The VAT Evidence Pack: One Readable Proof Package, Not 80 Folders

Not 80 documents. One readable proof package.

Most VAT audits do not fail for lack of paper. They fail for lack of readability. The screenshot has no timestamp, the VAT ID confirmation sits on the wrong drive, procurement’s approval is not linked to the tax sign-off — records exist, but they do not argue. The Evidence Pack reverses that relationship: one structured export per transaction or counterparty that shows the full decision path. Whoever asks receives a file that can be read in thirty minutes — not eighty folders in which every answer hides.

A folder full of documents is not an evidence trail

The distinction sounds trivial and decides cases: documents show activity; an evidence trail shows reasoning. In a “knew or should have known” dispute under the CJEU’s Kittel line and Section 25f of the German VAT Act, the authority does not care whether a registry extract exists somewhere. It cares: who checked what, when, from which source, with what result — and who decided on that basis? Those are the questions a business must answer years later, because what matters legally is the decision situation at the time of the transaction, not the state of the files on the day the audit order arrives.

The European Court of Justice set the enduring standard in Mecsek-Gabona (2012): what counts is whether the trader took the measures that could reasonably be required of it. The Evidence Pack answers the follow-up question nobody asks until it is too late: how do you prove “reasonably taken” — per transaction, dated, attributable?

The invoice alone is no longer enough

Since September 2025 the European Court of Justice has expressly permitted tax administrations to demand, as proof of the existence and use of a service, supporting evidence beyond the invoice — proportionate and necessary it must be, but still: more than the invoice. That applies even to intra-group services (Arcomet). The Evidence Pack delivers precisely those records — before they are requested. And the flip side of the same case law works for you: there are no exclusion lists. The authorities must assess every piece of evidence submitted (FLO VENEER, November 2025); if need be, even the authority’s own customs data counts (W., August 2025). Since Germany’s second e-invoicing circular, the structured XML data set also belongs in the proof package, archived audit-proof (Federal Ministry of Finance, October 2025). Whether your documentation would meet that standard today is measured by the 72-hour readiness check.

The ten modules E01–E10

Our minimum standard structures the evidence architecture in ten layers. Not every transaction needs every layer at full depth — but every layer must be addressed, and the selection must remain justifiable.

E01 — Counterparty base file (KYB/KYC). Identity, registry position, officers, beneficial owners, address, contact channels. The foundation layer: it answers the supplier-identity questions the Court made a touchstone in Ferimet (2021).

E02 — VAT ID / VIES / EC Sales List package. Qualified confirmations with timestamps, repeat checks, consistency with recapitulative statements. Never sufficient on its own — but indispensable as a component.

E03 — Bank and payment consistency. Account holder, country, payment route, third-party and platform payments. Payment is the authenticity anchor: it ties the contract chain to reality.

E04 — Goods and logistics path. Transport orders, carrier, warehouse, Incoterms, physical movement, serial numbers where relevant. The route of the goods explains integrity better than any contract document.

E05 — Price, margin and market logic. Plausibility of purchase price, margin, velocity and volume. Anomalies are either explained on the record — or the deal is stopped.

E06 — Red-flag memo. Signal, source, assessment, additional checks, decision, responsible person. The core exhibit against a “should have known” allegation: it shows signals were processed, not merely present.

E07 — Approval and delegation trail. Allocation of responsibilities, tax sign-offs, four-eyes records. It answers the attribution question: who knew what, when — and who was authorised to decide?

E08 — Correction pack. Error discovery, assessment of the correction duty under Section 153 of the German Fiscal Code, corrected filings, root-cause analysis, system fixes. A documented error culture instead of a concealment risk.

E09 — Audit and inspection file. Audit orders, VAT inspection records, data exports, points of contact, meeting notes. Defence begins at the first contact with the authority, not at the objection stage.

E10 — Asset-freeze, liability and insurance package. Liquidity plan, suspension-of-enforcement documentation, asset-freeze response plan, deadline-compliant notifications to D&O, criminal-defence legal expenses and trade credit insurers. In high-risk sectors, an evidence package without a crisis layer is incomplete.

Three properties turn ten layers into a pack: transaction-based (the file follows the deal, not the department’s filing habits), versioned (every state is dated and traceable without alteration) and role-based (it is visible who checked, who assessed, who approved). The purpose is not completeness at any price, but the traceability of the decision as it stood at the time.

Four audiences, one package

An Evidence Pack is not built for the drawer. It has four real audiences, and each reads differently:

The German tax audit and special VAT audit. Auditors work along data access, GoBD record-keeping standards and the VAT assessment path. A pack that follows that path — from taxability through exemption to input VAT deduction — answers auditors’ questions in their own logic and measurably shortens audits.

The tax fraud investigation unit (Steuerfahndung). In criminal tax proceedings, the first factual record often shapes everything that follows. A business that can deliver structure during an unannounced VAT inspection or dawn raid — instead of exporting data in panic — frames how the facts will later be assessed. This is where the pack interlocks with the 72-hour emergency plan.

Banks. Banks react to suspicion faster than courts decide: accounts are frozen, credit lines cancelled — long before anything is proven. A readable proof package is the most effective instrument for carrying a banking relationship through a suspicion phase, because it answers questions before they become termination grounds.

Trade credit insurers. Limits fall faster than assessments. A trader who can present a structured account of its checking processes within days defends its limit — and with it, its ability to keep trading on credit terms.

For all four audiences one principle applies: selective disclosure. The pack is built so that a tailored, self-consistent extract can be exported per audience — robust, but without volunteering sensitive data nobody asked for.

The link to emergencies and asset freezes

Why layers E09 and E10? Because large German VAT cases are decided economically long before anything is decided criminally. Liability assessments, refusal of suspension of enforcement, an asset freeze under Section 324 of the German Fiscal Code — these instruments create facts before any question of guilt has been heard. In that phase a single capability counts: producing an ordered, reliable factual record within hours — towards the tax office, the court, the bank and the insurer at the same time. An Evidence Pack created at transaction time delivers that. A bundle of files assembled after the dawn raid does not. In depth: asset freeze under Section 324 — securing the business before guilt is decided.

What the Evidence Pack is not

Our self-restraint applies here too, and we state it at the start of every engagement: the Evidence Pack is no safe harbour, no certificate and no release from liability. It neither guarantees input VAT deduction nor prevents investigations. And it has a hard integrity boundary: it documents the decision situation as it was — it does not create one retrospectively. Documentation must arise ex ante and versioned; retrospective file-dressing can cause criminal exposure and destroys the credibility even of the genuine records. A file rebuilt after the event looks defensively weak. A proof package grown in the ordinary course of business is convincing precisely because its history is visible.

German audit practice teaches the sober lesson: tax compliance produces protective effect only where the system can be turned into concrete, usable evidence in the audit situation. That usability is the only standard by which we measure the pack.

What VSK delivers

Three formats, depending on the starting position. The Evidence Pack workshop develops the standard for your business — modules, data fields, versioning rules, roles, export formats, docked onto your ERP. The documentation audit tests against real transactions whether your current filing would hold as a proof package, and prioritises the gaps. Acute structuring organises existing but scattered records into a defensible file in ongoing proceedings — hand in hand with tax and criminal defence counsel. Fixed fee per module on request. For international groups, the pack is built bilingually from the start, so head office, German subsidiary and advisers work from one record.

The method behind it — which check is required when — is described in Proof of Check: seven building blocks of demonstrable diligence; the pack is its seventh block and end product. Whether your documentation would hold today is measured by the VAT CMS Quick Scan in ten questions. For the full picture, see the VAT compliance overview.

FAQ