Requirements of a billing system compliant with the anti-fraud regulation

Requirements of a billing system compliant with the anti-fraud regulation

The regulation implementing Spain's Anti-Fraud Law sets out the features every Computerised Billing System (SIF) must have to be compliant. The goal is to eliminate "dual-use" software that enabled hidden sales. Here are the essential requirements.

1. Integrity and unalterability

Once generated, a billing record cannot be modified or deleted without a trace. Any correction requires new records (amendment or cancellation) chained to the previous ones.

2. Retention

Records must be retained for the legal periods, accessible and protected against loss or tampering.

3. Traceability and chaining

Each record is linked to the previous one through a hash, forming a chain that reveals any intermediate alteration or deletion.

4. Accessibility and legibility

Records must be exportable and readable in a standard format when the authority requests them, without depending on closed proprietary software.

5. Event log

In non-Verifactu systems, the software must keep an event log documenting relevant occurrences (start-ups, exports, incidents), reinforcing traceability.

6. Hash or electronic signature

Each record incorporates a hash and, where applicable, an electronic signature guaranteeing its authenticity and integrity.

7. Manufacturer's responsible declaration

The software producer must issue a responsible declaration that the system complies with the regulation. Using software without this guarantee exposes the user to penalties.

Conclusion

A compliant billing system is not optional: it is a legal obligation that shields the business from penalties. Invoseal meets each of these requirements —integrity, hash chaining, retention, export and responsible declaration— so you can invoice with complete peace of mind.