ApprovalMax

ApprovalMax typical implementation process:

• Account Creation and Platform Setup: Register for ApprovalMax and set up the company account; choose the necessary subscription level and connect to your existing accounting system (such as Xero, QuickBooks Online, or NetSuite).

• User and Role Configuration: Define user roles, assign permissions, and invite team members, including approvers, reviewers, and observers, to the platform.

• Workflow Customization: Configure multi-level approval workflows for purchase orders, bills, sales quotes, invoices, and payments, tailoring approval rules to match internal financial policies.

• Integration and Data Sync: Integrate ApprovalMax with your accounting and document management systems, ensuring seamless data exchange and real-time updates.

• Testing and Training: Run test transactions (POs, bills, invoices) to ensure workflows function as intended; provide guidance or training for users on approvals and notifications.

• Go-Live and Monitoring: Enable live transactions, monitor approval cycles, and use reporting tools and analytics to track compliance, efficiency, and any user issues.

ApprovalMax offers robust customization capabilities, enabling businesses to tailor the platform closely to their unique financial processes and control requirements.

• The approval workflows are fully customizable, allowing organizations to set up multi-level, multi-role approval chains for purchase orders, bills, sales quotes, invoices, and payments in line with their internal policies and audit needs. Approval rules can be set up with conditions based on transaction amount, supplier, department, cost center, or project—ensuring precise routing and compliance regardless of organizational complexity. User management is highly granular, supporting differentiated roles like approver, reviewer, observer, and unlimited workflow steps, so teams of any size and structure can be accommodated.

• The system also supports the customization of notifications, batch approvals, document attachments, and integration depth, meaning notifications and process steps reflect how teams actually work. ApprovalMax can be integrated natively with leading accounting software (Xero, QuickBooks Online, NetSuite) and connected with document management and payment systems, enabling seamless workflow handoffs within broader finance tech stacks.

• For audit readiness and compliance, businesses can configure advanced audit trails, document retention settings, and reporting formats to fit regulatory and internal governance obligations. Dashboard analytics and exportable reports can be customized for department, project, or group-level insights, supporting CFOs and managers in surfacing the information most relevant to their KPIs. Mobile approval options and support for remote, distributed teams let organizations deploy ApprovalMax in hybrid or global environments without losing workflow control or visibility.

ApprovalMax offers comprehensive training and support options for new users, including structured live training sessions, extensive online resources, and responsive customer support services.

• Training for New Users: ApprovalMax provides both live and self-paced training options. New user and end-user training is typically delivered as part of a packaged onboarding service, which includes two to three online sessions of about 60 minutes each, focusing on system setup, workflow management, and key product features. This training is available for a one-time fee (currently around £219), or users can opt for self-setup at no cost using the extensive online help resources and guides available on the ApprovalMax website.

• ApprovalMax also delivers free webinars where industry experts present feature walkthroughs and best practices, along with over 70 detailed "how-to" videos covering every aspect of core platform functionality—from connecting to accounting systems to customizing approval workflows and managing users.

• Online Resources and Self-Help: ApprovalMax maintains a robust online knowledge base, including user guides, walkthroughs, and FAQ articles, allowing new users to resolve the most common questions independently. The video library covers practical topics like onboarding, configuration, integration, and troubleshooting, making it easy for new users to become proficient quickly.

• Customer Support: All ApprovalMax subscribers receive access to technical support via multiple channels, including email, webform, live chat, and the in-app support widget. Response times are generally prompt, with live chat and email being available during business days (UK hours); advanced support options (such as emergency phone lines and scheduled Zoom calls) may be accessible to account owners and administrators. Dedicated Partner Success Managers support partners with onboarding and optimization if required.

ApprovalMax employs a set of security measures to protect user data, including technical, organizational, and policy-based controls that align with leading international standards.

Certifications and Compliance

ApprovalMax is certified to ISO 27001:2022, the leading international standard for information security management. The platform is also fully GDPR compliant, ensuring that personal and financial data is processed and stored in accordance with strict European data privacy regulations. For EU-based clients, all data is hosted in EU-based Microsoft Azure cloud centers, guaranteeing no cross-border data transfer.

Data Protection and Encryption

• Data in transit is encrypted using TLS 1.2 or above, while all data at rest—including passwords—is protected with strong encryption protocols.

• Access controls are enforced, including role-based access and policies to ensure that only authorized personnel can manage or access sensitive data.

• All backups are encrypted and regularly tested to guarantee swift data recovery in the event of an incident.

Authentication and Session Security

• Two-factor authentication (2FA), using TOTP, is available to all users and required for certain integrations (e.g., Xero-connected organizations), significantly reducing the risk of account takeover.

• ApprovalMax supports Single Sign-On (SSO) with major providers (Xero, Intuit, Google, Microsoft), adding another layer of credential security.

• Sessions automatically expire after 15 minutes of inactivity, and users are logged out to limit unauthorized access.

Network and Application Security

• The network is segmented into multiple security zones, protected by firewalls, bastion hosts, VPNs, and network access control lists with no public IPs assigned directly to critical infrastructure.

• Regular third-party penetration tests and automated security scans are conducted to identify and remediate vulnerabilities.

• Automated security monitoring detects anomalies and potential threats, enabling rapid response to any data breach attempts.

ApprovalMax releases updates and product enhancements multiple times per quarter, resulting in a fast-paced and transparent update cycle. In 2024, for instance, the platform delivered nearly 50 updates, averaging almost one per week and often focusing on new feature rollouts, interface improvements, workflow automations, and security enhancements.

• Frequency and Release Cycle: ApprovalMax issues product updates on a rolling basis, with major feature releases and minor improvements released throughout each quarter. Release notes are maintained in a public knowledge base, where each update’s content, benefits, and technical details are documented. Users can expect updates every month, with some months seeing multiple releases—especially as the platform grows and introduces new integrations or regulatory features.

• Update Management and Communication: The platform employs a robust release management process, ensuring that updates do not interrupt service or compromise user data. All new features and changes are announced on the ApprovalMax website, product update webinars, and through detailed release notes. For users, most updates are delivered seamlessly in the cloud environment, requiring no manual downloads or intervention, while more significant changes may be accompanied by product walkthroughs or short-term opt-in periods for migration and user adaptation.

ApprovalMax’s policy ensures that customers retain full ownership of all data they enter or generate within the platform, with specific provisions supporting GDPR rights and structured processes for data access and export.

• Data Ownership: Customers are explicitly regarded as the owners of any data they input or produce on the ApprovalMax platform (“Your Data”). ApprovalMax only accesses this data as necessary to provide its services and never discloses it to third parties except as required by law or as described in the Privacy Policy. The data remains the customer's property throughout the service relationship.

• Data Portability: ApprovalMax offers multiple options for data export and portability. Users—specifically Organisation Administrators—can generate and download comprehensive reports in CSV format as well as export approval workflow records, audit archives, and supporting attachments. Upon termination of service, ApprovalMax makes commercially reasonable efforts to provide access to the customer’s data in a read-only mode for up to one year; there is no obligation to provide data copies beyond this retention period, and data may be deleted after one year unless otherwise required.

• Regulatory Compliance: ApprovalMax’s operating and contractual framework follows GDPR, supporting data owners’ rights to access, correct, export, and delete their data as required by law. Customers may enter Data Processing Agreements (DPAs) to formalize these rights and responsibilities and ensure compliance with EU or UK data protection laws.

ApprovalMax offers flexible terms that make it straightforward for organizations to scale their subscription up or down according to changing needs, with seamless upgrade, downgrade, and transfer options managed through a self-service billing portal.

• Scaling Up: To scale up—such as expanding the number of organizations or features covered under a subscription—account owners can upgrade their plan directly via the Subscriptions tab in the ApprovalMax interface. Upgrading is handled on a pro-rata basis: if an upgrade occurs mid-billing cycle, only the incremental cost for the remainder of the billing period is charged, and any unused portion of the original plan is refunded. Additional organizations or advanced features can be added as needed without waiting for the current term to end.

• Scaling Down: Organizations can be removed from a subscription or a subscription downgraded by using the “Request a downgrade” function in the Subscriptions tab. Reducing the subscription scope or downgrading is effective from the next billing cycle, and can include fewer organizations, add-on reductions, or switching to less feature-rich plans. Full cancellation is also available, with the ability to export data before account closure.

• Organization Transfers: ApprovalMax also allows transferring organizations between compatible subscriptions or even different accounts, so organizations can be consolidated or distributed across business units as needs change. Transfers and plan changes can be managed by account owners in the self-service portal, ensuring no disruption to workflows or audit trails.

ApprovalMax contracts renew automatically unless proactively cancelled, with specific requirements for timely notice, and clearly defined consequences regarding access, data retention, and refunds.

Renewal Terms

• Annual subscriptions renew automatically for another 12 months at the end of each term unless written notice is given at least 14 days before the renewal date.

• Monthly subscriptions renew automatically each month (on the billing date) unless cancelled at least 14 days before the end of the current cycle.

• Renewal and billing are managed through the Subscriptions section in the ApprovalMax interface and are processed using third-party payment providers.

Cancellation Terms

• Written notice (usually via the account portal) is required at least 14 days before the end of the Initial or any Renewal Period to prevent automatic renewal.

• Cancelling a subscription (not the entire account) means all organisations under that subscription are retired and switched to read-only mode for up to one year, allowing continued access to historical data but disabling active features.

• Cancelling the account (not just a subscription) causes all organisations to be deleted, removing all access and history.

• For accounts connected via the Xero App Store, cancellation must be managed via Xero rather than directly in ApprovalMax.

Refund Policy

• ApprovalMax does not offer refunds for unused portions of a subscription or for cancellations prior to the end of a contracted period, except where legally required.

• Upgrades are charged on a pro-rata basis for the remainder of the billing cycle, but cancellations do not trigger refunds.

Data Retention Post-Cancellation

• After cancellation of a subscription, all data remains accessible in read-only mode for one year, after which it may be permanently deleted.

• Users are advised to export any data they require before this deadline.

Termination by ApprovalMax

• ApprovalMax may terminate an account or service for reasons such as breach of terms, illegal or fraudulent activity, or required compliance with legal/regulatory authorities, sometimes with immediate effect.

ApprovalMax software meets several international compliance standards, focusing on data security, privacy, and financial industry requirements.

Security and Privacy Certifications

• ISO 27001:2022 Certified: ApprovalMax holds ISO 27001:2022 certification, a globally recognized standard for information security management. This demonstrates robust controls for risk management, data protection, and ongoing security audits.

• GDPR Compliant: ApprovalMax adheres to the European Union’s General Data Protection Regulation (GDPR), supporting full data subject rights, cross-border transfer controls, and Data Processing Agreements for EU and UK organizations.

• SOC Type 2 Accreditation (in progress/maintained): ApprovalMax aligns with SOC 2 principles for secure cloud service operation, including privacy, availability, and confidentiality of customer data. The SOC 2 report is available to users upon request, signifying that controls are regularly assessed by independent auditors.