Electronic invoices with digital signature: fiscal compliance 2026

The dematerialization of invoices is no longer optional: since the progressive entry into force of the electronic invoicing obligation in France, governed by ordinance no. 2021-1190 of September 15, 2021 and subsequent implementing decrees, companies subject to VAT must issue, transmit and receive their invoices in approved digital formats. Among the central issues is the digital signature of electronic invoices, a guarantee of authenticity, integrity and tax compliance. This article explores the accepted formats, legal obligations, required signature levels and best practices to secure your processes in 2026.

Why digital signature is at the heart of electronic invoicing

The Directorate General of Public Finance (DGFiP) imposes three cumulative conditions for an electronic invoice to be fiscally acceptable: authenticity of origin, integrity of content and readability of the document (article 289 of the General Tax Code). Advanced or qualified electronic signature is one of three expressly recognized means to satisfy these requirements — along with the reliable audit trail (PAF) and tax EDI.

The three compliance pathways according to the CGI

The General Tax Code, in articles 289 and 289 bis, clearly distinguishes:

• Advanced electronic signature based on a qualified certificate (in accordance with the eIDAS regulation), which guarantees the identification of the signatory and the integrity of the document since its creation;
• Tax EDI (Electronic Data Interchange), governed by strict protocols of mutual authentication;
• Reliable audit trail, which requires complete process documentation, often costly to maintain for SMEs.

For the vast majority of companies, digital signature on approved XML formats remains the most robust legal solution and the most technically scalable. It integrates natively into dematerialized workflows and can be automatically verified by digitalization platform partners (PDP) and the Public Invoicing Portal (PPF).

What digital signature concretely guarantees on an invoice

A qualified electronic signature affixed to an invoice guarantees four essential properties:

1. Authenticity: the qualified certificate certainly identifies the invoice issuer;
2. Integrity: any post-signature modification is cryptographically detectable;
3. Non-repudiation: the issuer cannot deny having produced the invoice;
4. Time-stamping: the date and time of issue are certified, which can be decisive in case of tax or commercial dispute.

To deepen the technical and legal foundations, consult our comprehensive guide to electronic signature, which details the different signature levels and their use cases.

XML formats and digital signatures: which ones to choose in 2026?

The electronic invoicing ecosystem relies on structured formats for which digital signature must be technically compatible. In 2026, three formats dominate the French and European market.

Factur-X: the Franco-German hybrid reference format

Factur-X (called ZUGFeRD in Germany) is a hybrid PDF/A-3 format integrating a structured XML file (compliant with EN 16931 standard). It is favored for its dual readability: a PDF readable by humans, an XML processable automatically by ERPs and accounting solutions.

The signature of a Factur-X document is performed by signing the PDF/A-3 container, which simultaneously covers the visual part and the embedded XML stream. The ETSI EN 319 132 (XAdES) or ETSI EN 319 122 (CAdES) standard applies depending on the implementation chosen.

Key data on Factur-X:

• Minimum profile: basic identification data, suitable for micro-enterprises;
• EN 16931 profile (called "Comfort"): complete data compliant with European Directive 2014/55/EU;
• Extended profile: additional data for sectors with strong automation needs (distribution, industry).

UBL and CII: the European standards to know

Universal Business Language (UBL) and Cross Industry Invoice (CII) are the two XML syntaxes recognized by the European EN 16931 standard. The PPF and approved PDPs have accepted these two formats since 2025.

The signature of an invoice in pure UBL or CII XML follows the XAdES (XML Advanced Electronic Signatures) specification, standardized by ETSI. The XAdES-B-LT (Long-Term) variant is recommended to guarantee the verifiability of the signature for the duration of legal invoice retention (10 years in French tax law).

How to choose the right signature level for your invoices?

The eIDAS regulation and its signature levels define three levels: simple, advanced and qualified. For electronic invoices:

• Advanced signature based on a qualified certificate: minimum level recommended by DGFiP;
• Qualified signature (QES): highest level, opposable without discussion in case of tax or commercial dispute, recommended for invoices with high stakes (public procurement, major accounts, intra-community operations).

Simple signature is not sufficient to meet the requirements of article 289 CGI.

Tax obligations: what DGFiP actually controls

Since 2024, the DGFiP has had access to invoicing data via the PPF. Controls focus on several dimensions that digital signature directly secures.

Mandatory data for a compliant electronic invoice

In application of article 242 nonies A of Annex II to the CGI, an electronic invoice must include at minimum:

• The SIREN number of the issuer and recipient;
• The nature of operations (delivery of goods, provision of services, mixed operation);
• The payment status;
• The date of delivery or performance of the service.

This data now transits to the administration via the PPF or PDPs. Electronic signature certifies that this data has not been altered between issuance and receipt by the administration.

Retention and archiving of signed invoices

The retention of signed electronic invoices is subject to strict rules:

• 6 years minimum retention for tax audit purposes (Book of Tax Procedures, article L102 B);
• 10 years in practice recommended by accountants, in line with commercial prescription;
• The integrity of the signature must be verifiable throughout the entire retention period, which requires using signature formats with guaranteed longevity (XAdES-B-LT or XAdES-B-LTA with qualified time-stamping).

The qualified electronic time-stamping plays a critical role here: it freezes the date of signature creation and makes it possible to prove that the certificates used were valid at the time of signing, even if those certificates have since expired.

Risks of non-compliance

An electronic invoice that is non-compliant (absence of valid signature, non-approved format, missing data) exposes the company to:

• Rejection of VAT deductibility on corresponding purchases (article 272 CGI);
• Tax penalties that can reach €15 per non-compliant invoice, with a minimum of €60 per transaction (article 1737 CGI);
• Risk of adjustment during a tax audit if the administration contests the authenticity or integrity of invoices presented.

Technical integration: connecting signature to your invoicing flows

The major operational challenge for 2026 is the seamless integration of electronic signature into existing processes, without friction for accounting and finance teams.

Signature API and ERP connection

Modern electronic signature solutions expose REST APIs allowing automation of invoice signature on the fly, directly from ERPs (SAP, Oracle, Sage, Cegid…) or invoicing platforms (Chorus Pro for public procurement, private PDPs for the private sector).

A typical flow for issuing a signed electronic invoice comprises:

1. Generation of XML or Factur-X file by the ERP;
2. API call to the signature solution (e.g. Certyneo) to affix XAdES-B-LT signature with the company's qualified certificate;
3. Transmission of signed invoice to PPF or PDP;
4. Automatic archiving in the digital safe deposit box.

Qualified certificates: who issues them and how to obtain them?

In France, qualified electronic signature certificates are issued by Qualified Trust Service Providers (QSTP) listed in the national trust list (TSL), published and maintained by the ANSSI. Among QSTPs active in 2026: Certigna, ChamberSign, Certinomis, or even European actors like Qualified Trust Service Providers referenced in the European Trust List.

Certificates are issued after identity verification of the company's legal representative or authorized signatory, face-to-face or by video identification depending on the providers. Standard validity period is 1 to 3 years.

To compare available solutions on the market and choose one adapted to your invoicing volume, our comparison of electronic signature solutions provides you with an objective analysis grid based on eIDAS criteria, cost per signature and API integration capabilities.

Seal vs signature: a distinction not to be overlooked

In the context of automated invoicing, an important technical distinction applies: electronic signature (commitment of an identified natural person) and electronic seal (commitment of a legal entity, without identification of a specific individual). The eIDAS regulation explicitly provides for qualified electronic seals (article 35 eIDAS) for legal entities.

For electronic invoicing in automated workflow, qualified electronic seal is often more suitable: it identifies the issuing company without requiring intervention of an individual signatory at each invoice. The DGFiP recognizes both modalities as long as the underlying certificate is qualified under eIDAS.

The legal value of electronic signature in a commercial and tax context is detailed in our dedicated guide, which also addresses the nuances between signature and seal for legal persons.

Legal framework applicable to signed electronic invoices

The compliance of signed electronic invoices relies on a stack of normative texts that must be mastered.

Civil Code, articles 1366 and 1367: article 1366 establishes the principle of equivalence between electronic and paper writing, provided that the identity of the person from whom it emanates is duly assured and that the document is drawn up and retained in conditions likely to guarantee its integrity. Article 1367 defines electronic signature as the use of a reliable identification process guaranteeing its connection with the act to which it is attached.

eIDAS Regulation no. 910/2014 of the European Parliament and Council: this regulation establishes the common legal framework for trust services in the European Union. It defines three signature levels (simple, advanced, qualified), requirements for qualified trust service providers and legal effects of each signature level. Qualified electronic signature has the legal effect of a handwritten signature in all Member States (article 25.2 eIDAS). eIDAS 2.0 (Regulation 2024/1183), which came into progressive application in 2025, strengthens interoperability requirements and introduces the European digital identity wallet (EUDIW).

General Tax Code, articles 289 and 289 bis: article 289 CGI sets out the three compliance pathways for electronic invoices (advanced electronic signature with qualified certificate, tax EDI, reliable audit trail). Article 289 bis specifies the modalities applicable to EDI. Article 242 nonies A of Annex II lists the 25 mandatory invoice items, several of which are now electronically transmitted to DGFiP via the PPF.

Book of Tax Procedures, article L102 B: requires retention of supporting documents for 6 years from the date they were drawn up or received. For invoices, professionals recommend retention of 10 years in line with commercial prescription periods (article L110-4 of the Commercial Code).

Ordinance no. 2021-1190 of September 15, 2021 and implementing decrees: establish the progressive obligation of electronic invoicing for those subject to VAT established in France, with staged deadlines between 2026 and 2027 depending on company size.

ETSI EN 319 132 (XAdES) and EN 319 122 (CAdES) standards: European technical standards defining advanced electronic signature formats on XML documents and binary data. The XAdES-B-LT profile is recommended for invoices due to its ability to maintain signature verifiability over the long term.

GDPR no. 2016/679: personal data contained in invoices (name of individual customer, contact information) are subject to principles of minimization, security and limitation of storage duration. Electronic signature also implies processing of signatory identity data, governed by GDPR and QSTP certification policies.

Legal and tax risks: an electronic invoice whose signature is invalid, expired or produced with a non-qualified certificate may be requalified by the administration as not meeting the requirements of article 289 CGI, resulting in rejection of deductible VAT and penalties up to 50% of reassessed tax in case of proven bad faith (article 1729 CGI).

Use scenarios: digital invoice signature in practice

Scenario 1: an industrial SME with high supplier invoice volume

An industrial SME processing approximately 3,500 supplier invoices per year faced two recurring problems: delays in manual validation extending the payment cycle to 45 days on average, and occasional VAT deduction rejections during tax audits due to invoices received without valid signature or documented audit trail.

By deploying a signature API solution integrated directly into its ERP, the company automated the qualified sealing of each issued invoice and implemented automatic validity control of signatures on received invoices. Results observed after 12 months: reduction of payment cycle from 45 to 18 days (-60%), zero VAT rejection during the next tax audit, and estimated savings of 35% on invoice administrative processing costs (range consistent with Gartner 2025 sector benchmarks on accounting dematerialization).

Scenario 2: an accounting firm managing invoicing for 80 SME/VSE clients

An accounting firm of about fifteen employees, mandated to manage accounting and produce invoices for its client entities, needed to ensure compliance of invoices issued on behalf of each legal structure, with distinct certificates per entity.

The firm opted for a multi-entity signature platform allowing management of a portfolio of qualified certificates per client, with complete signature traceability and automatic archiving in individual digital safes. Estimated time savings: 4 to 6 hours per month per client on manual validation and archiving tasks, representing 320 to 480 hours freed annually for the firm, reallocated to high-value missions (tax advice, strategic support).

Scenario 3: a digital services company responding to public procurement

A software services company of about a hundred employees, operating primarily with public sector clients via Chorus Pro, needed to ensure that each of its issued invoices met the qualified electronic signature requirements imposed by certain public contracting authorities.

By connecting its electronic signature solution to its invoicing tool via REST API, the company now automatically generates Factur-X format invoices signed with qualified electronic seal, transmitted directly to Chorus Pro. Compliance is verifiable in real time by the contracting authority. No rejections for technical non-compliance have been recorded since production launch, compared to 3-4 quarterly rejections previously due to format errors or absence of valid signature. This type of approach fully aligns with electronic signature for law firms and service companies, a sector particularly exposed to documentary compliance requirements.

Conclusion

Signed electronic invoices are no longer a subject reserved for IT departments: they are now at the heart of tax and accounting obligations for any company subject to VAT in France. Mastering approved XML formats (Factur-X, UBL, CII), choosing the right signature level (advanced or qualified), and integrating a signature process into your invoicing flows are the three pillars of sustainable compliance in 2026 and beyond.

Qualified digital signature simultaneously guarantees the authenticity of the issuer, the integrity of data and the tax acceptability of invoices — while reducing processing delays and adjustment risks.

Certyneo offers a qualified electronic signature API solution natively compatible with Factur-X, UBL and CII formats, integrable in a few hours into your ERP or PDP. Discover our pricing and start your free trial to secure your electronic invoicing today.