Email Invoice for Mexico

The Comprobante Fiscal Digital por Internet (CFDI) is Mexico's mandatory digital tax receipt, serving as the official electronic invoice for nearly all transactions. Mexico pioneered electronic invoicing, introducing its initial system (CFD) in 2004, and making the internet-based CFDI system mandatory for large businesses in 2010, extending it to all taxpayers by 2014. This shift from paper to digital invoicing was driven by the Servicio de Administración Tributaria (SAT), Mexico's tax authority, to expedite transaction capture and validation, enhance tax collection, and reduce tax evasion.

Key elements required in a CFDI invoice include:

• The issuer's and receiver's RFC (tax identification number), names, and tax domicile.
• The issuer's fiscal regime.
• Date and time of issuance.
• A unique invoice folio number (UUID), assigned by the SAT upon validation.
• Details of goods or services provided, their costs, and calculated taxes.
• The digital signature (SELLO) of the issuer and the digital stamp from the SAT/Authorized Certification Provider (PAC).

CFDI version 4.0, which became the exclusive standard by January 1, 2023, introduced several significant updates. These include the mandatory inclusion of the receiver's name, tax regime, and postal code, additional fields for exported goods, and sections for products or services subject to indirect taxes. It also modified deadlines and reasons for invoice cancellations. The SAT periodically updates CFDI 4.0 catalogs, such as those related to customs operations, requiring businesses to keep their invoicing systems current to avoid validation errors.

Ensuring compliance with Mexican e-invoicing regulations is mandatory for all taxpayers, encompassing B2B, B2C, and B2G transactions, with no exemptions based on business size or revenue. The core of this compliance lies with the Servicio de Administración Tributaria (SAT), which defines the CFDI's structure, data fields, and technical requirements. The SAT's role is critical in invoice validation, as all invoices must be validated and digitally stamped by an Authorized Certification Provider (PAC) before being transmitted to the SAT in real-time. Only cleared invoices are legally valid for tax purposes.

Penalties for non-compliance can be substantial. Issuing incorrect CFDIs can result in fines ranging from MXN $17,000 to $97,000. Missing required complements, such as the Carta Porte for transportation of goods, can incur fines of MXN $400 to $600 per CFDI or MXN $880 to $17,030 for not issuing the documentation at all. Late cancellation of invoices can lead to penalties equivalent to 5% to 10% of the invoice amount. Non-compliance can also result in increased audit exposure, invalidation of invoices, and impact a company's ability to deduct expenses or claim VAT refunds.

To ensure compliance, businesses should follow these steps:

• Register with SAT: Obtain a federal taxpayer registration (RFC) and an electronic signature key (Firma Electronica Avanzada – FIEL or e.Firma).
• Obtain a Digital Stamp Certificate (CSD): This certificate is required to digitally sign CFDIs.
• Appoint an Authorized Certification Provider (PAC): Businesses must work with a SAT-approved PAC to validate and digitally stamp their invoices.
• Generate CFDIs in XML Format: Ensure all invoices are created in the CFDI 4.0 XML format, adhering to the specifications in Anexo 20.
• Include Mandatory Complements: For specific transaction types (e.g., payroll, foreign trade, payments, transportation), additional structured data via CFDI complements is required.
• Real-time Validation: Submit invoices to the PAC for real-time validation and digital stamping (Timbrado).
• Deliver to Recipient: Once validated, deliver the CFDI (XML and often a PDF representation with a QR code) to the recipient.

Integrating with the SAT's e-invoicing system effectively is crucial for seamless operations and avoiding common pitfalls. The Mexican e-invoicing model heavily relies on Authorized Certification Providers (PACs), which are third-party entities officially authorized by the SAT to digitally certify CFDIs. PACs play a pivotal role by validating the XML structure of CFDI documents, applying a digital seal (known as the "Timbre Fiscal Digital"), assigning a unique fiscal identification (UUID), and transmitting the invoices to the SAT for approval. This process, known as "Timbrado" or stamping, is essential for an invoice to be considered legally valid.

For businesses, PAC connectivity is essential for compliance. While the SAT offers free tools for generating CFDIs, using a PAC is often preferred for its comprehensive services, including secure storage and retrieval. As of August 2025, there are 51 authorized PACs in Mexico, regulated under SAT guidelines to maintain security and reliability.

Here are practical tips for streamlining your integration process:

• Choose a Reputable PAC: Select a PAC that offers robust integration capabilities, reliable uptime, and comprehensive support, especially for managing validation responses and quickly handling rejections.
• Ensure Data Quality: Success hinges on accurate data. Implement strong internal controls to ensure all required information (e.g., RFCs, tax regimes, postal codes) is correct before CFDI generation.
• Automate Processes: Leverage automated e-invoicing solutions to manage real-time clearance requirements, reduce manual effort, and minimize operational risk. This can involve integrating a CFDI API or using a compliant ERP system.
• Test Thoroughly: Utilize PAC test environments to validate your system's integration and CFDI generation before going live. This helps identify and correct data issues without delaying business processes.
• Stay Updated: The SAT periodically updates CFDI specifications and catalogs. Ensure your integration solution can adapt to these changes promptly to maintain compliance.
• Understand Complements: For specific transactions, mandatory complements are required. Ensure your system can accurately generate and include these additional structured data elements.
• Secure Certificate Management: Properly install and manage your e.Firma and CSD certificates on your server, ensuring appropriate user permissions.

Proper archiving and record-keeping for e-invoices in Mexico are not merely best practices but legal mandates for all taxpayers. Both issuers and recipients are required to retain original CFDI XML invoices for a minimum of five years. This retention period is established under Mexican tax law, specifically Article 30 of the Mexican Fiscal Code. The XML file is the legally valid record and must be stored in its original format; keeping only PDFs, summaries, or accounting entries does not meet SAT requirements.

Ensuring data integrity over time is paramount. The archived XML files must remain accessible and unaltered to support audit readiness and regulatory requirements. During a tax or labor audit, the SAT may request historical CFDIs, and missing or incomplete archives can invalidate deductions years after transactions were processed.

Beyond basic compliance, several technological solutions and best practices can enhance secure archiving:

• Digital Storage Solutions: Utilize specialized digital archiving solutions that can securely store CFDI XML documents. These solutions often provide features like version control, access logs, and encryption to protect data integrity.
• Compliance with NOM-151: Adhering to NOM-151, a Mexican standard for the conservation of electronic messages, can attribute greater legal guarantees to archived e-documents, allowing them to be used as evidence before third parties. This standard ensures the integrity and authenticity of digital documents through cryptographic sealing.
• Automated Archiving: Integrate archiving directly into your e-invoicing workflow. Many PACs offer secure storage and retrieval services as part of their offerings. Automated systems reduce manual errors and ensure all CFDIs are stored consistently.
• Accessibility and Retrieval: While archiving abroad is permitted, a copy of all CFDIs and their supporting documentation must be accessible at the taxpayer's registered fiscal domicile in Mexico for audits, as mandated by Article 28 of the Mexican Federal Fiscal Code. Ensure your chosen solution allows for quick and efficient retrieval of specific invoices when requested by the SAT.
• Regular Backups and Disaster Recovery: Implement robust backup procedures and disaster recovery plans to protect against data loss. This ensures business continuity and compliance even in unforeseen circumstances.
• Centralized Management: Centralizing electronic billing management can reduce operational errors and strengthen continuous compliance with the SAT, reinforcing document control, automatic validations, and traceability of CFDIs.