NF525 Certification to ensure French POS compliance | Smeetz

‍Smeetz achieves NF525 certification to ensure French POS compliance

France has passed a new standard for point-of-sale (POS) systems. NF525, part of France's Finance Act 2025, brings new requirements for all POS users, including those engaged in ticket sales. Smeetz POS and ticketing platform has already achieved certification through InfoCert, France's leading software certification organisation. The accreditation ensures our clients in France meet the new regulatory requirements before they fully go into effect next year.

The new accreditation is another step in our plan for a Europe-wide certification roadmap, which will allow us to provide streamlined cross-border deployment for our clients with locations in different countries.

Here is a closer look at NF525, why early certification is important, and how using our certified software benefits venues.

What are NF525 and ISCA?

NF525 applies to all companies operating in France that use POS or cash register systems, are subject to VAT collection requirements, and need to prove they abide by anti-VAT fraud laws. Ultimately, the aim of the regulation is to stop VAT fraud by making it impossible for anyone to manipulate financial data generated by cash registers or POS systems.

NF525's requirements can be broken down into four parts. These are explained using the acronym ISCA (inalterability/security/conservation/archiving).

• Inalterability means all transaction records are accurate and can't be changed after the fact.
• Security means strong access requirements, robust data encryption, and signatures to protect against data theft or record manipulation.
• Conservation means keeping all necessary transaction records for the required timeframe.
• Archiving means preserving records in a way that makes transactions traceable and providing a system for accessing the data when necessary.

The goal of NF525 is to prevent VAT fraud. It will also help ensure security for personal financial data. It improves on regulations that have been in place for more than seven years.

ISCA requirements were first instituted in France in 2018. However, there is one very important requirement that is new for 2025: accredited certification.

Why Is accredited certification important?

Before the Finance Act 2025, software providers required to abide by ISCA rules were able to self-certify. They were only required to attest that they followed ISCA requirements. In other words, to keep operating, all they had to do was say that they were following the regulations. If they were not, it would not be evident until there was an audit.

NF525 ends this self-certification practice. Now, software providers need to get certification from an accredited third party.

Why Get certified ahead of the deadline?

Technically, full third-party certification is not yet required. However, some software providers, including Smeetz, have already obtained it. As of September 1, 2025, all companies providing POS services must show that they have at least started the accreditation process. They must achieve full certification in one year (before September 1, 2026).

Those who have already completed the process are well ahead of the game. Why? Venues using Smeetz for ticketing and other POS transactions won't have to worry about any delays or problems with the certification process. They can be confident that they are already using certified cash register software.

What happens to companies with non-compliant software?

They won't have to worry about potentially steep fines for not being in compliance after September 2026. There will be a €7,500 fine per non-compliant system or software. Then, the company will have only 60 days to launch a compliant system.

It's also likely that non-compliant companies will have to contend with regular audits in the months and years following the initial fines and sanctions.

There's an obvious risk for using software that isn't on track for certification or already NF525-certified.

What does certification mean for Smeetz clients?

NF525 certification ensures we are able to continue providing services to clients without having to worry about the September 2026 deadline. There will be no need to hurriedly switch to another attractions ticketing system if another provider's certification falls behind schedule.

Smeetz clients also get other benefits from the accreditation.

Straightforward audits

Certification requirements include proper storage and organisation of transaction data. This information is essential for a streamlined auditing process. If an entertainment venue gets audited by tax authorities, it can provide all the data necessary for a smooth and hassle-free process. Since all the data is already in the required format, there will be no need to manually compile records or provide additional documentation or proof.

Data integrity

To get certified for NF525, we had to meet data security and integrity standards. The transaction data can't be hidden, changed, or deleted. In addition to ensuring data is accurate for compliance, this protects venues that use the platform and their customers from internal or external fraud.

Receipts

Certification means that all transactions are properly recorded with official receipts. This lets venues bring a high level of transparency to customers and ensures that there is always proper evidence of transactions should a customer require it.

Reputational protection

NF525 software gives customers peace of mind. They can be confident that their financial data is protected and secure to the highest standard.

Europe-wide compliance for seamless cross-border operation

For Smeetz, NF525 certification is an important step, but it's just one piece of a larger campaign. We are taking steps to gain certification in other European countries. Currently, this Europe-wide accreditation roadmap consists of a mix of achieved, pending, or soon-to-be-completed certifications. These will ensure compliance with regulations beyond France. The other countries include Italy, Malta, Spain, Belgium, and Portugal.

Why are we taking these steps? It will improve compliance for clients in each of the aforementioned countries. It can also bring multi-venue compliance to businesses with locations in different countries. They will account for regulations in each host country with the same POS systems. They will not need to rely on different systems in different countries.

The ability to use one central commerce platform for all transactions is a huge advantage. It streamlines everything from record-keeping and reporting to employee training and data analysis.

Our compliance roadmap will make it possible to use such a unified system across borders in Europe.

Future-proof POS compliance with Smeetz

Operating in France or planning to expand? Talk to us about deploying Smeetz with NF525 compliance across your venues.