What is Verifactu and does it affect you?

Updated on 17 July 2026. Dates and penalties verified against the BOE, Spain's official state gazette.

Quick answer

Verifactu is Spain's verifiable invoicing system under Royal Decree 1007/2023: invoicing software must generate hash-chained, tamper-evident records and print a QR code on every invoice. It becomes mandatory for companies (SL) on 1 January 2027 and for the self-employed on 1 July 2027; invoicing with non-compliant software carries a fixed 50,000 euro fine per fiscal year.

Verifactu is Spain's new system of verifiable invoicing records: from 2027, any software used to issue invoices must generate tamper-evident, hash-chained records and print a QR code on every invoice, under Royal Decree 1007/2023. It affects you if you run an SL (a Spanish limited company), from 1 January 2027, or if you work as an autónomo (self-employed in Spain), from 1 July 2027, unless you file under the Basque or Navarre regional tax systems or the SII regime used mostly by large companies.

This guide explains what changes in practice, the two ways to comply, the fixed fines, and why nobody can sell you software that is certified by the AEAT, the Spanish tax agency.

What Verifactu actually is

Verifactu is the common name for the system created by Royal Decree 1007/2023 and developed technically by Orden HAC/1177/2024, a Spanish ministerial order. It does not change which invoices you issue or how much VAT you pay: it regulates the software you use to invoice.

Software adapted to Verifactu must do three things with every invoice:

Who is affected and from when

The current deadlines were set by Royal Decree-law 15/2025, confirmed by the Spanish Congress:

Outside Verifactu: companies that report their VAT books through the SII system (mostly large companies), and taxpayers whose fiscal domicile is in the Basque Country, which uses TicketBAI, or in Navarre, which runs its own regional framework. The AEAT information note confirms this calendar.

The two modes: VERI*FACTU and non VERI*FACTU

The regulation allows two ways to comply:

In both modes, hash chaining and the QR code are mandatory.

Penalties: fixed fines of 50,000 and 150,000 euros

The fines are set out in article 201 bis of the Ley General Tributaria, Spain's General Tax Law, and they are fixed amounts, not proportional to the size of your business:

One important nuance: there is no specific penalty for not sending invoices to the AEAT, because continuous submission belongs to the voluntary mode. The infringement is invoicing with software that does not comply.

There is no AEAT certificate: how compliance really works

There is no homologation, prior registration or «AEAT certificate» for invoicing software. The legal way to prove compliance is the declaración responsable, a formal statement of compliance issued by the software producer under article 15 of Orden HAC/1177/2024.

If a vendor tells you their software is certified by the AEAT, be suspicious: that certificate does not exist. What you should ask for is their declaración responsable.

How to comply in practice

Realistic options for an autónomo or a small SL:

kontora has been built Verifactu-ready from day one: the chained records, the hash and the QR code are part of the product core, and its declaración responsable will be published visibly inside the application.

Frequently asked questions

Can I keep invoicing with Excel or Word?
Not if you are among those obliged. A spreadsheet does not generate hash-chained records or print the required QR, so in practice it is ruled out as an invoicing system.
Will I have to send all my invoices to the AEAT?
Only if your software works in VERI*FACTU mode, which submits the records automatically. The alternative sends nothing on a regular basis, in exchange for electronically signing every record and meeting reinforced requirements.
Is there an official AEAT certificate for software?
No. Compliance is proven through the producer's declaración responsable, published inside the software itself. Nobody can sell you software that is certified by the AEAT.
Does Verifactu apply in the Basque Country or Navarre?
No. Verifactu applies in Spain's common territory. The three Basque tax authorities use TicketBAI, and Navarre has its own regional framework.
Is there a free option?
Yes, the free AEAT invoicing application. It is compliant, but it only issues invoices: it does no accounting.
Is Verifactu the same as mandatory B2B e-invoicing?
No. Verifactu regulates invoicing software from 2027. Mandatory B2B e-invoicing under the Crea y Crece law is a separate obligation, with its own regulation and a calendar still pending a ministerial order.
How do I correct or cancel an invoice under Verifactu?

Under Verifactu nothing is ever deleted or rewritten: the chain of records only grows. If you cancel an invoice, the system adds a cancellation record chained to the rest; if you need to correct it, you issue a factura rectificativa (a corrective invoice, types R1 to R5 in the official format), which creates its own record. The original invoice and its record stay in place: the chain keeps the full history of what happened.

I invoice by hand, without a computer. Does Verifactu force me to buy software?

No. The regulation covers computerised invoicing systems: if you issue all your invoices manually (handwritten or on pre-printed pads), you are outside its scope and nobody forces you to digitalise, as the AEAT (the Spanish tax agency) confirms in its official FAQ. Be aware, though: the moment you use a program to issue invoices, even occasionally, that program has to comply.

What happens if my internet goes down while I am in VERI*FACTU mode?

You can keep invoicing as normal: the records are still generated locally and simply wait in a sending queue. Order HAC/1177/2024 treats a lost connection as a foreseen incident: pending records are sent as soon as possible, in order, with retries at least once an hour and a visible warning while anything remains unsent. It is not a breach: the rules themselves regulate this scenario.

Can I switch invoicing software in the middle of the year?

Yes. The chain of records exists per taxpayer and per software system: your old program closes its chain and the new one starts its own, with a first record flagged as such, so the chaining is never "lost" and nothing needs migrating. What you must do is keep the records generated by the old system for their retention period. Tools built for Verifactu, kontora among them, already generate these chained records with a hash fingerprint and QR code.

My tax domicile is in the Canary Islands, Ceuta or Melilla. Does Verifactu apply without VAT?

Yes. The AEAT confirms that taxpayers domiciled in the Canary Islands, Ceuta or Melilla fall within the regulation: where the rules refer to VAT, IGIC (the Canary Islands general indirect tax) or IPSI (the indirect tax of Ceuta and Melilla) applies instead, and the official record format explicitly covers both taxes, with dedicated regime keys for IGIC. The only territories outside are the Basque Country and Navarre, which have their own foral (regional) tax rules.

I am under recargo de equivalencia or another special regime. Am I affected?

A special regime does not exclude you by itself. Under recargo de equivalencia (the special VAT scheme for small retailers), and similarly under modules or the agricultural regime, you are generally not required to invoice your sales; but if you invoice voluntarily with software, or must invoice in specific cases (selling business assets, or when the customer is a business or a public body), that software has to comply with Verifactu. For those occasional invoices you can even use the AEAT's free application, and the record format already includes dedicated fields for the surcharge rate and amount.

I use a POS till and a separate invoicing program. How does that fit?

Without any problem: the rules require one single chain of records per taxpayer and per software system, so each tool keeps its own. You can issue till receipts from the POS and standard invoices from another program, as long as each system complies on its own (hash, chaining, QR). What you cannot do is let part of your invoicing come out of a non-adapted tool.

How long, and in what format, must the invoicing records be kept?

For the same period as your invoices: the limitation period of Spain's General Tax Law, four years as a general rule, which the invoicing regulation refers to. The official record format is XML and, in systems that do not send records to the AEAT, they must also be exportable to a readable external medium. If you work in VERI*FACTU mode, the AEAT already holds a copy of every record and your system is exempt from the reinforced retention regime, though the invoices themselves are kept as usual.

I sent a record with an error. How is it fixed?

Never by editing the original record: a new record is generated, with the same invoice identifiers and a correction flag, and chained at the end of the chain. If the AEAT had accepted the record "with errors", it remains registered but you must fix it; if it was rejected, the resubmission also carries a prior-rejection flag. This route only covers errors in the record itself: if the invoice is what is wrong, you need a corrective invoice or a cancellation.

My customer or my gestoría issues invoices on my behalf. Who has to comply?

The system covers this: the record states whether the invoice is materially issued by the recipient or by a third party (your gestoría, an accounting agency in Spain, for example), and self-billing follows the same scheme. The software used by whoever issues the invoice must comply, but delegating does not release you: you remain the responsible taxpayer. There is one specific exclusion for operations documented in invoices issued by the recipient or a third party where the VAT ledgers are kept through the SII (Spain's real-time VAT reporting system).

Can I invoice with foreign software such as Stripe or Shopify?

The rules do not care where the software comes from: what matters is that the system generates the chained records with hash and QR, and that its producer issues the declaración responsable (a formal self-declaration of compliance). Many international platforms do not do this out of the box for the Spanish market, so ask the provider explicitly before relying on them. You can always take payments or sell through those platforms and issue the actual invoice from an adapted program.

My company is already in the SII. Do I also have to apply Verifactu?

No: the two regimes are mutually exclusive. If you keep your VAT ledgers through the SII, Spain's real-time VAT reporting system, you are outside the Verifactu regulation, because the AEAT already receives your invoicing data that way. It works in both directions: if you later join the SII, your software must stop printing the QR code on invoices.

Is it worth adopting Verifactu early, during 2026?

You can: the AEAT's submission services have been live since 23 April 2025 and accept voluntary sendings. Under the AEAT's clarifications after the latest postponement, sending records in 2025 or 2026 does not lock you in: the stay-until-year-end rule operates once the obligation actually applies from 2027. Going early lets you road-test your system with real data ahead of the deadlines (1 January 2027 for companies subject to corporate income tax, 1 July 2027 for everyone else, including autónomos, the self-employed in Spain); just remember that whatever you send are records of real invoices, not test data.

Does Verifactu also affect invoices and receipts issued to private individuals?

Yes. The regulation covers everything you issue with an invoicing system, including facturas simplificadas (simplified invoices, the typical till receipts) handed to final consumers. Each one generates its record and carries its QR code, and any individual can scan it to check the invoice against the AEAT's records; that check is a verification, not a complaint.

Keep reading

Verifactu for autónomos: your July 2027 deadline explained

The AEAT free invoicing app: when it is enough and when it is not

Spanish tax calendar 2026-2027 for autónomos and SL companies

Rather have this calculated for you?

kontora generates your tax forms box by box, tells you how much to set aside and reminds you before every deadline.

Pricing · Calculators