
• No reference clients at a volume and complexity similar to yours.

How to run the evaluation: from shortlist to signed contract

1. Shortlist two or three providers that pass the controls questions (points 4 to 7). Don't spend time negotiating price with a provider that fails on controls.
2. Send the same scope document from Step 1 to each and ask for written proposals.
3. Compare all-in cost per invoice alongside SLAs, team structure, and exit terms.
4. Check references with clients of similar size and industry. Ask what went wrong during onboarding and how the provider handled it.
5. Run a paid pilot on a slice of real invoices, such as one entity or one month's volume, before signing a long-term contract. Here's how a 40-hour pilot works in practice.
6. Plan the transition with a defined go-live date, parallel processing for the first cycle, and clear ownership of vendor communications.

Onshore, offshore, or hybrid: which model should you choose?

Model	Typical strengths	Typical trade-offs
Onshore (US-based)	Same time zone, familiarity with US vendors	Higher cost per invoice
Offshore (e.g. India-based)	Lower cost, overnight processing, scalable team	Requires clear processes and good communication overlap
Hybrid	US-based oversight with an offshore processing team	Two layers to manage; clarify who owns what

None of these is automatically right. A business with complex, judgment-heavy AP and a small volume may prefer onshore support; a growing business with steady volume and documented processes often gets the most value from an offshore or hybrid team. Our outsourced accounts payable services use an India-based team working inside your systems, with your team keeping approval and payment release.

Frequently asked questions

What should I look for in an accounts payable outsourcing company?

Look for AP-specific experience in your accounting system, strong payment controls with your team keeping payment release authority, an independent SOC 1 or SOC 2 report, written service levels, a dedicated team, and transparent all-in pricing.

Do AP outsourcing providers need a SOC 1 or SOC 2 report?

It isn't legally required, but it's strongly recommended. A SOC 1 Type 2 report gives your auditors evidence about controls affecting your financial reporting, while a SOC 2 report covers security and data handling.

Should my AP outsourcing provider be able to release payments?

Generally, no. Best practice is for the provider to prepare payment runs while your own team approves and releases them, which preserves separation of duties and reduces fraud risk.

How do the 2026 Nacha rules affect AP outsourcing?

Since June 19, 2026, all non-consumer ACH originators must have risk-based processes to identify unauthorized or false-pretenses payments. Your provider's vendor verification and documentation should support those processes.

How many AP outsourcing companies should I compare?

Two or three is usually enough. Send each the same written scope, compare all-in cost per invoice and controls, then run a short pilot with your top choice.

How long does it take to switch AP to an outsourced provider?

Most transitions take a few weeks to a couple of months, depending on how well documented your vendor data, approval rules, and system access are. Running the first payment cycle in parallel reduces the risk of errors.

This article is general information, not legal, tax, or audit advice. Review contract terms, payment-rule compliance, and control requirements for your business with your CPA, auditor, or attorney.

Evaluating AP outsourcing providers? Send us your volume, systems, and approval rules, and we'll answer every question on this checklist in writing, including a scoped pilot. Talk to our team.