Frequently asked questions
Since February 2025, certification has become mandatory for all point-of-sale software used by professionals subject to VAT in France.
This certification aims to ensure that cash systems comply with strict requirements regarding:
Data Immutability
Preventing the modification or deletion of recorded sales data.
Data Security
Ensuring data integrity through technical mechanisms such as hashing and digital signatures.
Data Retention
Storing data in a readable, accessible, and durable manner for the legally required period.
Data Archiving
Freezing periodic closure data with traceability for later retrieval.
Penalties apply both to the taxable person who does not use certified point-of-sale software, and to the software vendor if the solution is found to be permissive.
- A fine of €7,500 applies for each non-compliant software solution
- A 60-day window is granted to bring the software into compliance
- Failure to comply within the 60-day period results in an additional fine
- In some cases, a €10,000 fine may apply for each software license sold
- A fine of €37,500 and up to 5 years in prison for complicity in tax fraud
The law provides for a transitional period allowing software vendors and users to bring their systems into compliance:
- Certificate of compliance
- Software vendor’s attestation
- Proof of engagement in the certification process
- Certificate of compliance
- Proof of engagement
Only the certificate of compliance will be accepted
It depends.
If your software records payments or manages invoicing or payment modules, you may be concerned even if it’s not a traditional cash register.
A technical audit is recommended to assess your exposure to the certification requirement.
The approaches are different:
Proposes a single standard, NF525, applicable to all point-of-sale software.
In other words, INFOCERT does not check whether you comply with the law, but whether you have correctly implemented the NF525 requirements.
The response to legal requirements is clear and unique.
Is based solely on legal requirements.
The LNE has a framework providing initial responses to legal requirements, but the software vendor is free to propose their own solutions.
The LNE will assess whether your customized response to legal requirements is reliable.
In summary, the INFOCERT solution is more restrictive than that of the LNE, which remains somewhat more subjective.
Both solutions are, however, equivalent under the law.
Certifications are valid for 3 years, with an annual renewal audit to ensure ongoing compliance.
As of August 5, 2025, the certification costs for both organizations are equivalent.
You should budget €15,000 for the initial audit and between €4,000 and €6,000 for the renewal audits.
Yes. A software vendor can obtain certification on their own without requiring external support.
However, support helps optimize your compliance process. The consultant guides you throughout, ensuring your efforts are on the right track.
The NF525 requirements, or legal requirements, remain somewhat generic and vague, leaving room for errors during implementation. A consultant has the necessary perspective to help you adapt these requirements according to your technical and business specifics.
There is a right to make mistakes. A non-compliant audit is not final. However, it leads to additional costs that can be avoided with proper support.
Of course !
We can help you assess whether certification applies to your software and support you through every step of the compliance process.