Not-to-exceed overrun in facilities and janitorial

How NTE caps in facilities and janitorial contracts get breached, why AP rarely catches it, and the control that stops the overrun. Read the full guide.

Twitter LinkedIn WhatsApp
Ask AI: ChatGPT Claude Gemini Grok
Not-to-exceed overrun in facilities and janitorial

Margin drift is the gap between what a vendor contract says and what the invoice actually charges. In facilities and janitorial spend, that gap most often shows up as a not-to-exceed overrun: a cap the contract names and the invoice quietly exceeds.

Facilities and janitorial agreements set an NTE figure per site, per work order, or per month, then leave enforcement to whoever reconciles the invoice. When nobody checks the cap against the charge, the overrun becomes the standing price.

Executive Summary

A not-to-exceed clause in a facilities or janitorial contract sets a ceiling on what a vendor may bill for a defined scope, whether that is a monthly janitorial service fee, a quarterly deep-clean, or a single work order for a spill response or a light fixture replacement. The mechanism fails in a specific way: the invoice references the work order or site number correctly, states a labor and materials total, and never states the NTE figure it was supposed to be tested against. Three-way matching checks the invoice against the purchase order and the receipt of service.

It does not read the NTE clause sitting in the master service agreement, because that clause lives in a PDF outside the ERP.

The result is a charge that looks procedurally correct and is contractually wrong. It clears approval because approval never asked the right question. What changes it is a control that pulls the NTE value out of the contract and holds it against the invoice line at the point of matching, not after the fact.

That requires someone, or some system, to read the contract once and keep the cap current every time it renews or changes by site.

1. How does a not-to-exceed clause work in a facilities contract?

A not-to-exceed clause sets a ceiling on what a facilities or janitorial vendor may bill for a defined scope: a site's monthly service, a quarterly project, or a single work order for repair or emergency response. The vendor can bill up to that figure without further approval. Above it, the contract requires written authorization before the vendor proceeds.

The cap is scope-specific, not account-wide, so a single MSA can carry dozens of different NTE figures across sites and work types.

The NTE figure is set for a reason. A facilities manager wants predictable spend on routine janitorial service and wants a hard stop on incidental work like carpet extraction or pressure washing that gets added mid-contract. The cap gives both sides a number to plan against.

The clause typically names the scope it covers, whether a specific work order, a site, or a service line, the ceiling amount, and the escalation path once billing approaches it. Some contracts require notice as billing nears the cap; others are silent until the cap is crossed.

Because facilities contracts run across many sites with different square footage, service frequency and local labor rates, the NTE figure is rarely one number for the whole agreement. It is a table, often an appendix, that has to be matched to the correct site and work order before an invoice can be judged against it.

2. Where does the overrun actually happen on the invoice?

The overrun happens at the line level, not the invoice total. A janitorial invoice bundles the base monthly service charge with add-on work: after-hours cleaning, supply restocking, a one-time floor strip. The base charge stays inside its cap.

The add-on line, billed against a work order with its own separate NTE, crosses that work order's ceiling. Because the invoice total can still look reasonable against the monthly budget, the line-level breach passes without anyone isolating it.

A facilities invoice is rarely one clean charge against one clean cap. It is a base service fee plus a set of incremental work orders, each generated on its own timeline and each carrying its own authorization and its own ceiling.

An AP reviewer checking the invoice against the purchase order confirms the PO number matches and the total is in a plausible range for the site. That check does not decompose the invoice into its component work orders, and it does not know that one of those work orders had a set cap that a higher repair charge just crossed.

The overrun is invisible at the total level and visible only at the work-order level, which is exactly the level standard AP review does not operate at.

3. Why does three-way matching miss the NTE breach?

Three-way matching confirms the invoice agrees with the purchase order and the receipt of goods or service. It answers whether the vendor billed what was ordered and delivered. It does not answer whether what was ordered and delivered exceeded a dollar ceiling set in the contract, because the ceiling is not a field the PO or receipt carries.

The NTE value lives in the master service agreement, a document the matching engine never opens.

The purchase order for a facilities work order typically states the work description and an estimated amount, not the contractual ceiling. If the estimate and the final invoice happen to match, the invoice passes matching cleanly even if the underlying work order's actual NTE cap, set earlier in the MSA, was crossed.

This is a structural gap, not a process failure by the AP team. The systems that run three-way matching are built to reconcile transactional documents against each other. The NTE clause is a contractual term, filed separately, expressed in language rather than a structured field.

Closing the gap means extracting the NTE figure from the contract into a form the matching process can check against, site by site and work order by work order.

4. What are the specific mechanisms that push a facilities invoice past its cap?

Three mechanisms recur in facilities and janitorial billing: a change order added verbally on site and never re-priced against the cap, a labor rate applied at an after-hours or emergency premium the base NTE did not anticipate, and materials substituted mid-job at a higher unit cost. Each one moves the actual charge above the ceiling while the paperwork trail still reads as ordinary approved work, which is why the breach survives review.

Each of these mechanisms shares a common shape: the work performed is real and the paperwork describing it looks routine, so nothing about the invoice itself signals a problem. The breach only becomes visible when the charge is held against the specific cap that applied to that site and that work order at that time.

That is why isolating the mechanism matters more than counting the dollars. A control built only to flag large invoices misses a change order that pushes a modest work order past a modest cap, which is how these breaches accumulate.

A. Unpriced change orders

A site supervisor authorizes extra work on the spot: an extra restroom added to a cleaning route, a spill cleanup beyond the scheduled visit. The vendor bills it against the existing work order rather than opening a new one with its own cap, so the added scope inherits a ceiling that was never sized for it.

B. After-hours and emergency premiums

A facilities MSA often sets a standard labor rate inside the NTE and a separate emergency or after-hours rate outside it. When a janitorial or repair call happens outside standard hours, the higher rate applies to the whole job, not just the marginal hours, and the base cap is not built to absorb that shift.

C. Materials substitution

A repair work order specifies a part or supply at a stated unit cost. When that item is unavailable, the vendor substitutes a comparable one at a different price. The substitution can be reasonable on its face and still be the exact dollar amount that pushes the work order past its cap.

5. How do you build a control that catches this before payment?

The fix is to extract every NTE figure from the facilities MSA and its site-level appendices into a reference table keyed to site and work order type, then hold each incoming invoice line against that table at the matching stage, before approval. This turns a contractual term buried in a PDF into a structured check the same system already running three-way matching can apply, closing the exact gap that lets an overrun pass.

Building the table is a one-time extraction effort per contract, repeated each time the MSA renews or a site is added or dropped. The output is a simple lookup: site, work order type, current NTE, effective date.

The check itself is straightforward once the table exists: before an invoice line is approved, compare its amount against the applicable cap for that site and work order type. A line under the cap passes as normal. A line at or above it is flagged for the escalation the contract already specifies, rather than paid and reconciled later.

The harder part is keeping the table current. Facilities contracts renew, sites get added, and caps get renegotiated. A control that runs against a stale table produces false confidence, which is worse than no control at all because it looks like coverage that isn't there.

6. What should you do once an overrun is found after the fact?

A confirmed overrun after payment is a credit memo conversation, not a write-off. The contract's escalation clause, if it required authorization above the cap and that authorization was never given, is the basis for disputing the excess amount with the vendor. Documenting the specific work order, the applicable NTE figure, and the absence of a signed authorization turns the finding into a recoverable claim rather than a lesson learned.

Start with the paper trail: the work order, the invoice, the NTE figure that applied at the time, and any record of authorization to exceed it. If authorization exists, the overrun may be legitimate and the review ends there.

If no authorization exists, the vendor billed outside the terms of the agreement. That is grounds to request a credit memo for the amount above the cap, not the full invoice, since the underlying work was still performed and received.

Past recoveries do not fix the forward problem. Every overrun found this way is evidence the same gap will recur on the next work order at the same site unless the cap gets built into matching rather than discovered in a periodic review.

For the wider pattern this sits inside, start with the margin drift guide.

7. Frequently Asked Questions (People Also Ask)

What is a not-to-exceed clause in a janitorial contract?

It is a ceiling stated in the contract on what the vendor may bill for a defined scope, such as a site's monthly service or a single repair work order. Billing above it requires written authorization before the vendor proceeds. It protects the buyer from open-ended charges on incidental or emergency work.

Why does an NTE overrun get approved instead of flagged?

Because the approval step checks the invoice against the purchase order and the receipt of service, not against the contract's NTE clause. The clause lives in the master service agreement, a document outside the ERP, so nothing in the matching process ever reads it.

Can a not-to-exceed cap apply to a whole contract instead of a single work order?

It can, but facilities and janitorial agreements more often set the cap per site, per work order, or per month. A single master service agreement can carry many separate NTE figures across sites and service types, each requiring its own check.

Does three-way matching catch a not-to-exceed breach?

No. Three-way matching confirms the invoice agrees with the purchase order and the receipt. It does not test the invoice against a dollar ceiling defined in the contract, because that ceiling is not a field either the PO or the receipt carries.

What is the difference between a change order and an NTE breach?

A change order authorizes new or expanded scope. An NTE breach occurs when billed charges, whether from a change order or ordinary work, exceed the ceiling set for that scope without the authorization the contract requires. A change order can cause a breach, but the two are not the same thing.

How do you recover money after an NTE overrun is discovered?

Pull the work order, the invoice, the applicable NTE figure, and any record of authorization to exceed it. If no authorization exists, request a credit memo for the amount above the cap, not the full invoice, since the work itself was performed and received.

Who is responsible for enforcing an NTE cap: AP or facilities management?

Neither function owns it end to end. AP reviews invoices against purchase orders, not contract clauses. Facilities management authorizes work on site but rarely reconciles it against the invoice later. The gap sits between the two functions unless a control explicitly bridges it.

Do emergency or after-hours janitorial calls fall under the same NTE cap as routine service?

Often not. Many facilities MSAs set a separate emergency or after-hours labor rate outside the standard NTE. When an emergency call is billed at the standard cap without accounting for the premium rate, the charge can exceed what the cap was actually built to cover.

What happens if the NTE table used for matching is out of date?

A stale table checks invoices against caps that no longer apply, producing false confidence rather than real coverage. Since facilities contracts renew and add or drop sites regularly, the table needs to be updated on the same cycle as the contracts themselves.

Executive Summary

A not-to-exceed clause in a facilities or janitorial contract sets a ceiling on what a vendor may bill for a defined scope, whether that is a monthly janitorial service fee, a quarterly deep-clean, or a single work order for a spill response or a light fixture replacement. The mechanism fails in a specific way: the invoice references the work order or site number correctly, states a labor and materials total, and never states the NTE figure it was supposed to be tested against. Three-way matching checks the invoice against the purchase order and the receipt of service. It does not read the NTE clause sitting in the [master service agreement](/guides/labor-rate-deviations-against-master-service-agreements), because that clause lives in a PDF outside the ERP. The result is a charge that looks procedurally correct and is contractually wrong. It clears approval because approval never asked the right question. What changes it is a control that pulls the NTE value out of the contract and holds it against the invoice line at the point of matching, not after the fact. That requires someone, or some system, to read the contract once and keep the cap current every time it renews or changes by site.

1. How does a not-to-exceed clause work in a facilities contract?

A not-to-exceed clause sets a ceiling on what a facilities or janitorial vendor may bill for a defined scope: a site's monthly service, a quarterly project, or a single work order for repair or emergency response. The vendor can bill up to that figure without further approval. Above it, the contract requires written authorization before the vendor proceeds. The cap is scope-specific, not account-wide, so a single MSA can carry dozens of different NTE figures across sites and work types. The NTE figure is set for a reason. A facilities manager wants predictable spend on routine janitorial service and wants a hard stop on incidental work like carpet extraction or pressure washing that gets added mid-contract. The cap gives both sides a number to plan against. The clause typically names the scope it covers, whether a specific work order, a site, or a service line, the ceiling amount, and the escalation path once billing approaches it. Some contracts require notice as billing nears the cap; others are silent until the cap is crossed. Because facilities contracts run across many sites with different square footage, service frequency and local labor rates, the NTE figure is rarely one number for the whole agreement. It is a table, often an appendix, that has to be matched to the correct site and work order before an invoice can be judged against it.

2. Where does the overrun actually happen on the invoice?

The overrun happens at the line level, not the invoice total. A janitorial invoice bundles the base monthly service charge with add-on work: after-hours cleaning, supply restocking, a one-time floor strip. The base charge stays inside its cap. The add-on line, billed against a work order with its own separate NTE, crosses that work order's ceiling. Because the invoice total can still look reasonable against the monthly budget, the line-level breach passes without anyone isolating it. A facilities invoice is rarely one clean charge against one clean cap. It is a base service fee plus a set of incremental work orders, each generated on its own timeline and each carrying its own authorization and its own ceiling. An AP reviewer checking the invoice against the purchase order confirms the PO number matches and the total is in a plausible range for the site. That check does not decompose the invoice into its component work orders, and it does not know that one of those work orders had a set cap that a higher repair charge just crossed. The overrun is invisible at the total level and visible only at the work-order level, which is exactly the level standard AP review does not operate at.

3. Why does three-way matching miss the NTE breach?

Three-way matching confirms the invoice agrees with the purchase order and the receipt of goods or service. It answers whether the vendor billed what was ordered and delivered. It does not answer whether what was ordered and delivered exceeded a dollar ceiling set in the contract, because the ceiling is not a field the PO or receipt carries. The NTE value lives in the master service agreement, a document the matching engine never opens. The purchase order for a facilities work order typically states the work description and an estimated amount, not the contractual ceiling. If the estimate and the final invoice happen to match, the invoice passes matching cleanly even if the underlying work order's actual NTE cap, set earlier in the MSA, was crossed. This is a structural gap, not a process failure by the AP team. The systems that run [three-way matching](/answers/how-do-you-audit-maintenance-and-repair-invoices) are built to reconcile transactional documents against each other. The NTE clause is a contractual term, filed separately, expressed in language rather than a structured field. Closing the gap means extracting the NTE figure from the contract into a form the matching process can check against, site by site and work order by work order.

4. What are the specific mechanisms that push a facilities invoice past its cap?

Three mechanisms recur in facilities and janitorial billing: a change order added verbally on site and never re-priced against the cap, a labor rate applied at an after-hours or emergency premium the base NTE did not anticipate, and materials substituted mid-job at a higher unit cost. Each one moves the actual charge above the ceiling while the paperwork trail still reads as ordinary approved work, which is why the breach survives review. Each of these mechanisms shares a common shape: the work performed is real and the paperwork describing it looks routine, so nothing about the invoice itself signals a problem. The breach only becomes visible when the charge is held against the specific cap that applied to that site and that work order at that time. That is why isolating the mechanism matters more than counting the dollars. A control built only to flag large invoices misses a change order that pushes a modest work order past a modest cap, which is how these breaches accumulate. ### A. Unpriced change orders A site supervisor authorizes extra work on the spot: an extra restroom added to a cleaning route, a spill cleanup beyond the scheduled visit. The vendor bills it against the existing work order rather than opening a new one with its own cap, so the added scope inherits a ceiling that was never sized for it. ### B. After-hours and emergency premiums A facilities MSA often sets a standard labor rate inside the NTE and a separate emergency or after-hours rate outside it. When a janitorial or repair call happens outside standard hours, the higher rate applies to the whole job, not just the marginal hours, and the base cap is not built to absorb that shift. ### C. Materials substitution A repair work order specifies a part or supply at a stated unit cost. When that item is unavailable, the vendor substitutes a comparable one at a different price. The substitution can be reasonable on its face and still be the exact dollar amount that pushes the work order past its cap.

5. How do you build a control that catches this before payment?

The fix is to extract every NTE figure from the facilities MSA and its site-level appendices into a reference table keyed to site and work order type, then hold each incoming invoice line against that table at the matching stage, before approval. This turns a contractual term buried in a PDF into a structured check the same system already running three-way matching can apply, closing the exact gap that lets an overrun pass. Building the table is a one-time extraction effort per contract, repeated each time the MSA renews or a site is added or dropped. The output is a simple lookup: site, work order type, current NTE, effective date. The check itself is straightforward once the table exists: before an invoice line is approved, compare its amount against the applicable cap for that site and work order type. A line under the cap passes as normal. A line at or above it is flagged for the escalation the contract already specifies, rather than paid and reconciled later. The harder part is keeping the table current. Facilities contracts renew, sites get added, and caps get renegotiated. A control that runs against a stale table produces false confidence, which is worse than no control at all because it looks like coverage that isn't there.

6. What should you do once an overrun is found after the fact?

A confirmed overrun after payment is a credit memo conversation, not a write-off. The contract's escalation clause, if it required authorization above the cap and that authorization was never given, is the basis for disputing the excess amount with the vendor. Documenting the specific work order, the applicable NTE figure, and the absence of a signed authorization turns the finding into a recoverable claim rather than a lesson learned. Start with the paper trail: the work order, the invoice, the NTE figure that applied at the time, and any record of authorization to exceed it. If authorization exists, the overrun may be legitimate and the review ends there. If no authorization exists, the vendor billed outside the terms of the agreement. That is grounds to request a credit memo for the amount above the cap, not the full invoice, since the underlying work was still performed and received. Past recoveries do not fix the forward problem. Every overrun found this way is evidence the same gap will recur on the next work order at the same site unless the cap gets built into matching rather than discovered in a periodic review. For the wider pattern this sits inside, start with the [margin drift](/guides/indirect-spend-audit-categories) guide.

Questions & Answers

What is a not-to-exceed clause in a janitorial contract?

It is a ceiling stated in the contract on what the vendor may bill for a defined scope, such as a site's monthly service or a single repair work order. Billing above it requires written authorization before the vendor proceeds. It protects the buyer from open-ended charges on incidental or emergency work.

Why does an NTE overrun get approved instead of flagged?

Because the approval step checks the invoice against the purchase order and the receipt of service, not against the contract's NTE clause. The clause lives in the master service agreement, a document outside the ERP, so nothing in the matching process ever reads it.

Can a not-to-exceed cap apply to a whole contract instead of a single work order?

It can, but facilities and janitorial agreements more often set the cap per site, per work order, or per month. A single master service agreement can carry many separate NTE figures across sites and service types, each requiring its own check.

Does three-way matching catch a not-to-exceed breach?

No. Three-way matching confirms the invoice agrees with the purchase order and the receipt. It does not test the invoice against a dollar ceiling defined in the contract, because that ceiling is not a field either the PO or the receipt carries.

What is the difference between a change order and an NTE breach?

A change order authorizes new or expanded scope. An NTE breach occurs when billed charges, whether from a change order or ordinary work, exceed the ceiling set for that scope without the authorization the contract requires. A change order can cause a breach, but the two are not the same thing.

Margin Drift Resources