VeriFactu is the common term for a Spanish regulation requiring businesses to use certified Computerized Billing Systems, or Sistemas Informáticos de Facturación (SIF) in Spanish, when issuing invoices. This regulation, established by Royal Decree 1007/2023, sets specific technical standards for SIF, including secure and accurate record-keeping of invoices to ensure compliance and reduce tax fraud.

The VeriFactu regulation impacts two main groups:

1. Taxpayers with a VAT Establishment in Spain: Businesses or self-employed professionals, resident or non-resident, who are subject to VAT in Spain must use a compliant SIF (Sistema Informático de Facturación) to issue invoices. Exemptions include:
   • Taxpayers who report invoices through the Suministro Inmediato de Información (SII) system, either mandatorily or voluntarily. This system is required for businesses with annual revenues over six million euros.
   • Taxpayers in the Euskadi (Vizcaya, Guipúzcoa, and Álava) or Navarra regions, which have separate tax authorities. Note that Euskadi has a similar regulation called TicketBAI.
   • Taxpayers exempt from invoicing requirements under the Regulation of Invoicing Obligations (Royal Decree 1619/2012), including sectors such as agriculture, livestock, and fishing.
2. Producers of Computerized Invoicing Systems (SIF): Companies that develop or sell computerized invoicing systems for taxpayers are responsible for ensuring their systems meet VeriFactu standards.

Taxpayers must use a certified Computerized Invoicing System (SIF) starting in July 2025.

A Computerized Invoicing System, or Sistemas Informáticos de Facturación (SIF), is any hardware or software used by Spanish taxpayers to issue invoices, as defined by regulation. These systems must comply with technical standards outlined in HAC/1177/2024 to ensure the integrity, traceability, and auditability of invoices.

A Computerized Invoicing System (SIF) must:

• Ensure the integrity, accessibility, readability, traceability, and immutability of invoice records by generating an electronic record for each issued invoice and linking subsequent records via a hash.
• Print a QR code on invoices in accordance with specified regulations.
• Be capable of electronically reporting invoices to the Spanish Tax Authority.
• Record certain operational events unless operating in VeriFactu mode (live e-reporting of invoices), which has specific exceptions.
• Comply with data protection legislation when handling personal data by separating access to tax information from other confidential information, allowing the Tax Authority to access the necessary data.

The VeriFactu regulation defines two types of computerized invoicing systems (SIF): those that report invoice information in real-time, known as "VeriFactu systems" or "verifiable invoice systems," and those that do not, referred to as "non-VeriFactu systems."

While both VeriFactu and non-VeriFactu systems must meet common requirements—such as linking invoice records via a hash, printing QR codes on invoices, and storing specific data—non-VeriFactu systems have additional requirements such as electronically signing each invoice record and maintaining a log of system events.

On the manufacturer's side, producing or selling non-compliant invoicing systems will result in a fine of €150,000 per fiscal year for each type of non-compliant system, plus €1,000 for each system sold. On the taxpayer's side, possessing invoicing systems that do not meet legal standards or have been altered from their certified state will incur a fine of €50,000 per fiscal year.