Email-to-AP: Turning a Shared Invoice Inbox Into a Clean Intake Pipeline
Walk into almost any construction AP department and ask how invoices arrive. The honest answer is email. Subcontractors email pay applications, suppliers email material invoices, equipment houses email rental statements, and most of it lands in a shared mailbox — ap@ or invoices@ — that several people watch and nobody truly owns. It works, in the sense that the invoices arrive. It fails in every other sense.
A shared inbox is not an intake process. It is a holding pen where invoices, vendor questions, statements, and spam pile up together, and the only thing standing between an invoice and a missed payment is whether a human happened to scroll far enough that day. The fix is not more discipline from the AP team. It is to treat email intake as an actual pipeline — with a dedicated address, automated capture, and structured routing. This post lays out how.
The shared invoice inbox starts as a reasonable idea and degrades as volume grows. At a handful of invoices a day it is manageable. At the volume a busy general contractor handles across dozens of active jobs, it becomes a genuine source of risk — invoices lost, paid twice, or paid late, all traceable to the inbox itself.
The structural problems with a shared invoice inbox
- No clear ownership — everyone assumes someone else has handled a given email
- Invoices, vendor questions, statements, and spam all mix together with no separation
- An invoice can be read, marked done in someone's head, and never actually entered
- No reliable record of what arrived when, so a lost invoice is invisible until the vendor calls
- The same invoice forwarded by two people, or sent twice by the vendor, becomes a duplicate-payment risk
- Anyone can move, delete, or file an email, so the intake record is neither complete nor tamper-evident
The deepest problem is that a mailbox is not a system of record. There is no enforced step between an invoice arriving and an invoice being captured. Everything depends on a person noticing, remembering, and acting — and at scale, that breaks.
About 0 in 5
Share of supplier invoices that arrive with an exception or error needing resolution before payment — volume that overwhelms an unstructured inbox (IOFM)
The foundation of email-to-AP is a single, dedicated intake address whose only job is to receive invoices — and to feed them straight into your AP system rather than into a human's mailbox. Email sent to that address is captured automatically: the message is ingested, attachments are pulled, and each invoice enters the workflow as a tracked item.
This one change reframes the whole problem. The intake address is not a place where invoices wait to be noticed — it is the front door of a pipeline. Once it exists, the work becomes publishing it consistently so invoices actually arrive there.
Making the dedicated intake address the single front door
- Put the intake address on every purchase order and subcontract as the required invoice destination
- Include it in vendor onboarding so new subs and suppliers send to it from their first invoice
- Send a one-time notice to existing vendors redirecting invoice submissions to the new address
- Auto-forward the legacy ap@ mailbox into the intake pipeline so stragglers are still captured
- Stop accepting invoices through individual employees' personal work inboxes
Vendors will not change habits overnight. Keep the old shared mailbox alive but auto-forward everything it receives into the intake pipeline. That way you migrate the front door without losing a single invoice during the transition.
Once an invoice hits the intake address, the system should read it — not just file it. Automated capture pulls the attachment and extracts the fields that matter: vendor, invoice number, amount, date, due date, line items, and any purchase order or job reference on the document. That extracted data is what turns an email attachment into a structured, workable invoice record.
Construction documents make extraction harder than a generic AP demo suggests. A subcontractor pay application is not a one-line invoice — it is an AIA G702 and G703 with a schedule of values, this-period and stored-materials columns, and a retainage calculation. Capture has to read those documents as the structured instruments they are, not flatten them into a single total. A capture engine built for construction handles G702/G703 structure, retainage lines, and cost-coded detail; a generic one quietly drops exactly the data the AP team needs most.
Automated extraction is not a black box. Every captured invoice should keep a link to the original email and attachment, so AP can verify any extracted field against the source document in one click.
Email intake is where most duplicate invoices are born. A vendor sends an invoice, hears nothing, and resends it a week later. A subcontractor emails a pay application to both the PM and the AP address. One invoice arrives, gets forwarded internally three times, and each forward looks like a fresh email. In a shared inbox, every one of those is a candidate for a second payment.
The right place to catch a duplicate is at intake, before the invoice enters the approval workflow at all. As each invoice is captured, the system should check it against everything already received — same vendor and invoice number, same vendor and amount and date, near-identical documents with trivially different references. A likely duplicate gets flagged or held at the door instead of flowing downstream to be caught later, or not at all.
Catching a duplicate at intake is cheap — a flag on an item not yet in the workflow. Catching it after payment is expensive, requiring a vendor credit or a clawback. Detection belongs at the front door. (For the detection techniques themselves — fuzzy matching, amount anomaly scoring, cross-vendor analysis — see our deeper write-up on how AI catches duplicates humans miss.)
A public intake address receives more than invoices. It receives spam, phishing, and — more dangerously — invoices from senders pretending to be vendors. Email-to-AP intake has to filter, because an unfiltered intake pipeline is also an unfiltered fraud pipeline.
Get AP insights in your inbox
A short monthly roundup of construction AP + accounting posts. No spam, ever.
No spam. Unsubscribe anytime.
Sender Allowlists
A sender allowlist is the first layer of defense. Email from a domain that maps to a known, active vendor flows straight into capture. Email from an unrecognized sender does not get rejected outright — a legitimate new vendor will arrive that way — but it is held for a quick human check before it enters the workflow. That single distinction stops a stranger's invoice from sliding silently into the AP queue alongside trusted ones.
Beyond the allowlist, intake needs ordinary spam filtering and, more importantly, awareness of impersonation. A frequent construction fraud is an invoice from a real vendor's name sent from a look-alike domain — acme-supply.com instead of acmesupply.com — often paired with new bank details. Intake screening should flag senders whose domain resembles but does not match a known vendor, and treat any invoice carrying changed payment details as a fraud risk that escalates rather than routes.
Email intake is a primary entry point for business email compromise. An invoice that arrives with new bank account details should never be paid on the strength of the email — verify the change by calling the vendor on a number you already had on file, never one printed in the message.
Real intake email is messy, and the pipeline has to cope with the mess rather than break on it. Two cases come up constantly in construction AP.
Forwarded emails are the first. A PM receives an invoice on a jobsite and forwards it to the intake address. The capture engine has to look past the forwarding wrapper — the PM's signature, the chain of quoted headers — and find the actual invoice in the attachment or the original body. It must not mistake the forwarder for the vendor or the forwarding note for invoice data.
Multi-attachment emails are the second. One email from a supplier may carry five invoices, or a single invoice split across an invoice PDF, a delivery ticket, and a lien waiver. Intake has to separate distinct invoices into distinct records while keeping genuine supporting documents attached to the invoice they belong to. Get this wrong in either direction — five invoices captured as one, or one invoice fragmented into five — and the downstream workflow inherits the error.
Messy intake cases a capture pipeline must handle cleanly
- Forwarded invoices where the real vendor is buried under a colleague's forwarding wrapper
- One email carrying multiple separate invoices that must become separate records
- An invoice split across several attachments — invoice, delivery ticket, lien waiver — kept together
- Invoices pasted inline in the email body instead of attached as a file
- Statements and reminders that are not invoices at all and should not create a payable
Capture is only the first half of email-to-AP. Once an invoice is read, validated, and cleared of duplicate and fraud flags, it has to route into the approval workflow automatically — to the right job, the right cost code, and the right approver. A captured invoice that then waits for someone to manually assign it has only relocated the bottleneck from the inbox to the AP queue.
Good routing uses what capture already extracted. A purchase order reference links the invoice to its PO for matching. A job number routes it to that project's PM for approval. The amount determines whether it clears at the PM's limit or escalates. With those connections made at intake, the invoice arrives in front of its approver already in context — a clean handoff from the front door straight into the workflow, with no human triage in between.
A shared invoice inbox is where AP problems are quietly manufactured — lost invoices, double payments, missed due dates, and an open door for fraud. Treating email intake as a real pipeline closes that gap. A dedicated intake address, automated capture that understands construction documents, duplicate detection and fraud filtering at the door, and clean routing into the workflow turn a chaotic mailbox into a structured front end for AP. A platform built for construction such as Covinly is designed around exactly that pipeline — so the way invoices already arrive, by email, becomes a strength of the process instead of its weakest point.
Written by
Sarah Blake
Head of Product
Former AP Manager at a $200M construction firm, now leads product at Covinly. Writes about what AP teams actually need from automation — beyond the marketing promises.
View all posts