All features

Compliance

Tax-safe, GDPR-compliant, audit-ready

GoBD, XRechnung, DATEV, GDPR — built in

German tax authorities, auditors and data protection: simplifygastro ships every compliance building block out of the box. Tamper-proof PDF invoices with SHA-256 hash, 10-year retention, XRechnung XML, DATEV export and GDPR self-service.

Tamper-proof invoices
GoBD
Retention period
10 yrs
XRechnung export
XML
Self-service export
GDPR

How it works

Up and running in 3 steps

1

Maintain invoice master data

Add company name, VAT ID, commercial register, management, contact and payment terms once.

2

Automatic invoice generation

Every order generates an invoice: branded PDF, atomic number, SHA-256 hash, email delivery and audit entry.

3

Export & evaluation

Monthly or on demand: DATEV export for accounting, XRechnung XML for B2B customers, GDPR export per guest.

Your benefits

What you gain

GoBD-compliant

Tamper-proof PDFs, atomic numbering, audit trail. Audit-ready for tax authorities.

10-year retention

All documents are retained according to German tax law — at no extra effort.

GDPR & food info

Per-guest self-service data export, deletion workflow, allergen aggregation — compliance at every layer.

Hosting in DE/EU

All data is hosted in Germany/EU. No data transfer to third countries.

In detail

Everything that's included

  • Tamper-proof PDF invoices with SHA-256 hash (document integrity)
  • Atomic invoice number assignment (race-condition-safe)
  • Configurable invoice prefix & number sequence per tenant
  • Service-date tracking for correct tax-period attribution
  • 10-year retention with tax_retention_until field
  • DATEV export (CSV) for tax advisors
  • XRechnung XML (e-invoice standard) for B2B customers
  • Invoice history: audit trail of every change
  • GDPR self-service: data export (JSON/CSV) per guest
  • GDPR deletion via anonymisation rather than hard delete
  • Consent tracking for newsletter, SMS and marketing
  • Food info: allergens aggregated from ingredients into menu items
  • Row-level security: tenant isolation at the database layer
  • Cookie-consent banner with granular choice
  • Data processing agreement (DPA) on request
  • Process documentation available for auditors

Compliance, out of the box

Tax audit, GDPR request, internal audit — all prepared. Try it free for 14 days.