Corpay

Corporate Card Providers: How to Evaluate Them

Category:Commercial Cards
Updated:2026-07-24
Author:David Luther

Choosing a corporate card provider is closer to selecting an ERP than to picking a rewards card. The program you sign carries your spend controls, your payment rails, and your month-end reconciliation for years, and unwinding it later means re-enrolling suppliers and retraining every cardholder you onboarded.

Commercial cards are still under 3% of global B2B payments, against roughly an $80 trillion commercial-flows opportunity, according to Mastercard Data & Services' 2024 analysis, "Commercial cards address a longstanding payments anomaly." That gap is closing fast. Global commercial card spending passed $4.3 trillion in 2024 and is projected to exceed $6 trillion by 2029, per FIS's 2025 report "Commercial cards and virtual cards are transforming B2B payments."

Your provider is becoming the rail a growing share of supplier spend will run on, well beyond this quarter's travel expenses, which is why the evaluation deserves criteria weighted for your vendor file, your accounting system, and how much of the work you want your own team doing.

Key Takeaways

  • A corporate card provider is more than an issuer. The issuer supplies the credit line and the network, while the provider runs everything around it, from supplier enrollment through reconciliation.

  • Weight ERP reconciliation fit heavily. If card charges don't land cleanly in NetSuite, Sage Intacct, Microsoft Dynamics 365, or Acumatica, your team pays for that gap every month at close.

  • Rebate headline rates are the least reliable number in any pitch. Net value depends on how many of your suppliers actually enroll, and on what enrollment does to those relationships.

  • Evaluate spend controls at the granularity you'll really use, which usually means department-level limits and merchant category restrictions rather than a single company-wide cap.

  • Ask who does the work. Software issues the card; a person still has to chase suppliers, clear exceptions, and pick up the phone during close.

What does a corporate card provider actually do?

A corporate card provider issues cards to your employees and departments, sets the rules for what those cards can buy, moves money to merchants and suppliers, and hands your accounting team the data to reconcile it. Issuing is the commodity part. Everything wrapped around it is where providers diverge, and where your evaluation should spend its time.

The distinction gets sharper as card spend grows past travel. A program covering fifteen sales reps needs limits and receipt capture. A program routing several million dollars of supplier invoices onto card needs enrollment campaigns, remittance delivery, exception handling, and a reconciliation path back to the ledger.

How is a corporate card provider different from just an issuer?

An issuer supplies the credit line and the network relationship. A provider runs the program built on top of it. Beyond the card number itself, you're buying five things:

  • Controls that decide what a card can buy, from dollar limits to merchant category restrictions

  • Supplier enablement, meaning the work of getting vendors to accept card payments at all

  • Settlement, including how funds move and what remittance data travels alongside them

  • Reconciliation back to your general ledger, with enough detail to survive an audit

  • Support and escalation when a payment fails in the middle of close

Banks and software companies both use the word "provider," and the gap between them is usually the middle three items. Some sell you the card and leave enrollment and exceptions to your AP team. Others treat that work as part of the product. Neither model is wrong, but the difference shows up in headcount, so price the program against what your team can absorb. The trade-offs between card structures are worth understanding first, and the practical differences between a charge card and a credit card shape both liability and cash flow before any provider gets involved.

What are corporate cards used for across a business?

Corporate cards cover four broad categories of spend. Travel and entertainment is the familiar one, purchasing and procurement is the next tier, accounts payable is usually the largest, and one-off or higher-risk transactions get handled with virtual or single-use numbers. Rail breadth matters because each category has a different acceptance profile.

Business card charges are much larger than consumer ones. Business card payments account for roughly 26% of business card payment value while making up only 9% by number, according to the Federal Reserve Payments Study (2022 data, published 2024). A single supplier invoice paid by card can exceed a month of one employee's travel, which is exactly why per-transaction controls matter more on the AP side.

Providers that handle only T&E leave the largest spend category untouched. Consolidating categories onto a single card program is one way finance teams cut the number of platforms they reconcile, and the types and benefits of corporate cards differ enough that mapping your spend before shortlisting saves a round of demos.

Which criteria should you use to evaluate corporate card providers?

Eight criteria account for most of what separates one provider from another. Score each against your own situation rather than against a generic best-practice list.

  • Spend controls

  • Rail breadth

  • ERP fit

  • Supplier enablement

  • Rebate economics

  • Security posture

  • Service model

  • Total cost

The table below is the working version of that scorecard. Take it into demos and make the provider answer the middle column directly, because vague answers there are themselves a data point. Teams that have already thought through program design and ROI tend to move through this faster, since they know which categories they're trying to move onto card.

Criterion

What to ask the provider

Weight it heavily when

Spend controls

Can limits be set by card, by department, and by merchant category, and changed without a support ticket?

Cardholders are distributed or headcount is growing

Rail breadth

What runs on the platform besides plastic, including virtual and single-use numbers?

Supplier invoices, rather than travel alone, are the target

ERP fit

How do charges land in our accounting system, and what does close look like afterward?

You run NetSuite, Sage Intacct, Dynamics 365, or Acumatica

Supplier enablement

Who enrolls suppliers, and what enrollment rate do customers our size see?

Rebate is part of the business case

Rebate economics

What's the rebate on enrolled spend, net of any cost passed back to suppliers?

Card volume is material to the P&L

Security posture

Will you share your SOC 2 Type II report and explain how supplier banking gets validated?

You've had a payment fraud incident

Service model

Who handles exceptions, and is that a named person or a ticket queue?

Your AP team is small relative to vendor count

Total cost

What fees exist beyond interchange, including FX, expedite, and platform charges?

Two offers look similar on the headline number

Scorecard framework for corporate card provider evaluation. Weightings should reflect your own spend mix and team capacity.

Scoring it is straightforward once the answers are in hand:

  1. Assign each criterion a weight from 1 to 5 based on how much it matters to your business.

  2. Score each provider 1 to 5 on how completely they answered, not on how good the answer sounded.

  3. Multiply and total, then look specifically at where your highest-weighted criteria scored lowest.

That last step is the one people skip. A provider can win on total score and still fail on the single criterion your program depends on.

How do you weigh spend controls and approval workflows?

Weight controls heavily if your cardholder population is distributed, growing, or handling spend that isn't easy to predict. Controls are what keep a card program from becoming an expense-report program with better plastic.

Reviewers of card platforms consistently describe the same practical need, that spending limits "can be set and adjusted on each card especially when team members travel." That sounds minor until you're the controller approving a one-off limit raise at 9 p.m. before a conference. Ask whether temporary changes are self-service within policy, or whether every adjustment routes through your provider's support desk.

Approval depth is the other half, and it's where thin platforms show. A recurring complaint in card software reviews is that missing manager approval and shallow reporting undercut day-to-day usability. Test the workflow with your actual approval chain during the demo, not the vendor's two-step sample. Setting the policy layer around card controls before you shop makes these demos much shorter, because you already know what you need the software to enforce.

The cost side is easy to underrate. An average expense report costs about $58 and takes 20 minutes to process, according to the GBTA Foundation's analysis "How Much Do Expense Reports Really Cost a Company?" Controls that push spend onto compliant cards with clean data cut the number of reports that need handling at all.

Commercial cards success story

See how commercial cards transformed expense management and reporting for a finance team — turning a manual burden into measurable savings and a more strategic AP function.

Read the success story
commercial-cards-success-story.jpg

How much should ERP integration and reconciliation fit weigh?

Heavily, and more heavily than most shortlists assume. Card programs create accounting work every single month, so a poor reconciliation fit is a recurring tax rather than a one-time implementation annoyance.

Ask how charges arrive in NetSuite, Sage Intacct, Microsoft Dynamics 365, or Acumatica, and whether that's a native integration, a file drop, or a spreadsheet someone maintains. Then ask what happens to a disputed charge after it's already posted. The answer to the second question tells you more than the first, because exception handling is where integrations usually break down.

Single-transaction reconciliation is the standard worth holding out for, where one payment maps to one invoice and one ledger entry without a human matching them. Teams working through card reconciliation mechanics generally find the close time difference between a well-fitted program and a poorly fitted one runs into days, not hours.

How do you compare rebate economics without hurting vendor relationships?

Model rebate on enrolled, card-accepting spend rather than on total AP spend, and ask what enrollment costs your suppliers. A headline rate applied to your full payables number will always overstate the return, sometimes by a wide margin.

The volume behind these programs is real. U.S. Visa and Mastercard commercial card purchase volume reached about $1.703 trillion in 2024, with Visa at roughly $1.058 trillion and Mastercard at roughly $0.645 trillion, according to The Nilson Report's 2024 study "U.S. Issuers of Commercial Debit and Credit Cards — 2024." Virtual card volume is growing faster still, with global B2B virtual card payments forecast to reach $14.6 trillion by 2029, about 83% of the virtual card market, per Juniper Research's 2025 report "Virtual Card Transactions to Soar Globally, Exceeding $17.4 Trillion by 2029."

Here's the part that rarely makes it into a pitch deck. Finance teams who've run aggressive card conversion campaigns describe suppliers pushing back hard when acceptance costs land on the vendor's side of the ledger, and a strained supplier is expensive in ways that don't show up in the rebate line. Understanding how virtual card rebates are generated makes it much easier to tell a durable program from one that burns goodwill for a quarter of yield.

What questions reveal a provider's true rebate value?

Three questions do most of the work, and all of them are about enrollment rather than rate.

  • What enrollment rate do customers with a vendor file our size and industry mix actually achieve?

  • How large is the accepting-vendor network we'd be inheriting on day one?

  • Who handles a supplier who accepts the card once and then asks to go back to ACH?

Ask for a supplier enrollment report from a real customer whose vendor file resembles yours, not from a demo environment. Enrollment rate is where rebate projections quietly fall apart, and it's the one number providers are least eager to produce unprompted. If the answer arrives as a range with no customer reference attached, treat the rebate projection as marketing rather than a forecast.

How does the service model change the math?

The service model changes the denominator. A modest rebate rate applied to twice the enrolled spend beats a headline rate applied to half of it, and the distance between those two enrollment outcomes is usually people rather than software.

Software handles issuing, controls, and data speed well. Supplier outreach is different work, involving phone calls, W-9 collection, banking validation, and follow-up with vendors who ignored the first three emails. Ask directly whether that team exists at the provider, whether it's yours to staff, or whether it's a campaign that runs once at implementation and never again.

What security, compliance, and support signals should you verify?

Verify three things by document rather than by claim: the provider's SOC 2 Type II report, its process for validating supplier bank details, and its access controls for your program portal. Every vendor will tell you they're secure, so the evaluation question is what they'll show you.

Payment fraud is close to universal now. 80% of organizations were victims of attempted or actual payments fraud in 2023, the highest rate reported since 2018, according to AFP's 2024 Payments Fraud and Control Survey Report. Cards are squarely in scope, with about one in five organizations (21%) reporting fraud attacks via corporate or commercial credit cards in the same survey.

How do you evaluate a provider's fraud controls?

Look at controls that prevent fraud rather than detect it afterward. Detection matters, but a blocked transaction costs nothing to unwind while a recovered one costs weeks of someone's time.

Ask what card-level controls exist by default, how quickly a compromised number can be killed and reissued, and whether virtual or single-use numbers are available for higher-risk categories. Single-use numbers are the strongest control available on the card side, because a number locked to one merchant and one amount has almost no resale value if it leaks. Monitoring matters too, though alert quality varies enough that you should ask to see a real alert queue rather than a dashboard screenshot.

What support and implementation questions matter most?

Ask who owns your account after the sale, what the escalation path looks like at close, and how long implementation takes for a customer with your entity structure. Support quality is nearly impossible to assess from a demo, so use reference calls for it specifically.

Implementation questions worth asking include how many entities and approval hierarchies the provider has configured before, whether cardholder onboarding is self-service, and what your team is responsible for during rollout. Underwriting timelines belong in this conversation as well, and knowing how businesses qualify for a corporate card ahead of time keeps a credit review from stalling a program you've already sold internally. The broader question of what to look for in a card solution covers ground worth revisiting once you've narrowed to two finalists.

One caveat on all of this. No scorecard survives contact with a provider whose strengths sit outside the criteria you weighted, and the honest move at that point is to revise the weights rather than defend the model.

Run your corporate card evaluation with Corpay

If your scorecard keeps landing on supplier enablement and ERP fit, that's the pairing Corpay was built around. We run corporate card programs as an ERP complement, with the enrollment work, exception handling, and reconciliation treated as part of the product rather than as your team's homework.

The scale behind that matters for the enrollment math specifically. As Mastercard's #1 commercial B2B issuer, connected to a network of more than 4 million accepting vendors and supporting 180+ ERP integrations via API, SFTP, or file-based connections, we start enrollment conversations with suppliers who often already accept card payments from someone. Supplier banking details are validated before payment rather than trusted from an email.

See how Corpay Corporate Cards handle department-level controls and reconciliation, or review the full commercial cards lineup to map your spend categories against the right card types.

Frequently Asked Questions

What are the leading corporate card providers?

Corporate card providers fall into a few categories rather than a single ranked list. Large bank issuers, card network issuing partners, fintech card platforms, and integrated B2B payments providers all serve this market with different strengths. Evaluate by criteria fit rather than by market position.

What is the difference between a corporate card and a purchasing card?

A corporate card is typically issued to an individual employee for travel, entertainment, and general business spend. A purchasing card, or P-card, is issued for procurement of goods and services and usually carries tighter merchant category restrictions. Many programs run both under one platform.

What is the difference between a corporate card and a business card?

The main differences are liability and underwriting. A corporate card generally carries corporate liability and is underwritten against the company's financials, while small business cards frequently require a personal guarantee from an owner. Department-level controls also tend to be deeper on a corporate program.

What are corporate cards used for?

Companies use them for travel and entertainment, for purchasing and procurement, for supplier invoice payments through virtual cards, and for one-off spend that needs a tight control wrapper. The mix varies, and accounts payable is usually the category with the most room to grow.

How do I choose a corporate card provider for a small business?

Weight approval simplicity, underwriting requirements, and cost of the program above rebate rate. Smaller companies rarely have the AP volume to make rebate economics decisive, so ease of setup and whether a personal guarantee is required tend to matter more.

Headshot.JPG

David Luther

Product Marketing Program Manager
David Luther, MBA is a product marketing program manager with years of experience in commercial banking, finance, and technology sectors, with research and writing appearing in financial publications.
Commercial Cards

Smarter payments. Stronger growth. Keep business moving.

Corpay powers payments for 800,000+ businesses worldwide. Let’s build what’s next for yours.