A Controlled Inbox-to-Hubdoc Receipt Workflow
A Hubdoc-specific control model for routing emailed receipts into the right organization, handling attachment and portal exceptions, and assigning responsibility through extraction and review.
Read this if…
You need a controlled Hubdoc intake workflow with clear address ownership, document-creation rules, exception handling, and responsibility from inbox review through Hubdoc review.
Related: Email receipts to Hubdoc setup guide
Control model
Treat the unique Hubdoc intake address as organization-owned configuration, with a named administrator and an entity check before any message is routed.
Define whether attachments, the email body, or a downloaded portal file should become the source document, then assign exceptions to a person instead of forwarding placeholders.
Expensent owns upstream discovery, review, and routing. Hubdoc owns document creation, extraction, and review; publishing is a separate downstream workflow.
1. Start with the Hubdoc organization boundary
A dependable Hubdoc workflow begins with the organization, not with a Gmail rule. Hubdoc documents a unique intake email address for each organization. The address appears in Organization Settings and in the Upload Document dialog, and Hubdoc adds unique characters when an administrator changes it. Once changed, the previous address no longer works.
Treat that address as controlled organization configuration. A named Hubdoc administrator should own changes, keep the full current address in the approved routing destination, and tell the inbox-routing owner when it changes. Employees, vendors, and mailbox rules may send to the address, but they should not become the source of truth for it.
This matters when one finance team works across several entities. Each Hubdoc organization has its own intake boundary, and Hubdoc-to-Xero connections are organization-specific. The routing decision must identify the business entity before it identifies a supplier pattern. A correct receipt sent to the wrong organization is still an intake failure.
- Configuration owner: maintains the organization address and Hubdoc user access.
- Routing owner: uses the complete address copied from the intended organization.
- Sender or employee: supplies the source document but does not choose the accounting entity by assumption.
Control statement
One organization, one current intake address, one named configuration owner. Rules consume that configuration; they do not define it.
2. Define what each email creates
Email intake is not one document per message. Hubdoc says that each emailed attachment creates a separate document and uses the attachment name as the display name. A message with an invoice PDF, a terms PDF, and a second copy can therefore create three Hubdoc documents. Route the message only when all attached files belong; otherwise obtain and submit the correct source file through an approved Hubdoc path.
The email body follows a different rule. By default, Hubdoc does not create a document from the body. An organization setting can create documents from both attachments and the body; when enabled, Hubdoc converts the body to a separate PDF and uses the subject as its display name. This can preserve body-only receipts, but it can also produce an extra document when the body merely repeats an attached invoice.
A hyperlink is not an attachment. Hubdoc states that it cannot create a document from a file that must be accessed through a link in the email. A portal notification therefore needs a retrieval owner, not an automatic route. The actual downloaded file must enter Hubdoc through email, upload, mobile capture, or another supported intake method.
- Attachment present: route only when the attachments are the documents the organization intends to create.
- Body-only evidence: route only if the organization has deliberately enabled body-to-PDF creation.
- Attachment plus useful body: expect separate documents when the body setting is enabled; decide whether both belong.
- Portal link only: hold the message and assign retrieval of the source file.
- Mixed or unrelated attachments: keep in review instead of sending the whole message blindly.
3. Assign the intake-to-review responsibilities
Automation needs named owners at each boundary. "Finance" is not an owner if nobody knows who changes the Hubdoc address, who resolves a portal notice, or who clears the Review tab. Assign responsibility by state and give each person the Hubdoc permissions needed for that state.
Hubdoc roles matter here. Official guidance distinguishes upload-only, standard, and accountant/bookkeeper roles. Upload-only users can submit documents but generally see only documents they uploaded; standard users can see all organization documents and may receive added permissions; accountant/bookkeeper users have broad organization capabilities. Xero roles do not automatically sync into Hubdoc.
The map should end at a clear handoff. Expensent's upstream owner decides whether an inbox message is ready, needs more evidence, belongs elsewhere, or should not be routed. Once Hubdoc creates the document, the Hubdoc reviewer owns extracted data and document state. A publishing owner takes over only after review policy is satisfied.
- Hubdoc configuration owner: organization address, body-document setting, user roles, and access changes.
- Inbox intake owner: Expensent review queue, entity choice, approved destination, and rule eligibility.
- Exception owner: portal retrieval, missing attachment request, ambiguous entity, and duplicate-source questions.
- Hubdoc review owner: Processing, Review, Failed, and document-data follow-up inside Hubdoc.
- Publishing owner: supplier configuration, connected destination, transaction treatment, approval, and reconciliation handoff.
Permission check
Do not assign a Hubdoc review queue to an upload-only user who cannot see documents routed by other users or automated connections.
4. Write the exception policy before the rule
An exception policy determines what happens when a message is not a clean receipt with a known organization and a usable source document. Without one, automation either forwards too much or silently leaves work in a queue. The policy should name the owner, required evidence, permitted action, and completion signal for each exception class.
Use four outcomes. Route means the evidence is present and the organization is known. Retrieve means a portal or account owner must obtain the source file. Clarify means the entity, document type, or accounting purpose is uncertain. Reject or redirect means the message is not source evidence for Hubdoc, is a duplicate, or belongs in another workflow.
Credits, refunds, statements, order acknowledgements, renewal notices, and payment alerts should not inherit an invoice rule merely because they share a sender. They may still be valid accounting evidence, but their treatment requires a deliberate decision. Keep mixed-event senders in review until each subject pattern has a stable, documented outcome.
- Portal-only: assign retrieval; complete when the actual file is routed or the owner records that none is available.
- Missing or irrelevant attachment: request the source document; do not forward a placeholder message.
- Unknown organization: hold until the legal entity or client is confirmed.
- Possible duplicate: preserve the source trail and let the designated reviewer compare before another route.
- Mixed sender or subject: keep manual review; do not widen a rule to capture unrelated events.
5. Hand off into Hubdoc extraction and review states
The inbox route is complete when Hubdoc creates the intended document in the intended organization. It is not complete merely because an email was sent, and it is not responsible for what happens after document creation. The Hubdoc review owner should use Hubdoc's own status to accept the handoff.
With extraction enabled, Hubdoc says new documents waiting for extraction appear in Processing, then move to Review when extraction completes. Documents move to Failed when Hubdoc cannot extract data, and Failed can also represent a publishing failure. Archived can mean a document no longer requires action, but organization state, disabled extraction, and automatic publishing can affect the path.
Do not promise that every document will pause in Review. Hubdoc supplier auto-sync can publish configured documents without that pause, and potential duplicates or credit notes can require manual handling. The operating owner should know which suppliers are allowed to bypass review and which document classes must always be inspected.
- Processing: Hubdoc owns extraction; the reviewer monitors rather than resending from the inbox.
- Review: the Hubdoc reviewer validates extracted or manually entered data and resolves document questions.
- Failed: first identify extraction versus publishing failure, then use the troubleshooting guide.
- Archived: confirm whether the result matches the organization's extraction and publishing policy.
Do not create duplicates while diagnosing
If a document already exists in Hubdoc, investigate its status there before routing the source email again. Use the Hubdoc documents-not-processing guide for the diagnostic path.
6. Keep capture separate from publishing
Capture answers, "Did Hubdoc create the right source document in the right organization?" Publishing answers, "Should Hubdoc send this document or transaction data to a configured destination, under which accounting treatment?" Those controls belong to different owners and should have separate completion signals.
A receipt can be correctly captured and still wait for review, supplier configuration, a connected destination, or a bookkeeping decision. Conversely, automatic supplier publishing can move a document downstream before a person sees the Review tab. Neither outcome should cause the inbox owner to change a routing rule without evidence that intake itself was wrong.
Use the dedicated Hubdoc publishing destinations guide for Xero, QuickBooks Online, BILL, and cloud-storage choices. Keep this workflow focused on intake, extraction-state visibility, and assignment to the Hubdoc reviewer.
- Intake complete: intended Hubdoc organization and intended source document created.
- Review complete: required fields and document classification accepted by the Hubdoc reviewer.
- Publishing complete: destination-specific result confirmed by the publishing owner.
- Reconciliation complete: accounting system and bookkeeping process confirm the transaction outcome.
7. Use Expensent for upstream discovery, review, and routing
Expensent's role is deliberately upstream. It helps surface likely receipt and invoice emails, gives the intake owner a place to review them, and routes approved messages to the Hubdoc organization address the user configures. That closes the inbox-to-Hubdoc handoff without making Expensent the owner of Hubdoc extraction or accounting output.
A recurring route should be based on a reviewed email pattern plus a reviewed subject pattern. The intake owner should also know that the entity is stable and that the source consistently arrives in a form Hubdoc can turn into the intended document. Sender identity alone is not enough for marketplaces, travel platforms, payment processors, or vendors that mix invoices with statements and notices.
Keep the rule upstream. It should not encode account codes, tax treatment, approval status, paid-versus-unpaid decisions, publishing destinations, or reconciliation behavior. Those are Hubdoc and accounting-system controls owned by people with the corresponding permissions and context.
Expensent boundary
Expensent discovers, reviews, and routes inbox evidence. Hubdoc creates and processes the document. The accounting workflow reviews, publishes, approves, and reconciles it.
8. Maintain the control record
A short control record makes the automation understandable when staff, vendors, or organization settings change. Record the Hubdoc organization, the named configuration owner, the named inbox owner, the current intake address source, whether email-body document creation is enabled, the accepted evidence form, the exception owner, and the Hubdoc review owner.
For each recurring rule, record why it qualifies: expected entity, email pattern, subject pattern, attachment or body behavior, exception cases, and the person authorized to pause it. The record should describe the source evidence, not downstream coding. Publishing rules belong in the Hubdoc or accounting-workflow record.
Review the control when a route creates the wrong document, sends to the wrong organization, repeatedly produces portal exceptions, or no longer has a responsible owner. If the document reaches Hubdoc but extraction or status is wrong, use the documents-not-processing guide. If review is complete and the question is where to publish, use the publishing-destinations guide.
- Organization control: address source, setting owner, body-document choice, and Hubdoc permissions.
- Rule control: entity, email pattern, subject pattern, evidence form, exclusions, and pause owner.
- Exception control: exception class, assigned person, required evidence, and completion signal.
- Handoff control: Hubdoc document created, current status known, and reviewer assigned.
9. Sources checked
These sources were used to verify product behavior, current terminology, and the boundaries between native workflows and Expensent.
- Xero Central: About getting documents into Hubdoc
- Xero Central: Upload or email documents into Hubdoc
- Xero Central: Update Hubdoc organization settings
- Xero Central: About user permissions in Hubdoc
- Xero Central: Add or remove a user in Hubdoc
- Xero Central: About data extraction in Hubdoc
- Xero Central: About a document's status in Hubdoc
- Xero Central: Resolve issues with documents in Hubdoc
11. Frequently asked questions
Can I automate Hubdoc receipts without Gmail forwarding?
Who owns the email address used for Hubdoc intake?
How does Hubdoc handle attachments and the email body?
What should happen to a portal-link receipt email?
Who should review a document after it reaches Hubdoc?
Does receipt capture automatically publish to accounting software?
Does Expensent replace Hubdoc review or publishing?
Control the inbox-to-Hubdoc handoff
Use Expensent to discover likely receipt and invoice emails, review intake exceptions, and route approved source documents to the Hubdoc organization address you configure.
Get Started