Verifiable invoicing for Spain
Verifactu is not a decorative format or an optional integration. It requires every invoice to create a registration record, each record to retain the previous fingerprint, and the resulting sequence to remain verifiable.
Cord already has the technical engine that builds that chain per organization. The SHA-256 fingerprint is generated at issue time, the record is stored as append-only, and a correction never rewrites the past: it creates a new correction or cancellation record.
What is built:
- A chain per organization: every record receives a sequence and links to the previous record's fingerprint for the same business.
- Protection against edits: the database blocks changes to the fingerprint, payload, sequence, and type after signing.
- Certificate per company: the organization can connect its electronic certificate from Settings, with password and expiration validation before encrypted storage.
- QR and fingerprint in the PDF: when an invoice has a real Verifactu record, the document includes the corresponding verification information.
- Decoupled submission: issuing the invoice and submitting its record are separate steps so a temporary AEAT outage does not destroy the document already created.
Why it is marked coming soon
The engine was verified against the fingerprint examples, WSDL, and XSD published by the AEAT, but Cord still needs to complete its own software-system identity, finish the regulatory process, and test a real preproduction submission with a Spanish certificate.
Until those conditions are met, a Spanish organization receives a commercial invoice with its local numbering and requirements. Cord does not show a QR, fingerprint, or submission state that does not exist.
How it works
The organization connects a valid Spanish certificate.
On issue, Cord creates the record, sequence, and linked fingerprint.
A separate process submits the record to the AEAT and retains responses and retries.
Availability and scope
Engine built for Spain and marked coming soon until SIF identity, regulatory process, and a real preproduction test are complete.
Clear limits
Without a certificate or regulatory activation, the Spanish invoice uses the commercial rail. No false QR or Verifactu status is shown.