Secure KSeF with qualified signature – a guide to ERP integration for companies and automatic e-invoice delivery

The transition to KSeF is a good time to organize your approach to your company's digital identity. A qualified signature and a qualified seal allow you to control who connects to KSeF on behalf of your organization and how. We explain how to choose the right solutions for management, accounting, and ERP systems to ensure security, regulatory compliance, and predictable financial processes.
Secure KSeF with qualified signature – a guide to ERP integration for companies and automatic e-invoice delivery

KSeF and qualified signature. Your technical key to ERP integration and automatic e-invoice sending.

A revolution in Polish accounting is just around the corner. From February 1, 2026 , the obligation use of the National e-Invoice System (KSeF) will apply to the largest companies, and from April 1, 2026 all other taxpayers.

Many people wonder, "How does it actually work behind the scenes?" Today, we're going to get into the technical details. We'll explain why your system ERP (enterprise resource planning system) needs a "digital ID," i.e., a qualified signature QES, in order to even begin communicating with the Ministry of Finance's system.

Step 1: Digital identity, or why is a qualified signature necessary?

Before your accounting system sends the first invoice, you must "introduce yourself" to KSeF. This is the most important technical requirement to start with. The system must be sure that it is your company, and not someone impersonating it, that wants to grant permissions or send documents.

Specific methods are used for authentication in KSeF:

  1. Qualified Electronic Signature (QES) – for individuals (e.g., sole proprietors or company representatives).
  2. Qualified Electronic Seal (QSeal) – for entities that are not natural persons (e.g., limited liability companies, foundations).
  3. Trusted signature – a free alternative for individuals, available, among others, through the National Node.

Why a qualified signature? Although a trusted signature is sufficient for manual login, what counts in business is automation. A qualified signature or seal is necessary to generate a so-called tokens or KSeF certificates, which are the "fuel" for your ERP system. Without them, your accounting program will not connect to KSeF automatically.

 

AUTHENTICATION METHOD


In KSeF

INDIVIDUAL

NON-NATURAL PERSON (PNF)


Trusted Signature /

National node (from April 1, 2026)

YES

NO

Qualified signature

YES

NO

Qualified stamp

NO

YES

Token (until December 31, 2026) 

YES

YES

KSeF certificate

YES

YES

Step 2: ERP integration with KSeF – how does it work?

Integration is nothing more than connecting your sales system to the Ministry of Finance system using API (application programming interface). This allows invoices to be sent "automatically" in the background, without the need to manually log in to the government website.

For this magic to work, you need to perform a one-time configuration:

  1. Authenticate yourself in KSeF as a taxpayer (using a qualified signature or seal).
  2. Generate a Token or Certificate:
    • A token is a string of characters (digital key) that you paste into your ERP settings. Important: tokens will only be supported until the end of 2026.
    • The KSeF certificate is a modern solution that will replace tokens as the target method of system authorization from November 1, 2025. The certificate can be used both for logging in (type 1) and for signing invoices in offline emergency mode (type 2).
Types of KSef certificates.
Types of KSef certificates.

Step 3: How to send an e-Invoice via KSeF? (technical process)

Sending an e-invoice is a process that takes a fraction of a second in an integrated system, but it is worth knowing what happens "under the hood":

  1. Generating an XML file. 
    • Your ERP system creates invoices in XMLformat. This is not a PDF file! It is structured text file that follows a the logical structure FA(3). It must contain all mandatory fields, such as the seller's and buyer's tax identification number.
  2. Verification 
    • Before sending, the system checks whether the XML file contains any technical errors (e.g., whether the issue date in field P_1 is not a date in the future, which would result in rejection).
  3. Shipping (Interactive or Batch Session):
    • Interactive Session – for quick sending of individual invoices.
    • Batch Session – ideal for large companies. Allows you to send a package (ZIP) containing up to 10,000 invoices at a time.
  4. Assigning a KSeF and UPO number 
    • After accepting the invoice, the KSeF system assigns it a unique identification number and generates UPO (Official Receipt Confirmation). This is the moment when the invoice is considered issued and delivered to the contractor.

 

Who will KSeF cover and from when?

 

The obligation enters in stages:

  • As of February 1, 2026. - Entrepreneurs whose gross sales value in 2024 exceeded PLN 200 million, must issue invoices in KSeF. As of this date all VAT taxpayers (including exempt ones) must be ready receive invoices through KSeF. (Gov.pl)
  • As of April 1, 2026. - other entrepreneurs must issue KSeF invoices. (Gov.pl)
  • Starting January 1, 2027. - There is a provision for a shift for the smallest entities (sales of up to about PLN 10,000 - announcement on KSeF website). (National e-Invoicing System)

Until these dates, KSeF can be used voluntarily. The key is to prepare the system, people and authorizations so that the launch does not surprise the company. 

Important! Invoices for consumers (B2C) remain outside the obligation to issue in KSeF (you can voluntarily), but if you conduct B2B sales - the obligation will cover you according to the thresholds/dates. Foreign entities without a permanent place of business in Poland are excluded from mandatory issuance. (Interpretations)

 

What if the system does not work?

Technology can be unreliable, which is why KSeF provides for an OFFLINEmode. If you do not have access to the network, you can issue an invoice in your system, attach a special QR code to it (for this you need a KSeF Type 2 Certificate!), and send it to KSeF later—usually on the next business day.

 

Is it worth investing in a qualified signature, a qualified seal, and integration?

Definitely yes! Although the Ministry provides a free "KSeF Taxpayer Application," it is mainly intended for the smallest companies that issue a few invoices per month. For medium and large businesses, manually rewriting invoices is a waste of time and a risk of errors.

Qualified Electronic Signature (QES) and Electronic Seal (QSeal) are the foundations that enable your ERP system to operate automatically, securely, and in compliance with the law.

Do you want to prepare your company for KSeF? We invite you to cooperate with us. We will answer your questions about cider services. 

At podpisano.pl the necessary digital trust tools that will open the door to digital accounting for you.

 

This article was prepared based on the KSeF 2.0 Handbook (Ministry of Finance, September 2025) and information from the website ksef.podatki.gov.pl.

Do you need help?

Call us at

and we will put you in touch with one of our representatives available virtually nationwide.

Check also:

Do you need help?

Find what you're looking for