Questions to ask any e-invoicing provider before you sign
· 7 min
You get one connected ASP at a time in Oman. These are the questions that separate a provider who has done this from one who has read about it.
Under Fawtara a taxpayer in Oman connects to one Accredited Service Provider at a time, and the handover to a different one runs on a clock of days. That makes this a decision worth slowing down for.
The questions below are grouped the way the Oman Tax Authority's own accreditation criteria are, because a provider who cannot answer them comfortably has not been through accreditation recently.
Accreditation
- Are you on the Oman Tax Authority's published list of accredited service providers today? Under exactly which legal entity name?
- What is your application status — accredited, pending testing, or under review?
- Have you completed OpenPeppol testbed testing, and do you hold a production PKI certificate?
- Is your solution built in-house or licensed from a third party? If licensed, from whom?
Data and residency
- In which country does our invoice data reside? This is a declared field in their accreditation, so there is a correct answer and they know it.
- Who else in your group, or among your subcontractors and partners, can access it?
- What happens to our archive if we disconnect? In what format, and how quickly?
Security
Accreditation requires documented evidence of each of these. Ask to see the same evidence they filed:
- Audited ISO/IEC 27001 certification — the certificate, the scope statement and the date.
- Multifactor authentication
- Encryption at rest
- Encryption in transit
- Security monitoring
Integration
- Have you connected our exact accounting system and version before, in Oman? Can we speak to that customer?
- What does our side have to build, and who pays for it?
- How are validation failures reported back to us — in our system, or in yours?
- What is your throughput limit, and what happens at month end when everyone invoices at once?
Operations and exit
- What is your support arrangement in Omani business hours, in Arabic and English?
- What is your published uptime, and what have you actually achieved?
- What is the notice period, and how does it line up with the portal's own disconnection process?
- If your accreditation lapsed, what would happen to us, and when would we be told?
The question that tells you the most is the dullest one: ask them to walk you through a validation failure, end to end, on a real invoice.
Related questions
Should we pick the cheapest?
Price differences between accredited providers tend to be smaller than the cost of one bad month end. Weigh integration fit first.
Does our auditor care which provider we use?
They care about the completeness of your records and your ability to produce them. Residency and archive terms are the questions above that touch that directly.
Can our accountant appoint one on our behalf?
The connection is made from your own Fawtara Portal account against your TIN. Advice can come from anywhere; the action is yours.
How connecting actually works is covered in connecting to an ASP. If you would rather not run the shortlist yourself, talk to our team.