GoBD Shopify Compliance 2026: What German Stores Must Do

The GoBD text is long, but for a Shopify store it condenses to three hard obligations:

1. Unveränderbarkeit — immutable records (§ 146 AO). Once a business document exists — an invoice, a credit note, an order that has been invoiced — it must not be changeable without a trace. Corrections happen through new documents (Storno, credit note), never by editing the original. A database where an admin can silently rewrite an invoice line fails this test. Shopify's order editor fails this test.

2. Retention — 8 and 10 years (§ 147 AO, § 14b UStG). Since 1 January 2025: invoices and booking documents 8 years, ledgers, inventories, and annual financial statements 10 years. Electronic documents must stay electronic — printing a PDF invoice and deleting the file does not satisfy the rule. The retention clock starts at the end of the calendar year the document was created, so an invoice from March 2026 must survive until 31 December 2034.

3. Verfahrensdokumentation — process documentation. A written description of how documents are created, processed, archived, and protected in your business: which systems (Shopify, payment providers, invoicing app, DATEV), who has access, how errors are corrected, how immutability is guaranteed. The GoBD names four parts: a general description, user documentation, technical system documentation, and operating documentation. Almost no small merchant has this, and it is the single most common finding in e-commerce audits.

On top sits the auditor's data-access right in three forms: Z1 (direct read access to your systems), Z2 (access through one of your employees), and Z3 (a machine-readable data export handed over). Your setup has to be able to serve at least Z3 without a week of panic.

Credit where due: Shopify keeps complete order, payment, and customer histories for the life of your store, timestamps everything, and exposes it all via API and CSV export. That is genuinely useful raw material. But measured against the three GoBD obligations, four gaps remain — as of May 2026, on every Shopify plan including Plus:

Gap 1: No invoices. Shopify's order confirmation email is not an invoice under § 14 UStG. It lacks a sequential invoice number, your tax number or VAT ID, and the required tax breakdown in the required form. Every German Shopify store needs an invoicing layer — an app or an external system.

Gap 2: No immutability. Orders in Shopify can be edited after the fact — items removed, prices changed — and refunds restructure the record. For operations that is a feature; for GoBD it means the Shopify database itself can never be your archive of record.

Gap 3: No revision-safe archive. There is no retention guarantee. If you close your store, downgrade, or lose access, the data is gone from your side — and "the platform probably still has it" impresses no auditor. You need periodic exports into storage you control.

Gap 4: No DATEV export. German accountants live in DATEV. Shopify's payout reports mix orders, fees, and refunds in ways that need translation before they book cleanly. This is exactly the job of the middleware apps below.

None of this is a reason to leave Shopify. It is a reason to be deliberate about the two layers you add: an invoicing layer and an archiving/export layer.

Three tools dominate the German Shopify invoicing conversation. Real pricing and real coverage, as of May 2026:

Sufio — invoicing app inside Shopify. Starter $7/month (15 invoices), Growth $19/month (50 invoices), Professional $49/month (5,000 invoices), Premium $129/month (unlimited); e-invoice documents cost $0.05 each on top. Sufio produces legally correct EU VAT invoices with sequential numbering and handles B2B VAT-ID validation well. What it does not do: DATEV export or a German revision-safe archive — Sufio stores your invoices, but the GoBD-grade archiving obligation and the accountant handover remain yours. Good choice for design-conscious B2C stores whose accountant tolerates PDF batches.

Billbee — German order-management middleware, not just invoicing. Pricing is usage-based: €9/month minimum, then volume tiers — roughly €48/month at 100 orders, €171/month at 1,000, €269/month at 3,000, and from 3,500 orders/month a flat €0.084 per order (Billbee raised prices on 1 February 2026 — check the live table before you budget). All features included: GoBD-oriented invoicing, multichannel (Amazon, eBay, Shopify), DATEV-ready exports, inventory. At 1,000 orders/month you land around €170/month. Per-order pricing means the bill grows with your success — the same dynamic we criticise in per-order SaaS fees generally — but below ~2,000 orders/month Billbee is honestly hard to beat on price-per-problem-solved. If Billbee covers you, keep it.

easybill — German invoicing SaaS with a Shopify import. Free plan (50 documents/month), Starter €12/month (250 documents), Professional €39/month, Premium €45/month (both from 500 documents/month; annual billing drops these to €9/€25/€37). The Shopify integration sits in Professional and up; the DATEV export ships in every paid plan; extra documents cost €0.29 each. Servers in Germany, e-invoicing (XRechnung/ZUGFeRD) included — relevant because since January 2025 every German business already has to be able to receive structured e-invoices (Wachstumschancengesetz), and issuing becomes mandatory from 2027.

The honest summary: every one of these apps covers invoice creation; none of them covers your whole GoBD duty. Verfahrensdokumentation, retention of non-invoice records (contracts, business emails), and the audit-ready export of Shopify's own data stay on your desk regardless of which app you pay. And if your volume makes the per-order math ugly — a store at 8,000 orders/month pays Billbee roughly €670/month, forever — a custom invoicing app you own outright typically amortises in under 18 months — the full math is in the next section.

The decision frame, using the corrected 2026 prices above:

Below ~2,000 orders/month: keep the SaaS. At 1,000 orders Billbee costs about €171/month and easybill Professional €39/month; no custom build amortises against that on a horizon worth planning for. This is the honest floor, and most German Shopify stores are under it.

The grey zone: 2,000–4,000 orders/month. Billbee runs €229–€340/month here, and the real cost is usually the stack around it: a revision-safe archive at €30–€100/month, plus the manual hours for payment reconciliation and the DATEV handover that no off-the-shelf app fully automates. All-in, stores in this band typically spend €350–€600/month on the compliance layer — €4K–€7K a year including labour.

From ~4,000–5,000 orders/month, custom wins. A single-scope custom app — GoBD-grade invoicing with a gap-free number range, an immutable archive in storage you control, automated DATEV export — is typically an €8K–€15K fixed-price build (complex multi-shop or ERP-connected scopes run €20K–€40K). Hosting and minor maintenance afterwards: €60–€180/month. Against a €400–€700/month stack, break-even lands inside 18–30 months; at 8,000 orders/month, where Billbee alone is ~€670, it drops under 18.

What you keep afterwards is the part per-order pricing can never offer: the code is yours, the per-order fee is zero from day one, and the archive sits in infrastructure you control — which is exactly what GoBD obligation two demands anyway. The break-even math is the entry ticket; exiting fee-grows-with-your-revenue economics is the actual prize.

German e-commerce audits follow a recognisable script. The auditor typically asks for, in order:

The Verfahrensdokumentation. Often the first request, because its absence licenses deeper digging. A 10–20 page document created with your Steuerberater from the free AWV/DStV templates is usually sufficient for a small store — it does not need to be a consulting-firm artefact.

A Z3 data export. Machine-readable journals: all invoices, credit notes, and payment records for the audit period. If your invoicing app can produce a complete, gap-free sequential invoice list in minutes, half the audit tension evaporates. Number gaps get individually questioned.

Payment reconciliation. Shopify Payments payouts arrive net of fees; PayPal, Klarna, and Amazon Pay each have their own settlement logic. The auditor cross-checks order totals against bank inflows. Stores that booked only "what arrived in the bank" — skipping fees as expenses and gross revenue as revenue — face revenue re-estimation.

Cancellations and returns. Every refund needs a document trail: original invoice, credit note, payment reversal. Orders that were silently edited in Shopify instead of credited properly are exactly the immutability violations auditors are trained to find.

The downside risk is concrete: if the auditor rejects your bookkeeping as not GoBD-compliant, § 162 AO allows an estimated assessment (Zuschätzung) — in practice often 5–10% added to declared revenue, plus interest, across all audited years. On €500K/year revenue across three audited years, that is a €75K–€150K conversation. The prevention costs a fraction of that.

What we would set up for any German Shopify store, in priority order:

• 1. One invoicing source. Exactly one system issues invoices with one sequential number range — Sufio, Billbee, easybill, or your ERP. Never two in parallel.
• 2. Immutable archive. Invoices land automatically in storage that guarantees immutability — DATEV Unternehmen Online, a revision-safe DMS, or a locked object store with versioning. The invoicing app's own database alone is not an archive you control.
• 3. Retention configured. 8 years for invoices and booking documents, 10 for books and statements. Nothing auto-deletes earlier.
• 4. Verfahrensdokumentation written. Use the free AWV/DStV template with your Steuerberater. Update it when your stack changes.
• 5. Refund discipline. Corrections only via credit notes, never by editing invoiced orders in Shopify. Train everyone with admin access.
• 6. Payment reconciliation. Gross revenue, fees, and payouts booked separately for Shopify Payments, PayPal, and every other provider.
• 7. DATEV pipeline. Monthly, automated, not a quarterly CSV panic.
• 8. Periodic Shopify export. Orders, transactions, and payouts exported monthly to your own storage — and always fully before closing or migrating a store.
• 9. Access control. Named staff accounts in Shopify and the invoicing app; no shared logins; permissions documented in the Verfahrensdokumentation.
• 10. Annual review. One hour a year with your Steuerberater walking the document flow end to end.

Realistic cost for a small store: an invoicing app at €10–€50/month, a few hours of Steuerberater time for the documentation, and the discipline of steps 5–8. Compared to the audit downside, this is among the cheapest insurance in German e-commerce — and unlike most compliance topics, you can finish the list in two weeks.

If the list surfaces more gaps than you expected — or the per-order math above describes your store — the fastest route to clarity is a 30-minute app-stack audit with us: we walk your invoicing and archiving setup end to end, and you leave with a fixed-price quote, whether the answer is a custom app or simply a tighter SaaS setup.