Automating an undocumented credit policy
If approvals currently depend on one person’s judgement, automation encodes whatever assumptions happen to be captured on the day, including the inconsistent ones. Write the policy first: bands, evidence per band, automatic disqualifiers, override authority. Expect the writing process to surface genuine disagreements between sales and finance, and treat resolving those as part of the value rather than as a delay.
Credit checks run without proper consent and handling
Applications collect personal information about sole traders, directors and guarantors. A business that sells on terms of 7 days or more is a credit provider under the Privacy Act 1988, and if it obtains a consumer credit report on one of those individuals, Part IIIA of the Act and the Credit Reporting Code apply whatever the size of the business, including the requirement for the individual’s express consent. Unless your business is exempt as a small business, the Australian Privacy Principles also govern how you collect, use, store and disclose the rest of the application. Get your application wording reviewed, store the consent with the application, restrict who can see the sensitive parts, and do not keep director identity documents longer than you need them.
Half provisioned accounts
When creation succeeds in the portal and fails in the ledger, the customer can place orders that cannot be invoiced, and nobody finds out until the first month end. Every provisioning step needs to be repeatable without creating duplicates, every failure needs to raise an exception showing the partial state, and the sequence should be ordered so that the record which controls credit exists before the one which allows ordering.
Terms acceptance not tied to a version
Terms of trade get updated, and an acceptance record that does not say which version was accepted is close to useless in a dispute. Keep versioned documents, record the version, the timestamp and the person for every acceptance, and have a process for re-acceptance when terms change materially. Standard form contracts with small businesses also sit within the unfair contract terms regime under Australian law, so the drafting itself deserves professional review rather than inheritance from an old template.
Security interests registered late or not at all
If your terms retain title to goods until payment, that protection generally depends on registering correctly and within the applicable timeframes on the Personal Property Securities Register. Registrations done in a monthly batch, or against the wrong entity identifier, can leave you unsecured exactly when it matters, in an insolvency. Make registration part of the onboarding sequence, verify the entity details against the register, and get advice on the timing rules that apply to your arrangements.
Limits set once and never revisited
A limit granted three years ago reflects a business that may have doubled or halved since. Without scheduled reviews and event triggers, the first sign of a problem is an overdue balance larger than the limit you would grant today. Schedule reviews, trigger reassessment on sustained overdue behaviour or a sharp increase in order value, and record every change with a reason so the pattern is visible rather than anecdotal.