Oman's e-invoicing dates are now set in law: 1 April and 1 October 2027. Read our guide. Read the guide

Trust and compliance

Accreditations, certifications and trust

The credentials behind Invoice And Tax — who issued each one, to whom, for what scope and until when — with a link to check it at the source.

Last reviewed:

Illustration: data protected in layers — secure connections, access by key and role, encrypted storage — beside separate, locked organisation spaces and an append-only chain of audit records.

Credentials

Our accreditations and certifications

Each statement is published only after its evidence has been checked, and is withdrawn if it lapses.

  1. Accredited Service Provider — Fawtara (Oman Tax Authority)

    Accredited Service Provider

    Invoice And Tax is listed by the Oman Tax Authority's Fawtara portal as an Accredited Service Provider.

    The Oman Tax Authority's Fawtara portal lists ELSAYED HAMDI FOR ADVANCED TECHNOLOGY, with the solution Invoice And Tax, as an Accredited Service Provider (accreditation date 13 August 2026). The listing can be checked on the Fawtara portal.

    Issuer
    Oman Tax Authority (Fawtara portal)
    Holder, as named by the issuer
    ELSAYED HAMDI FOR ADVANCED TECHNOLOGY
    Solution listed
    Invoice And Tax
    Data residency, as listed
    Germany or Sultanate of Oman.
    In effect since

    The listing records accreditation by the Oman Tax Authority; it is not a guarantee of commercial performance. The Fawtara portal is the authoritative list.

    Verify with issuer(opens external site)

  2. Peppol Certified Service Provider — Access Point

    AP Certified

    Peppol-certified Access Point Service Provider.

    Invoice And Tax is listed on OpenPeppol's Peppol Certified Service Provider list as an AP Certified provider (Access Point), under the Peppol Authority for Oman (Oman Tax Authority). Legal entity: Elsayed Hamdi For Advanced Technology (Invoice and Tax).

    Issuer
    OpenPeppol AISBL (Peppol Authority: OTA)
    Holder, as named by the issuer
    Elsayed Hamdi For Advanced Technology (Invoice and Tax)
    Role
    Access Point
    Country
    Oman
    In effect since

    This certification covers the Access Point role in the Peppol network.

    Verify with issuer(opens external site)

  3. ISO/IEC 27001:2022 — Elsayed Hamdi for Advanced Technology SPC

    ISO/IEC 27001:2022

    Invoice And Tax is developed and operated by Elsayed Hamdi for Advanced Technology SPC, whose Information Security Management System is certified to ISO/IEC 27001:2022 for the scope stated in certificate 305026071423IS.

    Certificate 305026071423IS, issued by QRO to Elsayed Hamdi for Advanced Technology SPC: initial registration 14 July 2026, valid until 13 July 2029. It certifies the organisation's Information Security Management System for the stated scope; it is an organisational certification, not a product certification.

    Issuer
    QRO
    Holder, as named by the issuer
    Elsayed Hamdi for Advanced Technology SPC
    Certificate number
    305026071423IS
    In effect since
    Valid until

    Scope

    Designing and Programming Software Management, Provision of Secure Software Development, Cloud Hosting, AI-Powered Information Security Services, and SaaS Billing Platforms.

    The certificate covers the information security management system of Elsayed Hamdi for Advanced Technology SPC for the scope above; it is not a certification of an individual product.

    Download the evidence (PDF)

Security controls

Controls in the platform

  • Multi-factor authentication

    Available for every user; mandatory for administrators, with recovery codes on enrolment.

  • Role-based access control

    Permissions follow roles, so each person sees and does only what their job requires.

  • Encryption at rest

    Sensitive fields are encrypted in the database, not only on disk.

  • Tenant isolation

    Data is separated by organisation and branch.

  • Append-only audit trail

    Create, approve, issue and adjust actions are recorded and never edited in place.

    Audit and governance: Append-only audit trail
  • Hosting location

    Data residency for the hosted service is Germany or the Sultanate of Oman.

Need evidence for a supplier review?

Ask us for our security documentation or a copy of any certificate listed here, and we will answer your questionnaire directly.

(opens in a new tab)