Stage 3 · Controlled Closed Beta Pre-rendered SSR page active with robots: noindex, nofollow — hidden from public search crawlers during Design Partner review.
Open Interactive Regulatory Cloud →
← Regulatory Cloud | 🇪🇸 Flagship Showcase Brief #1 · Spain Veri*factu vs. Crea y Crece (3-Page A4 Dossier)
Unlock Full Interactive Spain Scoper (14d Trial) →
Delta Omicron Retail · Primary-Source Architecture Brief · Page 1 of 3

🇪🇸 Spain 2027–2028 POS Architecture Brief: Veri*factu (RD 1007/2023) vs. Crea y Crece (Law 18/2022)

Resolving the #1 source of architectural confusion for Retail IT Directors and POS Product Managers operating across Mainland Spain and the Basque Country (TicketBAI).

Doc ID: DO-BRIEF-ES-2026.10
4-Eyes Audit: PASSED
Jurisdiction: Spain (AEAT)

1. Dual Statutory Date Tracking: Binding Gazette Law vs. Proposed Ministerial Delays

Mandate Stream Binding Statutory Date (BOE Today) Proposed / Ministerial Target Legislative Status Statutory Penalty Exposure
Veri*factu POS & Billing Systems
RD 1007/2023 + RD 254/2025 + Order HAC/1177/2024
01 Jan 2027 (Corporations / S.A. / S.L.)
01 Jul 2027 (Self-Employed)
ISVs: 29 Jul 2025 conformity
No formal postponement in BOE
Enacted via RD 254/2025
ENACTED_LAW EUR 50,000 per fiscal year (Art. 201.bis LGT) + EUR 150,000/yr for non-compliant ISVs
Law 18/2022 ("Crea y Crece")
Mandatory B2B Electronic Invoicing
12 Months (Turnover > EUR 8M)
24 Months (All other B2B)
Counted from Royal Decree publication in BOE
Q3 2027 (Phase 1) / Q3 2028 (Phase 2)
Pending final Technical Royal Decree publication
TECHNICAL_SPEC_PENDING Up to EUR 10,000 administrative fine + commercial late-payment bars
Anti-Fraud Cash Ceiling (AML)
Law 11/2021 Art. 18
In Force (Since 11 Jul 2021)
EUR 1,000 Resident / EUR 10,000 Non-Resident
Permanent Statutory Ceiling ENACTED_LAW 25% of total cash amount paid in breach
Why Retail IT Teams Confuse Veri*factu and Crea y Crece

Veri*factu (RD 1007/2023) governs how your POS software generates, hashes, signs, and prints B2C simplified receipts (facturas simplificadas) and full invoices at the checkout lane. Crea y Crece (Law 18/2022) governs structured B2B invoice exchange and payment-status reporting between corporate entities. A retail chain operating physical stores in Spain must comply with both streams on distinct timelines.

Territorial Carve-Out: Mainland AEAT vs. Basque TicketBAI

Veri*factu applies across Mainland Spain and the Balearic Islands (AEAT territory). Stores in Álava, Gipuzkoa, and Bizkaia remain governed by the Foral Treasuries' TicketBAI / Batuz XML+TBAI-QR mandate. Multi-region Spanish retailers must configure store-level tax jurisdiction routing in their POS kernel.

Prepared by Delta Omicron Retail (Basel, Switzerland) · Primary-Source Regulatory Reference https://do-retailcomply.com/briefs/spain-verifactu-pos-brief.html
Page 2 of 3 · Store Systems & POS Kernel Specification

2. Concrete POS Architectural Impact Matrix (Order HAC/1177/2024)

CLOUD_SIGNING_API DYNAMIC_QR_SCHEMA CASH_TENDER_BLOCK
A. SHA-256 Cryptographic Record Chaining (Registro de Facturación)

Every POS sale or credit note must generate an immutable XML billing record (RegistroAlta or RegistroAnulacion) containing a SHA-256 fingerprint calculated from the issuer NIF, invoice series/number, issue date, total amount, and the exact hash of the immediately preceding record on that POS terminal or central signing server.

B. Mandatory Thermal Receipt QR Code (30×30mm to 40×40mm)

All printed B2C simplified invoices (facturas simplificadas) and digital receipts must render the official AEAT verification QR code (30×30 mm minimum, 40×40 mm maximum) above or below the legend "QR tributario: / VERI*FACTU", encoding the AEAT validation URL, NIF, series, date, and total.

C. Veri*factu (Real-Time AEAT Remission) vs. Non-Veri*factu Mode

RD 1007/2023 permits two operating modes: (1) Veri*factu Mode (recommended for retail): real-time synchronous/asynchronous SOAP/REST submission of XML records to AEAT, exempting the POS from local XAdES signature storage overheads; or (2) Non-Veri*factu Mode: local qualified electronic signature on every record + strict immutable event logging (RegistroEvento) subject to direct AEAT audit extraction.

D. B2B Invoice Issuance at Checkout (Crea y Crece Interop)

When a corporate buyer requests a full VAT invoice at a retail POS lane (Factura Completa replacing a simplified ticket), the POS must capture the buyer's NIF and route the structured invoice (Facturae 3.2.2 / UBL) through the Public E-Invoicing Solution or accredited B2B platform once Law 18/2022 enters into force.

3. Verified Middleware & Official Technical Documentation Links

Official AEAT Veri*factu Hub
XSD schemas, WSDL endpoints & Order HAC/1177/2024 specs
sede.agenciatributaria.gob.es ↗
fiskaly SIGN ES (Veri*factu + TicketBAI)
Unified REST API for Mainland Veri*factu & Basque TicketBAI
developer.fiskaly.com ↗
BOE Official Gazette Texts
RD 1007/2023, RD 254/2025 & Law 18/2022 full statutory texts
www.boe.es ↗
Prepared by Delta Omicron Retail (Basel, Switzerland) · Primary-Source Regulatory Reference Page 2 of 3
Page 3 of 3 · Store Systems Readiness & Execution Checklist

4. 8-Step Spain POS Engineering Action Plan (2026–2027 Rollout)

Verified 4-Eyes Baseline
1
Obtain Producer Responsibility Declaration (Declaración Responsable): Ensure your POS ISV or internal software entity embeds the mandatory statutory declaration inside the POS software binary (Order HAC/1177/2024 Art. 13).
2
Select Veri*factu Remission Architecture: Decide between direct AEAT Veri*factu web-service submission (centralized or per-store) vs. cloud fiscal middleware (e.g., fiskaly SIGN ES).
3
Implement SHA-256 Record Chaining: Build deterministic hash chaining across RegistroAlta and RegistroAnulacion records with offline store-and-forward queue resilience.
4
Upgrade Thermal Receipt Templates: Add the 30×30mm–40×40mm AEAT QR code and VERI*FACTU legend to ESC/POS thermal printer pipelines and e-receipt PDFs.
5
Configure Basque Store Routing (TicketBAI): Ensure stores in Álava, Bizkaia, and Gipuzkoa route transactions to their respective Foral TicketBAI/Batuz endpoints without double-signing.
6
Enforce AML Cash-Tender Ceiling at POS: Hard-block cash tenders ≥ EUR 1,000 for resident transactions (and ≥ EUR 10,000 for verified non-resident tourists with passport CDD capture).
7
Separate B2B Invoice Workflow (Crea y Crece): Map POS-originated B2B full invoices to your ERP/EDI e-invoicing hub ahead of the Law 18/2022 Royal Decree effective date.
8
Complete AEAT Sandbox Certification by Q4 2026: Run end-to-end load and contingency recovery tests against AEAT pre-production endpoints prior to the 01 Jan 2027 corporate enforcement deadline.
Track Spain + 99 Global Markets in One Control Plane
Benchmark Spain (Locked Trial Showcase) + 1 Additional Market Free for 14 Days

Verified corporate email required. Export custom board-ready PDF dossiers, filter by POS Architectural Impact Tags, and monitor live Official Gazette changes.

Start 14-Day Corporate Trial →
Terms of Service & Reference Disclaimer (Swiss Law — CO Art. 100): This brief is provided by Delta Omicron Retail (Basel, Switzerland) as primary-source regulatory reference intelligence verified against Official National Gazettes. It does not constitute formal legal or tax representation.