With the 2025 Finance Act, the era of self-attestation for cash register software is over. Compliance must now be proven by a certification issued by an accredited body (INFOCERT/AFNOR or LNE). A transitional period exists, but it is time-limited: afterwards, only the certificate will count. Where does the Odoo point of sale (POS) stand in this new framework? Here is an overview.
The 2025–2026 legal framework, in brief
- End of self-attestation. Since the 2025 Finance Act (art. 43), vendor attestations are no longer admissible: only certification by an accredited body is accepted.
- Transitional period. From September 1, 2025 to February 28, 2026, in the absence of a certificate, software must at a minimum hold a proof of commitment to the certification process (quotation, application filing, INFOCERT/LNE acknowledgment, etc.).
- Deadline. From March 1, 2026, only the official certificate is admissible during an inspection.
Odoo POS: a verifiable status report
Official INFOCERT (AFNOR) proof of commitment
Odoo has officially filed the NF525 certification application for the Point of Sale module. The proof of commitment is public and shows the status VALID (publisher: ODOO; product: Odoo Point of Sale (point_of_sale); mark: NF525). Valid Infocert proof of commitment for Odoo
To follow the publication of a certificate (with reference and versions covered), consult the INFOCERT certification search engine.
Key takeaway: during the transitional period (09/01/2025 → 02/28/2026), the proof of commitment covers the "certification in progress" situation. On March 1, 2026, an official certificate will be required.
What NF525 covers (ISCA requirements)
The NF525 — Cash register management software certification attests that the software meets the conditions of data Inalterability, Security, Retention and Archiving (ISCA), with an initial audit process followed by periodic surveillance.
- Inalterability: it is impossible to modify an entry without traceability.
- Security: signatures/hashes guaranteeing integrity.
- Retention: periodic closings and usable summaries.
- Archiving: durable, traceable export, available during an inspection.
Practical implications for Odoo POS deployments
- Keep the proof of commitment (INFOCERT page/QR) in the client's compliance file until the certificate is obtained.
- Apply ISCA-aligned practices now: daily closings, tamper-proof logs, regular archiving, traceability of access and operations.
- Set up monitoring of the INFOCERT certificate directory to detect the publication of the Odoo POS certificate.
- Do not confuse IT security with tax compliance: HTTPS, VPN and network hardening remain essential, but do not replace NF525 certification. Compliance with the audited standard remains the cornerstone.
5) Frequently asked questions
Yes, only during the window 09/01/2025 → 02/28/2026. After 03/01/2026, the authorities will require a certificate issued by an accredited body.
On the INFOCERT website (search by publisher/product/mark, including NF525). INFOCERT
INFOCERT/AFNOR and LNE are the bodies cited by the legislation and recent guidance.
Conclusion
The regulatory path is clear: proof of commitment today, certificate tomorrow. Odoo has formalized its approach with INFOCERT for Odoo POS, which secures the transitional period. The practical priority is to maintain an "operational" level of compliance (procedures, closings, archiving) and to prepare the switch to the certified version before March 1, 2026. Infocert+1
Key sources
- Odoo POS proof of commitment (status: VALID) — INFOCERT.
- Ministry of the Economy — end of self-attestation, mandatory certification.
- INFOCERT — NF525 standard and steps (registration, proof of commitment, audit, surveillance).