Certification of POS systems in France: What software vendors need to know

Operating a POS system in France means complying with strict fiscal rules and controls. Since 2018, every cash register software must meet anti-fraud requirements pursuant to Article 286 of the General Tax Code (CGI): the four principles known as ISCA, often linked to the NF525 standard.

These rules have been on a legislative rollercoaster: the 2025 Finance Law abolished self-certification, and the 2026 Finance Law brought it back. This article explains where things stand now, and what it means for cash register system providers already active in France or planning to enter this market.

Key points for POS software and systems

• The POS software is still liable for providing its users (taxpayers) a compliant system respecting Article 286 of the General Tax Code (CGI), irrelevant of the compliance path chosen.
• In practice, the POS software should always provide its users a method of proof (self-attestation or certificate) and access to the fiscal archive in case of an audit at the taxpayer’s premises.
• Self-certification is valid again. The 2026 Finance Law (Article 125) reinstated the individual attestation issued by the software vendor as proof of compliance, effective February 21, 2026.
• Two valid routes now exist: a vendor’s individual attestation (self-certification) or a certificate from an accredited body (LNE or NF525/InfoCert). The mandatory accredited-certification deadline of September 1, 2026 no longer applies. In application, any cash register currently operating in France must be compliant through self-attestation from the provider if no certificate from a third party can be provided.
• The technical requirements have not changed. Whichever route you choose, your software must still guarantee inalterability, security, conservation, and archiving, and as the vendor, you remain legally responsible for it.
• fiskaly gives you the technical foundation to self-certify with confidence, or to obtain accredited certification if you prefer.

Self-certification is back: what changed

Until early 2025, vendors could issue a self-declaration of compliance for their POS software. The 2025 Finance Law (Article 43) removed that option, leaving accredited certification (LNE or NF525) as the only valid proof — with the final deadline later pushed to August 31, 2026.

The 2026 Finance Law reversed this decision once more. Article 125 reinstated the individual vendor attestation as a valid mode of proof, applicable from February 21, 2026. Businesses can once again demonstrate compliance either with an accredited certificate or with an attestation from their software vendor. The September 1, 2026 obligation has been annulled.

👉 One thing to keep in mind: self-certification lowers the administrative barrier, but it shifts the compliance risk onto the vendor. You attest, you’re liable — so the strength of your technical foundation matters more than ever.

Certification timeline in France

• 2018 — The ISCA obligation begins (Article 286 CGI). Two valid proofs from the start: an accredited certificate or a vendor attestation.
• February 16, 2025 (Finance Law 2025, Art. 43) — Self-certification abolished; only accredited certificates accepted.
• October 1, 2025 (BOFiP) — Deadline to hold an accredited certificate pushed back to August 31, 2026.
• February 21, 2026 (Finance Law 2026, Art. 125) — Self-certification reinstated. The vendor’s individual attestation is once again valid proof, alongside accredited certification. The September 1, 2026 deadline is annulled. (Confirmed by BOFiP commentary on March 25, 2026.)
• Today — Both routes are valid. The underlying ISCA obligation remains in force for every VAT-liable business recording B2C payments.

Technical requirements for POS systems, simplified

Compliance for POS software and systems is based on four principles, commonly called ISCA: inalterability, security, conservation, and archiving. These did not change with the 2026 reversal — but the method of proof did.

• Inalterability: calculate daily, monthly, and annual closings, and keep both period grand totals and perpetual totals. Hash, sign, and journal all records to ensure tamper-evident integrity and prevent undetected changes.
• Security: each transaction must be protected by digital signature or hashing, allowing verification.
• Conservation: records must be stored for 6 years, extended to 7 when the fiscal year is off-calendar.
• Archiving: data must be exportable in a secure and readable format for audits.

This means that every compliant POS software must include tamper-proof logs, immutable reports, digital seals, and a standardized export function — whether you self-certify or get accredited.

The accredited route: are LNE certification and NF525 certification the same?

Accredited certification is no longer mandatory, but it remains the strongest proof of compliance in a tax audit, because it rests on an independent, third-party assessment. Two main options exist:

• LNE certification, issued by the Laboratoire National de Métrologie et d’Essais
• NF525 certification, managed by AFNOR/InfoCert

Both validate the same legal requirements, but each certification body has its own standards, so their requirements and processes differ. The process includes:

1. Submitting documentation showing how the software meets the technical requirements
2. Undergoing functional and technical tests performed by the certifying body during a formal audit (on-site)
3. Receiving the certificate of conformity

Once obtained, your certified cash register software is officially recognized as compliant by the French tax administration.

Risks of non-compliance

The mode of proof has relaxed, but the consequences of not being compliant have not:

• Merchants: fines of €7,500 per non-compliant register, renewed until the issue is resolved
• Software vendors: penalties of up to 15% of revenue generated from non-compliant solutions
• Criminal liability:
  • A false or unfounded vendor attestation carries real legal weight — issuing one exposes the vendor
  • VAT payers who knowingly present a false attestation or certificate to the authorities face the same penalties

With self-certification back, the vendor’s attestation is once again your responsibility to stand behind. That makes a reliable technical foundation essential.

How to stay compliant easily with fiskaly

Whether you self-certify or go for accredited certification, the technical bar is identical — and that’s exactly what fiskaly takes care of. Our solutions fiskaly SIGN FR and fiskaly SAFE provide the infrastructure to ensure your POS remains compliant.

• fiskaly SIGN FR: every transaction is digitally signed and protected against alteration, guaranteeing inalterability and security. SIGN FR also ensures automatic periodic closings (daily, monthly, yearly).
• fiskaly SAFE: storage, retention, and archiving in line with fiscal standards, ready for audits. fiskaly’s archive allows easy access and readability for your users in the event of an audit.

Because we build to the requirements set by InfoCert and LNE, your software meets the bar whichever proof route you choose. Self-certify with a solid technical foundation behind your attestation, or get support for LNE / NF525 certification.

Ready to stay compliant in France?

Self-certification in France… c’est de retour. With the 2026 Finance Law, you can again prove compliance with your own vendor attestation — no mandatory third-party audit. But the technical requirements haven’t moved an inch, and as the vendor, the responsibility sits with you.

Whether you’ve heard of LNE certification, NF525 certification, self-certification, or certified cash register software… it doesn’t matter how you call it: fiskaly helps you comply with the legal requirements and focus on scaling your business, taking the compliance load off your shoulders.

👉 Contact us to learn how fiskaly SIGN FR and SAFE can prepare your cash register system for compliance in France — giving your clients a solution fully aligned with fiscal control requirements, whichever proof route you choose.

Our mission is to make fiscalization simple, transparent, and reliable for software vendors who want to operate in regulated markets.

We are already a trusted partner for many POS providers across Europe. fiskaly operates in Germany, Austria, Spain, and Italy, where our services are certified and used daily by thousands of merchants. With over 1 million POS terminals powered by fiskaly solutions, we bring expertise and proven stability to every market.

👇 Let’s talk about how fiskaly can help you stay compliant in France with confidence.