Two narrow products on one identity. Every invoice and every signature carries its own proof, so it stands up years after the email that carried it is gone — and the person checking needs no account, no software, and nothing from us.
We use the address only to tell you when the beta opens.
Beta opens early November 2026 · German and French regimes first · no card, no call
Install either. They share your keys, your customers and your proof layer, so the second one costs you no setup.
Quote, invoice, get paid — and prove each step. Every quote, invoice and payment is signed by you, countersigned by the service and timestamped the moment it is sealed.
The signature level is stated, never implied. Simple, advanced or qualified, labelled on the screen where somebody signs and on the document afterwards.
Here, signing in and signing are the same act. The key that opens your account is the key that signs your invoices and documents — so we ask for one you already hold, and we never hold it for you.
A password is a secret you share with us. We would have to store it, and anything "signed" with it would only mean our server says so. A key works the other way round: it signs, and your customer, their accountant or a tax office can check that signature against your public key — years from now, with no account and nothing from us.
Made on your phone or laptop and unlocked with your face, fingerprint or PIN — we ask for the unlock, not just a tap. The private key stays in your device; we keep only its public half, which can check a signature and cannot make one.
If you already use a crypto wallet, it is already a signing key. Your wallet shows you the exact text it is about to sign before you approve it, and you can decline. We see your address and the signature — never your recovery phrase.
On its own, a key makes a simple electronic signature, and every screen says so rather than implying more. Each record is also countersigned by this service and timestamped by an independent RFC 3161 time-stamp authority, so when does not rest on anyone's clock. Qualified signatures arrive with the EU Digital Identity Wallet.
Because we never hold your key, we cannot reset it either. Keep your passkey in a synced password manager, or your wallet's recovery phrase somewhere safe.
One record per step, each signed and timestamped, each checkable by the person on the other side without an account.
Draft an offer, issue it, and send your customer a link. They accept or decline on their own page — no account, no login — and the answer is recorded on the quote.
Filled from your price list and your customer record, totalled by the server as you type, and checked against the rules of your format before it can be issued.
Record money received and put it against one invoice or several. What an invoice still owes is worked out from the payments, never typed in by hand.
Each customer shows what can actually be proved about them — and says not checked where nothing has been, instead of a tick nobody earned.
Where each part stands today. We would rather say "coming" than let a tick stand for something that is not built.
| EN 16931 — the European invoice model every format below is built on | Available |
| XRechnung 3.0 rules checked before issue — Leitweg-ID, IBAN, seller contact | Available |
| Choose your format per company: XRechnung, Factur-X, Peppol BIS 3.0, or PDF only — defaulted from your country | Available |
| The XML file itself — CII for XRechnung and ZUGFeRD / Factur-X, checked against EN 16931 and XRechnung 3.0 before it is written | Available |
| UBL for Peppol BIS | Coming |
| Peppol network delivery through an access point | Coming |
| A ZUGFeRD PDF of the invoice — PDF/A-3 for people who read, with the XML inside for software that imports | Available |
Every signature says which of the three eIDAS levels it is, and what that does and does not give you. Only a qualified signature is automatically equal to a handwritten one, and we say so on the screen rather than in a footnote.
Your VAT number is checked against VIES and recorded with the date it was true. A buyer checking an invoice sees who signed it and when, and what this page does not claim.
The audit trail travels with the document. Ten-year retention does not mean ten years of paying us to keep a server on, and verification does not route through our login.
The same five steps whether the buyer is a person or software. Nothing in the sequence requires a browser or a human gesture, which is what makes an agent a customer rather than a special case.
Join the waitlist and we will tell you once, when the beta opens for your regime.