VeriFactu 2026: Complete Guide for Spanish SMEs
What is VeriFactu?
VeriFactu is Spain’s new electronic invoicing system mandated by the Spanish Tax Agency (AEAT) through Royal Decree 1007/2023. Its goal is to ensure the integrity, traceability, and immutability of all invoices issued by businesses and freelancers in Spain.
In practical terms, VeriFactu requires your invoicing software to generate a verifiable record for every invoice. Each record includes a chained cryptographic hash (SHA-256) that ensures no invoice can be modified or deleted without leaving a trace.
Timeline and Deadlines
VeriFactu implementation follows this timeline:
- July 1, 2025: software developers must have their systems adapted.
- January 1, 2026: corporations (S.L., S.A.) are required to use VeriFactu-compliant software.
- July 1, 2026: freelancers and other entities must comply with the regulation.
If your company is an S.L. or S.A., you should already be using compliant software. If you’re a freelancer, you have until July 2026, but don’t wait until the last minute.
Key Technical Requirements
VeriFactu demands that invoicing software meets several technical requirements:
1. Record Immutability
Every issued invoice generates a record that cannot be modified or deleted. If you need to correct an invoice, you must issue a credit note — never edit or delete the original.
2. Hash Chain (SHA-256)
Each invoice record includes a SHA-256 hash chained to the previous record, creating a verifiable sequence. If someone attempted to alter an intermediate record, the entire subsequent chain would be invalidated.
3. Submission to AEAT
The system must be capable of submitting invoicing records to the AEAT in real-time or on demand. This is done through SOAP web services with digital certificates and mutual TLS.
4. QR Verification Code
Every invoice must include a QR code allowing any recipient to verify the invoice’s authenticity directly with the AEAT.
5. Responsible Declaration
The software manufacturer must issue a responsible declaration guaranteeing that the system meets all regulatory requirements.
Penalties for Non-Compliance
Penalties for failing to comply with VeriFactu are significant:
- Up to €50,000 for using non-compliant software.
- Up to €150,000 per fiscal year for manufacturers of non-compliant software.
- Additional penalties for each invoice that fails to meet integrity and traceability requirements.
This isn’t a minor regulation. The AEAT has the capability to verify compliance automatically, making detection highly likely.
How Odiverse Complies with VeriFactu
Odiverse was designed from its architecture to comply with VeriFactu. It’s not a patch added after the fact — it’s a fundamental part of the system:
Native Immutability
Odiverse uses event sourcing for accounting. This means every action is recorded as an immutable event. Issued invoices are never modified: if there’s an error, a credit note is issued with its own record and journal entry.
SHA-256 Hash Chain
Every issued invoice automatically generates a VeriFactu record with its chained SHA-256 hash. The chain is maintained per company with optimistic locking to prevent concurrency issues.
AEAT Submission
Odiverse generates XML files conforming to the AEAT’s XSD schema and submits them through the SOAP web service with mutual TLS. Both pre-production (sandbox) and production environments are supported.
Verification QR Code
Every PDF invoice generated by Odiverse automatically includes the verification QR code with the AEAT URL, allowing your clients and suppliers to verify authenticity.
Zero Configuration
You don’t need to do anything special. Odiverse handles VeriFactu compliance transparently. Issue your invoices as always — by talking to Odi — and the system takes care of the rest.
Steps to Get Compliant
If you’re not yet using VeriFactu-compliant software, here’s what we recommend:
- Evaluate your current software: check if your invoicing tool already complies with VeriFactu. If it doesn’t, you need to switch.
- Migrate your data: Odiverse supports importing contacts, invoices, and chart of accounts from standard formats (CSV, Excel).
- Test the system: try Odiverse for free with demo data to familiarize yourself with the platform.
- Start invoicing: once your data is migrated, start issuing invoices with Odiverse. VeriFactu works automatically.
Conclusion
VeriFactu is not optional. It’s a regulation that affects every business and freelancer in Spain. The good news is that compliance doesn’t have to be complicated. With software like Odiverse, designed from the ground up for regulatory compliance, you can focus on your business while technology handles the rest.
Have questions about VeriFactu? Check our security and compliance section or request a personalized demo to see how Odiverse can help you.