How to Build a Corporate Travel Program from Scratch: 2026 Blueprint
TL;DR: Building a corporate travel program from scratch in 2026 takes six sequential moves — baseline your spend, write a policy tied to approval logic, choose an online booking tool plus a payment rail, negotiate supplier rates on real volume data, wire in ISO 31030-aligned duty of care, and instrument continuous analytics. Companies that skip step one usually overpay 12–18% on air and 20%+ on hotels within 18 months, per GBTA 2025 benchmarks.
Corporate travel is the second- or third-largest controllable cost line at most mid-market companies, behind payroll and IT. Global business travel spend is forecast to reach $1.64 trillion in 2026, according to the GBTA 2025 Business Travel Index Outlook. Yet a majority of companies under 1,000 employees still book through consumer sites, expense reimbursements, or an unmanaged mix — leaving 15–25% of savings on the table.
Drawing from eight-plus years building AI-powered corporate travel infrastructure, the patterns that hold up across industries and headcounts are the same six. This blueprint walks through each one with the primary data, the failure modes, and the decisions a first-time travel program owner has to make in the first 90 days.
Step 1: Baseline Your Current Travel Spend
Before you write policy or sign a TMC, you need six to twelve months of clean spend data — by traveler, by route, by supplier, by booking channel, and by ticket type. Most first-time programs skip this and regret it inside a year.
A defensible corporate travel baseline requires four data pulls: credit card statements filtered to travel MCC codes (3000–3299 airline, 3500–3999 hotel, 4111 rail, 7011 lodging, 7512 car rental), expense-report line items exported from Concur or a comparable system, direct-billed invoices from any legacy hotel or airline account, and passenger name record (PNR) data if a travel agency was involved. Cross-reference to eliminate double-counting. GBTA's 2024 State of the Managed Travel Program found that companies discovering "hidden" travel spend post-baseline typically uncover 22–34% more volume than the CFO's initial estimate — most of it in offline hotel bookings, contractor travel, and departmental credit cards. Without this baseline, downstream RFPs price against phantom volume and negotiated rates underperform published ones within eight months.
Once you have the spend map, calculate three ratios: average ticket price (ATP) versus route-comparable market medians, hotel average daily rate (ADR) versus GSA per diem for each city, and leakage rate — the share of bookings made outside your intended channel. Anything above 25% leakage means policy or tooling failed, not the traveler.
Step 2: Write a Policy That Enforces Itself
A travel policy that lives in a PDF gets ignored. A travel policy encoded in the booking tool's rule engine gets followed. The 2026 shift is toward policy-as-code — approval thresholds, class-of-service caps, advance-purchase windows, and preferred-supplier logic embedded directly in the online booking tool (OBT) so out-of-policy trips generate friction, not headers on an email.
Cover, at minimum: air class rules (economy under 6 hours is the current mid-market default per Deloitte 2025 Travel Manager Survey), hotel per-night caps by tier city, ground transport allowances, meal reimbursement structure, cancellation responsibility, and personal-travel-mixed-with-business handling. Tie every rule to the approval workflow. For deeper mechanics see the policy compliance guide.
Step 3: Choose Your Tech Stack
The three foundational components are the online booking tool (OBT), the expense system, and the payment rail. A traditional travel management company (TMC) can bundle these or sit on top of them.
In 2026, the standard corporate travel stack has four layers: (1) an online booking tool such as SAP Concur Travel, Navan, Egencia, or TravelPerk that handles the shopping and ticketing workflow; (2) a payment layer — typically a Business Travel Account (BTA), virtual cards, or lodge cards — that centralizes billing and eliminates traveler out-of-pocket; (3) an expense platform such as Concur Expense, Ramp, Brex, or Expensify that reconciles receipts to card transactions; and (4) an overlay analytics or continuous-savings layer that monitors bookings post-purchase. Per GBTA 2025 Technology Adoption Report, 71% of managed programs now run at least three of these four layers, up from 48% in 2022. Companies running only an OBT plus expense — no dedicated payment rail — report 3.4× more reconciliation labor per booking.
Travel Code operates in that fourth layer as a bring-your-own-data (BYOD) overlay — it sits alongside whichever OBT/TMC a company already runs, continuously re-shops booked rates, and returns validated savings. Pricing is 25% of validated savings, so there is no cost when nothing is found. Whether you need an overlay depends on booking volume: below roughly $2M in annual air+hotel spend, most programs get more from tightening policy than from continuous re-shopping.
Step 4: Negotiate Supplier Rates on Real Volume Data
Once your baseline shows real route and city volumes, run competitive RFPs. Airlines typically require $250K–$500K on a specific route before discounting; hotels will negotiate at 50+ room nights per property per year. Use last-room availability (LRA) clauses on hotel deals — non-LRA rates disappear when the property fills, which happens on the exact dates your travelers need to be there. Full mechanics are in the hotel RFP guide.
Step 5: Wire In Duty of Care
Duty of care is a legal obligation in most jurisdictions — ISO 31030:2021 (Travel Risk Management) is now the reference standard, and courts in the US, UK, EU, and Australia increasingly cite it in employer negligence cases. A defensible 2026 duty-of-care program has four components: (1) traveler tracking with sub-24-hour location fidelity via PNR feeds or check-in data, (2) pre-trip risk assessment tied to destination threat levels from a provider such as International SOS, Crisis24, or Riskline, (3) 24/7 assistance and evacuation coverage — either bundled with the TMC or purchased separately, and (4) documented emergency communications protocols with dual-channel reachability (SMS plus email plus app push). GBTA's 2024 Traveler Wellness Study found that 61% of business travelers cannot name their employer's emergency contact — a program failure, not a traveler failure.
See the business travel safety guide for implementation detail, and the data-feed duty-of-care approach for programs that can't rip and replace their OBT.
Step 6: Instrument Analytics and Iterate
Set five monthly KPIs from day one: policy compliance rate, average ticket price versus market, hotel program adoption, leakage rate, and traveler satisfaction (NPS or a short pulse survey). A quarterly business review with your TMC or overlay provider should trace each KPI to a specific supplier, route, or policy line. See travel data analytics for reporting architecture.
Program Model Comparison
| Model | Best fit (annual travel spend) | Typical fees | Time to launch | Continuous optimization |
|---|---|---|---|---|
| Unmanaged (consumer sites + expense) | <$250K | None direct; 15–25% leakage cost | 0 weeks | None |
| Self-serve SMB OBT (Navan, TravelPerk) | $250K–$3M | $0–$20 per booking or subscription | 2–4 weeks | Basic policy enforcement |
| Traditional TMC (BCD, CWT, American Express GBT, FCM) | $3M+ | $20–$45 per transaction + management fee | 8–16 weeks | Quarterly business reviews |
| Enterprise OBT + TMC (SAP Concur + BCD/AMEX GBT) | $10M+ | Custom; typically 1.5–3% of spend | 12–24 weeks | Managed via dedicated account team |
| BYOD overlay (Travel Code) — runs alongside any of the above | Any, meaningful ROI at $2M+ | 25% of validated savings (no savings = no fee) | 1–2 weeks (data feed only) | Continuous rate re-shopping, real-time duty of care, unified analytics |
90-Day Launch Sequence
Weeks 1–3: baseline spend, benchmark against 2026 industry data. Weeks 4–6: draft policy, socialize with finance, legal, HR. Weeks 7–9: shortlist and demo OBT/TMC vendors, run reference calls. Weeks 10–12: contract, integrate expense and payment, communicate launch to travelers with training. Anything faster usually skips baseline or duty of care and pays for it later.
Frequently Asked Questions
How much does it cost to launch a corporate travel program?
Direct tooling costs range from $0 (self-serve SMB OBT with per-booking fees) to $150K+ in year-one setup for enterprise Concur + TMC implementations. The bigger cost is internal — expect 0.25–1.0 FTE of travel program ownership plus finance, IT, and legal review time. GBTA 2025 Managed Travel Program Study puts median first-year implementation cost at 0.9% of annual travel spend, dropping to 0.4% by year three as processes stabilize.
Do we need a full TMC, or can we start smaller?
Below $2–3M in annual travel spend, a self-serve OBT (Navan, TravelPerk, Egencia's SMB tier) plus a corporate card program covers most needs. Above that, a TMC's negotiation leverage, 24/7 support, and reporting depth start earning back their fees. Between $3M and $10M is the ambiguous middle — many programs run a lightweight OBT plus a BYOD overlay for continuous savings rather than a full TMC.
Is Travel Code a TMC?
No. Travel Code is a BYOD overlay platform, not a traditional travel management company. It runs alongside whichever OBT or TMC you already use — Concur, Egencia, SAP, Navan, TravelPerk — connecting via data feed and adding continuous rate re-shopping (RateGuard, priced at 25% of validated savings), real-time duty of care, and unified analytics. It doesn't replace your booking tool or your agent support.
How do we measure program ROI?
Track hard savings (negotiated rate delta versus market published rates, continuous re-shop savings, policy-driven avoidance) and soft savings (traveler productivity, reduced expense cycle time, duty-of-care liability reduction). Full framework in the corporate travel ROI guide. Median managed-program savings per GBTA is 8–14% of pre-program spend within 24 months.
What's the biggest failure mode when building a program from scratch?
Rolling out policy and tooling without a spend baseline. Without the baseline, RFPs price against wrong volumes, negotiated rates underperform, and leadership can't tell whether the program is working. The second-biggest failure is treating duty of care as a checkbox — under ISO 31030 and rising case law, undocumented duty-of-care programs are the liability that surfaces during the incident, not before.
How long before we see measurable savings?
Policy-driven savings (compliance, class-of-service enforcement) show up in 60–90 days. Negotiated supplier rates take 4–8 months to fully price in. Continuous re-shopping savings from an overlay start within days of the data feed going live but accumulate over the first booking cycle. Expect meaningful year-over-year variance for the first 18 months while patterns stabilize.
Sources & Further Reading
- GBTA Business Travel Index Outlook 2025 — global spend forecasts and program benchmarks
- ISO 31030:2021 — Travel Risk Management standard
- GSA Per Diem Rates (fiscal year 2026) — federal lodging and M&IE ceilings
- Deloitte 2025 Corporate Travel Manager Survey — policy and class-of-service norms
- GBTA 2024 State of the Managed Travel Program — hidden-spend and adoption data
- Travel Code guides: CTD structure, travel budget planning, glossary
