GoBD Invoice Archiving in Germany: What It Is and How to Comply
GoBD requires all German businesses to archive invoices for 10 years in a tamper-proof, auditable system. This guide explains exactly what that means, what qualifies, and what doesn't.
GoBD Invoice Archiving in Germany: What It Is and How to Comply
If you issue or receive invoices in Germany, you're required to archive them for 10 years. Not in a regular folder. Not in your email. In a system that meets the GoBD (Grundsätze zur ordnungsmäßigen Führung und Aufbewahrung von Büchern, Aufzeichnungen und Unterlagen in elektronischer Form sowie zum Datenzugriff) requirements.
That mouthful translates roughly to: "Principles for the proper maintenance and storage of books, records and documents in electronic form."
This guide explains what GoBD actually requires, what qualifies as compliant, and what to watch out for — without the official bureaucratic language.
What GoBD Requires for Invoice Archiving
GoBD (published by the BMF, the German Federal Ministry of Finance) sets these core requirements for archived business documents including invoices:
1. Completeness
Every invoice you issue or receive must be archived. You cannot selectively archive some and not others.
2. Correctness
The archived document must be identical to the original. An archived invoice must not be editable after storage.
3. Timeliness
Archiving must happen in a timely manner — for invoices, this means on or shortly after receipt or issuance. You can't wait until year-end to archive everything.
4. Traceability
There must be a complete audit trail: when was the document received, when archived, who accessed it, and whether any changes were attempted.
5. Tamper-proof storage
The archive must be write-once or equivalent — it must be impossible to modify archived invoices without a detectable change log.
6. Readability throughout the retention period
You must be able to retrieve and read archived invoices in their original format for the full 10-year period. A system that becomes obsolete in 5 years doesn't qualify.
7. Machine-readable access
During a tax audit (Betriebsprüfung), the German tax authority (Finanzamt) can request access to your archived data. It must be accessible in a machine-readable format — either via direct access to the archive system or export to a standardised format.
The 10-Year Retention Period
Invoices must be retained for 10 years from the end of the fiscal year in which they were issued.
For example:
- Invoice issued on 3 April 2026 → The fiscal year ends 31 December 2026 → Archive until 31 December 2036
This means invoices don't all expire at the same time — invoices from December are archived one day longer than invoices from January of the same year.
Starting the clock on receipt: For received invoices, the 10-year period starts from the date the invoice entered your systems — not the date the supplier issued it.
What Qualifies as GoBD-Compliant Storage?
Qualified cloud accounting software
Most German business accounting software (sevDesk, DATEV, Lexware, easybill, weclapp, Scopevisio) includes GoBD-compliant archiving as part of their subscription. The archive is:
- Write-once (changes create new versions, originals preserved)
- Timestamped
- Access-logged
- Backed up with guaranteed availability
Check the small print: Not all pricing tiers include the archive. Confirm your subscription includes GoBD-compliant document management before signing up.
Certified document management systems (DMS)
Enterprise businesses often use a dedicated DMS: DocuWare, d.velop, ELO, or OpenText. These are designed specifically for GoBD compliance and handle mixed document types (contracts, invoices, correspondence) alongside financial records.
What does NOT qualify
| Storage method | GoBD compliant? | Why not |
|---|---|---|
| Regular Windows folder | ❌ | Files can be modified or deleted without trace |
| Personal Dropbox / Google Drive | ❌ | No immutable write, no audit trail |
| Email archive (Outlook PST) | ❌ | Emails can be deleted, not tamper-proof |
| Regular cloud storage (S3 bucket, iCloud) | ❌ | Unless you add a certified compliance layer |
| PDF saved to desktop | ❌ | Obviously |
| GoBD-certified accounting software | ✅ | Designed for compliance |
| Certified DMS | ✅ | Designed for compliance |
Electronic vs. Paper Invoices: Different Rules
Paper invoices received electronically
If you receive a paper invoice and scan it, the scanned version becomes the legally archived version — but only if the scanning process meets GoBD requirements (correct resolution, tamper-proof storage, the original paper can be destroyed after). This is called "ersetzende Einscannierung" (replacement scanning).
This is relevant for businesses transitioning: invoices you receive as paper can be digitised, but the digitalisation process must follow GoBD rules.
Electronic invoices (XRechnung, ZUGFeRD)
Electronic invoices must be archived in their original electronic format — the XML file or the ZUGFeRD PDF with embedded XML. Converting them to a different format (e.g., printing an XRechnung to PDF) does not satisfy GoBD.
GoBD and the German E-Invoicing Mandate
The e-invoicing mandate (XRechnung / ZUGFeRD) and GoBD archiving are separate obligations that interact:
- The mandate says you must issue and receive structured electronic invoices
- GoBD says you must archive every invoice for 10 years in a compliant system
You need to satisfy both. If you receive a ZUGFeRD invoice in your accounting software, that software should:
- Import the structured data from the embedded XML (mandate compliance)
- Store the original PDF/XML file in its GoBD-compliant archive (GoBD compliance)
Most modern German accounting tools handle both automatically once configured.
Tax Audit Access Requirements
During a Betriebsprüfung (tax audit), the Finanzamt can request access to your archives via three methods defined in GoBD:
- Direct access (Z1): The auditor can directly access your archive system
- Indirect access (Z2): You provide queries and reports at the auditor's request
- Data export (Z3): You export archive data in a machine-readable format (typically GDPdU/GoBD export format)
All GoBD-compliant accounting software and DMS platforms support Z3 export at minimum.
What Happens if You Don't Comply
GoBD non-compliance is taken seriously by German tax authorities:
- Estimates instead of actuals: If your records don't meet GoBD standards, the Finanzamt can estimate your taxable income (Schätzung) — typically resulting in higher assessments
- Penalties: Depending on severity, penalties can range from fines to denial of input VAT deduction
- Criminal risk: In extreme cases of deliberate record falsification, criminal tax evasion charges (§370 AO)
In practice, the most common consequence is that the Finanzamt adds a risk premium to estimated income — expensive and hard to contest without proper records.
Practical Checklist
✅ Are you using GoBD-certified accounting software? Check vendor documentation.
✅ Is the archive function enabled and configured? Some tools require manual activation.
✅ Are your archived invoices stored in their original format (XML, ZUGFeRD PDF)?
✅ Do you have a process for archiving invoices that arrive outside your software (e.g., via email attachments)?
✅ Have you tested the GoBD export function? Generate a test export now, before an audit.
✅ Are your access credentials documented? If the person who set up the archive leaves, someone else needs to access it.
Recommended GoBD-Compliant Software for German Businesses
| Business size | Recommended tool |
|---|---|
| Freelancers / very small | sevDesk, Lexoffice, easybill (free tier) |
| SME | DATEV, Lexware, weclapp, Scopevisio |
| Mid-market / enterprise | SAP S/4HANA, Sage 50/100, dedicated DMS (DocuWare, ELO) |
All of the above include GoBD-compliant archiving. For the most rigorous compliance, ask your tax advisor (Steuerberater) to confirm your setup is correctly configured — this is the standard annual check most German accountants perform.