The blog explains that ISO 27001 certification is becoming a mandatory requirement for e‑invoicing platforms in several jurisdictions, notably France, the Netherlands, Australia, and New Zealand. It outlines the key dates, such as France’s September 2026 deadline and the October 2025 completion of the ISO 27001:2022 transition, and details the certification’s three‑year validity and surveillance audit schedule.
France requires all accredited e‑invoicing platforms to hold ISO 27001 certification by September 2026.
The Netherlands, Australia and New Zealand mandate ISO 27001 for Peppol Access Points; operating without certification is prohibited.
The transition period to ISO 27001:2022 finished in October 2025.
The certificate is valid for three years, with surveillance audits in the first and second years.
Get VAT and indirect tax news delivered to your inbox twice a week.
No spam. Unsubscribe anytime.
Fonoa · 6 days ago
The French e-reporting framework complements e-invoicing by capturing B2C, cross-border B2B and certain payment transactions through Flow 10 (F10). Flow 6 (F6) confirms acceptance or rejection of the reporting file. Reporting frequency and deadlines vary by VAT regime, with standard monthly taxpayers submitting transaction data three times a month and payment data once, all due 10 days after each period.
VATabout · 17 days ago
The French Tax Authority issued guidance on March 4, 2026 clarifying VAT obligations for dropshipping operations that do not use the IOSS. The guidance sets thresholds for import VAT liability, specifies when the seller or consumer is responsible, and requires non‑EU sellers to appoint a tax representative. It also defines the place of taxation for cross‑border distance sales.
VatCalc · 18 days ago
France’s 2026 Finance Law introduces stricter penalties for non‑compliance with the upcoming e‑invoicing and e‑reporting regime, effective from 1 September 2026. The law sets €50 fines per non‑approved invoice, progressive penalties for failing to receive e‑invoices, and €500 per missing e‑reporting transmission, capped at €15,000 annually. A first‑offence tolerance allows penalty waivers if errors are corrected within 30 days.
VatCalc · 19 days ago
France has issued guidance clarifying VAT obligations for dropshippers who do not use the IOSS scheme. The ruling specifies that parcels below €150 are cleared in the final destination Member State and the seller is not liable for French VAT, while parcels above €150 trigger import VAT liability in France. It also outlines conditions under which the customer or seller bears import VAT when goods are delivered within France and requires non‑EU sellers to register and possibly appoint a French tax representative.
Bloomberg Law · 20 days ago
The article explains how usage‑based billing models in AI and SaaS create VAT compliance challenges, including timing of tax points, prepaid credits, hybrid pricing, tiered pricing, and the need for visibility into billing systems. It stresses that tax teams must engage early with product, billing, and finance to manage risk.
Bloomberg Tax · 21 days ago
The article explains how usage‑based billing models—common in AI and SaaS—create complex VAT timing issues. It outlines when VAT is due for prepaid credits, hybrid pricing, tiered discounts, and the risks of delayed data processing. Tax teams are urged to embed VAT rules into billing workflows early to avoid compliance gaps.
