⚠️ Update — 20 February 2026: The mandatory NF525 certification requirement has been permanently removed by law. We have returned to the regulatory state prior to February 2025. Certification remains a recognised quality benchmark, however, and penalties may still apply in the absence of certification or a non-permissiveness declaration issued by the software publisher.
The Mock Audit: The Key Step Before Certification
The NF525 mock audit faithfully replicates the structure of an official certification audit. It is your assurance of arriving prepared, with no unpleasant surprises.
It takes place in two stages:
- Product analysis : technical review covering Part 10 of the NF525 standard
- Documentary analysis : review of the quality management system and all supporting documentation covering Part 9 of the NF525 standard
The mock audit is conducted interactively. Unlike a formal INFOCERT audit, we are able to provide guidance and suggest corrective directions for every gap identified.
During the mock audit, you are encouraged to propose your own corrective solutions. Thanks to our background in software development and architecture, we have the technical depth to validate — or challenge — your proposals.
Technical Analysis
Product Demonstration
- Identification of the NF525 scope
- Review of critical workflows:
- Sales and modifications
- Cancellations
- Period-end closures
- Archiving
- Exports
- Verification of immutability and security mechanisms
- Review of special administrative functions
- Analysis of the Technical Event Journal (JET)
- Consistency and chronological continuity testing
Technical Documentation Review
Review of design documents:
- Functional design specification
- Data signing procedure
- JET documentation
- Fiscal archive documentation
- Private key management
- Description of alternative solutions
- Database field mapping
Documentary Analysis
Quality Management System Review
Review of the procedures required by NF525:
- Versioning
- Product plan
- Development process
- Testing and final validation
- Deployment
- Corrective actions
- User support
- Customer relations
Review of the functional scope map against the associated quality records.
End-User Documentation Review
- Analysis of user documentation
- Analysis of the product brochure
Deliverables
At the end of the mock audit, you receive a clear audit report listing every gap identified along with recommendations for optimal remediation. The purpose of this audit is to give you a clear direction forward. If contracted as part of a full support package, it allows us to work together with maximum efficiency. If contracted as a standalone service, the publisher will have everything needed to continue the compliance journey independently.
The audit report contains:
- The list of gaps identified, mapped to each NF525 requirement
- Corrective guidance for each gap
Hacktiv’ Studio supports you
100% of the publishers we have supported obtained their certificate at the first official audit. On average, the compliance process takes 3 months.