What Verifactu actually is
Verifactu is the common name for the system created by Royal Decree 1007/2023 and developed technically by Orden HAC/1177/2024, a Spanish ministerial order. It does not change which invoices you issue or how much VAT you pay: it regulates the software you use to invoice.
Software adapted to Verifactu must do three things with every invoice:
- Verifiable invoicing record: at the moment an invoice is issued, the software generates a record with its essential data.
- Hash chaining: each record includes the fingerprint (hash) of the previous record, forming a chain that makes it impossible to delete or alter invoices without leaving a trace.
- QR code on the invoice: every invoice carries a printed QR so it can be checked against the AEAT.
Who is affected and from when
The current deadlines were set by Royal Decree-law 15/2025, confirmed by the Spanish Congress:
- Companies (SL and other corporate income tax payers): systems must be adapted before 1 January 2027.
- Autónomos with a business activity (plus non-residents with a permanent establishment and income attribution entities): before 1 July 2027.
- Software producers and resellers: their own obligation is already in force; since 29 July 2025 they may only offer adapted products.
Outside Verifactu: companies that report their VAT books through the SII system (mostly large companies), and taxpayers whose fiscal domicile is in the Basque Country, which uses TicketBAI, or in Navarre, which runs its own regional framework. The AEAT information note confirms this calendar.
The two modes: VERI*FACTU and non VERI*FACTU
The regulation allows two ways to comply:
- VERI*FACTU mode: the software sends every invoicing record to the AEAT continuously and automatically as you invoice. In exchange, no electronic signature of each record is required (the hash is enough), and the invoice shows, next to the QR, the phrase «Factura verificable en la sede electrónica de la AEAT» or «VERI*FACTU».
- Non VERI*FACTU mode: nothing is sent on a regular basis, but the technical bar is higher: each record must be electronically signed (XAdES), the system must keep an event log and meet reinforced conservation requirements, and records are submitted only if the AEAT demands them.
In both modes, hash chaining and the QR code are mandatory.
Penalties: fixed fines of 50,000 and 150,000 euros
The fines are set out in article 201 bis of the Ley General Tributaria, Spain's General Tax Law, and they are fixed amounts, not proportional to the size of your business:
- For the user: 50,000 euros for each fiscal year in which invoices are issued with non-compliant software (article 201 bis.2).
- For the producer or reseller: 150,000 euros per year and per distinct type of system (article 201 bis.1).
One important nuance: there is no specific penalty for not sending invoices to the AEAT, because continuous submission belongs to the voluntary mode. The infringement is invoicing with software that does not comply.
There is no AEAT certificate: how compliance really works
There is no homologation, prior registration or «AEAT certificate» for invoicing software. The legal way to prove compliance is the declaración responsable, a formal statement of compliance issued by the software producer under article 15 of Orden HAC/1177/2024.
- It must be visible inside the software itself, for each version, and available to the client.
- It identifies the system, its version and the producer with its NIF, and includes an express statement of compliance.
- It is not filed with the AEAT and goes through no administrative approval: it is a self-certification by the producer.
If a vendor tells you their software is certified by the AEAT, be suspicious: that certificate does not exist. What you should ask for is their declaración responsable.
How to comply in practice
Realistic options for an autónomo or a small SL:
- Adapted invoicing software: check that the vendor publishes its declaración responsable and ask which mode it works in. If you run an SL, the goal is to have it operational by 31 December 2026 at the latest.
- The free AEAT application: the tax agency itself offers a basic invoicing application; its conditions are explained in the AEAT frequently asked questions. It lets you issue compliant invoices, but it is minimal: invoicing only, no accounting.
- Excel, Word or templates: they stop being usable in practice for anyone under the obligation, because they do not generate hash-chained records or print the QR.
kontora has been built Verifactu-ready from day one: the chained records, the hash and the QR code are part of the product core, and its declaración responsable will be published visibly inside the application.
Frequently asked questions
Can I keep invoicing with Excel or Word?
Will I have to send all my invoices to the AEAT?
Is there an official AEAT certificate for software?
Does Verifactu apply in the Basque Country or Navarre?
Is there a free option?
Is Verifactu the same as mandatory B2B e-invoicing?
How do I correct or cancel an invoice under Verifactu?
Under Verifactu nothing is ever deleted or rewritten: the chain of records only grows. If you cancel an invoice, the system adds a cancellation record chained to the rest; if you need to correct it, you issue a factura rectificativa (a corrective invoice, types R1 to R5 in the official format), which creates its own record. The original invoice and its record stay in place: the chain keeps the full history of what happened.
I invoice by hand, without a computer. Does Verifactu force me to buy software?
No. The regulation covers computerised invoicing systems: if you issue all your invoices manually (handwritten or on pre-printed pads), you are outside its scope and nobody forces you to digitalise, as the AEAT (the Spanish tax agency) confirms in its official FAQ. Be aware, though: the moment you use a program to issue invoices, even occasionally, that program has to comply.
What happens if my internet goes down while I am in VERI*FACTU mode?
You can keep invoicing as normal: the records are still generated locally and simply wait in a sending queue. Order HAC/1177/2024 treats a lost connection as a foreseen incident: pending records are sent as soon as possible, in order, with retries at least once an hour and a visible warning while anything remains unsent. It is not a breach: the rules themselves regulate this scenario.
Can I switch invoicing software in the middle of the year?
Yes. The chain of records exists per taxpayer and per software system: your old program closes its chain and the new one starts its own, with a first record flagged as such, so the chaining is never "lost" and nothing needs migrating. What you must do is keep the records generated by the old system for their retention period. Tools built for Verifactu, kontora among them, already generate these chained records with a hash fingerprint and QR code.
My tax domicile is in the Canary Islands, Ceuta or Melilla. Does Verifactu apply without VAT?
Yes. The AEAT confirms that taxpayers domiciled in the Canary Islands, Ceuta or Melilla fall within the regulation: where the rules refer to VAT, IGIC (the Canary Islands general indirect tax) or IPSI (the indirect tax of Ceuta and Melilla) applies instead, and the official record format explicitly covers both taxes, with dedicated regime keys for IGIC. The only territories outside are the Basque Country and Navarre, which have their own foral (regional) tax rules.
I am under recargo de equivalencia or another special regime. Am I affected?
A special regime does not exclude you by itself. Under recargo de equivalencia (the special VAT scheme for small retailers), and similarly under modules or the agricultural regime, you are generally not required to invoice your sales; but if you invoice voluntarily with software, or must invoice in specific cases (selling business assets, or when the customer is a business or a public body), that software has to comply with Verifactu. For those occasional invoices you can even use the AEAT's free application, and the record format already includes dedicated fields for the surcharge rate and amount.
I use a POS till and a separate invoicing program. How does that fit?
Without any problem: the rules require one single chain of records per taxpayer and per software system, so each tool keeps its own. You can issue till receipts from the POS and standard invoices from another program, as long as each system complies on its own (hash, chaining, QR). What you cannot do is let part of your invoicing come out of a non-adapted tool.
How long, and in what format, must the invoicing records be kept?
For the same period as your invoices: the limitation period of Spain's General Tax Law, four years as a general rule, which the invoicing regulation refers to. The official record format is XML and, in systems that do not send records to the AEAT, they must also be exportable to a readable external medium. If you work in VERI*FACTU mode, the AEAT already holds a copy of every record and your system is exempt from the reinforced retention regime, though the invoices themselves are kept as usual.
I sent a record with an error. How is it fixed?
Never by editing the original record: a new record is generated, with the same invoice identifiers and a correction flag, and chained at the end of the chain. If the AEAT had accepted the record "with errors", it remains registered but you must fix it; if it was rejected, the resubmission also carries a prior-rejection flag. This route only covers errors in the record itself: if the invoice is what is wrong, you need a corrective invoice or a cancellation.
My customer or my gestoría issues invoices on my behalf. Who has to comply?
The system covers this: the record states whether the invoice is materially issued by the recipient or by a third party (your gestoría, an accounting agency in Spain, for example), and self-billing follows the same scheme. The software used by whoever issues the invoice must comply, but delegating does not release you: you remain the responsible taxpayer. There is one specific exclusion for operations documented in invoices issued by the recipient or a third party where the VAT ledgers are kept through the SII (Spain's real-time VAT reporting system).
Can I invoice with foreign software such as Stripe or Shopify?
The rules do not care where the software comes from: what matters is that the system generates the chained records with hash and QR, and that its producer issues the declaración responsable (a formal self-declaration of compliance). Many international platforms do not do this out of the box for the Spanish market, so ask the provider explicitly before relying on them. You can always take payments or sell through those platforms and issue the actual invoice from an adapted program.
My company is already in the SII. Do I also have to apply Verifactu?
No: the two regimes are mutually exclusive. If you keep your VAT ledgers through the SII, Spain's real-time VAT reporting system, you are outside the Verifactu regulation, because the AEAT already receives your invoicing data that way. It works in both directions: if you later join the SII, your software must stop printing the QR code on invoices.
Is it worth adopting Verifactu early, during 2026?
You can: the AEAT's submission services have been live since 23 April 2025 and accept voluntary sendings. Under the AEAT's clarifications after the latest postponement, sending records in 2025 or 2026 does not lock you in: the stay-until-year-end rule operates once the obligation actually applies from 2027. Going early lets you road-test your system with real data ahead of the deadlines (1 January 2027 for companies subject to corporate income tax, 1 July 2027 for everyone else, including autónomos, the self-employed in Spain); just remember that whatever you send are records of real invoices, not test data.
Does Verifactu also affect invoices and receipts issued to private individuals?
Yes. The regulation covers everything you issue with an invoicing system, including facturas simplificadas (simplified invoices, the typical till receipts) handed to final consumers. Each one generates its record and carries its QR code, and any individual can scan it to check the invoice against the AEAT's records; that check is a verification, not a complaint.
Keep reading
Verifactu for autónomos: your July 2027 deadline explained
The AEAT free invoicing app: when it is enough and when it is not
Spanish tax calendar 2026-2027 for autónomos and SL companies
Rather have this calculated for you?
kontora generates your tax forms box by box, tells you how much to set aside and reminds you before every deadline.