fiskaly SIGN DE

Introduction

fiskaly SIGN DE is a cloud-based fiscalization solution for the German market, provided as Software as a Service (SaaS). It provides a certified Technical Security System (Technische Sicherheitseinrichtung, TSE) in accordance with the German Cash Register Security Regulation (Kassensicherungsverordnung, KassenSichV). fiskaly SIGN DE enables Point of Sale (POS) providers (CUSTOMER) and their merchants (END CUSTOMER) to cryptographically sign and secure cash register transactions — fully in the cloud, with no additional hardware required. The service is accessed via a RESTful API and managed through the fiskaly HUB.

Service Description

fiskaly makes SIGN DE available to the CUSTOMER as SaaS. The CUSTOMER obtains access to the functionality of fiskaly SIGN DE via the API and may sublicense its use to END CUSTOMERS through an authorisation system. Key aspects of the service include:

• Provision of a certified cloud-based TSE in accordance with KassenSichV and BSI TR-03153-1.
• Non-exclusive, non-transferable right of use, limited to the term of the contract and the territory of the Federal Republic of Germany, sublicensable only to END CUSTOMERS.
• Data generated by the END CUSTOMER is held by fiskaly for a period of three (3) months.
• Provision of the current version of fiskaly SIGN DE, including updates at irregular intervals.
• Access to a TEST SYSTEM for integration purposes.
• Use of the fiskaly HUB for management and administration.

📘Note

fiskaly’s scope of services does not include: integration of fiskaly SIGN DE into recording systems; development of individual solutions or adaptations; training services; provision of internal documentation (except public integration instructions and API descriptions via workspace.fiskaly.com); data transfer services between the API and the END CUSTOMER’s IT systems; storage of data beyond the three (3) month period; or support and assistance services not expressly specified in the contract.

Functionalities

• Cryptographic transaction signing: Each transaction is digitally signed in accordance with KassenSichV and BSI TR-03153-1, ensuring integrity and authenticity.
• Authorisation system: The CUSTOMER manages access for END CUSTOMERS via user credentials or other approved procedures.
• Continuous monitoring: fiskaly monitors functionality of fiskaly SIGN DE up to the API and eliminates malfunctions that restrict or prevent use.
• Malfunction management: Structured priority-based fault reporting and response, with response times and communication channels defined in the annex “service and malfunctions.”
• Update management: Updates are announced at least two weeks in advance and deployed during defined maintenance periods (except emergency updates).
• Copyright protection: fiskaly SIGN DE is copyright-protected; the CUSTOMER may not remove or manipulate copyright notices.

System Requirements

• A valid contractual relationship with fiskaly permitting use of the service.
• An internet connection for integration and operation.
• Integration of the fiskaly SIGN DE API into the CUSTOMER’s recording system, in accordance with the API documentation and interface requirements.
• The connection between the recording system and fiskaly SIGN DE must function without interference; integration should be implemented so that outages of the fiskaly SIGN DE service do not block the recording system.
• Access to the fiskaly HUB for administration and management.

Maintenance and Support

fiskaly is committed to maintaining and updating fiskaly SIGN DE. fiskaly undertakes to maintain and update the Service with a view to supporting its security, availability, and ongoing alignment with applicable technical and reporting requirements; however, the Customer remains responsible for implementing required updates, migrations, and integration changes on its side. The service is versioned according to semantic versioning; significant changes resulting in new major releases will be documented. Maintenance activities may result in the temporary outage of the service. As far as possible, these activities shall be announced at least two (2) weeks in advance; emergency maintenance activities may deviate from this. fiskaly provides assistance to customers via the fiskaly support portal (support.fiskaly.com).

Testing

fiskaly provides a TEST SYSTEM (sandbox environment) for fiskaly SIGN DE. This is a fully functional environment with the same properties as the LIVE system, intended for integration testing and validation. New versions of the service are made available in the TEST environment before their LIVE release. The CUSTOMER should verify correct integration before operating with real tax-relevant data. fiskaly is not responsible if real data is provided in the TEST environment.

Service Limitations

• The functionality of fiskaly SIGN DE outside the API, particularly on the recording systems, is expressly not warranted.
• fiskaly does not warrant the proper integration into the CUSTOMER’s recording system.
• fiskaly does not warrant the fulfillment of requirements for itemised billing, document splitting, or cash register obligations that go beyond the provision of a technical security device.
• fiskaly does not warrant other requirements for the proper operation of a recording system (e.g., correct integration of DSFinV-K, GoBD, archiving).
• fiskaly does not guarantee binding resolution times for malfunctions.
• fiskaly is not obliged to accept or process fault reports made directly by the END CUSTOMER.

Customer Obligations

• The CUSTOMER is responsible for integrating fiskaly SIGN DE into its recording systems at its own expense, fulfilling all framework criteria and system requirements as documented.
• The CUSTOMER must ensure that the connection to fiskaly SIGN DE functions without interference, including non-blocking or asynchronous implementation.
• The CUSTOMER must support fiskaly in the provision of services to a reasonable extent and must not engage in conduct that hinders fiskaly (e.g., abusive use of transaction volume, storage, or support channels).
• The CUSTOMER must not misuse fiskaly SIGN DE or use it in a way that negatively affects availability for other customers, and must ensure data introduced into the system is free of harmful components.
• The CUSTOMER acknowledges that the END CUSTOMER is responsible for compliance with all statutory obligations pursuant to KassenSichV, including managing all information, data, backups, and reports required by the competent financial authority.
• The CUSTOMER must notify fiskaly independently and in good time of any changes to its data (e.g., company name, billing address, e-mail).
• The CUSTOMER must ensure that access credentials are kept confidential and issued only to authorised persons, and must report any unauthorised access immediately.
• The CUSTOMER shall provide its END CUSTOMERS with all information necessary to comply with legal requirements and the use of fiskaly SIGN DE.

---

Version: v.1 | Last updated: 2026/03/24