Can a Business Control Card be signed electronically?

Yes. Under the ESIGN Act (15 U.S.C. ch. 96) and state UETA laws, an electronic signature that meets intent, consent, attribution, and retention requirements is legally valid for most business records.

When is notarization required?

Notarization is only required if the card is used to effectuate a transaction that statutory law prescribes as notarized, or when counterpart documents (deeds, POAs) require it. Verify the underlying transaction's legal requirements.

How should I store signed cards?

Store a tamper-evident PDF plus an audit trail in a secure DMS with access controls; follow IRS and HIPAA retention rules where applicable.

What happens if names do not match?

Mismatched names between the card and HR or ID records can void an approval or trigger audit exceptions; correct mismatches formally and re-execute the card if necessary.

Are remote notarizations acceptable?

Many states permit Remote Online Notarization (RON) with identity proofing and recording requirements; verify the state's RON rules before relying on a remote notarization.

How often should cards be reviewed?

Perform at least an annual review of authority cards and update them on any personnel, role, or policy change to reduce control gaps and audit findings.

Business Control Card

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS CONTROL CARD

Company Name: Control Card ID:

Prepared By: Prepared Date:

RECITALS

WHEREAS, the Company Name: requires a documented and enforceable set of operational controls to protect assets, ensure accuracy of financial reporting, and manage operational risk; and

WHEREAS, the parties identified on this Business Control Card have agreed to establish, implement, and periodically review the controls described below in accordance with the terms and obligations set forth in this document effective as of the Effective Date: .

NOW, THEREFORE, the Company documents the following controls and administrative provisions.

SCOPE OF WORK

Control Scope (describe systems, processes, accounts, transactions covered)

KEY CONTROLS / CONTROL MATRIX

Control 1 Description:

Control Owner: Frequency: Evidence Retained:

Control 2 Description:

Control Owner: Frequency: Evidence Retained:

AUTHORIZED SIGNATORIES

Designated signatories, authority limits and specimen

Signatory 1 — Name Title Authority Limit

Signatory 2 — Name Title Authority Limit

BANK ACCOUNTS & PAYMENT CONTROLS

Primary Bank Account Number (last 4 digits) Payment Authorization Rules

PAYMENT TERMS

Payment Amount: Payment Schedule:

Payment Schedule Details

Late Fee: Remedies for Non-Payment:

TERM AND TERMINATION

Term Start Date: Term End Date: Notice Period for Termination:

Either party may terminate this Business Control Card for material breach that is not cured within the notice period specified above. On termination, parties shall cooperate to transition controls, preserve records, and provide auditors with reasonable access as required below.

CONFIDENTIALITY

The parties acknowledge that the control information, authorizations, account details, and operational procedures contained in this Business Control Card constitute confidential business information. Each party shall hold such information in confidence, restrict access to personnel with a need to know, and not use or disclose such information except as required to perform duties under this document or as required by law. Confidentiality obligations survive termination for a period of three (3) years unless otherwise agreed in writing.

Confidential Designation: Controls contain Confidential Financial Data

GOVERNING LAW

This Business Control Card shall be governed by and construed in accordance with the laws of the State of: without regard to its conflict of law principles.

ENTIRE AGREEMENT

This document, together with any attachments or referenced exhibits explicitly incorporated herein, constitutes the entire agreement between the parties with respect to the subject matter of this Business Control Card and supersedes all prior and contemporaneous agreements, proposals, and communications, whether oral or written.

AUDIT RIGHTS & RECORD RETENTION

The Company reserves the right to conduct internal reviews or audits of compliance with the controls set forth in this document. Records, logs, and evidence supporting performance of controls shall be retained for a minimum period of years unless otherwise required by applicable law.

MODIFICATIONS AND REVIEW

Any modification to this Business Control Card must be documented in writing, signed by authorized representatives of both parties, and appended to this document. The control owner listed above shall review controls at least annually and report material deficiencies to senior management.

ACKNOWLEDGMENT

By signing below, the authorized representatives certify that they have read, understood, and will adhere to the controls, duties, and responsibilities set forth in this Business Control Card.

Company Representative:

By:

Date:

Authorized Counterparty:

By:

Date:

What the Business Control Card Is and why it exists

A Business Control Card is a concise, formal record that documents authorization, limits, and key metadata for business transactions, delegated authorities, or control points within an organization. It typically captures who may approve certain actions, monetary or contractual thresholds, effective dates, and any special conditions or secondary approvals required. Organizations use this card to centralize authority data, speed routing and approval, and create a single source of truth for audit and compliance reviews. When maintained accurately, it supports traceability and reduces disputes about who had authority at a given time.

Why maintaining a Business Control Card matters

A clear Business Control Card reduces ambiguity about signing authority, enforces internal controls, and creates an auditable record for compliance and financial governance.

Which roles typically complete and rely on the card

Keep the card current and accessible to authorized teams to ensure approvals are valid and auditable when contracts or payments are executed.

Finance teams and controllers — maintain approval thresholds, reconcile signatory lists with accounting controls and SOX-related evidence.
Procurement and purchasing — record delegated purchase authority and vendor approval limits for buyers and managers.
Legal and compliance — attach conditions, review signature authority language, and preserve records for audits.

Core elements you should include on a professional Business Control Card

A well-constructed Business Control Card bundles identity data, permission boundaries, effective dates, escalation rules, and audit metadata so reviewers can quickly confirm authority and compliance status.

Approver Identity

Full legal name and job title of authorized signer; include department.

Authority Limits

Monetary thresholds, contract value limits, or categorical restrictions tied to the approver.

Effective Period

Start and end dates for the authorization; note interim suspension terms if any.

Escalation

Alternate approver, delegated backup, and required co-signatures for above-threshold items.

Conditions

Special approvals, pre-conditions, or required supporting documents (e.g., budget sign-off).

Audit Metadata

Document creation date, source, version, and last-review timestamp.

Required information fields at a glance

Approver Name: Full legal name

Job Title: Official role

Department: Organizational unit

Authority Scope: Monetary or categorical limits

Effective Dates: MM/DD/YYYY range

Document Owner: Responsible custodian

Step-by-step: complete a Business Control Card

Follow these four steps to record and validate a control card accurately.

01

Identify Approver: Enter full legal name and title exactly as on ID or HR records.
02

Define Limits: Specify dollar thresholds and any categorical restrictions.
03

Set Dates: Use MM/DD/YYYY for effective and expiry dates.
04

Validate & Record: Obtain signature and save audit metadata for compliance.

How to configure an online Business Control Card workflow

Configure fields and routing to match your approval matrix before sending the card for signature.

Field	Configuration
Approver Field	Required, email-validated
Limit Field	Numeric, validation rules
Effective Dates	Date picker MM/DD/YYYY
Routing	Sequential or parallel as needed

Where to send completed Business Control Cards

Know where each finalized card must be archived, who receives copies, and how signatures are recorded.

Internal Custodian: Primary records team or finance custodian retains original.
Approver Copy: Signed copy emailed to approver for their records.
ERP/Accounting: Attach the card to vendor or contract records in accounting systems.
Audit Archive: Store a tamper-evident PDF and audit trail for compliance reviews.

Sending and sharing: delivery options and technical notes

Ensure your chosen channel supports intent capture, secure storage, and the ability to export a complete audit trail for each signed card.

Email Delivery: Secure signed PDF sent to recipients; ensure encrypted transport.
Document Management: Store in a DMS (Box, Google Drive, Egnyte) with access controls.
eSignature Platforms: Use platforms that provide audit trails and retention controls.

Timelines and processing expectations

Track effective dates, periodic reviews, and renewal windows to keep authorizations up to date and compliant.

Initial Approval Date:

Date the card is signed and goes into effect.

Review Cycle:

Annual review recommended for authority cards.

Expiry:

Card expires on the stated end date unless renewed.

Audit Retention Start:

Audit timeline begins on signature date.

Re-approval Lead Time:

Begin renewal 30 days before expiry.

Common mistakes to avoid when preparing a card

Using informal or nickname variations for approver names that fail identity checks.
Leaving authority limits vague (e.g., 'as needed') instead of specifying numeric thresholds.
Failing to record effective and expiry dates, which complicates retroactive audits.
Not storing a secure, tamper-evident copy with an associated audit trail.

Risks and consequences of incorrect or outdated cards

Unauthorized Transactions: Financial loss and internal control failures

Audit Findings: Regulatory or internal audit exceptions

Tax/Compliance Exposure: Incorrect approvals may trigger reporting penalties

Contract Disputes: Signature validity challenges in litigation

Operational Delays: Processing halts while authority is verified

Reputational Harm: Loss of stakeholder trust

Who can sign — typical signatory roles

Chief Financial Officer

The CFO often holds broad approval rights for high-dollar contracts and financial commitments; include dual-signature rules for amounts above defined thresholds.

Department Head

Department managers typically have delegated authority for routine purchases and operational contracts within defined monetary limits and policy constraints.

How organizations use Business Control Cards in practice

Real-world examples show how control cards reduce friction and create reliable audit trails.

Optica Ventures (Finance)

Small investment firm standardized approval cards for all vendor spend to reduce misrouting.

Resulting policy cut approval time by removing uncertainty.
The centralized card became the canonical reference in monthly audits, simplifying reconciliations and reducing follow-up clarifications.

Martin Properties (Real Estate)

Property manager used cards to capture delegated leasing authority for on-site managers.

This clarified who could execute leases up to specified amounts.
The documented authorities prevented disputed lease signings and accelerated tenant onboarding during peak leasing season.

How the Business Control Card differs from related documents

Compare the Business Control Card with similar instruments to choose the right record for your process.

Criteria	Business Control Card	Delegation Letter
Primary Purpose	authority record	contractual delegation
Formality	operational record	legal agreement
Retention Need	high	high
Signature Requirement

Representative eSignature pricing and capability comparison

Significant differences in pricing, bulk-send capabilities, and envelope limits can affect total cost and scalability; compare core plan and capability indicators below.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies	Varies	Varies	Varies
Bulk Send	Yes	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently asked questions about the Business Control Card

Answers to common questions about completion, signatures, legal effect, and retention for the Business Control Card.

Need help? Contact support

Can a Business Control Card be signed electronically?
Yes. Under the ESIGN Act (15 U.S.C. ch. 96) and state UETA laws, an electronic signature that meets intent, consent, attribution, and retention requirements is legally valid for most business records.
When is notarization required?
Notarization is only required if the card is used to effectuate a transaction that statutory law prescribes as notarized, or when counterpart documents (deeds, POAs) require it. Verify the underlying transaction's legal requirements.
How should I store signed cards?
Store a tamper-evident PDF plus an audit trail in a secure DMS with access controls; follow IRS and HIPAA retention rules where applicable.
What happens if names do not match?
Mismatched names between the card and HR or ID records can void an approval or trigger audit exceptions; correct mismatches formally and re-execute the card if necessary.
Are remote notarizations acceptable?
Many states permit Remote Online Notarization (RON) with identity proofing and recording requirements; verify the state's RON rules before relying on a remote notarization.
How often should cards be reviewed?
Perform at least an annual review of authority cards and update them on any personnel, role, or policy change to reduce control gaps and audit findings.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now