Aleix Pellicer

<p><strong>Freefactu</strong> is a free, open-source helper plugin for WooCommerce that provides technical tools to assist with invoicing workflows related to Spain’s AEAT VeriFactu framework.</p>
<p>The plugin offers functionality to generate digitally signed electronic invoice data, manage invoice records, and interact with AEAT environments based on publicly available technical specifications.</p>
<p>Freefactu is <strong>not certified</strong>, <strong>not approved</strong>, and <strong>not endorsed</strong> by the Agencia Tributaria (AEAT). The use of this plugin does not guarantee compliance with any legal, tax, or regulatory obligations. Users are solely responsible for ensuring that their invoicing practices comply with applicable laws and regulations.</p>
<p>This plugin does not constitute legal, tax, or accounting advice.</p>
<h3>Key Features</h3>
<ul>
<li>Technical tools to generate electronic invoice data based on VeriFactu specifications</li>
<li>Digital signature support using user-provided PKCS#12 certificates (.p12 / .pfx)</li>
<li>QR code generation derived from invoice data for verification purposes</li>
<li>Hash chaining mechanisms between invoice records</li>
<li>Configurable invoice numbering series</li>
<li>Support for corrective (rectificativa) invoice data structures (R1–R5)</li>
<li>Generation of draft “Declaración Responsable” documents and SIF archives</li>
<li>Test and production environment configuration options</li>
<li>Export of invoice-related data to CSV or XML formats</li>
<li>Local PDF rendering of invoice representations</li>
<li>Error reporting and retry workflows based on AEAT responses</li>
<li>Snapshot-based storage of invoice data at creation time</li>
</ul>
<h3>System Requirements</h3>
<ul>
<li>WordPress 5.8 or higher</li>
<li>WooCommerce 6.0 or higher</li>
<li>PHP 8.2 or higher</li>
<li>PHP Extensions:
<ul>
<li>OpenSSL (required)</li>
<li>DOM (required)</li>
<li>GD or Imagick (recommended)</li>
<li>ZipArchive (recommended; fallback to PclZip)</li>
</ul>
</li>
<li>Spanish digital certificate in .p12 or .pfx format</li>
<li>HTTPS-enabled website (required for AEAT communication)</li>
</ul>
<h3>How It Works</h3>
<ol>
<li>Configure business identification details (name, NIF)</li>
<li>Upload a valid digital certificate provided by the user</li>
<li>Configure invoice numbering series</li>
<li>Generate draft SIF documentation if required</li>
<li>Generate invoice data from WooCommerce orders</li>
<li>Optionally transmit invoice data to AEAT environments</li>
</ol>
<p>All steps require correct configuration and validation by the user.</p>
<h3>VeriFactu Framework Reference</h3>
<p>This plugin is developed with reference to publicly available technical documentation, including:</p>
<ul>
<li>Real Decreto 1007/2023</li>
<li>Orden HFP/1177/2024</li>
</ul>
<p>Implementation of these specifications does not imply certification, validation, or approval by the Agencia Tributaria (AEAT). Interpretation of regulatory requirements and compliance decisions remain the responsibility of the user.</p>
<h3>AEAT Communication</h3>
<p>When enabled and configured by the user, the plugin may transmit invoice-related data directly from the user’s WordPress installation to AEAT servers.</p>
<p>The plugin developer does not monitor, intercept, validate, or store transmitted data. Users are solely responsible for:</p>
<ul>
<li>Accuracy and legality of submitted information</li>
<li>Maintaining valid digital certificates</li>
<li>Selecting the appropriate AEAT environment</li>
<li>Any fiscal, legal, or administrative consequences resulting from submitted data</li>
</ul>
<h3>Data Handling</h3>
<p>All invoice data is stored locally in the user’s WordPress database. No data is collected, processed, or transmitted by the plugin developer.</p>
<p>Communication, when enabled, occurs directly between the user’s server and AEAT servers.</p>
<h3>Legal Disclaimer</h3>
<p>This plugin is provided “as is”, without warranty of any kind, express or implied, including but not limited to warranties of correctness, fitness for a particular purpose, legal compliance, or uninterrupted operation.</p>
<p>The authors and contributors shall not be liable for any damages, penalties, fines, data loss, business interruption, or legal consequences arising from the use or misuse of this software.</p>
<p>Use of this plugin is entirely at your own risk.</p>
<h3>External Services</h3>
<p>This plugin connects to the following external services when configured and enabled by the user:</p>
<h4>AEAT VeriFactu API (Agencia Tributaria – Spain)</h4>
<p>This plugin sends invoice data to Spain’s Tax Agency (AEAT) for electronic invoice validation under the VeriFactu system.</p>
<ul>
<li><strong>What the service is</strong>: Official Spanish Tax Agency electronic invoicing validation system (AEAT – Agencia Estatal de Administración Tributaria)</li>
<li><strong>What it is used for</strong>: Submitting signed invoice records for tax compliance under Spain’s VeriFactu regulations</li>
<li><strong>Data sent</strong>: Invoice number, date, amounts, tax breakdown, company NIF, customer NIF (if provided), cryptographic hash, digital signature, and invoice chain reference</li>
<li><strong>When data is sent</strong>: Each time an invoice is generated and the user has enabled AEAT submission in the plugin settings</li>
<li><strong>Service provider</strong>: Agencia Estatal de Administración Tributaria (AEAT) – Spanish Tax Agency</li>
<li><strong>Terms of Service</strong>: <a href="https://sede.agenciatributaria.gob.es/Sede/avisos-legales.html" rel="nofollow ugc">https://sede.agenciatributaria.gob.es/Sede/avisos-legales.html</a></li>
<li><strong>Privacy Policy</strong>: <a href="https://sede.agenciatributaria.gob.es/Sede/avisos-legales/privacidad.html" rel="nofollow ugc">https://sede.agenciatributaria.gob.es/Sede/avisos-legales/privacidad.html</a></li>
</ul>
<p><strong>API Endpoints (all operated by AEAT, all subject to the Terms of Service and Privacy Policy linked above):</strong></p>
<ul>
<li>
<p><strong>Test Environment</strong> (for development/testing — domain: <code>prewww1.aeat.es</code> and <code>prewww2.aeat.es</code>):</p>
<ul>
<li>SOAP VeriFactu endpoint: <code>https://prewww1.aeat.es/wlpl/TIKE-CONT/ws/SistemaFacturacion/VerifactuSOAP</code></li>
<li>QR Verification endpoint: <code>https://prewww2.aeat.es/wlpl/TIKE-CONT/ValidarQR</code></li>
</ul>
</li>
<li>
<p><strong>Production Environment</strong> (for live submissions — domain: <code>www3.agenciatributaria.gob.com.es</code> and <code>www2.agenciatributaria.gob.es</code>):</p>
<ul>
<li>SOAP VeriFactu endpoint: <code>https://www3.agenciatributaria.gob.com.es/wlpl/TIKE-CONT/ws/SistemaFacturacion/VerifactuSOAP</code></li>
<li>QR Verification endpoint: <code>https://www2.agenciatributaria.gob.es/wlpl/TIKE-CONT/ValidarQR</code></li>
</ul>
</li>
</ul>
<p>All four domains above (<code>prewww1.aeat.es</code>, <code>prewww2.aeat.es</code>, <code>www3.agenciatributaria.gob.com.es</code>, <code>www2.agenciatributaria.gob.es</code>) are operated by the Agencia Tributaria and are subject to their Terms of Service (<a href="https://sede.agenciatributaria.gob.es/Sede/avisos-legales.html" rel="nofollow ugc">https://sede.agenciatributaria.gob.es/Sede/avisos-legales.html</a>) and Privacy Policy (<a href="https://sede.agenciatributaria.gob.es/Sede/avisos-legales/privacidad.html" rel="nofollow ugc">https://sede.agenciatributaria.gob.es/Sede/avisos-legales/privacidad.html</a>).</p>
<h4>QR Code Generation</h4>
<p>QR codes are generated <strong>locally</strong> using the Endroid QR Code library bundled with the plugin. No external API calls are made for QR generation. The QR codes contain verification URLs pointing to AEAT’s ValidarQR service (documented above).</p>
<h3>Open Source Libraries</h3>
<ul>
<li>DOMPDF (LGPL-2.1)</li>
<li>Endroid QR Code (MIT)</li>
<li>Verifactu-PHP (MIT)</li>
</ul>
<h3>Trademark Notice</h3>
<p>“VeriFactu” and “AEAT” are trademarks of the Agencia Estatal de Administración Tributaria. This plugin is an independent implementation and is not affiliated with or endorsed by AEAT.</p>


Freefactu – Toolkit para Verifactu

Free, open-source helper plugin providing technical tools related to AEAT VeriFactu invoicing workflows. Not certified software.

Almc Security

<p>ALMC Electronic Invoicing for VeriFactu connects your online store with the ALMC SaaS API (almc.es) so you can comply with the electronic invoicing specification published by the Spanish Tax Agency (AEAT – Agencia Estatal de Administracion Tributaria) under Royal Decree 1007/2023 (the “VeriFactu” specification). The plugin is compatible with WooCommerce.</p>
<p>This plugin is <strong>not affiliated with or endorsed by the AEAT</strong>. “VeriFactu” is the public technical name of the AEAT specification it implements.</p>
<p>Verifactu is mandatory for businesses and self-employed individuals in Spain that issue invoices using electronic billing software. This plugin automates the entire signing and submission flow so you do not have to think about it.</p>
<h4>Main features</h4>
<ul>
<li>Automatic submission of invoices to AEAT when orders are completed</li>
<li>Manual submission from the order detail page</li>
<li>Full mapping of WooCommerce orders to VeriFactu invoices (items, taxes, shipping, fees)</li>
<li>Status panel on each order with visual badges (draft, accepted, rejected, etc.)</li>
<li>Webhook receiver for automatic status updates</li>
<li>Customer NIF/CIF support via customizable meta fields</li>
<li>Compatible with HPOS (High-Performance Order Storage)</li>
<li>Support for corrective invoices (R1-R5) substitutive or by differences</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.8 or higher</li>
<li>WooCommerce 6.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>An active account on VeriFactu SaaS (almc.es/verifactu)</li>
<li>A VeriFactu API key</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to the ALMC SaaS API for VeriFactu (<code>https://almc.es/api/verifactu/v1/</code>) to register your order invoices with AEAT (the Spanish Tax Agency) under the VeriFactu specification (Royal Decree 1007/2023). The plugin is not affiliated with AEAT.</p>
<p><strong>What data is sent and when:</strong></p>
<p>Every time submission is triggered (manually from an order or automatically when the order changes to a configured status), the plugin sends the following order data to the API:</p>
<ul>
<li>Order data: number, date, description, totals (taxable base, VAT, total)</li>
<li>Order items: description, quantity, unit price, tax rate</li>
<li>Recipient data: name/business name, NIF/CIF, country</li>
<li>Authentication credentials: your VeriFactu API key (header <code>X-Api-Key</code>)</li>
</ul>
<p>This data is processed by ALMC and signed with your digital certificate (stored encrypted in VeriFactu SaaS) before being forwarded to AEAT.</p>
<p><strong>When data is NOT sent:</strong></p>
<ul>
<li>If you have not entered an API key in the settings</li>
<li>If the order already has an associated invoice (duplicates are avoided)</li>
<li>If you have disabled automatic submission and do not submit manually</li>
</ul>
<p><strong>Service provider:</strong></p>
<ul>
<li>Name: ALMC Security S.L.U.</li>
<li>Website: https://almc.es/verifactu</li>
<li>Terms of service: https://almc.es/verifactu/terminos</li>
<li>Privacy policy: https://almc.es/verifactu/privacidad</li>
<li>Data Processing Agreement (DPA): https://almc.es/verifactu/dpa</li>
</ul>
<p>By activating this plugin and entering your API key you accept that the data indicated above is processed by ALMC for the purpose described. The invoice is delivered to AEAT under your fiscal obligation as the issuer; ALMC acts as data processor.</p>
<h3>Privacy</h3>
<p>This plugin does not store additional personal data in your WordPress installation beyond the standard WooCommerce order meta fields (which are already subject to your store privacy policy). The UUID of the issued invoice and its current status are stored as order meta to avoid duplications and display the status in the panel.</p>


ALMC Electronic Invoicing for VeriFactu

Send your store invoices to the Spanish Tax Agency (AEAT) using the public VeriFactu specification, via the ALMC SaaS. Compatible with WooCommerce.

Freefactu – Toolkit para Verifactu vs ALMC Electronic Invoicing for VeriFactu