| Indirect tax | VAT (IVA), standard rate 21%Standard rate 21% with reduced rates of 10% and 4%; most businesses file quarterly Modelo 303 returns, while large companies file monthly and report invoices via SII. The Canary Islands (IGIC), Ceuta and Melilla are outside the Spanish VAT territory. |
|---|
| E-invoicing | Phasing in · VeriFactu; SII; B2B e-invoicing via AEAT public solution or private platforms (UBL, CII, EDIFACT, Facturae); FACe for B2GVeriFactu-compliant invoicing software becomes mandatory from 1 Jan 2027 for corporate-tax payers and 1 Jul 2027 for other businesses, and under Order HAC/1028/2026 (published 5 Oct 2026) domestic B2B e-invoicing becomes mandatory from 6 Oct 2027 for businesses with prior-year turnover above €8 million and from 6 Oct 2028 for all others. Large companies (turnover above €6 million) already report invoice records near-real-time via SII. |
|---|
| Data protection | GDPR plus Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD)GDPR applies directly, supplemented by Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD) and supervised by the AEPD; B2B buyers expect an Art. 28 data processing agreement, a sub-processor list and, in practice, EU/EEA hosting or SCC-covered transfers. |
|---|
| AI rules | The EU AI Act applies directly: prohibited AI practices have been banned since 2 Feb 2025, general-purpose AI model rules apply since 2 Aug 2025 and transparency duties (e.g. chatbot disclosure, AI-content labelling) since 2 Aug 2026, while the Digital Omnibus on AI (in force 27 Jul 2026) moved stand-alone high-risk (Annex III) obligations to 2 Dec 2027 and product-embedded high-risk (Annex I) obligations to 2 Aug 2028; Spain has created a dedicated AI supervisor, AESIA (Agencia Española de Supervisión de la Inteligencia Artificial). |
|---|
| Systems we migrate from or connect to | Holded, Wolters Kluwer a3, Sage, Odoo, Quipu, SAP Business OneMasters, ledgers, stock and open balances move across and are reconciled before cutover. |
|---|
| Payment rails for web apps and SaaS | Bizum, Redsys card payments, SEPA Direct Debit, Stripe, Adyen, PayPal |
|---|
| Also worth knowing | The Basque Country and Navarre run their own TicketBAI invoicing regimes instead of VeriFactu, and B2G invoices go through FACe in Facturae format. Software vendors must issue a statement of conformity (declaración responsable) for VeriFactu-compliant billing systems. |
|---|