The Digital Operational Resilience Act (DORA) sets uniform rules for digital resilience in the financial sector — what does this mean for e‑invoicing providers?
EU Regulation 2022/2554 entered into force on 17 January 2025. An IT provider can be critical for one client but not for another — the assessment lies with the financial institution itself.
DORA sets uniform rules for digital resilience in the financial sector. Financial entities must manage ICT risks and reflect specific obligations in contracts with their IT vendors.
DORA distinguishes between standard ICT services and services supporting critical or important functions: if the failure of a service would materially impair a firm's financial performance or regulatory compliance, it triggers additional contractual obligations.
Must be included in every contract between a financial firm and an IT provider:
Additional requirements when a service supports a critical or important function:
In the CAL&F case study, e-invoicing is generally seen as an ancillary process:
Does not directly affect lending or factoring
Can be temporarily replaced by paper invoices
Many alternative providers available
Many financial firms deem e-invoicing non-critical and apply only basic Article 30(2) requirements. However, the final classification always rests with the bank or factoring company.
If a service provider considers its service non-critical, it sends a negative declaration — a statement that:
Even if a function is deemed non-critical, the contract must include mandatory Article 30(2) elements:
Provider agrees to give access to data and liaise with supervisory authorities.
Provider helps investigate and resolve ICT incidents at no extra cost.
Rules for retrieving data upon contract termination or provider insolvency.
Provider takes part in client's training and testing activities.
Invoice-Portal's logs and data enable clients to meet their monitoring and reporting duties: every event is recorded, documents are preserved in original form, and reports can be produced on demand.
EDEKA e-invoicing: mandatory fields beyond EN 16931
/in eInvoice NewsAn invoice can pass validation against the European standard and still be rejected by the buyer. The EDEKA supplier guide of 15 October 2026 shows where the gap sits. The short version is here, the full requirements on the EDEKA page.
Four mandates starting on 1 January 2027
/in eInvoice NewsGermany, Poland, Slovakia and Norway change their invoicing rules on 1 January 2027. Spain has stepped out of that date. The calendar, the thresholds and what to do in the fourth quarter.
Spanish e-invoicing mandate: deadlines from 6 October 2026
/in eInvoice NewsOrden HAC/1028/2026 regulates the state platform SPFE and started the countdown. This article sets out the timetable, the reporting of invoice and payment statuses and the requirements placed on private exchange platforms.
Germany’s 2026 E-Invoicing Update: What the New BMF Letter Changes
/in eInvoice NewsThe BMF letter of 15 October 2026 says a business-rule error is still an e-invoice for VAT, writes the Kontrollfunktion into the UStAE, and extends two concessions to June 2030.
Luxembourg Plans Mandatory B2B E-Invoicing from 2028 — via Peppol
/in eInvoice NewsLuxembourg has proposed a phased B2B e-invoicing mandate starting in 2028. Bill 8815 would require businesses to receive and issue structured e-invoices through a common Peppol-based delivery network.
Greece Postpones Phase B of B2B E-Invoicing but 1 February 2027 Is the Date to Watch
/in eInvoice NewsGreece has moved Phase B of its B2B e-invoicing mandate to 2 November 2026. But the more important deadline comes on 1 February 2027, when direct ERP-to-myDATA transmission will no longer be permitted. Here is what businesses need to prepare for.