What GoBD actually is

GoBD stands for the "Principles for the proper keeping and storage of books, records and documents in electronic form, and for data access" — a title long enough to explain why everyone just says GoBD. It is not a new law in itself. It is the tax authorities' official interpretation of how existing bookkeeping law applies once your records exist as files rather than paper ledgers.

In practice, GoBD is the standard an auditor measures your books against. Numbers that are technically correct can still fail an audit if the process behind them cannot be trusted — if entries could have been edited invisibly, or nobody can explain how a receipt turned into a booking.

Who has to comply

Everyone who is required to keep tax-relevant records in Germany — which is close to every business. A Freiberufler filing a simple income-and-expense statement, a Gewerbe, a UG, a GmbH: legal form and size do not exempt you. What triggers GoBD is not your company structure but the fact that a record exists digitally at all.

You do not opt in to GoBD. The moment you photograph a receipt on your phone or save an invoice PDF, that file is already covered by it.

The core principles, in plain English

Strip away the legal phrasing, and GoBD asks your bookkeeping to behave in six consistent ways.

The GoBD principles and what they mean day to day.
Principle What it means in practice
Completeness Every business transaction is recorded — no quiet omissions, even small ones.
Correctness Entries reflect what actually happened, backed by a genuine supporting document.
Timeliness Transactions are recorded promptly rather than reconstructed from memory months later.
Order Records are organised systematically enough that an outside auditor can follow them without you explaining every entry.
Traceability Every booking has a documented origin, and its history — including any correction — stays visible.
Immutability Once booked, an entry cannot simply be edited or deleted. Corrections are made as visible reversals, not silent overwrites.

The requirement most people skip: process documentation

GoBD expects a written description of how a document moves through your bookkeeping — from the moment a receipt reaches you to the moment it is archived. This is called a Verfahrensdokumentation, and it is one of the most commonly missed requirements, particularly among solo freelancers who assume it only applies to larger companies. It does not; it applies to you too.

It does not need to be an elaborate manual. A page or two describing where receipts come from, what software captures them, who books them, and where the files are stored and backed up is usually enough. The point is that the process is written down and actually matches what you do, not that it is long.

How long you must keep records

Retention periods vary by document type, and one of them changed recently.

Statutory retention periods for common business records.
Document type Retention period
Accounting records, inventories, annual financial statements 10 years
Booking receipts (invoices, receipts) 8 years, reduced from 10 by a 2025 reform
Business correspondence (Handels- und Geschäftsbriefe) 6 years

The shortened period for booking receipts is recent, and transitional rules can apply to documents whose old ten-year period had not yet expired when the reform took effect. When in doubt, keep older records for the full ten years rather than deleting on the assumption the new period already covers them.

How a tax audit accesses your data

When the Finanzamt audits your books, it can request access in one of three standardised ways.

The three recognised methods of tax audit data access.
Access type How it works
Z1 — direct access The auditor uses your system themselves, read-only, to run their own queries.
Z2 — indirect access Your staff runs the evaluations the auditor requests, using your own software.
Z3 — data carrier transfer You hand over a structured export that the auditor loads into their own analysis tools.

You are not required to support all three, but you must be able to satisfy at least one. In practice, Z3 is the most common route for smaller businesses — check that your accounting software can produce a structured export before you rely on it.

What happens if you're not compliant

Consequences generally escalate rather than arriving all at once. Minor issues typically lead an auditor to flag or reject specific entries. If the bookkeeping as a whole is judged unreliable, the Finanzamt can set aside your figures entirely and estimate (schätzen) your turnover and profit instead — an estimate that is rarely generous to the business being audited. In serious or repeated cases, administrative fines can follow on top of the additional tax the estimate produces.

Is your software actually GoBD-compliant?

Look for these signs before you trust a tool with your books:

  • It keeps a visible audit trail of every change, rather than allowing silent edits.
  • A booked entry can be reversed or corrected, but not truly deleted.
  • Every entry is timestamped automatically at the point of booking.
  • It can produce a structured export suitable for a Z3 data request.
  • Original documents are stored unaltered alongside the booking they relate to.

Much of this can run in the background. Our guide to automating your bookkeeping in Germany covers how bank feeds, receipt capture and posting rules can keep you compliant without extra manual work.

Frequently asked questions

Does GoBD apply to me if I'm a small freelancer using a simple EÜR?

Yes. GoBD applies to anyone required to keep tax-relevant records, regardless of legal structure or size. Using digital tools or saving digital receipts brings you under it automatically.

Can I just keep a folder of PDF scans of my receipts?

Not on its own. A plain folder that anyone can rename, move or overwrite does not meet the immutability requirement. You need a system that timestamps entries and preserves a record of any later change.

Do I need written process documentation if I do my own books?

Yes, in principle — even solo freelancers are expected to have one. It does not need to be long: a page or two describing how receipts reach you, how they are recorded, and how they are archived is usually enough.

How long do I actually need to keep invoices now, eight years or ten?

Booking receipts generally moved to an eight-year period following a 2025 reform, while accounting records and annual statements still need ten years. Check transitional rules with a tax advisor for documents whose old period had not yet expired.

What happens if my software can't produce a Z3 export?

You may struggle to satisfy an auditor's data access request, which can itself count against you. Most established accounting software supports a structured export — confirm this before adopting a tool.