Verifactu 2027: Requirements and Who Is Exempt

Verifactu 2027: Requirements and Who Is Exempt

· by Panayot Dimkov

Verifactu is not a program to install or a form to file. It is a set of requirements that your invoicing software has to meet so the Spanish tax authority can accept the records it produces. The distinction matters, because it determines who you need to call: not your tax adviser, but your software vendor.

Who it applies to: companies and sole traders in Spain's common tax territory who invoice with software, except those already on the SII. From when, after the postponement in Royal Decree-Law 15/2025 (Official State Gazette, 3 December 2025): 1 January 2027 for Corporate Income Tax payers and 1 July 2027 for all other taxpayers concerned.

This is the rule's second postponement — the first had already moved the dates to 2026 — and it has created a dangerous reflex: waiting for the next one. This article goes into what exactly is required, who falls outside the scope — more companies than people think — and what to ask your vendor. If what you need is the difference between Verifactu and mandatory e-invoicing, we cover that in a separate article.

1Who is outside Verifactu's scope (check this first)

Before spending a single euro it is worth checking whether it applies to you. There are four situations in which the regulation does not apply, and the first two are more common than they look.

📡
You are on the SII
Anyone keeping VAT ledgers through the Immediate Supply of Information system falls outside the invoicing-systems regulation. The two scopes are mutually exclusive: if you already report through the SII, Verifactu does not apply to you. The SII is mandatory for, among others, businesses with a turnover above 6 million euros, VAT groups and those registered for monthly VAT refunds (REDEME), and anyone not required to use it can opt in voluntarily.
🗺️
You are taxed under a regional regime
The Basque Country and Navarre have their own rules — TicketBAI, with Batuz in Biscay, and the Navarrese provisions. Royal Decree 1007/2023 applies to common territory and does not reach them.
✍️
You use no computer system at all
If you invoice exclusively by hand, with no program whatsoever, the regulation has nothing to act on. It is a rare situation with little future, but it exists.
📋
You are not required to invoice
Some operations are exempt from the obligation to issue an invoice. If your whole activity falls there, you do not need a compliant system.
Checking this costs one call to your adviser and can save you an entire project. But mind the intermediate case: being on the SII for VAT does not exempt you from the B2B electronic invoice, which is a different rule altogether.

2The two modes: send or store

The regulation allows two ways to comply, and the choice is not trivial: it changes what the software must do and what you must keep.

VERI*FACTU modeNon-VERI*FACTU mode
How it works The system sends every invoicing record to the tax authority at the moment of issue Records stay in your system, with no automatic transmission
What it demands on top Connectivity and a stable transmission channel Electronic signature of the records and an event log for the system itself
Retention Leans on what has already been sent to the authority Falls entirely on you, and must be available on request
Operational load Lower Higher

For most small and mid-sized companies the sending mode is the sensible option: it shifts much of the retention and event-logging burden to the authority's side. The non-sending mode makes sense when there are connectivity, volume or internal-policy reasons not to transmit in real time, but it demands more technical discipline.

3Verifactu requirements for your software

These are the requirements the program must meet, whichever mode you choose.

01
One record per invoice
Every invoice issued generates its invoicing record at the moment of issue, not afterwards and not in an overnight batch.
02
Chaining
Each record carries the fingerprint of the previous one. Deleting or inserting one breaks the chain and leaves a trace: that is what makes the whole sequence verifiable.
03
Fingerprint or hash
A cryptographic summary of the record's content. If someone changes an amount later, the fingerprint stops matching.
04
No alteration
Records are neither modified nor deleted. Corrections go through credit notes, which generate their own record.
05
QR code on the invoice
Carrying the data that lets the recipient check it with, or report it to, the tax authority: issuer's tax ID, number and series, date and total amount.
06
Declaration of compliance
The manufacturer must formally declare that the product complies. That is the document to request and keep.

In the sending mode, invoices also carry a statement that they can be verified at the tax authority's electronic office. That is the part the customer sees and the one that usually prompts the first question.

4What to ask your vendor

The useful conversation takes ten minutes and consists of these questions. If any of them goes unanswered, that is where the risk sits.

  • Have you issued the declaration of compliance? "We're working on it" does not count. Ask for the document.
  • Which mode will you work in? With or without transmission to the authority, and whether the customer can choose.
  • Is it included in my current licence or is it a separate module? This is where the costs nobody budgeted for show up.
  • What happens to my history? How earlier invoices coexist with the new chain of records.
  • And the invoices I issue from elsewhere? The sales rep's spreadsheet, the shop till, the ecommerce platform. All of them are invoicing systems.
  • When will it be available and what do you need from me? So it can sit in a real calendar rather than in the final weeks before your deadline.
The fifth question is the one that derails most projects. Many companies believe they have one invoicing system and discover they have three: the ERP, a spreadsheet someone builds every month, and a terminal at a branch office.

5What non-compliance costs

Article 201 bis of the Spanish General Tax Act provides for a fixed fine of 50,000 euros per financial year for holding or using invoicing systems that do not comply, or that have been altered. And it accumulates: each year the situation persists counts separately.

For those who produce or market the software the amounts are higher: 150,000 euros per financial year for each type of non-compliant system, and 1,000 euros for each system sold without the required certification, which the regulation implements as a declaration of compliance. That is why serious vendors have been moving for a while: the risk is theirs too.

6How to make it more than an expense

Adapting to Verifactu on its own does not save a single minute of work. It is pure cost. What does change is the context: to comply you are going to review how every invoice is issued, from where and with what data. That inventory is exactly the starting point of any automation project.

01
Consolidate the issuing points
If you discover three systems issuing invoices, reducing them to one solves compliance and removes the manual reconciliation between them along the way.
02
Automate what surrounds the invoice
Sending it to the customer, filing it, the payment reminder and chasing overdue accounts are not covered by the rule, and they are the part that eats hours.
03
Exploit the traceability
A system that already records what happened to each document gives you, almost for free, the data to measure cycle times and bottlenecks.
04
Tidy up before connecting
If the process is a mess, automating it multiplies the mess. The review Verifactu demands is a good excuse to fix that first.

The official reference, with the technical specifications and the updated FAQ, is the electronic office of the Spanish tax authority, the Agencia Tributaria. This article is informative and does not replace tax advice.

RegulationInvoicingAutomation

Frequently asked questions

When exactly does Verifactu come into force?

Royal Decree-Law 15/2025 set 1 January 2027 for Corporate Income Tax payers and 1 July 2027 for all other taxpayers concerned: self-employed under personal income tax, non-residents with a permanent establishment and entities under income attribution. It is the rule's second postponement.

Do I have to choose between the two modes?

Yes, and it deserves thought. The sending mode transmits every record to the tax authority at the moment of issue and shifts much of the burden there. The non-sending mode keeps records in your system, but requires an electronic signature and an event log, and retention falls on you. For most small and mid-sized companies the first is simpler.

I am on the SII — does Verifactu affect me?

No. Anyone keeping VAT ledgers through the Immediate Supply of Information falls outside the invoicing-systems regulation: the two scopes are mutually exclusive. Note that this does not exempt you from the future business-to-business electronic invoice, which is a separate obligation.

What if I invoice from the Basque Country or Navarre?

Royal Decree 1007/2023 applies to common territory. The Basque Country and Navarre have their own regional rules, with TicketBAI and Batuz in the Basque case. If you are taxed under a regional regime, your obligation is the one set by that authority, not Verifactu.

Can I keep invoicing from a spreadsheet?

In practice, no. A spreadsheet does not chain records, does not generate fingerprints and does not prevent an already issued invoice from being modified, and nobody is going to sign a declaration of compliance for it. If that is your case, changing tools is the first step and it is worth tackling now, not in the final weeks before your deadline.

In short

Verifactu is a software requirement with a date in the official gazette: January 2027 for companies, July 2027 for everyone else. Before budgeting anything it is worth checking whether it applies, because the SII and the regional tax authorities leave quite a few companies outside. And if it does apply, the decisive conversation is with your software vendor, not your tax adviser.

The work of inventorying where your invoices come out of has to be done anyway. Doing it with compliance as the only goal leaves out everything around the invoice — sending, filing, collection, follow-up — which is exactly where the hours are. That is what we address in AI process automation.

Do you know how many places issue your invoices?

It is the question that catches almost everyone out. We review the issuing points with you, the full circuit and what can be automated while you adapt.

Request a process analysis