Four-Eyes Principle
Related terms
Category
General Concepts
The four-eyes principle is an internal control requiring that at least two independent individuals review and approve critical financial actions before they are executed. It reduces the risk of errors, fraud, and unauthorized changes by ensuring no single person can unilaterally alter financial data or reports.
Why it matters
Single points of failure in financial processes create unacceptable risk. A journal entry posted without review, a data import approved by the person who prepared it, or a period closed without independent verification. these scenarios invite errors that may not be caught until the external audit, months later. The four-eyes principle is a foundational control in every major internal control framework, including COSO and SOX Section 404.
Beyond compliance, the four-eyes principle improves data quality. A second reviewer brings fresh perspective and catches errors that the preparer is too close to see. The challenge is implementing it consistently without creating bottlenecks. Manual enforcement through email approvals and spreadsheet sign-off logs is error-prone and difficult to audit.
Enforcing the four-eyes principle at scale requires structured reconciliation workflows that route work between preparers and reviewers with clear accountability.
How Arvexi handles this
Arvexi enforces the four-eyes principle through configurable approval workflows across the platform. Import approval requires a different user than the uploader. Entity certification requires designated certifiers distinct from the preparers. Journal entry posting, period locking, and consolidation finalization all support mandatory dual approval. Every action is logged with the identity of both the preparer and the approver.
Arvexi's Account Reconciliation Workflow engine enforces the four-eyes principle at every step of the reconciliation lifecycle, preventing the same user from preparing and approving the same account.
Explore how Arvexi automates this: Financial Close · Platform Security