Payhawk AI features, pricing and GDPR (October 2026)

Payhawk is a spend management platform for midsize and larger companies that combines company cards, expenses, travel, accounts payable and procurement, and adds AI agents that support financial control, purchasing, payments and travel.

Payhawk issues corporate cards, collects receipts and reimbursements, pays supplier invoices and runs purchase requests, with ERP and HRIS integrations and multi-entity management as add-ons. The company is headquartered in London and has offices in New York, Amsterdam, Barcelona, Berlin, Munich, Paris, Sofia and Vilnius. It reports more than 6,000 customer companies and supports payments to more than 150 countries. Payhawk is licensed in the UK and the EEA and is a Visa principal member.

• Supports closing the booksAccording to Payhawk, the Financial Controller Agent works with the finance team on closing the books, using the card, expense and invoice data already in the platform. Routine month-end steps move from people to the agent, so the team can focus on review.
• Plans and pays for travelThe Travel Agent plans business trips and pays for them within the company's rules. Travel costs arrive in the same system as other expenses, which reduces separate reconciliation work for finance.
• Answers payment questionsThe Payments Agent resolves questions about payments, for example the status of a supplier payment or a card transaction. Finance receives fewer routine queries from employees and suppliers. This helps people who do not work in the system every day.

• Stores German customers' data in Frankfurt and other customers' data in Brussels, with no cross-jurisdictional replication according to the trust page.
• The trust page lists ISO 27001, SOC 1 Type 2 and SOC 2 Type 2 reports for 2025, PCI DSS Level 1 and IDW PS 880.
• Publishes a monthly price for small companies and sells larger setups in modules.

Payhawk is headquartered in London; according to its trust page, German customers' data is stored in Frankfurt and all other customers' data in Brussels.

Clarify which modules and AI agents your quote includes, because larger setups are priced by module on annual or multi-year contracts. Check the ERP connection, DATEV export and GoBD compliant archiving for German entities, and which approval chains you need for dual control. The DPA is public. A public sub-processor list could not be found during our review in September 2026. SOC 1 Type 2 reports help your auditors.

No reviews yet. Be the first to share how your team uses it.

Every review shows its verification level. We read each one before it goes live. How we check reviews