Verifactu impact on touchless AP

ininvoice: Verifactu is the invoicing records system regulated by Spanish Royal Decree 1007/2023: every issued invoice generates a signed record with a chained hash and, in verifiable mode, is transmitted to the Spanish tax agency in real time. For accounts payable the game changes. If your suppliers issue Verifactu, the invoices you receive are already on file at the tax agency with structured data. Any manual re-keying in your AP introduces divergences between what AEAT has and what your accounting reflects. Touchless stops being efficiency: it becomes compliance hygiene.

For the last two years, accounting software vendors and many tax advisors have talked about Verifactu as an issuer project: the ERP that signs, the POS that generates the QR, the invoicing system that adapts. True, but it's only half the picture.

The other half is carried by the recipient. And nobody is telling that part well. If your finance department handles received invoices, Verifactu affects you directly, even if your own invoicing software already complies.

This article is for Finance Directors, controllers and admin leads who live on the AP side. The thesis is simple: when AEAT receives your suppliers' data in real time, any manual re-keying in your AP creates liability. Touchless AP stops being an efficiency project. It becomes a regulatory necessity.

What Verifactu is

Verifactu is the common name for the Computerised Invoicing Systems (SIF) regulated by Royal Decree 1007/2023, of December 5. It requires the software used to issue invoices to generate, for every invoice, a structured record signed and chained by hash with the previous one.

Every invoice also carries a visible QR code that lets AEAT and the recipient verify the integrity of the data. The official page is on the AEAT electronic site.

The system has two modes:

Verifiable mode (Verifactu). The software sends the invoicing record to AEAT in real time as soon as it's issued. The invoice reaches the customer and, simultaneously, is already on the tax agency's servers.
Non-verifiable mode. The software complies with technical requirements (signed record, chained hash, QR, retention) but doesn't transmit to AEAT. The obligation to keep and exhibit remains with the issuer.

Verifiable mode is voluntary for the issuer. But once activated, the tax agency receives data without intermediaries and without delay. When we talk about AP impact, this is the mode that matters.

What Verifactu is NOT

Three confusions come up repeatedly in conversations with Finance Directors.

1. Verifactu is not the same as SII. The Immediate VAT Information Supply is a VAT obligation for companies billing more than EUR 6M, REDEME, VAT groups and large companies. SII sends VAT books in short windows. Verifactu works at the individual invoice level, affects a much wider universe (companies and self-employed not on SII) and stems from the anti-fraud framework of RD 1007/2023. Companies on SII are outside the Verifactu scope because SII already covers near-real-time reporting.

2. Verifactu is not the mandatory B2B e-invoicing. That rule comes from Law 18/2022 (Crea y Crece) and requires structured e-invoicing between companies and professionals. It's a different rule, with its own calendar and separate regulatory development. Verifactu regulates how invoicing records are generated; Crea y Crece regulates format and transmission between companies. They coexist, but are not interchangeable. [VERIFY WITH TAX ADVISOR].

3. Verifactu doesn't require transmission to AEAT. Compliance is on the software (signed and chained records). Real-time submission in verifiable mode is an issuer choice. The thing is, that choice is designed to be attractive (simplification of formal obligations, presumption of compliance), so many issuers will activate it.

Timeline 2026-2027

The Verifactu calendar has been amended by RD 254/2025, adjusting deadlines compared to the original RD 1007/2023. Application is staggered by obligor type.

Milestone	Reference date	Status
Software and developers adapt SIF	January 1, 2026	[VERIFY CURRENT TIMELINE WITH AEAT]
Obligated companies (corporate income tax)	July 1, 2026	[VERIFY CURRENT TIMELINE WITH AEAT]
Self-employed and professionals (IRPF, not SII)	January 1, 2027	[VERIFY CURRENT TIMELINE WITH AEAT]

Deadlines may change by later regulatory developments. Always confirm the date applicable to your company with your tax advisor and the current information on the AEAT site. [VERIFY WITH TAX ADVISOR].

Why Verifactu impacts AP (even if your billing software already complies)

The key argument is this. If your supplier operates in verifiable mode, when you receive their PDF invoice the tax agency already has the same record on file: amounts, taxable base, VAT rate, hash, date and issuer. The record you book in your accounting must match that record.

Until today, manual AP has lived comfortably in the asymmetry: the supplier declares when they declare, you book when you book, and reconciliation comes late or doesn't come. Verifactu closes that asymmetry on the issuer side.

Consequences for AP:

Any manual re-keying introduces measurable noise. A mistyped digit, a confused VAT rate, a rounded total: it's no longer an internal error; it's a divergence from data AEAT received from the issuer.
The received-invoices book must be cross-checkable with Verifactu on any audit. If AEAT crosses amounts and tax IDs between Verifactu and your form 303 / 390, the differences appear on their own.
Capture lead time drops. It's not viable for an invoice to take two weeks to enter your accounting if AEAT already had it from day one.
The QR is a shortcut. Verifying the QR code on the received invoice is a direct way to validate that the data you're ingesting matches the data signed by the issuer.

This doesn't make Verifactu compliance a new recipient obligation. It turns manual AP into a process with latent liability. [VERIFY WITH TAX ADVISOR].

IDP vs classic OCR on Verifactu invoices

Classic OCR read pixels. It pulled a number from a field, spat it out, and someone reviewed. Worked for years at 95-98% rates on standard invoices. But 2-5% is a lot when the data on the other side is signed by AEAT.

Verifactu invoices arrive with two vectors of structured data that classic OCR doesn't use well:

The QR code contains a URL with parameters (issuer tax ID, invoice number, total amount, date). Decoding it is reading signed data, not interpreting pixels.
If the supplier also issues FacturaE or structured XML attached to the PDF, that data is official. The PDF is the wrapper.

Intelligent Document Processing (IDP) closes the gap: it reads QR, parses XML/FacturaE, validates hash when possible, extracts PDF data as plan B and reconciles the three vectors before accepting the invoice. This is what differentiates a modern AP system from a last-decade OCR.

The touchless AP flow under Verifactu

The AP flow changes less in structure than in error tolerance. A Verifactu-adapted touchless flow looks like this:

Intake. The invoice enters from Gmail, Outlook or a dedicated mailbox. PDF, XML, FacturaE and any signed attachment are captured.
QR reading. If the Verifactu QR is present, it is decoded and signed data are obtained (tax ID, number, amount, date).
Structured extraction. XML/FacturaE is parsed if available; otherwise IDP on the PDF.
Vector reconciliation. QR data, XML data and PDF data must match. Any divergence is flagged as exception.
Line-by-line three-way matching. The invoice is cross-checked with its PO and delivery note at the line level, with configurable tolerance (e.g. 2% / EUR 1.50 OR per line).
Approval and recording. If everything squares, the invoice enters the received-invoices book with clean data and audit trail.
Export to ERP. The entry is exported to Holded, Sage or A3 with verified amounts.

The underlying principle: humans only touch exceptions. And exceptions are now two: divergences between Verifactu vectors and three-way matching discrepancies.

What does this look like on your real invoices?

ininvoice ingests from Gmail or Outlook, reads QR, parses FacturaE/XML, cross-checks line by line with PO and delivery note and exports to your accounting. Get started.

Risks of not adapting AP

The argument "I'll do it when an audit comes" has a problem: audits cross data. A mistyped tax ID on a received invoice leaves a gap automatically detectable when the tax agency crosses Verifactu from suppliers with your form 303 or 347. Companies on SII have been living this level of cross-check for years. What changes is the scope expands.

Specific risks:

Divergences between issuer Verifactu and your received-invoices book. Amounts that don't match, shifted dates, mistyped tax IDs.
Re-keying as exposure factor. Every minute a human types invoice data is a minute introducing error.
Long capture lead times. If it takes weeks to post and AEAT already has the invoice, the gaps accumulate.
VAT deduction losses. A poorly captured invoice may fall outside the correct deduction period.
Penalties and demands. The penalty regime of RD 1007/2023 reaches the recipient in aspects like retention and recording. [VERIFY WITH TAX ADVISOR].

Finance Director checklist for 2026

Confirm with tax advisor when Verifactu applies to you as obligated issuer and whether any of your large suppliers will issue in verifiable mode before you.
Audit your current AP flow: how many invoices go through manual keying, average time to book and historical error rate.
Identify how many of your main suppliers will issue with Verifactu QR in 2026.
Validate that your AP system can read QR and parse FacturaE/XML, not just OCR on PDF.
Define the exception model: which divergences stop the invoice and what tolerance is accepted.
Document the three-way matching cross-check (invoice, PO, delivery note) line by line, with tolerances in percentage and absolute euros.
Review the records retention plan (format, periods, accessibility on audit).
Agree with the ERP (Holded, Sage, A3, etc.) how clean data are exported and how cross-references are kept.
Train the admin team: the role shifts from typing to resolving exceptions.
Ask your advisor or auditor for a mock cross-audit Verifactu vs received book vs form 303 vs form 347 over a real quarter. [VERIFY WITH TAX ADVISOR].

Is your AP ready for issuer-side Verifactu?

If the answer is "we'll look at it in autumn", you're already late. Get started and measure how many would pass touchless today.

How ininvoice adapts to Verifactu in AP

ininvoice is pure AP automation software. It doesn't issue invoices. It is not an ERP. What it does, on the AP side, is exactly what a touchless flow under Verifactu needs:

Automated intake from Gmail or Outlook in read-only mode. Invoices arrive without anyone forwarding.
PDF, FacturaE and XML reading, structured. Official issuer data take precedence over pixel-by-pixel extraction.
Line-by-line three-way matching with configurable tolerance (2% or EUR 1.50 absolute per line, OR-mode).
Duplicate detection crossing issuer, number, amount and date.
Export to Holded, Sage and A3 with verified data and audit trail.

If you want to see the full flow, it is documented in three-way matching and touchless accounts payable.

Frequently asked questions

When does Verifactu take effect for my company?: Depends on your tax regime. The base reference is RD 1007/2023, amended by RD 254/2025. Companies apply before self-employed. SII companies are outside the Verifactu scope. [VERIFY CURRENT TIMELINE WITH AEAT] and your tax advisor.
Does Verifactu require receiving e-invoices?: No. Verifactu regulates how the issuer's invoicing records are generated. The obligation to issue e-invoices between companies comes from Law 18/2022 (Crea y Crece), which is a different rule with its own calendar.
Is it the same as SII?: No. SII is a VAT obligation for large companies, REDEME and VAT groups, who send VAT books in short windows. Verifactu works at the individual invoice level, reaches a wider universe (non-SII companies and self-employed) and stems from a different anti-fraud framework. Those on SII are not on Verifactu.
Do I need to change my AP system for Verifactu?: Not by direct obligation, but yes due to risk exposure. If your suppliers issue in verifiable mode, AEAT receives their data in real time and any manual re-keying in your AP introduces detectable divergences. Touchless AP shifts from "efficiency" to "compliance hygiene". [VERIFY WITH TAX ADVISOR].
What about FacturaE?: FacturaE is a standardized signed XML format used especially when invoicing public administrations. It is complementary to Verifactu: an invoice can be FacturaE and, if the issuer operates in verifiable mode, also generate a Verifactu record. In AP, parsing FacturaE delivers cleaner data than any OCR.
Are Verifactu and Crea y Crece the same?: No. Crea y Crece (Law 18/2022) introduces the obligation of e-invoicing between companies and professionals. Verifactu (RD 1007/2023) regulates how invoicing records are generated in any SIF software. Different objective, different development and different deadlines. [VERIFY WITH TAX ADVISOR].
What do I do if a supplier already issues Verifactu and I don't?: You receive invoices with QR and, possibly, attached structured XML. Minimum: your AP must be able to read both. Recommended: take the opportunity to close manual re-keying gaps before the cascade reaches your own obligation as issuer. Receiving Verifactu requires no regulatory change in you, but gives you clean data for free.
Does classic OCR work for Verifactu invoices?: It works but loses value. Verifactu invoices arrive with QR and, often, attached XML/FacturaE. Staying on pixel-by-pixel OCR when there is signed structured data is wasting the cleanest source. IDP combining QR, XML and OCR is the new standard.

Three takeaways

Verifactu is a change in how Spain issues. But its most practical effect is for the recipient.

If your supplier issues in verifiable mode, AEAT already has the data. Any manual re-keying in your AP is risk, not just inefficiency.
Touchless AP stops being an optional productivity project. It becomes compliance hygiene.
The modern stack reads QR, parses FacturaE/XML, does line-by-line three-way matching and exports to your accounting. Classic OCR alone doesn't cut it.

Verifactu and accounts payable: why it forces a rethink of invoice automation