GoBD explained: principles, retention and what they mean for your invoices

What GoBD is and who it applies to

GoBD is not a law. It is a circular from the German Federal Ministry of Finance (BMF) that spells out how the record-keeping rules of the German Fiscal Code (Abgabenordnung, AO) apply to electronic records. It describes how books, records and tax-relevant documents must be kept and stored electronically, and how the tax authorities may access this data during an audit.

It applies to every business in Germany that is required to keep books or records, from a sole trader using cash-basis accounting (Einnahmen-Überschuss-Rechnung) to a GmbH. As soon as invoices, receipts or bookings are created or processed electronically, GoBD is the yardstick a tax audit (Betriebsprüfung) uses to judge your process. If you are a founder in Germany, that includes the invoices your shop, Stripe account or SaaS billing produces.

The core principles

GoBD boils down to a few principles:

Traceability and verifiability. An expert third party, such as a tax auditor, must be able to get an overview of the business transactions within a reasonable time. Every document must be traceable from its origin to the booking, and back again.

Completeness and correctness. Every business transaction is recorded individually, completely and accurately. No sale is missing, and none is recorded twice.

Timely recording and order. Documents are recorded promptly and filed in an orderly way, so that they can still be found.

Immutability. This is the most important principle and the one most often violated in practice: once a booking or document has been recorded, it must not be possible to change it in a way that hides the original content. Changes must either be technically impossible or logged without gaps. That is why an invoice is never deleted or overwritten; you correct it with a cancellation invoice (Stornorechnung). How Rechnungskit implements this technically (WORM storage, checksums, locked database tables) is described on the security, hosting and compliance (German) page.

Retention: how long and in what form

Invoices and other accounting vouchers must be kept for 8 years, books of account and annual financial statements for 10 years. Each period starts at the end of the calendar year in which the document was created.

The form matters as much as the duration: documents that were created electronically must be kept electronically and in their original format. For an e-invoice, that means you keep the structured data part (XML), not just a printout or a PDF view. Under the current GoBD version (BMF circular of July 14, 2025, margin no. 131), the human-readable PDF part of a ZUGFeRD hybrid (German) only has to be archived as well if it contains tax-relevant information beyond the structured data set (such as booking notes). If the PDF view is only a reproducible rendering of the XML, keeping the XML is enough. The storage itself must be audit-proof: unalterable, protected against loss, readable at any time and machine-evaluable.

Procedure documentation

GoBD expects every business to document how its documents flow: how an invoice is created, which systems are involved, how it is archived, who has access and how the system is protected against changes. This procedure documentation (Verfahrensdokumentation) must be written so that an expert third party can follow the process without further help. Our procedure documentation (German) template shows what such a document looks like for an automated invoicing flow.

What it means for invoices in e-commerce

In online retail, documents come from many places: orders in the shop, payments at Stripe (German), Mollie or PayPal, invoices in an app or tool, credit notes for refunds. The whole chain is only GoBD compliant once all the parts fit together. Every payment has to lead, traceably, to exactly one invoice from a gap-free number sequence, corrections have to be cancellations rather than deletions, and the archive has to sit independently of your shop hosting, unalterable and available for the full retention period.

Rechnungskit is e-invoicing software (German) built for exactly this. Every invoice it creates is archived so it cannot be changed, with a SHA-256 checksum as proof of integrity, versioned object storage and the structured XML archived alongside as the original format. Corrections are only ever created as cancellation invoices, the number sequence stays gap-free, and the DATEV export delivers the documents to your tax advisor (Steuerberater) in order.