Best corporate card programs, compared on spending controls

Which corporate card offers the most spending controls?

If you are choosing among corporate card providers on spending controls alone, the shortlist is Rho, Payhawk, Airwallex, Ramp and Brex. Those five publish specific, enforceable card-level restrictions on their own product pages: spend caps, merchant and category blocking, approval routing, and the ability to freeze or auto-lock a card.

BILL, Mercury, Navan and American Express publish narrower control sets, and in several cases do not address a given control at all.

Here is the distinction that decides most of these evaluations. Some programs enforce policy at the moment of the swipe, so a non-compliant transaction simply declines. Others record the transaction and surface it in review, which means the money is already gone and someone has to have a conversation about it.

Everything below compares the nine programs on seven specific controls, explains what each one does, and ends with the questions worth asking a vendor.

Corporate card spending controls, compared

What each program lets you restrict:

What each program does once spend happens:

A note on reading these tables honestly. Payhawk publishes the longest list of restrictions, including time-of-day and country blocking. Payhawk's card program serves companies registered in the EEA, the UK or the USA, and its insurance benefit is EEA-only, so a US-only finance team is comparing a narrower product than the list implies.

American Express sits in these tables on three employee-card facts and nothing else.

Which of these fits depends on what you are trying to prevent. The breakdown further down sorts the nine programs by the use case each one serves best.

The seven spending controls that actually matter

Most corporate card pages say "spend controls" and stop there. The phrase covers at least seven distinct mechanisms, and they are not interchangeable. A program with excellent approval routing and no merchant restrictions solves a different problem than one with the reverse.

Take them one at a time.

1. Merchant and merchant category restrictions

A merchant category code, or MCC, is a four-digit identifier the card network assigns to a business. Category restrictions let you decline a whole class of spend, airlines or liquor stores or cash advances, without naming individual merchants.

Merchant-level restrictions are the tighter version. Instead of blocking a category, you name the specific vendors a card may be used with and everything else declines.

Rho corporate cards support both. A card's acceptance can be limited to up to 20 distinct merchants, with transactions elsewhere declined, and merchant category controls, covering categories such as Advertising Services, Airlines and Grocery Stores, are set by Mastercard, the network partner for Rho Cards. International spend is enabled by default on all Rho Cards and can be toggled off and on at any time.

Ask a vendor: can I restrict by individual merchant, or only by category? And is the restriction enforced at authorization, or reported after settlement?

2. Per-card and per-transaction limits

A monthly limit stops a card once cumulative spend crosses a line. Per-transaction limits stop any single purchase above a threshold. They catch different failures. A $400 per-transaction cap prevents one expensive mistake. A $2,000 monthly cap prevents forty cheap ones.

Rho supports per-transaction, daily and monthly limits, and they are set before a card is ever issued.

There are four limit types. No limit places no spending restrictions on the card. Recurring limit resets automatically at the start of each period. Fixed amount stays available until the full amount is spent. Single-use is available for one transaction only.

That last distinction matters more than it sounds. A single-use card stops itself after one transaction, so nobody has to remember to cancel it.

Ask a vendor: are limits set at issuance or after? Can a manager raise a limit without a second approval?

3. Approval workflows

Controls handle the predictable spend. Approvals handle everything else, which is where policy actually gets tested.

The useful version routes by dollar amount and by team, so a $50 software renewal does not sit in the CFO's queue behind a $40,000 equipment purchase. Rho's expense management platform sets approval rules by amount or by team, routes to the direct manager, and supports multi-level flows by dollar tier.

Among the other eight programs:

• Ramp publishes approval rules and routing on its free tier

• Brex publishes multi-level chains on Essentials and dynamic chains on Premium

• Airwallex and Payhawk both publish custom multi-step workflows

• BILL publishes automated approval workflows

• Mercury references accelerating approvals on its spend management page but does not state how requests route

• Navan and American Express do not state approval workflows on their product pages

Approval design is where a written expense policy either becomes enforceable or stays aspirational.

Ask a vendor: can approvals route by both dollar amount and team, and what happens to a request nobody actions?

The first three controls decide what a card permits. The next four decide what happens once money moves.

4. Receipt capture rules

Automatic capture is table stakes now. Rho, Ramp, BILL, Payhawk and Mercury all publish some form of it, and the differences between them are small enough that nobody should choose a program on capture alone.

The rule layer is where programs actually diverge. Mercury lets you require receipts or notes above a specified dollar amount company-wide, and locks a card when those tasks go overdue. Brex requires itemized receipts compliant with IRS or local tax law. Rho lets you set rules by card, user, budget and more that require receipts, notes or attendees for defined transactions.

Receipts can be uploaded from the mobile app, with OCR.

For the full reconciliation workflow, which is a bigger subject than a card page can hold, see corporate card expense management software.

Ask a vendor: is capture automatic, and can a receipt rule be set by dollar threshold rather than applied to every transaction?

5. Real-time alerts

An alert is only a control if it arrives early enough to act on. Rho flags off-policy spend the moment the card is used rather than at close. Airwallex publishes real-time alerts on every transaction. Navan flags out-of-policy transactions instantly for review, and Ramp automatically flags questionable vendors for approval.

American Express documents the clearest statement of what category-based alerting cannot do: no alert fires when an employee buys at a merchant inside an approved category, whatever you personally think of the purchase.

That is the structural limit of alerting generally. An alert fires on the rule you wrote, not on the judgment you would have applied.

Ask a vendor: does the alert fire at authorization or after settlement, and who receives it?

6. Instant freeze and automatic lock

Freeze is the manual version. Someone loses a card, an employee leaves, a vendor charge looks wrong, and you kill the card in one click.

Auto-lock is the version that does not require anyone to notice. What each program publishes:

• Rho supports Lock Card and Unlock Card from the Cards view

• On Rho, a fixed-amount card can run one transaction or several, depending on their size, and locks once the full amount is spent. A single-use card locks after one transaction whether or not the card's limit was reached

• Airwallex publishes instant create, freeze and cancel

• Payhawk publishes instant freeze plus card auto-blocking triggered by custom rules

• Mercury locks a card when assigned tasks such as a missing receipt or category go overdue

• Brex transfers cards in one click or automatically when an employee leaves

• On Ramp, auto-locking cards when compliance is unmet is a Plus-tier feature rather than a free-tier one

The practical test: does the control still work on the Friday afternoon when nobody is watching the dashboard?

Ask a vendor: can a card lock itself on a rule, or does locking always require a person to notice?

7. Vendor and single-use cards

A single-use card is the strongest control in the set, because it removes the recurring surface entirely. The card authorizes one transaction and then it is finished.

This is the right instrument for a vendor you are trialing, a one-time purchase from an unfamiliar merchant, or any charge you do not want silently renewing in eleven months.

On Rho, cards created through the vendor creation flow are single-use vendor cards, and they can be created individually or in bulk. A single-use card locks after one transaction whether or not its limit was reached.

Airwallex publishes a single-use card that expires after one transaction. Ramp publishes single-use virtual cards. BILL, Mercury and Navan do not state single-use cards on their product pages. For how the virtual card layer works more generally, see virtual corporate cards.

Ask a vendor: does a single-use card close after one authorization, and can we issue them in bulk?

Best corporate card providers, compared by use case

No single program wins every evaluation, and the vendor that fits a 40-person company rarely fits a 900-person one. These are scoped recommendations, each based on what the provider publishes on its own site.

Rho: best for controls set before a card is issued

Rho corporate cards issue physical, virtual and vendor cards with per-transaction, daily or monthly limits applied before the first purchase, across four limit types. Rho connects natively to QuickBooks Online, NetSuite, Sage Intacct and Puzzle. Expense management costs $0 per user and $0 per platform on every plan.

Companies running more than one entity sign in once and switch between them, managing spend across each. Each entity is its own Rho business with its own accounts, cards and accounting connection, and there is no set limit on the number of entities.

Support is not gated by plan tier. Every account gets 24/7 live human support across phone, chat and email at no cost.

On economics, the Rho Card with Daily Terms earns up to 1.25% Cashback and Monthly Terms up to 1% on domestic spend (terms apply). With Rho Platinum, Daily Terms earns up to 2% Cashback and Monthly Terms up to 1.75% (terms apply), on up to $1M in eligible annual card spend.

The corporate card requires no personal guarantee, no consumer credit report and no personal credit score pull. Monthly Terms is available by application and requires $25,000 held at Rho or $75,000 combined across Rho and linked external business accounts, subject to underwriting.

Rho serves US-incorporated businesses. Sole proprietorships and unincorporated entities are not eligible.

Ramp: best for approval routing on a free tier

Ramp publishes spend limits with preset accounting codes, approval rules and routing, and automatic receipt collection and matching on its free $0 per user per month tier. Restrictions can prevent specific categories and merchants, and questionable vendors are automatically flagged for approval.

The tier line is worth knowing before you plan around it. Auto-locking cards when compliance is unmet is a Plus feature, and Plus is $15 per user per month plus a platform fee based on team size that Ramp does not quantify on its pricing page. Ramp publishes no cashback rate on its corporate cards page.

Brex: best for multi-entity and global subsidiary tracking

Brex tracks expenses in real time by team, by individual and by global subsidiary, and publishes native integrations with leading ERP and accounting tools so coding and receipts flow automatically. Spend limits carry embedded controls for category and merchant, vendor-card limits can recur or expire, and cards transfer in one click or automatically when an employee leaves.

Brex publishes Essentials at $0 per user per month and Premium at $12. Multi-level approval chains are on Essentials, while dynamic approval chains and AI-powered compliance detection are Premium.

Brex states eligibility for US-incorporated companies including startups, LLCs and eligible nonprofits, with no personal guarantee and no personal credit score. Its page publishes point multipliers up to 7x and an FX rate markup of up to 3% on conversion.

BILL Spend & Expense: best for budget-first card programs

BILL's model starts from the budget rather than the card. You create custom business budgets, assign card limits against them, and issue physical or virtual cards with limits and rules baked in. Receipts are automatically matched to transactions and coded by AI.

BILL does not publish pricing, a cashback rate, merchant or category restrictions, card freeze, or single-use cards on its Spend and Expense page. Pricing is described as based on business needs and user count.

Mercury: best for teams already banking with Mercury

The Mercury IO card requires a Mercury account and no separate application, which makes it the path of least resistance for existing customers. Controls include custom daily, weekly or monthly limits per team member, custom expiration dates, cards locked to specific merchants from a list of over 1,000, and allowed merchant types assigned per budget.

Mercury's spend management page publishes policies described as enforcing themselves, cards that auto-lock when tasks such as a missing receipt or category go overdue, and receipt capture by email scanning and SMS reply.

It also publishes subscription monitoring that flags new or duplicate subscriptions, and sync to QuickBooks, Xero and NetSuite. It references accelerating approvals but does not state how requests route.

Mercury publishes plans at $0, $29.90 and $299 per month, and publishes unlimited 1.5% cashback on spend with no interest or annual fees. A $15,000 balance threshold is cited on its card page in connection with 30-day repayment terms.

Navan: best for travel-led spend programs

Navan's control model is policy-at-booking rather than restriction-at-swipe. Employees see custom spend guardrails in-product so they know their limit before they purchase, and out-of-policy transactions are instantly flagged for review. The audit trail carries receipt, approval history, policy status and payment details together.

Navan Business is free for companies with up to 300 employees. Navan cards publish up to 1.5% back, and Navan Connect supports existing Visa, Mastercard and American Express corporate cards. Category and merchant restrictions and approval workflows are not stated on the product page.

Airwallex: best for single-use cards and multi-currency spend

Airwallex publishes the widest set of limit intervals in this comparison: daily, weekly, monthly, quarterly or annual, plus per-transaction. It also publishes merchant category blocking, custom approval workflows, real-time alerts on every transaction, instant create, freeze and cancel, and a single-use card that expires after one transaction.

Its cards page publishes 2% cashback on every purchase with no cap, no foreign transaction fees, and no personal guarantee required.

Payhawk: best for the longest published list of card restrictions

Payhawk publishes one of the most granular restriction sets reviewed here:

• Blocking or allowing specific merchants

• Specific merchant categories

• Specific days and times of day

• Specific countries and regions

• Real-time daily and per-transaction limits

Add custom card spend policies, shared budgets, custom multi-step approvals, automated receipt collection, instant freeze and rule-triggered auto-blocking.

The qualifier is geographic. Payhawk serves companies registered in the EEA, the UK or the USA, and its accident and travel insurance benefit covers the EEA region only, terms apply. Payhawk does not publish pricing or a cashback rate.

American Express: best for teams staying on a legacy issuer

For companies that want to keep a long-standing issuer relationship, Amex supports up to 99 Employee Cards per account, with per-billing-cycle spending limits set online or by phone, and the ability to pause and resume spending on Employee Cards at any time.

Its alerting caveat, described in the alerts section above, is the honest framing of what this control model does. No Amex pricing, fee or virtual-card detail appears on this page.

Corporate credit card programs, compared on cost and eligibility

Rho's full fee schedule, including what is $0 and what is not, is on Rho pricing.

How to evaluate a corporate card program

The comparison above covers what vendors publish. These are the questions that decide whether a program survives contact with your actual month-end.

Does the control fire before or after the swipe? This is the first question and it reorders every shortlist. Prevention and reporting are different products wearing the same label.

What happens at close? The card is one third of the job. Ask how a transaction becomes a coded, receipted journal entry. Rho offers native integrations with QuickBooks Online, NetSuite, Sage Intacct and Puzzle. Verify which integrations are native rather than bank-feed imports, because the two behave very differently at reconciliation.

Who pays per seat? Per-user pricing quietly penalizes exactly the behavior that improves control, which is issuing more cards with tighter limits. Rho charges $0 per user and $0 per platform for expense management on every plan, with no annual, subscription or per-card fee. Compare that structure against any tier where the control you need sits one plan up.

Is support gated by plan tier? Programs differ on whether a real person is available to the whole account or only to the top tier. Rho gives every account 24/7 live human support at no cost.

What does underwriting actually look at? Approval can lean on business financials or on a founder's personal credit. If a provider does not state its position, treat that as a question for the sales call, not an assumption.

Is the entity eligible? Entity type decides access before any feature comparison matters. Early-stage companies weighing entity type and card access at the same time should start with corporate cards for startups.

What are the real fees? Annual fee is the easy one to check and rarely the expensive one. Ask about foreign currency conversion, wire fees, platform minimums and per-card charges. Rho charges $0 for same-day ACH, domestic wires and checks, and 1% on foreign currency transfers and conversion.

Choosing a corporate card program for a large or multi-entity company

Headcount and entity count change the answer more than feature lists do. A rough mapping of the nine programs reviewed here:

• Under 50 people, one entity. Free tiers are genuinely sufficient. Ramp, Brex Essentials and Navan Business all publish $0 per user, and the deciding factor is which control you need most.

• 50 to 300 people, one entity. Approval depth and per-seat cost start to matter together. Check whether the control you rely on sits behind an upgrade, which is where Ramp's auto-lock and Brex's dynamic chains both sit.

• Any size, multiple US entities. Brex publishes spend tracking by global subsidiary. On Rho, each entity is its own business with its own accounts, cards and accounting connection, you sign in once and switch between them, and there is no set limit on the number of entities.

• Entities outside the US. Payhawk covers the EEA and the UK alongside the USA, and Airwallex is built around multi-currency spend. Rho serves US-incorporated businesses.

Subsidiary-level tracking and entity-level controls are worth testing in a demo rather than taking from a page. Ask specifically what a finance lead sees when they switch entities, and what does not carry across.

Where Rho fits

If the deciding factor is control depth on a US-incorporated company's card program, Rho is a strong fit. Limits are set before issuance across four types, a card can be restricted to a 20-merchant allow-list, and a fixed-amount card locks once the full amount is spent.

Vendor cards are single-use, off-policy spend is flagged at the swipe rather than at close, approvals route by amount or team, and the expense platform costs $0 per user and $0 per platform on every plan.

If the deciding factor is time-of-day or country-level restriction granularity, compare Payhawk's published restriction list against Rho's controls.

Ready to look at the controls themselves? Compare Rho corporate cards, or open an account. Rho serves US-incorporated businesses with an EIN, and the card comes with a Rho business account. Applying takes your formation documents, your EIN confirmation letter and beneficial ownership details, and approval is subject to Rho's review.

Frequently asked questions

Which corporate card offers the most spending controls?

Control depth varies by provider and no single program leads on every mechanism. Of the nine reviewed here, Payhawk publishes the longest restriction list, covering merchants, categories, days and times of day, and countries and regions.

Rho publishes four limit types, a per-card allow-list of up to 20 merchants, category controls through Mastercard, a fixed-amount card that locks once the full amount is spent, single-use vendor cards, and approval routing by amount or team. Airwallex, Ramp and Brex each publish substantial control sets with different tier boundaries.

What are the leading providers of corporate card issuing?

The programs most often compared in this category are Rho, Ramp, Brex, BILL Spend & Expense, Mercury, Navan, Airwallex, Payhawk and American Express. Each publishes a different mix of spend limits, merchant restrictions, approval routing, receipt rules and card controls, which is what the comparison tables above set side by side.

Who is eligible for a corporate credit card?

Corporate card programs generally require a registered business entity with its own tax identification number, and most US programs underwrite the business rather than the founder.

Rho serves US-incorporated businesses with an EIN, and does not serve sole proprietorships or unincorporated entities. A Rho corporate card requires a Rho business account. Eligibility also requires either a US operating address or a US business owner with a valid Social Security number.

What features should you look for in a corporate credit card?

Seven features matter most, in rough order of how much they change day-to-day finance work: merchant and category restrictions, per-card and per-transaction limits, approval workflows, receipt capture rules, real-time alerts, instant freeze and automatic lock, and single-use or vendor cards.

After those, check whether accounting sync is a native integration or a bank feed, whether pricing is per-seat, and what underwriting evaluates.

What is the difference between spend controls and expense policy?

An expense policy is a document describing what people may buy. Spend controls are the mechanisms that enforce it. A policy without controls relies on everyone remembering it correctly, while controls turn the rules into something the card either permits or declines.

Are there corporate card providers with no credit check?

Several corporate card programs underwrite the business rather than the founder. The Rho corporate card requires no personal guarantee, no consumer credit report and no personal credit score pull.

Ramp states no personal guarantee and no personal credit checks, Brex states no personal guarantee and no personal credit score, and Airwallex states no personal guarantee required. Approval is still subject to each provider's own review.

Can an LLC get a corporate credit card?

Yes. Corporate card programs generally require a registered business entity with its own tax identification number, which an LLC has. LLCs, C-corps, and other US-incorporated entities can apply for a Rho Corporate Card with an EIN and formation documents. Eligibility also requires either a US operating address or a US business owner with a valid Social Security number.

Can I use my EIN to get a credit card?

An EIN is part of what a corporate card application requires, not the whole of it. For Rho, the business must be US-incorporated and provide an EIN confirmation letter, along with formation documents and beneficial ownership information. Approval is subject to Rho's review.

Can I apply for a Rho corporate card if my business is a sole proprietorship?

No. Rho serves US-incorporated businesses. Sole proprietorships and other unincorporated entities are not eligible. Early-stage founders still choosing an entity type should start with card options for early-stage companies.

What are the requirements for a Rho account?

Rho asks for your business formation documents and ownership details. In practice that means:

• Articles of incorporation or organization

• Company bylaws or operating agreement

• Your EIN confirmation letter

• Information on each beneficial owner

• Additional documentation where Rho's review requires it

Start an application.

Who issues the Rho corporate card?

Rho Corporate Cards are issued by Lead Bank, Member FDIC, and by Webster Bank, a division of Santander Bank, N.A., member FDIC, as applicable, pursuant to a license from Mastercard, subject to approval. The full issuer and FDIC disclosures are in the footer of this page.