A policy does not need to be long to work. It needs to say who can buy software, how it is paid for, who owns it afterward and what to check first. Below is a page you can paste, edit and adopt today, followed by the reasoning behind each rule.
Run it afterward · guide 2 of 4 · Reviewed Oct 25, 2026
Replace the bracketed fields and delete any rule your team will not follow. A shorter policy that is followed beats a longer one that is not.
If your company issues purchase orders, they sit on top of this; most ten-person teams do not need them.
When a request is a tool that could be replaced by something you already own or by open source, the self-hosting math guide shows how to cost it honestly.
Fill the brackets, read it aloud to the team in ten minutes and put it where people will find it.
Build the register from your books using the vendor register guide and assign an owner to every line.
On the first of each month, review new charges against the register. Anything not in it was bought around the policy; ask why, and fix the policy if it was too slow.
Send us the export and see which lines are worth a second look. A connected version is planned.