Check an e-invoice Book a demo
Solution · Audit-proof archiving

Audit-proof archiving: aligned with GoBD, audit-ready, available at any time.

OXS.eco archives documents for mid-sized companies so they stay immutable, complete and traceable, aligned with the GoBD requirements. Full-text search, audit trail and configurable retention periods are the operational basis.

Google Cloud in Frankfurt · aligned with GoBD · EN 16931 · data processing agreement available · personally supported

In brief

What does audit-proof archiving mean?

Audit-proof archiving means storing and managing documents so that they remain immutable, complete, traceable, ordered and available at any time. The term is closely tied to the GoBD, the German principles for the proper keeping and retention of books, records and documents in electronic form and for data access.

A network drive or an e-mail folder is not audit-proof archiving. There, documents can be changed, moved or deleted without anyone noticing.

RequirementWhat that meansHow OXS.eco covers it
Immutability
Once archived, original documents must not be altered, overwritten or deleted unnoticed.
Signature applied on archiving, protected storage, no overwriting without a log entry
Traceability
Every activity on a document must be logged without gaps and stay traceable for auditors.
Complete audit trail, process history, access and change log
Retrievability
Documents must be findable within a reasonable time and provided in readable form.
Full-text search, indexing, file structure, metadata, export for auditors
Access protection
Only authorized people may access documents. Every access must be verifiable.
Role-based permission model, SSO, TLS-encrypted access, complete access logging
Completeness
All vouchers relevant under tax and commercial law must be captured and archived, without gaps. They are captured from the mailroom and the Invoice Register.
Automatic archiving from workflows, e-mail import, digital mailroom, accounts payable
Retention periods
Depending on their type, documents must be retained for 6, 8 or 10 years. Whether they may or must be deleted afterwards has to be checked per document type.
Retention periods configurable per document type, reminder to the responsible team, your team makes the deletion decision
Audit readiness
In a Betriebsprüfung (German tax audit), data and documents must be provided promptly, completely and in an ordered form.
Structured storage, read access for external auditors, export from the result list
Google Cloud in FrankfurtProcessing and storage in the EU, subprocessors reviewed under contract
SignatureApplied on archiving, secures immutability
TLS encryptionAll transfers encrypted
Document types

What has to be archived audit-proof

Retention obligations apply to every company. Which document types are involved varies by industry.

Invoices & vouchers
  • Incoming invoices & e-invoices
  • Outgoing invoices
  • Approvals & check logs
  • Purchase orders & delivery notes
6–8 years
Contracts & correspondence
  • Commercial contracts & framework agreements
  • Business letters & e-mails
  • Quotes & order confirmations
  • Dunning letters & credit documents
6 years
Logistics & freight forwarding
  • CMR consignment notes & delivery evidence
  • Proof-of-delivery documents (POD) & damage photos
  • Customs documents, proofs of origin & ATLAS
  • Freight invoices & supplier vouchers
6–10 years
Insurance & finance
  • Claims files & settlement records
  • Loan files & collateral
  • Audit reports & compliance documentation
  • Annual financial statements & balance sheets
6–10 years; accounting vouchers at BaFin-regulated institutions 10 years throughout
Public sector
  • Administrative files & official notices
  • E-invoices via PEPPOL/XRechnung
  • Grant notices & supporting evidence
  • OZG cases & applications
Retention periods under sector and budgetary law
Industry & manufacturing
  • Supplier invoices & ERP vouchers
  • ISO quality records & test reports
  • Supplier certificates (REACH, RoHS)
  • Complaint & warranty documents
6–8 years; product and substance records under their own regulations
Process

From document to audit-ready evidence

Capture documents in a structured way, archive them immutably and provide them directly when an audit comes.

01

Capture

Take in documents centrally from e-mail, scan, upload and SFTP, from the invoice workflow and through interfaces to your specialist systems.

02

Index

Assign the document type per channel or workflow, prepare metadata and full text for search.

03

Store immutably

Apply the signature. From then on the document is protected against tampering.

04

Log

Every access, every approval, every change is recorded in the audit trail.

05

Provide

For audits: documents can be retrieved directly via full-text search, case file or export.

ImmutableGoBD requirement covered
Audit trailLogged without gaps
Full-text searchFull text, quick to search
Retention reminderby document type, then your team decides
Outcome

When the auditor arrives, you are ready sooner.

Filterable

No more hours of hunting for documents ahead of a Betriebsprüfung. In OXS.eco your vouchers are central, complete and filterable. Export from the result list with a filter query, or give your external auditor read access directly, without assembling documents by hand. The actual response time depends on data volume and index quality.

Full-text search & case files

Find documents quickly and precisely

Full text, metadata, file structure and filters let teams find any archived document quickly.

Search: invoice · supplier · period · amount
Invoice_2025_Supplier_4711.xml
Approval_log_4711_2025.pdf
Incoming_invoice_4711_2024.pdf
FAQ

Frequently asked questions about audit-proof archiving

Under § 147 AO, § 257 HGB and § 14b UStG: books, annual financial statements and customs records ten years, invoices and accounting vouchers eight years since 2025, commercial and business letters (including e-mail) six years. Each period starts at the end of the calendar year and runs at least as long as the records matter for tax assessments that are not yet final. OXS.eco monitors retention periods per document type and reminds the responsible team. Understand GoBD in detail →

An audit trail is a gap-free, immutable log of every action on a document: creation, access, change, approval, deletion. It is the basis for proving what happened in a Betriebsprüfung.

OXS.eco runs OCR on scanned paper vouchers (from a scanner or OXS.eye) and archives them audit-proof. For replacement scanning under GoBD, a Verfahrensdokumentation covering your scanning process is a prerequisite on your side; we clarify any open points in the initial call.

Yes. E-mails containing invoices, orders or contract content are subject to retention obligations. OXS.eco archives incoming e-mails together with their attachments as vouchers, aligned with GoBD and searchable like any other document.

Yes. Users can correct and add keywords and index data at any time (re-indexing). The document itself stays unchanged and audit-proof.

Yes, every archived document carries a signature. Documents that arrive already signed are archived unchanged and never re-signed. OXS.eco signs unsigned documents on archiving with its own certificate, which secures immutability. On request we integrate signature providers such as D-Trust, for example for outgoing invoices you generate yourself.

Hélène TinetManaging Director · Initial call, demo & onboarding
Next step

Discuss your archiving process in 15 minutes.

In the online meeting we look at how you store documents today and show where OXS.eco makes retention periods, evidence and a Betriebsprüfung noticeably easier. You speak with Hélène Tinet.

MAAS Filderstadt · since 1986