GoBD Compliance in Germany 2026: Bookkeeping Rules for Freelancers, UG and GmbH

If the German tax office (Finanzamt) shows up for a tax audit, an Excel sheet won't get you through. Anyone keeping books in Germany – freelancer, UG or GmbH – has to comply with the GoBD. This guide breaks down what the term means, which obligations apply in 2026 and how to recognize GoBD-compliant bookkeeping.

Key takeaways

• The GoBD apply to everyone who keeps tax-relevant records in Germany – including Kleinunternehmer and EÜR freelancers.
• Core duties: traceability, immutability, timely posting, receipt-backed booking and a written process documentation (Verfahrensdokumentation).
• Since 2025 you only keep booking receipts for 8 years; balance sheets and inventories still ten.
• During an audit your system must allow data access Z1–Z3 and export data in GoBD format.
• Violations cost up to €25,000 in fines (§ 379 AO) plus add-on estimates – worst case, your whole bookkeeping is rejected.

What are the GoBD?

GoBD stands for Grundsätze zur ordnungsmäßigen Führung und Aufbewahrung von Büchern, Aufzeichnungen und Unterlagen in elektronischer Form sowie zum Datenzugriff – the principles for proper digital bookkeeping issued by Germany's Federal Ministry of Finance. The current version dates from 2019 with targeted updates in 2024.

The GoBD aren't a separate law. They interpret existing rules in the German Fiscal Code (§ 145–147 AO) and Commercial Code (§ 238 ff. HGB). Non-compliance allows the Finanzamt to reject your books and estimate revenue and profit.

Who has to comply?

Effectively every business in Germany. That covers:

• GmbH and UG – statutory bookkeeping obligation under § 238 HGB.
• Freelancers and self-employed using EÜR – even a simple cash-basis profit calculation must be GoBD-compliant.
• Kleinunternehmer – VAT exemption doesn't release you from the GoBD.
• Sole traders (Gewerbetreibende) – above €800,000 revenue or €80,000 profit, double-entry bookkeeping is also mandatory.

Even if you only scan receipts and store them in an app, the digital archive itself must satisfy GoBD.

The ten GoBD principles in plain English

The GoBD set out ten core principles:

1. Traceability and verifiability – a knowledgeable third party must be able to follow your books in reasonable time.
2. Truth, clarity and continuous recording – every entry must be accurate and chronological.
3. Completeness – no transaction may be missing.
4. Single transaction record – each transaction is recorded individually, not just in totals.
5. Timely posting – non-cash transactions within ten days, cash transactions daily.
6. Order – logical and chronological filing of receipts and entries.
7. Immutability – posted entries can't be silently overwritten. Corrections happen via reverse postings.
8. Receipt-backed posting – no booking without a supporting document.
9. Data security – access control and audit-proof storage.
10. Process documentation – the bookkeeping process itself must be described in writing.

In practice these principles interlock: every receipt follows the same path from intake to audit-proof storage. Automate that path cleanly and you satisfy the GoBD almost as a side effect.

Process documentation: the requirement most founders miss

The Verfahrensdokumentation is the script for your bookkeeping. It explains how receipts are captured, checked, posted, filed and archived. Without it, your books are treated as non-compliant. A complete document has four parts:

• General description of the company and its bookkeeping processes
• User and system documentation of the software and hardware in use
• Receipt flow – intake, capture, posting, archive, including receiving and processing e-invoices
• Internal control system and access permissions against data manipulation

Even a one-person business needs one. In a Betriebsprüfung it's usually the first thing the auditor asks for. Since B2B businesses must be able to receive e-invoices from 2025, the GoBD explicitly require you to document the receiving channel and validation of electronic invoices too.

Retention periods: eight years instead of ten

The Wachstumschancengesetz cut many retention periods from ten to eight years starting in 2025 – mainly for booking receipts. Which period applies to which document:

Originally digital documents must be stored digitally – a printout isn't enough. A PDF invoice received by email stays archived in its original file format. Scanned paper receipts have to be archived in audit-proof form, which the process documentation must describe. Each period starts at the end of the calendar year in which the receipt was created.

Data access during a tax audit: Z1, Z2 and Z3

A core element of the GoBD is data access. In a tax audit or an unannounced cash inspection, the auditor may reach your tax-relevant data three ways:

This is why the GoBD data export (also called the GDPdU format) matters: without it you can't meet the Z3 requirement. Good software delivers this export at the click of a button.

What happens if you don't comply?

If the Finanzamt finds GoBD violations, several escalation steps follow – from a formal notice to a fine:

The fine under § 379 AO (tax endangerment) can reach €25,000. If data access is refused or delayed, an additional delay penalty of at least €2,500 applies. In serious cases, criminal tax proceedings follow.

How to recognize GoBD-compliant software

GoBD-compliant software shares these traits:

• Postings are immutable; corrections create reverse and new entries with an audit trail.
• Receipts are captured digitally, OCR-processed and stored in audit-proof form.
• Data export in GDPdU/GoBD format for tax-audit data access (Z3).
• The vendor provides a process documentation template.
• Receiving and archiving e-invoices is handled cleanly.

Norman covers all of this out of the box. The AI bookkeeping captures receipts automatically, posts in a GoBD-compliant way and provides a full audit trail. Every account ships with a process documentation template.

Frequently asked questions about GoBD compliance

Do the GoBD apply to Kleinunternehmer too?

Yes. The small-business rule under § 19 UStG only exempts you from VAT, not from record-keeping duties. Even a simple EÜR must capture receipts completely, on time and immutably.

Is Excel GoBD-compliant?

A plain Excel sheet usually isn't: entries can be changed at any time without a trace, there's no audit trail and no locking. That breaks the immutability principle. Excel is acceptable at most as a pre-stage if the data is then transferred audit-proof into GoBD-compliant software.

Do I really need a process documentation as a sole trader?

Yes. The duty applies regardless of company size. For a simple one-person business the documentation is short, but it must exist and describe the actual receipt flow.

How long must I keep e-invoices?

E-invoices are booking receipts and fall under the 8-year retention period. What matters is that they're archived audit-proof in their original electronic format (e.g. a structured XML/ZUGFeRD file) – a printout is not enough.

What's the difference between GoBD and GoB?

The GoB (principles of proper bookkeeping) are the overarching, partly unwritten bookkeeping principles. The GoBD specify how those principles apply to digital bookkeeping and data access.

Conclusion

GoBD compliance isn't optional – it's a legal obligation. Investing early in proper bookkeeping saves expensive estimates and audit stress later. With modern software, the right data export and a process documentation written once, the bar in 2026 is lower than it has ever been.