In Austria, every cash register must protect its receipts against manipulation — and the law is specific about how. Under the Registrierkassensicherheitsverordnung (RKSV), each receipt is secured with an electronic signature, chaining transactions together so that any tampering becomes detectable. For retailers, hospitality and any business issuing receipts, RKSV compliance is not optional, and the way you implement the signing matters.
What RKSV requires
RKSV mandates that every cash register has access to at least one qualified electronic signature creation unit (Signaturerstellungseinheit). Each receipt is signed, and a machine-readable code — typically a QR code — carries the signature so it can be verified. The signatures link receipts in a chain, making it evident if any record is altered or removed. The signing must use a qualified certificate from an accredited provider.
Smart card or cloud: two ways to sign
The signature creation unit can take two forms. Traditionally it was a physical signature card in each register. Increasingly, it is implemented centrally as a cloud and HSM-based service that every register calls. The cloud approach has become more compelling for a practical reason: when a certified card product reaches end of life, every register relying on it must be physically updated, whereas a central service can be maintained in one place.
Why resilience favours cloud and HSM signing
- No per-register hardware to maintain. One central, certified signing service serves every till.
- Easier continuity. Certificate and device changes are handled centrally, not register by register.
- Scales cleanly. Adding registers or locations does not mean distributing more cards.
- Strong protection. Signing keys live in a certified HSM, not in devices on a shop counter.
Getting RKSV right
Compliance is more than ticking a box at installation. Certificates expire, certified products are occasionally withdrawn, and businesses grow. A signing approach that centralises the qualified signature creation unit makes ongoing RKSV compliance a managed service rather than a recurring hardware project — keeping every register signing correctly without disruption.
HOW PRIMESIGN HELPS
primesign helps businesses simplify RKSV-compliant receipt signing with secure, centrally managed cloud and HSM-based signing solutions. By moving qualified signature creation from individual cash registers to a centralised service, organisations can protect receipts against manipulation while making certificate management, scaling and ongoing compliance easier.
Ready to simplify RKSV compliance? Talk to primesign about secure, resilient and centrally managed signing solutions built for modern cash register environments.