- BSI is introducing a new procedure allowing certified software to stay compliant after updates without recertification by certifying development processes under TR-03185.
- The focus shifts from recertifying each software version to ensuring secure and quality-assured development and change processes.
- Certification under TR-03185 is valid for three years, maintained by annual audits, and removes the need for re-certifications or update notifications.
- The pilot starts in February 2026 for health apps, with plans to expand to other guidelines; certification is optional but offers faster releases, less admin work, and demonstrates secure practices.
- More information will be available on the BSI website; inquiries can be sent to [email protected].
Source: fiscal-requirements.com
Note that this post was (partially) written with the help of AI. It is always useful to review the original source material, and where needed to obtain (local) advice from a specialist.
Latest Posts in "Germany"
- Germany B2B E-Invoicing in 2027: Time to Prepare
- BMF Clarifies VAT Deduction Rules for Permanently Loss-Making Institutions: Two-Step Assessment Required
- Germany Publishes GEBA, Retires Old XRechnung Profiles to Boost E-Invoicing and Peppol Readiness
- Federal Court: Monthly/Quarterly and Annual VAT Returns Are Separate Acts, Not a Single Offense
- Incorrect VAT Statement in Intra-Community Supplies: Taxation Before Quick Fixes and EuG Decision














