Purchasing discipline: buy on a PO, match before you pay

How to move your buying from ad-hoc orders to purchase orders, set a three-way match so you only pay for what you actually ordered and received, catch price creep before it eats your margin, and keep every supplier on an approved list tied to your food-safety program.

After this you can put a spine under the buying your operation does every week: a purchase order that records what you agreed to before anything ships, a match that stops you paying for anything you did not order or did not receive, and an approved-supplier list that decides who you are allowed to buy from in the first place. None of it needs software. It needs a discipline you can hold as the order count climbs — and the earlier you set it, the less there is to untangle later.

When buying by text message stops working

At low volume, ad-hoc buying works fine. You know your three suppliers, you call or text an order, a box shows up, an invoice follows, someone pays it. The whole loop lives in one person's head and their sent-messages folder.

That loop quietly breaks as you grow. More suppliers, more materials, more orders in flight, and more people allowed to place them. Now the cracks show:

Nobody can say what is actually on order right now, so you double-order a material or get caught short on one you thought was coming.
The price you were quoted and the price on the invoice drift apart, and with no written agreement to check against, the higher number just gets paid.
An invoice bills you for more than showed up, or for a case that arrived broken, and it clears anyway because no one compared it to what was received.
Someone orders from a supplier nobody vetted, and a material walks in the door with no approval behind it.

Every one of these is the same root problem: buying without a written record of what was agreed. Purchasing discipline is the set of habits that puts that record in place and then checks reality against it. Three habits carry most of the weight — the purchase order, the match, and the approved-supplier list.

The purchase order is the agreement, written down

A turns a verbal or texted order into a record. Raising one takes a couple of minutes, and it captures the things that otherwise live only in memory: which material, how much, at what price, by when, on what payment terms. For one concrete way to raise a purchase order, the docs walkthrough on creating a purchase order shows the steps.

The point is not the paperwork. The point is that once the agreement is written down, everything downstream has something to check against. The delivery gets checked against the PO. The invoice gets checked against the PO. A dispute with the supplier gets settled against the PO. Without it, every one of those becomes one person's recollection versus the supplier's, and the supplier has the paperwork.

PO-based buying also gives you the one thing ad-hoc buying never can: a straight answer to "what is on order?" Everything you have committed to buy but not yet received is sitting in open purchase orders. That is your incoming supply — the number the reorder-point work from the last lesson assumes you can see. You cannot time replenishment well if you cannot tell what is already coming.

The three-way match: pay for what you ordered and received

The habit that protects your cash is the . It is standard practice in any operation that takes its accounts payable seriously, and it is the single strongest guard against paying for things you did not get.

The three records answer three different questions:

The purchase order says what you agreed to: 20 cases of glass jars at $18 a case.
The receiving record says what actually came through the door — the count, the condition, and the lots. Recording what arrived, and capturing each lot as you do, is its own discipline; the receiving-with-QC lesson covers it, and capturing the lot here is what later makes one-up-one-down traceability possible.
The invoice says what the supplier wants to be paid.

Here is an illustrative case — the numbers are made up to show the mechanics. Your PO agreed 20 cases at $18. Receiving logs 18 cases arriving, all sound: two short. The invoice bills 20 cases at $19. Lay the three side by side and two problems surface at once. You are being billed for two cases that never arrived, and the price has moved from the $18 you agreed to $19 nobody approved. The match resolves it before a cent leaves: you pay for 18 cases at $18, and you take the price change up with the supplier instead of absorbing it.

For the match to work, the three records have to be comparable — every PO saved, every receipt logged against its PO, every invoice checked before it is paid. In a spreadsheet-and-folder world that is a filing discipline you keep by hand. Some operations platforms keep the purchase order, the receiving record, and the approved-supplier list in one place, so the match runs as goods are received rather than as a monthly reconciliation; Bettr Manager is one of them. Either way, the rule that protects you is the same: nothing gets paid that was not ordered, received, and bought from an approved supplier. For one concrete way to book in a receipt against its PO so the match runs as goods arrive, the docs on receiving a purchase order show the flow.

Price creep: the leak the match catches

Of the two problems in that example, the short shipment is the obvious one. The price change is the expensive one, because it is silent and it compounds.

Suppliers raise prices — costs rise, and a dollar more a case rarely gets a phone call. Without a PO price to check against, the new number simply flows onto the invoice and gets paid, and the next order starts from the higher base. A material you costed at $18 is quietly $19, then $20, and your recipe cost is wrong long before anyone notices the margin has thinned. This is why the match matters beyond catching a bad invoice: the PO price is the agreed price, and the invoice line that disagrees with it is your early warning that a cost has moved.

Catching the change is step one. Feeding it back into what you charge is step two, and that is where watching your costs move picks the thread up. Purchasing discipline is what surfaces the change; costing is what turns it into a price decision.

Approved suppliers: who you're allowed to buy from

The third habit sits underneath the other two. An answers a question ad-hoc buying never asks out loud: is this a supplier we have actually approved? A PO to a supplier who is not on the list is a gap, not an order. New suppliers earn their place on the list through vetting before the first PO, not after the first problem — the vetting-a-copacker lesson walks the kind of checks that qualify one.

For operations under FSMA's Preventive Controls rule, this same discipline has a formal, regulated version. If you rely on a supplier to control a food-safety hazard before the material reaches you — a raw material that arrives already treated for a pathogen, rather than one you control with a step of your own — the rule calls that a , and it asks you to run a written, risk-based for those materials. As of July 2026 it lives in 21 CFR Part 117, Subpart G, and there is a full lesson on it in supplier and supply-chain program.

Two honest cautions on that regulation:

The supply-chain program is risk-based, not a blanket rule

It attaches to a facility that controls a hazard through a supplier, and only for the specific materials that carry such a hazard — not to every ingredient you buy, and not the same way to every operation. Qualified facilities and some others carry modified requirements, and whether the Preventive Controls rule applies to you at all depends on your size and what you make. Do not assume it binds you, and do not assume it doesn't — confirm which requirements apply to you at the source rather than working from a summary.

And keep the two lists straight in your head. Your approved-supplier list is the operational backbone — it governs everyone you buy from, hazard or not. The supply-chain program is the food-safety layer that sits on top of it for the materials that carry a hazard you are trusting a supplier to control. Same discipline, two purposes; do not keep them as two disconnected lists that drift apart.

Where this leads

Put these three habits in place and the buying itself stays controlled as you scale: a PO records the agreement, the match defends the cash, and the approved list defends the door. What is left is the floor — as volume climbs, the manual steps of counting, keying, and writing down lots start to generate their own errors, and those errors compound. The next lesson is about cutting them with barcodes and scanning.

Do this in your operation

Move your top suppliers by spend onto PO-based ordering. For each, raise a real purchase order that records the item, quantity, agreed price, and delivery date before the next order ships — no more buying from memory.
Set a three-way match as your rule for paying: no invoice gets paid until it is checked against its purchase order and the record of what actually arrived. Decide who runs the check and where the three records live so they can be compared.
Pull your last few months of invoices for two or three key materials and line the prices up against what you agreed. Note anything that crept up without a conversation, and take it back to the supplier — or into your costing.
Write down your approved-supplier list and confirm every supplier you are currently buying from is on it. For anyone who isn't, either vet and add them or stop buying from them.
If you fall under FSMA Preventive Controls, check which of your materials rely on a supplier to control a hazard, and confirm at the source whether the supply-chain program requirements apply to you for those materials.

Mark this lesson complete