Accounting
GoBD-Compliant Archiving: How to Store Invoices Legally
Anyone who only stores invoices in their email inbox risks problems during tax audits. Everything about audit-proof archiving according to GoBD.
Digitalization is a blessing for accounting - as long as you know the rules. Anyone who simply saves their invoices in a folder on their desktop or in their email inbox is taking a risk. During a tax audit, this can lead to the rejection of your bookkeeping.
The standard you can't avoid is called GoBD. In this guide, you'll learn how to archive your documents so that the tax office has nothing to complain about.
What Does GoBD Actually Mean?
GoBD stands for "Grundsätze zur ordnungsmäßigen Führung und Aufbewahrung von Büchern, Aufzeichnungen und Unterlagen in elektronischer Form sowie zum Datenzugriff" (Principles for the Proper Management and Storage of Books, Records and Documents in Electronic Form and for Data Access).
In short: These are the rules for what digital documents must look like to be recognized as evidence.
The 4 Pillars of GoBD Archiving
For archiving to be considered "audit-proof," four criteria must be met:
1. Immutability
An invoice must not be manipulable after being saved. A simple Word or Excel document does not meet this requirement.
2. Completeness
No document may be lost. Every invoice must be recorded without gaps.
3. Traceability
A knowledgeable third party (the auditor) must be able to understand how the data was processed within a reasonable time.
4. Availability
Documents must be readable and evaluable at all times over the entire retention period (usually 10 years).
The Problem with the "Simple PDF"
Many freelancers think: "I have a PDF, that's safe." Wrong.
A PDF on a regular hard drive can be deleted or overwritten at any time. The tax office requires a system that logs changes or technically prevents them (e.g., through versioning or special cloud archives).
Important: E-invoices in XRechnung or ZUGFeRD format must also be archived GoBD-compliant - the XML format alone is not enough.
The GoBD Checklist for Your Archive
| Step | Requirement | Implementation |
|---|---|---|
| Receipt | Timely recording | Invoices should be archived within 8-10 days |
| Format | Preserve original format | E-invoices (XML/ZUGFeRD) must be saved as files, not just as printouts! |
| Storage location | Audit-proof | Use certified software instead of local folder structures |
| Documentation | Process documentation | Describe in writing how you receive, record, and archive documents |
Do I Need to Archive My Emails?
A widespread misconception: If the email only serves as an "envelope" and the invoice is in the attachment, saving the attachment is sufficient.
However, if the email contains relevant information (e.g., discount agreements or contract details), the entire email must be archived in an audit-proof manner.
Process Documentation
The GoBD requires written documentation of your processes. This must describe:
- How are documents received? (Email, mail, portal)
- How are they recorded and verified?
- Where and how are they stored?
- Who has access?
- How are changes logged?
Tip: With Clever Invoice, process documentation becomes much simpler, as all processes are automatically logged.
Why Clever Invoice Is the Safe Choice
Manual compliance with GoBD is hardly manageable for sole proprietors. Professional invoicing software does the heavy lifting for you:
Automatic Log Book
Every change to an invoice is logged in an audit-proof manner. You can prove at any time who changed what and when.
Secure Cloud Storage
Your data is stored according to German standards and will still be available in 10 years - without you having to worry about backups.
E-Invoice Ready
XML data is directly processed and stored in the correct format. You can also archive incoming e-invoices in a GoBD-compliant manner.
Export for Tax Audits
In case of an audit, you can export all relevant data with just a few clicks - in the format required by the tax office.
Conclusion: Be Prepared Instead of Paying Later
GoBD compliance sounds dry, but it's your shield during an audit. Those who rely on an automated system today will save themselves sleepless nights and high fines in the future.
Want to automate your accounting legally? Discover now how Clever Invoice helps you work GoBD-compliant - free and without credit card.
Frequently asked questions
How long must invoices be kept?
Invoices must be kept for 10 years. The period begins at the end of the calendar year in which the invoice was created. An invoice from March 2025 must therefore be archived until the end of 2035.
Can I digitize paper invoices and destroy the original?
Yes, so-called "replacement scanning" is allowed if the digitization is properly documented and the digital document remains unchanged. The process must be described in the process documentation.
What is process documentation?
A written description of your accounting processes - from document capture through processing to archiving. It must explain how your system works and how GoBD requirements are met.
Is a backup on an external hard drive sufficient?
No, a simple hard drive does not meet GoBD requirements, as data can be changed or deleted there. You need an audit-proof system with a change log.
What happens in case of a GoBD violation?
During a tax audit, the tax office can reject your bookkeeping and estimate profits - usually to your disadvantage. In addition, fines and tax back payments with interest are threatened.