How it works
From a raw payment export to a defensible decision, in eight explainable steps.
SentriCap turns invoice, vendor and payment data into prioritized, evidence-backed findings that your team investigates and decides on — from a single scan through continuous monitoring.
Pipeline
Eight stages, one explainable chain
Each stage is deterministic and auditable — you can trace any finding back to the source records it came from.
Stage 1
Connect or export data
Structured invoice, vendor, approval and payment data arrives as a file export or a connected feed.
invoice_export.csvStage 2
Normalize and map fields
Columns and codes are mapped to a common schema so records compare cleanly across sources.
Schema mappedStage 3
Run explainable controls
Deterministic rules with stated conditions run across the mapped data — no black-box scoring.
VBC-002 · DUP-001Stage 4
Build Payment Passports
Every payment gets a linked evidence chain: invoice, PO, receipt, approval, vendor identity and bank history.
PP-91044Stage 5
Prioritize alerts
Findings are ranked by exposure and severity so the highest-risk items surface first.
Critical · 1Stage 6
Human investigation
Your team works a prioritized queue, reviews the evidence, and records a disposition.
Disposition: pendingStage 7
Stress-test weak controls
Scenario testing probes where a control could be bypassed, so gaps are found before they are exploited.
Red team scenarioStage 8
Deliver & monitor
Recommendations go to leadership, and the same controls can run continuously on a scheduled feed.
Continuous
Follow one payment
Kestrel Verge Solutions LLC — PAY-91044
A synthetic example payment, built entirely from fictional demo data, shown here to illustrate the evidence chain and disposition flow end to end.
Bank account changed 9 days before an ACH release to a new vendor
$742,000 · ACHInvoiceINV-2025-006611
Review requiredAdvisory services, single line item
No statement of work attached in the supplied export.
Jun 9, 2025 · $742,000
Purchase order—
MissingNo purchase order linked to this invoice
Jun 9, 2025
Goods receipt—
Review requiredService invoice, no receipt expected
Jun 9, 2025
ApprovalAPV-33902
VerifiedApproved by Director ID 2290
Jun 12, 2025
Vendor identityVEN-1002
Review requiredVendor record created 2025-04-02
First invoice value is far above the typical new-vendor range.
Apr 2, 2025
Bank changeBC-2201
MismatchAccount changed from ****1180 to ****9930
Change requested by email; no verified callback recorded.
Jun 11, 2025
Beneficiary****9930
MismatchAccount also appears on Oakspire Print & Media LLC
Jun 20, 2025
PaymentPAY-91044
Review requiredACH release in the June 20 payment run
Jun 20, 2025 · $742,000
Human disposition
The vendor was created recently, the bank account changed by email shortly before release, and the beneficiary account is shared with another vendor record. A reviewer should verify the account by an independent callback before any further release.
SentriCap surfaced the exception and the evidence. A reviewer on your team makes the call on how to proceed.
Exchange
What you provide, what you get back
What you provide
- Invoice register export (CSV or Excel)
- Vendor master export, including bank change history
- ACH and wire payment files for the review period
- Approval and purchase order data where available
What you get back
- A prioritized alert queue, ranked by exposure and severity
- Source-linked evidence for every alert, ready for review
- Payment Passports with a full, linked evidence chain
- Control-health findings identifying weak or missing controls
- An executive report summarizing exposure and recommendations
From scan to monitoring
One scan to start, continuous monitoring when you're ready
Start with a file export
The first assessment requires no ERP integration. It runs against structured CSV or Excel exports of your invoice, vendor and payment data.
Grow into continuous monitoring
The same explainable controls can later run on a schedule against a recurring structured data feed, so new exceptions surface between reviews.
SentriCap recommends and tests controls — it does not initiate, approve, reject or block payments. People authorize every control change and every payment decision.