For a rental company, invoicing is not back-office housekeeping. It is one of the few things a tax inspector will actually ask to see. Between the rule that an issued invoice cannot quietly change, the obligation to keep records for years, and the responsibility you carry for the personal data behind every line, the way you issue invoices decides how a tax audit goes — and how far demanding customers trust you with their documents.
This guide sets out, plainly and without overselling, what invoicing compliance covers for a rental operator, what GDPR and European hosting add to it, and how to organise the whole thing without adding steps to your day. Treat it as a framework for choosing tools rather than as legal advice: what actually applies to you depends on where you trade and how your business is structured, and your accountant remains the right person to confirm it.
What the NF525 standard covers
NF525 is a French certification. It confirms that point-of-sale or invoicing software meets the French tax authority's requirements for recording transactions, and it sits under a broader obligation on VAT-registered businesses to use software that meets the anti-fraud rules. If you rent outside France the label itself will not apply to you — but the questions behind it will, because most European tax administrations ask some version of them. Read the four conditions below as a checklist to run against your own jurisdiction, not as a badge to shop for.
- Tamper-proofing — once an invoice has been issued, it cannot be edited or deleted without leaving a trace.
- Security — billing data is protected against fraud and manipulation.
- Retention — records are archived and can be produced for the full legal period.
- Archiving — daily, monthly and annual closes freeze the data in a traceable way.
For a rental company, that means a quote that becomes a contract and then an invoice has to follow one documented, locked path. No line can vanish after the fact without a record of it — not the rental amount, not the deposit, not a chauffeur option, not excess mileage charged at return.
Why an issued invoice cannot be changed
This is the requirement that shapes all the others. Once an invoice has gone out, it stands. If you find a mistake, you do not correct the original: you issue a credit note, then a corrected invoice, and both stay on file. Numbering runs in an unbroken sequence, so a missing document shows up on its own rather than waiting to be discovered.
In rental, that discipline earns its keep quickly. A single booking can produce a pre-payment, a deposit hold, extras added on return and a closing balance. When every one of those movements is recorded in order and tied to the file it belongs to, you can answer a tax inspector and an unhappy customer with the same set of documents — which is really the whole point.
How long you have to keep it all
Retention periods depend on the type of document and on your tax position, so confirm yours rather than assume. In practice you are looking at several years for commercial and tax records, which means the archive has to stay readable, retrievable and complete for that entire stretch. A backup nobody can search is not an archive.
A rental business generates a lot of paper: agreements, condition reports, payment receipts, invoices. Keeping all of it in one organised, exportable place rather than spread across folders and inboxes is what makes the difference on the day someone asks. Being able to pull one specific invoice, exactly as it was issued, is itself a fair measure of whether the system holds up. Our software comparison sets out the criteria worth weighing when you assess tools on this point.
GDPR: the customer data behind every invoice
Invoicing handles personal data by definition — the customer's identity, contact details, often a copy of a driving licence and an ID document. GDPR asks you to put that on a proper footing: say why you collect it, keep it only as long as you can justify, limit who can see it, secure it properly, and tell people what you hold. For a premium operator it is also plain reassurance. Clients who value discretion notice how their file is handled.
- Minimisation — collect only what the rental and the invoice genuinely require.
- Individual rights — be ready to answer access, correction and erasure requests within the limits of the law. An invoice you are legally required to keep does not disappear on request, and you should be able to explain why.
- Security — encryption, access control, and a log of sensitive operations.
Why hosting in Europe matters
Where your data physically sits is not a technicality. Hosting in Europe keeps you inside a single legal framework and spares you the question of transfers outside the Union — a question that has shifted more than once in the past decade and may well shift again. For a business that handles ID documents, card authorisations and years of customer history every week, knowing exactly where all that lives is a matter of control, and something you can state plainly to a client who asks.
Corsiva OS is hosted in Europe and was built that way from the start. Your customers' records and your fleet data stay in one compliant environment instead of being scattered across infrastructure whose location and legal regime you do not control.
What is at stake for a rental operator
Vehicle rental, and premium rental most of all, ticks every risk box at once: large sums, big security deposits, several payment flows per booking, customers from all over. Invoicing that does not hold up exposes you to a reassessment, to penalties, and to the loss of standing that follows. A clean chain — quote, contract, invoice — does the opposite. Audits get shorter, disputes get simpler, and you look like an operation that knows its business.
It matters more still when you rent vehicles on behalf of their owners. An automatic 70/30 owner payout is only ever as reliable as the invoices underneath it; get that wrong and every month-end turns into an argument. Compliance is not a box sitting off to one side — it runs through the whole back office.
Taking the manual work out of invoicing with Corsiva OS
The good news is that none of this needs manual attention day to day. Corsiva OS is built for luxury and concierge operators by people who do the job themselves — Corsiva runs four rental branches in Savoie, France. The back office is built around the invoicing record rather than around the paperwork:
- Automatic invoicing with continuous sequential numbering — invoices are generated straight from the booking, then stored and exportable, so the accounting record follows the rental instead of being reconstructed later.
- Stripe payments, security deposits held on the card, and automatic pre-payment — every movement of money stays attached to the document it belongs to.
- Mobile condition reports and electronic signature — the evidence travels with the invoice, which is what settles a dispute.
- Automatic 70/30 owner payout — owner accounts reconcile themselves, on a basis both sides can follow.
- White label and multi-branch — several branches run under one set of rules and one archive.
All of it is hosted in Europe and comes in three plans: Lite at €59, Business at €98 and Ultra at €199 excl. VAT per month on a one-year commitment, or €70, €117 and €237 without one. Pricing is indicative and non-contractual. What each plan includes is on our pricing page, and the team can go through your own setup via the contact page.
In summary
Compliant invoicing is not a luxury for a rental company. Records you cannot rewrite, an archive that outlives the legal retention period, GDPR handled seriously and hosting inside Europe form the base that protects the business and reassures its customers. Handling the paperwork by hand costs more than it looks like it does; running your invoicing in a tool built for premium rental costs less, and hands you back the time to grow the fleet. Whichever tool you choose, start by checking which invoicing rules apply where you actually trade — NF525 is the French answer to that question, not the only one.