Verifactu and SES Hospedajes: how to comply without Excel
The two legal obligations that hit Spanish tourist accommodations hardest: what they require, what changes in 2026 and how to fold them into the stack without working by hand.
In the last eighteen months, two legal obligations have come into force that directly touch the operations of any tourist accommodation in Spain: the Sistema de Entrada de Hospedajes (SES Hospedajes) from the Ministry of the Interior, the central system for reporting guest data, and the Verifactu scheme from the Spanish Tax Agency (AEAT), the certified real-time invoicing regime. They are not conceptually new (guest reports and invoicing have always been around), but the how has changed: they are now mandatory digital flows with short deadlines and full traceability.
This note explains what each one asks for, what changes in 2026, what sanctions exist for non-compliance and how to fold them into the stack so they stop being a manual burden.
SES Hospedajes · what it is and what it asks for
SES Hospedajes is the central system through which accommodations report guest information to the Spanish Ministry of the Interior. It replaces the old model of paper or emailed guest reports, and since December 2024 it has been mandatory for hotels, hostels, vacation rentals, tourist apartments, campgrounds and vehicle rental companies.
What the system requires per guest and stay:
- Full personal data (first name, surnames, date of birth, gender, nationality).
- ID document (type, number, date of issue).
- Lodging contract data (dates, number of people, price, payment method).
- In some cases, the guest’s habitual address.
The submission has to be made within 24 hours after check-in. Each report gets an electronic acknowledgement that proves compliance.
Verifactu · what it is and what it asks for
Verifactu is the mandatory tax-control scheme tied to the new Invoicing Regulation that AEAT (the Spanish Tax Agency) is rolling out to fight fraud and double bookkeeping. Every invoice the accommodation issues must be digitally signed, chained to the previous one through a hash and, in “Verifactu” mode, transmitted in real time to AEAT.
What changes compared to traditional invoicing:
- Invoices cannot be modified after the fact without generating a linked corrective invoice.
- Each invoice carries an identifier code and a cryptographic chain to the previous one.
- Those filed under Verifactu mode are transmitted to the tax agency without user intervention.
- The invoicing system has to be certified (no spreadsheet will do).
For small and mid-sized accommodations, the practical calendar is: companies (corporations) from 1 January 2026; sole traders from 1 July 2026.
Real sanctions for non-compliance
The sanctions exist and they are significant. Published references include:
- SES Hospedajes: fines of up to 30,000 euros for failing to fulfill the lodging-data reporting duty, under the Public Safety Law (Ley de Seguridad Ciudadana).
- Verifactu: a fixed fine of 50,000 euros per fiscal year for companies using non-certified invoicing software, on top of possible penalties for breaching the Invoicing Regulation.
Inspections have visibly increased through 2025 and, with Verifactu fully in force in 2026, they are expected to ramp up further. It is not a sector that can afford to keep running on Excel and folders.
Why manual flows fail
The typical mistake is assuming these obligations can be met “by hand” with good intentions. It does not hold up in production:
- SES: 14 rooms at average occupancy generate around 1,500 guest reports a year. Filling them in by hand takes between 5 and 10 minutes each. That is between 125 and 250 hours a year on administrative work that adds nothing for the guest.
- Verifactu: an invoice issued outside the certified system is, literally, an invalid invoice. You cannot “issue one manually and then upload it to the software”. Compliance happens at origin, not after the fact.
The technical conclusion is that both systems have to be integrated into the PMS from day one. If the PMS does not support them natively, the PMS is the problem, not the regulation.
How to integrate it well into the stack
The right flow, with the right stack, works like this:
- The guest completes the check-in data online (on site or via a mobile form), including a capture of the ID document.
- The PMS receives the data, validates it and generates the SES Hospedajes report in the official format.
- The report is sent to SES within 24 hours of check-in. If there is an error, the system flags it and it is corrected before the deadline.
- At the close of the stay, the PMS issues the invoice. If it is connected to the ERP with Verifactu active, the invoice is signed, chained to the previous one and transmitted to AEAT without user intervention.
- The guest receives the invoice by email; a digital copy is archived in the ERP with full traceability.
Result: zero manual intervention, zero risk of non-compliance through forgetting, full traceability under inspection.
What to look for when choosing pieces of the stack
For the flow above to work, three things have to be verified when choosing or maintaining tools:
- The PMS has to talk to SES Hospedajes directly, not through an extra paid module that syncs weekly. Native integration is what prevents the delays.
- The ERP or invoicing system has to be certified for Verifactu and listed on the official register. If the vendor cannot show it in writing, it is not viable.
- The PMS-ERP connection has to be bidirectional, not a CSV export at month-end. An invoice is an event that happens at check-out; moving it manually turns the flow fragile.
What happens when everything works
When both systems are well integrated, legal compliance becomes invisible to the accommodation team: it happens without anyone at reception having to think about it. The inspection finds everything traced, invoicing reconciles to the cent with PMS revenue and the team’s time is freed up for what actually adds value (guest attention, maintenance, direct sales).
When they are not, the accommodation operates with permanent regulatory risk. It is not a question of whether an inspection will come, it is when.
Closing
Verifactu and SES Hospedajes are not technical obstacles: they are how you legally operate an accommodation in Spain today. The difference between complying well and complying badly almost always sits in the stack, not in the willingness. The 30 minutes of the initial diagnosis are enough to identify where your accommodation stands right now and which pieces have to move so that compliance stops being a burden.
Tags: Verifactu · SES Hospedajes · compliance · tourism regulation · PMS