fiskaly SIGN SE

Introduction

fiskaly SIGN SE provides access to the Swedish Tax Compliance System (TCS) for the Swedish market, delivered through fiskaly Sweden AB’s PosConneXion Compliance Platform (PCX). TCS is a cloud-based system formally certified under the Swedish regulation SKVFS 2020:9 (“Control System”). It is certified by an independent, accredited certification body, with the control server environment undergoing strict annual assessments. Through this API, fiskaly enables POS providers (CUSTOMER) and their merchants (END CUSTOMERS) to seamlessly fulfill their legal obligations for Swedish cash register and fiscal compliance.

Service Description

The service is provided as SaaS/Cloud, including:

• Access to the TCS (Tax Compliance System) for transaction signing and cash register compliance.
• Setup in Test and Production environments.
• Self-Declaration Templates (Test Protocol and Manufacturer’s Declaration) as an option.
• IDM (Identity Management) framework for administration of subscriptions and END CUSTOMER access.
• Enrolment API for managing subscriptions and END CUSTOMERS programmatically.
• Data Processing Agreement and Data Security Standards in accordance with GDPR and Swedish data protection law.
• The Customer appoints administrators who manage their own and their END CUSTOMERS’ subscriptions via the IDM framework or Enrolment API.

📘Note

fiskaly’s scope of services does not include: integration into recording systems; development of individual solutions or adaptations; training services; provision of internal documentation (except public integration instructions and API descriptions via workspace.fiskaly.com); data transfer services between the API and the END CUSTOMER’s IT systems; storage of data beyond the three (3) month period; support and assistance services not expressly specified in the contract; or other products of fiskaly.

Functionalities

• Transaction Signing & Fiscal Control: The Control Data (regulated by the Swedish Tax Agency) is transferred from the Customer’s registers to the TCS. Once received, data is cryptographically secured, stored, and locked. It cannot be deleted or manipulated, ensuring a tamper-proof record that only the Swedish Tax Agency is authorized to extract for audits.
• Tax compliance: All processing and storage of this Control Data is handled by the fiskaly cloud control system in strict adherence to the SKVFS 2020:9 regulations and independent third-party certification rules.
• Administration: Volume changes can be activated via API, GUI, or fiskaly support.

System Requirements

• A valid Subscription Agreement with fiskaly.
• POS systems capable of generating and transmitting the Control Data Data Set in the regulated format.
• An internet connection for data transfer to the TCS.
• Correct and updated address information for each END CUSTOMER in the IDM Administration system.
• Communication with fiskaly only via notified email addresses; adequate virus and ransomware protection.

Maintenance and Support

Infrasec (100% owned subsidiary of fiskaly) and fiskaly are committed to maintaining and updating the TCS service. Infrasec undertakes to maintain and update the Service with a view to supporting its security, availability, and ongoing alignment with the applicable SKVFS 2020::9 requirements; however, the Customer remains responsible for implementing required updates, migrations, and integration changes on its side.

The TCS control system is certified by an independent, accredited certification body. While the certificate is valid for a maximum of five years, the control server environment undergoes strict annual third-party assessments covering both software and service operation. fiskaly shall notify the Customer in due time should any audit reveal material faults that could affect the Service.

The service is versioned according to semantic versioning; significant changes resulting in new major releases will be documented. Maintenance activities may result in the temporary outage of the service. As far as possible, these activities shall be announced at least two (2) weeks in advance; emergency maintenance activities may deviate from this. fiskaly provides assistance to customers via the fiskaly support portal (support.fiskaly.com).

Testing

fiskaly provides a TEST environment for both SIGN SE. The TEST environment is fully functional with the same properties as the LIVE system. New versions are available in the TEST environment before LIVE release. Free testing is available for developers. fiskaly is not responsible if real data is provided in the TEST environment. The Test environment allows the Customer to validate integration before going live. Self-Declaration Templates (Test Protocol and Manufacturer’s Declaration) are available as an option.

Service Limitations

• Control Data scope: TCS only processes Control Data (such as aggregated receipt totals and VAT amounts); it does not include credit card information or granular purchase details of end users.
• Data security: Once data is stored and locked, neither the Customer nor any other party (except the Tax Agency) can access, change, or retrieve it.
• Liability: fiskaly is not responsible for third-party materials, services, or network/connectivity issues outside the Service.
• Remedies: Service credits are the sole remedy for downtime (except in cases of gross negligence or wilful misconduct).
• CCU EOL: The CCU (Central Control Unit System) service has reached End of Life (2025-12-31) and is not included.

Customer Obligations

• Responsible for retrieving the Control Data from its registers and transferring it to the Service.
• Must always ensure correct and updated address information for each END CUSTOMER in the IDM system.
• Must communicate with fiskaly only via notified email addresses.
• Must use adequate virus and ransomware protection systems.
• Must not use the Service in violation of the Agreement or General Terms; fiskaly may suspend the Service for violations.
• The Customer (or End Customer) is the data controller of data sent to fiskaly. Once the Control Data is stored and locked, it is cryptographically secured to ensure a tamper-proof record that only the Swedish Tax Agency is authorized to extract for auditing purposes.
• Support requests must be submitted promptly via email with required information (name, contact, detailed description).

---

Version: v.2 | Last updated: 2026/07/10