Why does the issuing licence matter?
Because it determines who is responsible for the money and under whose supervision. A platform that holds its own licence — Pleo’s EMI licence, Spendesk’s French payment institution licence — is the regulated entity, supervised by a European authority you can identify.
A platform that resells another provider’s programme adds a party between you and the money, and the terms that matter in a dispute are theirs rather than the vendor’s. That is not automatically worse, but it is worth knowing which arrangement you are in.
For companies in regulated sectors, or with treasury policies that name supervision requirements, this is frequently the first question rather than an afterthought.
What controls should sit on the card?
Per-card limits by amount and period, which is the baseline. Category restrictions, so a card issued for software cannot buy a flight. Single-use or subscription-bound virtual cards, which is the practical answer to software spend nobody can account for.
Then the operational controls: freezing a card instantly, what happens when an employee leaves, and whether a manager can raise a limit temporarily without an admin. That last one determines whether people work with the system or around it.
And receipt enforcement — whether the platform can block further spend on a card with outstanding receipts, which is the only mechanism that reliably fixes receipt compliance.
What breaks when a company grows into several entities?
The accounting rules diverge first. Each entity has its own chart of accounts, VAT treatment and reporting calendar, and a platform that assumes one company forces the differences into a spreadsheet.
Then the card issuing itself: not every provider can issue in every country, and a group discovers this when it opens the entity rather than when it chooses the platform. Ask for the issuing country list before signing, not after.
Then consolidation. Group-level reporting across entities and currencies either exists in the platform or becomes a monthly export-and-merge job. Payhawk and Yokoy are the two here that treat it as a product feature.