Description of the System in Accordance with § 131 BAO – E131
E131 Documentation for the Shopify POS System
1. General Information
- POS System: Shopify POS
- POS System Cloud Backend Provider: Shopify Inc.
- RKSV Provider: OpenFiskal
- Security Module (RKSV): Fiskaly cloud solution, certified by Fiskaly GmbH, Mariahilferstraße 36, 1070 Vienna, VAT ID: ATU73948115
- Last Update: 08.09.2024
2. Functionality of the POS System
The Shopify POS system consists of an iPad-based POS system and a cloud-based backend for storing and processing data. The iPad serves as the transaction interface, while the cloud backend secures and logs all business transactions.
3. Security Module According to RKSV
The POS system, in combination with the OpenFiskal App for Shopify, uses a cloud-based security module (RKSV) from Fiskaly, which digitally signs all transactions in accordance with Austrian requirements. The security module is certified by Fiskaly and ensures data integrity and immutability.
4. Receipt Numbering and Signature
- Every receipt is assigned a unique RKSV receipt number.
- Every transaction is signed by Fiskaly, ensuring that receipts cannot be altered afterwards.
5. Logging and Fiscal Journal
- All transactions are immutably stored in a journal (Data Capture Protocol 131) that can be exported via the Shopify app “Data Exporter – Tax Compliance.”
- Cancelled or modified transactions are also recorded in the journal with a unique identifier.
- Exports are typically made in CSV format and must be performed manually by the POS system user.
6. Offline Functionality
- During offline phases, data is stored locally on the device. Once the internet connection is restored, transactions are synchronized with the cloud backend.
- Unsigned transactions are signed retroactively by OpenFiskal daily at 11 p.m., provided the POS device has reconnected to the internet and synchronized with Shopify before that time.
- If the Shopify POS app is uninstalled, all locally stored data is irreversibly lost, and no synchronization with the cloud backend takes place.
7. Control and Audits
Tax authorities may access data via the Shopify Admin area, which must be granted access by the retailer. All required reports and exports can be provided by the retailer.
8. Monthly and Annual Reports
OpenFiskal automatically generates the monthly and annual reports required by the RKSV and makes them available within the OpenFiskal App.
9. DEP7 Export
The Data Capture Protocol (DEP7) export can also be generated via the OpenFiskal App. This export contains all relevant transactions in a legally compliant JSON format, as required for audits by the tax authorities.
10. User Manuals
- The complete Shopify user guide can be found at: help.shopify.com.
- For additional support and information on the OpenFiskal App, refer to the OpenFiskal manual at: openfiskal.featurebase.app/help.
11. Protection Against Manipulation
All data captured by Shopify POS is protected against manipulation. Every transaction is signed via the Fiskaly cloud solution and recorded in the journal. This ensures that no transaction can be altered retroactively.
If a device is offline, transactions are synchronized and signed once the connection is restored, ensuring continuous compliance with manipulation security requirements.
Updated on: 14/09/2025
Thank you!