Journal Entry Controls: Manual-JV Support, Review and the Audit Trail

The rule you put around manual journal vouchers so the books cannot be adjusted quietly by one person. In a lean startup it comes down to three things for every manual JV: a clear narration explaining why the entry is passed, a supporting document attached to it, and a second person who reviews and approves it. On top of that, you restrict who can post journal entries and keep the audit trail in your accounting software switched on. Routine, automated entries like a sales invoice or a bank payment do not need this; the control is aimed at the manual, top-side entries where errors and manipulation actually hide.

Because manual, top-side journal entries are where financial-statement errors and manipulation are most likely to sit. A sales invoice or bank payment is a routine, system-generated entry backed by an external document. A manual JV can move a number anywhere: reclassify an expense, create or release a provision, book a year-end accrual, or adjust revenue, often with no external trigger. That is why auditing standards direct auditors to test journal entries, especially large, unusual or period-end manual ones, and why a diligence team pulls the journal register and asks for the support behind each manual entry. Get support, narration and review right and it becomes a non-event.

Keep the list short. Only the finance owner (and, once you scale, a controller) should have rights to post manual journal entries in the accounting software; everyone else works through invoices, bills and payment workflows. Even then, the person who posts a manual JV should not be the only one who blesses it: a second person, the founder or reviewer, checks and approves it, usually at month-end. Restricting posting rights in the tool plus a second-person review is the whole control. It stops both honest mistakes and any single person quietly adjusting the books.

Every manual JV needs two things attached to it: a narration that explains in plain words why the entry is being passed, and a supporting document or working that backs the number. The support depends on the entry: a depreciation or amortisation schedule, a prepaid or accrual working, a provision calculation, a payroll reconciliation, a bank-charge statement, or an email approval for a reclassification. The test is simple: could a reviewer, or an auditor a year later, understand and agree with the entry from the narration and the attachment alone, without asking you? If not, the support is not good enough.

The Ministry of Corporate Affairs requires companies to use accounting software with an audit-trail (edit-log) feature, to keep it switched on through the year, and not to tamper with it; the auditor checks and reports on whether the software had a functioning audit trail. In practice, use software such as Zoho Books or QuickBooks with the audit trail enabled, so every journal entry, edit and deletion is logged with who did it and when. That is exactly what an auditor and a buyer ask to see for manual JVs, so keep it on and do not disable it. The requirement and its dates are subject to current law.

Review them at month-end, as part of the close. The finance owner posts the manual JVs for the month; the second person, usually the founder or reviewer, then goes through the list of manual entries, reads each narration, checks the supporting document, and approves them in a documented month-end financials review. Focus on the ones that matter: large amounts, unusual accounts, round-number entries, anything posted to revenue or provisions, and anything dated at period-end. Capture the sign-off, in the tool, on the close checklist, or on email, so the review leaves a record. That review plus the software audit trail is what an auditor tests.

An automated or routine entry is generated by the system from a source transaction: raising a sales invoice, recording a purchase bill, a bank payment or a receipt. It is backed by an external document and follows a fixed pattern, so the risk is low. A manual journal voucher is typed directly into the ledger by a person, usually for accruals, prepaids, depreciation, provisions, reclassifications and other period-end adjustments. Because a manual JV can move any number without an external trigger, it carries far more risk and is where your journal entry controls should concentrate. Distinguishing the two lets you keep controls light on routine entries and tight on manual ones.