- Documentation
- Compliance & security
GoBD, GDPR & security
How Easy Invoices stores invoices immutably and traceably, protects personal data and keeps your documents secure.
On this page
GoBD Compliance
Easy Invoices implements what the GoBD (Principles for the Proper Management and Storage of Books, Records, and Documents in Electronic Form) require of invoicing software: immutability, traceability and retention. Whether your bookkeeping as a whole is GoBD-compliant also depends on processes outside the app – your procedural documentation and the documents from other systems. Clarify that with your tax adviser.
- Audit-proof retention of all invoices for 10 years – longer than the 8 years § 147 AO requires for vouchers
- Immutable storage – invoices cannot be modified after creation
- Gap-free sequential numbering with atomic counters
- Complete audit trail: Every step of invoice creation is logged
- Calculation audit logs document all amounts and tax rates
- For a tax audit: all data immediately available and exportable as a Z3 data carrier
As long as the app is installed and an active subscription exists, all invoices are stored in an audit-proof manner. For information on data retention after cancellation, visit our data retention page.
GDPR & Privacy
Easy Invoices was built from the ground up for GDPR (General Data Protection Regulation) compliance. Your data and your customers' data are protected to the current state of the art.
- Invoice data and PDFs are stored exclusively in Germany (Hetzner Online GmbH)
- Servers in ISO 27001-certified data centres in Germany
- Data export: All invoice data exportable as ZIP at any time
- Data Processing Agreement (DPA) included in setup process
- Encrypted transmission of all data via HTTPS/TLS
- The sub-processors we use and any third-country access are listed in the privacy policy
Security
Protection for your sensitive invoice data – from storage to transmission.
- Hosting in ISO 27001-certified data centres in Germany
- PDF encryption with shop-specific keys
- Encrypted storage of SMTP credentials
- Password-protected ZIP exports for secure transmission
- HTTPS/TLS encrypted communication
- Known vulnerabilities in the components we use are continuously monitored and closed
Still have questions?
Our support team helps you right in the app or by email.