Prevents falling behindOff-the-shelf productEstablished, AI retrofitted

Lexware Office

Haufe Service Center GmbH, Freiburg, a brand of Haufe-Lexware GmbH & Co. KG ·www.lexware.de/buchhaltungssoftware/· As of: 2026-09-28

Lexware Office writes quotes and invoices, reads incoming receipts, matches them against the connected bank accounts and turns all of it into bookkeeping up to the advance VAT return (Umsatzsteuer-Voranmeldung) and the cash-basis profit statement (Einnahmen-Überschuss-Rechnung). Payroll, including filings to health insurers and the tax office, can be added as a module, and the tax adviser gets their own access to the same data set.

Work through this tool with an AI

Our verdict

For a small business in Germany a chain of duties hangs off the accounts, and since 1 January 2025 it has grown by the obligation to receive structured e-invoices: record-keeping under the GoBD principles, eight- to ten-year retention, electronic advance VAT returns. Lexware Office closes that chain from version L at EUR 21.90 a month plus VAT, which is why the verdict reads: prevents falling behind. According to the provider, well over 450,000 customers work with the tool (as of 24 September 2026), so anyone using it stands on the same footing as the business next door. The AI features sit in receipt recognition and booking suggestions. Two points stand out in the documents: hard ceilings in the fair usage policy that limit the range of use at the top, and a publicly available processing agreement (Auftragsverarbeitungsvertrag) whose purpose clause reaches further than the commitment in the terms and conditions.

Evidence:As of 2026-09-24Brand owner, legal form, register court and register numbers, supervisory authority BaFinOpen sourceAs of 2026-09-28Contracting party, register number HRB 5718, management, payment institutions register 156230, terms including clauses on AI use, training exclusion, liability, availability, price changes, two-factor sign-in and contract end, dated 11 August 2026, read-only access for the retention periods under clause 13, liability outside intent and gross negligence capped at 50 per centOpen sourceAs of 2026-09-28Processing agreement with purpose clause, hosting in Germany, sub-processors in annex 1, right to object with the provider's right to terminate for cause, exception for backup copies, technical and organisational measures including a ten-year audit log in annex 2 and rules for contract end, dated 12 November 2025Open sourceAs of 2026-09-28Privacy policy separating the provider's own controllership from processing on instruction, Datadog, Mixpanel, training of the Intercom support chatbot on chat inputs and third-country rules, dated 23 September 2026Open sourceAs of 2026-09-24Usage ceilings: 50,000 documents per calendar year, 50 payroll runs per month, dated 13 November 2025Open sourceAs of 2026-09-28Prices of versions S to XL, payroll module, promotional discount for the first three months, tax adviser access used by more than 50,000 tax advisers according to the provider, and number of partner extensionsOpen sourceAs of 2026-09-24Data centres around Frankfurt with ISO 27001 and PCI DSS, audit under IDW PS 880, customer count as stated by the providerOpen sourceAs of 2026-09-24GoBD attestation only after a form via the report portal of the commissioned audit firmOpen sourceAs of 2026-09-28Four working rights plus a self-service right for one's own payslips, the right to documents withdrawable only for self-service users, any number of users, administrators can change the rights of other administratorsOpen sourceAs of 2026-09-24Log of changes and sign-ins with time and IP addressOpen sourceAs of 2026-09-28Entry of Haufe Service Center GmbH in the commercial register on 13 March 2006 and parent companyOpen sourceAs of 2026-09-24Haufe Group revenue for financial year 2024/25, announced 13 August 2025Open sourceAs of 2026-09-24Haufe Group revenue for financial year 2025/26, announced 23 July 2026Open sourceAs of 2026-09-24Renaming of lexoffice to Lexware Office with contracts unchangedOpen sourceAs of 2026-09-28Norman plans: bookkeeping and e-invoicing in the free plan, advance VAT return for the self-employed in the Pro plan at EUR 28 and for companies in the Max plan at EUR 52, each per month plus VATOpen sourceAs of 2026-09-28Retention periods since 1 January 2025: ten years for books and financial statements, eight years for accounting vouchers (section 147(3) of the Fiscal Code, Abgabenordnung)Open sourceAs of 2026-09-28Programs and filing aids for social insurance filings need a system check before first use (section 19 of the data capture and transmission ordinance, DEÜV)Open source

Who it fits

Solo

suitable

Entry is EUR 7.90 a month for receipt capture and archive; bookkeeping with the advance VAT return and the cash-basis profit statement starts in version L at EUR 21.90, each plus VAT and cancellable monthly. There is no minimum term, and access for the tax adviser is free.

Mid-market

suitable with caveats

Any number of users is allowed. The permission model knows only four coarse working rights covering documents, financial accounting, payroll and administration, plus a self-service right for one's own payslips, and the right to documents can be withdrawn only from users with self-service access. Every administrator can change the rights of every other administrator. Sign-in via single sign-on is not documented publicly. The fair usage policy caps use at 50,000 documents per calendar year and 50 payroll runs per month, and the payroll module ends at 50 employees in the price table.

Enterprise

not suitable

The processing agreement states the purpose itself: supporting small and micro businesses. Consolidation across several entities does not appear in the feature overview, liability outside intent and gross negligence is capped per calendar year at 50 per cent of the fees paid, and committed availability is 99 per cent as a monthly average during operating hours, excluding planned maintenance.

Buy, switch or build

Off-the-shelf

Keep the books through the tax firm in DATEV

The usual counterpart is DATEV Unternehmen online, set up through your own tax firm, which works in DATEV format and maintains the data set there. Lexware Office starts with the business: the business does its own bookkeeping and hands over to the tax firm via the electronic document shuttle (Pendelakte) (as of 28 September 2026).

AI-native

AI-native bookkeeping with a free core

Norman is a counterpart that makes AI bookkeeping itself the product. According to the provider, bookkeeping and e-invoicing come in the free plan. The advance VAT return (Umsatzsteuer-Voranmeldung) costs self-employed users EUR 28 a month plus VAT in the Pro plan, and companies EUR 52 in the Max plan (as of 28 September 2026). Norman is therefore cheaper only for users who file no advance VAT return. Two things need checking before a switch, both documented for Lexware Office and not checked for the counterpart in this profile: payroll with filing routes to health insurers and the tax office, and a publicly available processing agreement with a list of sub-processors.

Build it yourself

Building the document run yourself

The document run could be built: n8n chains inbox and filing without custom code, Claude Code writes the evaluation steps, LiteLLM keeps the model calls interchangeable and Langfuse measures the hit rate per document type. Ten person-days at EUR 1,200 (estimate) put EUR 12,000 against EUR 262.80 a year for version L. On top come three points the self-build would have to cover itself: filing to the tax office, the eight- to ten-year archive compliant with the GoBD principles, and for payroll the social insurance filings, which may only be made from system-certified software or via a filing aid such as sv.net. If the builder leaves, nobody is left to check the run against changed rules.

Our advice

  • Solo: Buy it, with version L once VAT applies, and switch on two-step sign-in for every user: without it, clause 3.3 of the terms makes the customer answerable for any misuse in every case.
  • Mid-market: Buy it while the fair usage ceilings are far off, and from around 30 employees (estimate) plan the exit route before the payroll limit of 50 is reached.
  • Enterprise: Unsuitable for groups: the processing agreement names small and micro businesses as its purpose, liability outside intent and gross negligence is capped at 50 per cent of the fees paid per year, and consolidation does not appear in the feature overview.

Who is behind it

Staying power: Established

Lexware Office belongs to Haufe Group, which describes itself as a family business based in Freiburg. The contracting party and processor is Haufe Service Center GmbH, a subsidiary of Rudolf Haufe Verlag GmbH & Co. KG. Haufe Service Center GmbH is also registered as a payment institution with the Federal Financial Supervisory Authority (BaFin). No stake held by financial investors appears in the documents checked.

  • Contracting party and register: Haufe Service Center GmbH, Munzinger Strasse 9, 79111 Freiburg, local court (Amtsgericht) Freiburg HRB 5718, managing directors Christa van der Burgh and Dr Tobias LagatzAs of 2026-09-24Contracting party, register number HRB 5718, management, payment institutions register 156230, terms including clauses on AI use, training exclusion, liability, availability, price changes, two-factor sign-in and contract end, dated 11 August 2026, read-only access for the retention periods under clause 13, liability outside intent and gross negligence capped at 50 per centOpen source · As of 2026-09-24
  • Brand owner: Haufe-Lexware GmbH & Co. KG, a limited partnership (Kommanditgesellschaft) seated in Freiburg, register court Freiburg HRA 4408, general partner Haufe-Lexware Verwaltungs GmbH, HRB 5557As of 2026-09-24Brand owner, legal form, register court and register numbers, supervisory authority BaFinOpen source · As of 2026-09-24
  • Registration and ownership: Haufe Service Center GmbH entered in the commercial register on 13 March 2006, parent company Rudolf Haufe Verlag GmbH & Co. KG, annual accounts to 30 June since 2006As of 2026-09-28Entry of Haufe Service Center GmbH in the commercial register on 13 March 2006 and parent companyOpen source · As of 2026-09-28
  • Supervision: Haufe Service Center GmbH registered with BaFin as a payment institution for payment initiation and account information services, payment institutions register 156230As of 2026-09-28Contracting party, register number HRB 5718, management, payment institutions register 156230, terms including clauses on AI use, training exclusion, liability, availability, price changes, two-factor sign-in and contract end, dated 11 August 2026, read-only access for the retention periods under clause 13, liability outside intent and gross negligence capped at 50 per centOpen source · As of 2026-09-28
  • Group financial year 2024/25: Haufe Group revenue EUR 562 million, growth above 8 per cent, around 2,500 employees, announced 13 August 2025As of 2026-09-24Haufe Group revenue for financial year 2024/25, announced 13 August 2025Open source · As of 2026-09-24
  • Group financial year 2025/26: Revenue above EUR 600 million for the first time, growth of 7 per cent, Lexware grew according to the group, reporting date 30 June 2026, announced 23 July 2026As of 2026-09-24Haufe Group revenue for financial year 2025/26, announced 23 July 2026Open source · As of 2026-09-24
  • Customer base as stated by the provider: Well over 450,000 customers, provider figure, retrieved 24 September 2026As of 2026-09-24Data centres around Frankfurt with ISO 27001 and PCI DSS, audit under IDW PS 880, customer count as stated by the providerOpen source · As of 2026-09-24
  • Tax adviser access as stated by the provider: More than 50,000 tax advisers in Germany use the free online access to client accounts, provider figure, retrieved 28 September 2026As of 2026-09-28Prices of versions S to XL, payroll module, promotional discount for the first three months, tax adviser access used by more than 50,000 tax advisers according to the provider, and number of partner extensionsOpen source · As of 2026-09-28

Cost of leaving: Low

Exit is governed by contract. After the contract ends the account stays in a free read-only mode according to the processing agreement, and under clause 13 of the terms on request for the length of the commercial and tax retention periods; export or deletion remain possible throughout. What stays open is what arrives in the new system as a connected whole: locked postings, the activity log and the link between receipt and bank transaction. The processing agreement speaks of common data exchange formats without naming them. The electronic document shuttle (Pendelakte) covers the route to a tax firm; further migration help is charged separately by the provider according to its price list.

Regulation and data

How to read the traffic lightHow to read the traffic lightThe traffic light rates how well a point is evidenced, not how good the tool is. It draws only on the value, note and source held in the profile. Where a statement is missing, it rates the absence, not a guess. A well-reasoned "unclear" on a point that matters little for this tool is yellow. A missing source on a point that decides whether you can use it at all is red.documented, no condition attacheddocumented, tied to a conditiondocumented, but unfavourableopen on a point that decides usability
Data processing agreementScale for this point: Data processing agreementdocumented, no condition attached: Auftragsverarbeitungsvertrag öffentlich abrufbar und ohne weitere Bedingung Bestandteil des Vertrags; oder er entfällt nachvollziehbar begründet, weil kein Anbieter Kundendaten verarbeitet.documented, tied to a condition: Vertrag existiert, ist aber an einen Tarif gebunden, nur nach Anfrage einsehbar oder allein in den Nutzungsbedingungen geregelt statt als eigenes Dokument.documented, but unfavourable: Kein Auftragsverarbeitungsvertrag im üblichen Sinn: entweder weil der Anbieter für das Kerngeschäft eigenständig Verantwortlicher ist und stattdessen eine andere Konstruktion gilt, oder weil öffentlich offen bleibt, ob überhaupt einer angeboten wird.open on a point that decides usability: Weder ein Vertrag noch ein dokumentierter Weg zu einem Vertrag; der Einkauf hätte nichts, worauf er sich stützen kann.documented, no condition attacheda dedicated agreement under Art. 28 GDPR, published in full and downloadable as a PDF, dated 12 November 2025As of 2026-09-24Processing agreement with purpose clause, hosting in Germany, sub-processors in annex 1, right to object with the provider's right to terminate for cause, exception for backup copies, technical and organisational measures including a ten-year audit log in annex 2 and rules for contract end, dated 12 November 2025Open sourceThe agreement is published in full, with sub-processors in annex 1 and technical and organisational measures in annex 2. The processor is Haufe Service Center GmbH, the same company that handles contracts under the terms and conditions. It is not tied to any plan. One inconsistency in the wording stands out: the agreement is said to take effect on signature, while the privacy policy speaks of a contract already concluded. Neither page names a signing route.As of 2026-09-24
Storage locationScale for this point: Storage locationdocumented, no condition attached: EU-Speicherort ohne Zusatzkosten und ohne Tarifbindung, oder der Ort ist vollständig selbst bestimmbar, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: EU-Speicherort möglich, aber an einen Tarif, einen gesondert zu aktivierenden Zusatz oder einen Umzug in eine getrennte Umgebung gebunden; oder die EU-Region ist nicht die Voreinstellung.documented, but unfavourable: Kein EU-Speicherort, der Ort ist aber eindeutig benannt, sodass die Folgen bewertbar sind.open on a point that decides usability: Der Speicherort ist öffentlich nicht benannt oder vom Kunden nicht steuerbar, sodass sich die Verarbeitung nicht verorten lässt.documented, no condition attachedAmazon Web Services in Frankfurt for all invoicing and accounting functions, AWS Europe for operating the AI-assisted functionsAs of 2026-09-28Processing agreement with purpose clause, hosting in Germany, sub-processors in annex 1, right to object with the provider's right to terminate for cause, exception for backup copies, technical and organisational measures including a ten-year audit log in annex 2 and rules for contract end, dated 12 November 2025Open sourceAccording to the processing agreement all core functions are developed and hosted exclusively in Germany, naming invoicing, receipt processing, payroll and the cash book. The hosting contract party is Amazon Web Services EMEA SARL in Luxembourg. The American parent appears as a separate entry in the list, limited to internal support services and only with prior approval. No surcharge for the region is mentioned.As of 2026-09-28
SubprocessorsScale for this point: Subprocessorsdocumented, no condition attached: Vollständige öffentliche Liste der Unterauftragnehmer mit Zweck und Land; oder es gibt keine, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Liste existiert und ist benannt, aber nur nach Anfrage oder nach Zugang zu einem Vertrauensportal einsehbar, oder sie nennt Zweck und Land nicht vollständig.documented, but unfavourable: Keine geführte Liste; namentlich stehen nur einzelne Dienste in der Datenschutzerklärung, überwiegend solche der eigenen Website.open on a point that decides usability: Weder eine Liste noch eine Nennung der Verarbeiter des Produkts, und kein dokumentierter Weg, sie zu erfahren.documented, no condition attacheda public list with ten entries including address and service, plus an approval proviso for AWS Inc.As of 2026-09-28Processing agreement with purpose clause, hosting in Germany, sub-processors in annex 1, right to object with the provider's right to terminate for cause, exception for backup copies, technical and organisational measures including a ten-year audit log in annex 2 and rules for contract end, dated 12 November 2025Open sourceAnnex 1 names every firm with address and purpose: two Haufe companies for development and support, Amazon Web Services for hosting, UserVoice for a feedback tool, The Rocket Science Group with Mandrill for sending all kinds of e-mail, Intercom for AI-assisted communication, B+S Banksysteme and BANKSapi for bank retrieval, SorryApp for status notices and Klippa of Groningen for extracting data from receipts. Datadog and Mixpanel appear only in the privacy policy, listed there as the provider's own processing based on legitimate interests, with data held in the EU. The provider must announce any change in advance, and the customer can object, in which case the provider may terminate the contract for cause.As of 2026-09-28
Third-country transferScale for this point: Third-country transferdocumented, no condition attached: Keine Übermittlung in ein Drittland, oder die Übermittlung findet statt und die Grundlage ist benannt und im Vertrag verankert, etwa Standardvertragsklauseln, Angemessenheitsbeschluss oder EU-US-Datenschutzrahmen.documented, tied to a condition: Übermittlung findet statt, eine Grundlage ist genannt, aber ohne Zuordnung, welcher Empfänger auf welcher Grundlage arbeitet.documented, but unfavourable: Übermittlung findet statt und die eigenen Unterlagen widersprechen sich, oder die genannte Grundlage bezieht sich erkennbar nur auf einen Randbereich wie die Marketing-Website.open on a point that decides usability: Übermittlung findet erkennbar statt und eine Grundlage wird nirgends genannt.documented, tied to a conditiontransfers to the US and the United Kingdom for secondary functions, legal basis named in general terms without matching it to each recipientAs of 2026-09-24Processing agreement with purpose clause, hosting in Germany, sub-processors in annex 1, right to object with the provider's right to terminate for cause, exception for backup copies, technical and organisational measures including a ten-year audit log in annex 2 and rules for contract end, dated 12 November 2025Open sourceCore functions stay in Germany. For supplementary functions such as e-mail delivery, the support platform and analytics the provider relies on sub-processors based in the US, naming UserVoice, The Rocket Science Group and Intercom, plus SorryApp in London. As the legal basis the processing agreement names an adequacy decision as the rule and standard contractual clauses otherwise. Which recipient works on which basis is stated nowhere. E-mail delivery has practical consequences: invoices sent from the program travel through an American service.As of 2026-09-24
Training on customer dataScale for this point: Training on customer datadocumented, no condition attached: Vertraglich oder in der Datenschutzerklärung ausdrücklich ausgeschlossen, mit Erstreckung auf die eingesetzten Modellanbieter; oder es gibt keine Datenübertragung an einen Anbieter.documented, tied to a condition: Ausschluss ab einem bestimmten Tarif, oder die Zusage steht nur auf einer Dokumentationsseite statt im Vertrag, oder die Frage stellt sich für das Werkzeug sachlich kaum und der Anbieter schweigt dazu.documented, but unfavourable: Nutzung ist die Voreinstellung und nur ein Widerspruch beendet sie; oder der Anbieter trainiert eigene Modelle auf bereinigten Kundendaten.open on a point that decides usability: Keine Aussage, obwohl das Werkzeug KI-Funktionen auf Kundeninhalten betreibt.documented, tied to a conditiontraining on inputs and outputs of the AI features excluded by contract; the processing agreement reserves analysis and improvement of the serviceAs of 2026-09-28Contracting party, register number HRB 5718, management, payment institutions register 156230, terms including clauses on AI use, training exclusion, liability, availability, price changes, two-factor sign-in and contract end, dated 11 August 2026, read-only access for the retention periods under clause 13, liability outside intent and gross negligence capped at 50 per centOpen sourceThe terms and conditions as of 11 August 2026 exclude the use of input or output for training purposes in section II clause 2.3. The processing agreement additionally names other purposes, among them analysing and improving the service offering, and it allows the stored data to be used for compatible purposes under Art. 6(4) GDPR. The Intercom support chatbot is an exception; according to the privacy policy it is trained on chat inputs. The provider does not name the model behind the AI features; the list names AWS Europe for operating the AI functions and Klippa for receipt extraction.As of 2026-09-28
Retention and deletionScale for this point: Retention and deletiondocumented, no condition attached: Löschfristen nach Vertragsende beziffert und die Löschung oder Rückgabe zugesagt; oder die Fristen bestimmt der Betreiber selbst, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Löschung ist zugesagt, die Fristen sind aber nur teilweise beziffert, oder Sicherungskopien sind ausdrücklich ausgenommen.documented, but unfavourable: Nur der Grundsatz der Erforderlichkeit ohne jede Frist nach Vertragsende, oder Fristen sind allein für Randbereiche wie Website-Protokolle genannt.open on a point that decides usability: Keine Aussage zu Aufbewahrung und Löschung.documented, tied to a conditionfree read-only access after the contract ends, deletion can be triggered by the customer at any time, trial accounts deleted after 13 months at the latest, no period stated for backupsAs of 2026-09-28Processing agreement with purpose clause, hosting in Germany, sub-processors in annex 1, right to object with the provider's right to terminate for cause, exception for backup copies, technical and organisational measures including a ten-year audit log in annex 2 and rules for contract end, dated 12 November 2025Open sourceThe processing agreement settles the end of the contract concretely: the account stays readable free of charge, the customer can trigger full deletion and export all data themselves, and a trial account that was never bought is deleted no later than 13 months after the trial ends. The provider may keep backup copies where needed for proper processing. No period after which the backups disappear too is given. A deletion concept beyond the account remains the customer's job.As of 2026-09-28
CertificationsScale for this point: Certificationsdocumented, no condition attached: Mehrere anerkannte Nachweise, benannt mit Norm, Fassung und Geltungsbereich, und bezogen auf den Anbieter selbst.documented, tied to a condition: Ein anerkannter Nachweis für den Anbieter belegt, der Bericht aber nur auf Anfrage, oder der Nachweis hängt an einem Tarif, oder der Geltungsbereich bleibt teilweise offen.documented, but unfavourable: Nur pauschale Nennung ohne Norm-Fassung und Geltungsbereich, oder bloße Selbstauskunft, oder die Nachweise gehören dem Infrastrukturanbieter statt dem Anbieter, oder der Prüfzeitraum ist erkennbar veraltet, oder die eigenen Angaben widersprechen sich.open on a point that decides usability: Kein Nachweis genannt und keine Sicherheits- oder Vertrauensseite vorhanden.documented, but unfavourablea GoBD attestation under IDW PS 880 is named, viewable only after a form via the portal of an unnamed audit firm; ISO 27001 and PCI DSS apply to the data centresAs of 2026-09-24Data centres around Frankfurt with ISO 27001 and PCI DSS, audit under IDW PS 880, customer count as stated by the providerOpen sourceAccording to the provider an independent audit firm regularly examines Lexware Office under IDW PS 880, IDW RS FAIT 1 and the GoBD principles. Anyone wishing to see the attestation enters company name, name and e-mail address and is forwarded to the audit firm's report portal; the firm's name, the audit date and the scope are not stated publicly. The ISO 27001 and PCI DSS certifications refer explicitly to the high-security data centres around Frankfurt, and so to the host. No ISO 27001 certification of the provider itself is named. The form was not submitted for this profile.As of 2026-09-24
EU AI Act, Article 50Scale for this point: EU AI Act, Article 50documented, no condition attached: Der Anbieter macht eine belegte Aussage, die die eigene Pflicht trägt, etwa Modelldokumentation und Zertifizierung nach ISO/IEC 42001; oder das Werkzeug enthält nachvollziehbar begründet kein KI-System im Sinne der Verordnung.documented, tied to a condition: Der Anbieter äußert sich zur Verordnung oder ordnet die eigene Funktion ein, eine benannte Zusage zu den Transparenzpflichten aus Artikel 50 fehlt aber; oder das Werkzeug enthält kein KI-System, das gegenüber Menschen auftritt, und der Anbieter schweigt.documented, but unfavourable: Das Produkt enthält KI-Funktionen, der Anbieter schweigt dazu oder trägt ein Selbstetikett ohne Nachweis; die Kennzeichnung ist vom Betreiber aber selbst setzbar.open on a point that decides usability: KI spricht im Produkt unmittelbar mit Endkunden und der Anbieter sagt zu Artikel 50 nichts; die Kennzeichnung lässt sich ohne Zusage des Anbieters nicht sicher setzen.documented, tied to a conditionthe terms name the AI Regulation and rule out prohibited practices and high-risk use; a statement on Article 50 is missingAs of 2026-09-24Contracting party, register number HRB 5718, management, payment institutions register 156230, terms including clauses on AI use, training exclusion, liability, availability, price changes, two-factor sign-in and contract end, dated 11 August 2026, read-only access for the retention periods under clause 13, liability outside intent and gross negligence capped at 50 per centOpen sourceClause 2.3 of the terms for SaaS solutions refers explicitly to Regulation (EU) 2024/1689. Prohibited are the practices under Article 5 and any use that would classify the AI features as high-risk, including the areas in Annex III such as personnel management. The provider places responsibility for inputs and results with the customer, together with an indemnity. It says nothing about the transparency duties under Article 50. The AI features in the product work on receipts and booking suggestions and do not face the customer's own customers.As of 2026-09-24
Audit loggingScale for this point: Audit loggingdocumented, no condition attached: Nachvollziehbares Protokoll über Zugriffe und Änderungen in allen Tarifen enthalten, mit benannter Frist und Ausleitung in eigene Systeme; oder die Nachvollziehbarkeit liegt vollständig in eigener Hand, weil das Werkzeug im eigenen Betrieb läuft.documented, tied to a condition: Protokoll vorhanden, aber an einen höheren Tarif oder einen kostenpflichtigen Zusatz gebunden, oder die Ausleitung fehlt in den unteren Stufen; Reichweite und Frist sind benannt.documented, but unfavourable: Protokolle sind nur anbieterseitig beschrieben, oder Reichweite und Frist bleiben offen, sodass sich Nachweispflichten nicht planen lassen.open on a point that decides usability: Öffentlich nicht belegt, ob der Kunde überhaupt ein auswertbares Protokoll erhält.documented, tied to a conditionan in-product log of changes and sign-ins with time and IP address, kept for ten years; export into your own systems is not documentedAs of 2026-09-24Log of changes and sign-ins with time and IP addressOpen sourceInside the product the log shows which changes were made when and who signed in from which IP address. According to annex 2 of the processing agreement, customer entries are kept in a GoBD-compliant audit log for ten years, and every access by the provider's own system administrators is logged with ID, timestamp and reason for the same period. No plan restriction is mentioned. None of the pages checked describes how the log can be transferred into your own system.As of 2026-09-24

What it really costs

Entry price

Four versions, per month plus VAT: S for receipt capture and archive EUR 7.90, M with quotes, e-invoices and dunning EUR 12.90, L with bookkeeping, cash-basis profit statement and VAT EUR 21.90, XL with EU and progress invoices plus the programming interface EUR 32.90. The provider currently offers half price for the first three months as a promotion (as of 28 September 2026). Payroll starts at EUR 12.90 for up to two employees. Everything can be cancelled monthly, as of 28 September 2026.As of 2026-09-28Prices of versions S to XL, payroll module, promotional discount for the first three months, tax adviser access used by more than 50,000 tax advisers according to the provider, and number of partner extensionsOpen source

As of 2026-09-28

What gets expensive

Additional costs arise at the limits. The payroll module climbs in steps by headcount up to 50, where the price table ends. The fair usage policy allows 50,000 documents a year and 50 payroll runs a month; anyone growing beyond that faces a change of system. The provider may adjust prices once a year, and a special right of termination arises only above 10 per cent. Migration support beyond the plain export is charged separately according to the price list.

What it displaces

  • Invoices in Word and Excel with hand-kept number ranges
  • Receipt folders that go to the tax firm at quarter end
  • Typing up bank statements by hand and making transfers from online banking
  • Payroll commissioned separately from a payroll bureau

Interfaces

  • Public API from version XL
  • Electronic document shuttle (Pendelakte) for handover to the tax firm
  • Multibanking via B+S Banksysteme and BANKSapi
  • Electronic filing of advance VAT returns and EC sales lists (Zusammenfassende Meldung)
  • E-invoicing in ZUGFeRD and XRechnung
  • Filing centre (Meldecenter) for social insurance and the tax office in the payroll module
  • More than 140 partner extensions according to the provider

Matching methods

  • Regulatory Density TestThe test asks how much regulation sits in a market. For Lexware Office, e-invoicing, the GoBD principles and filing routes to social insurance and the tax office apply.
  • Good-Better-Best PricingThe four versions from S to XL tier the scope: bookkeeping begins in the third tier (L), the programming interface in the fourth (XL).
  • Data Monetization: Improve, Wrap, SellThe method distinguishes whether data improves the product, wraps it or is sold, and the purpose clause of the processing agreement on analysing and improving the service is the first of those, written into the contract.

Alternatives

Sources

  1. 1.Brand owner, legal form, register court and register numbers, supervisory authority BaFin (opens in a new tab)impressum.lexware.de/lexware-office · As of 2026-09-24
  2. 2.Contracting party, register number HRB 5718, management, payment institutions register 156230, terms including clauses on AI use, training exclusion, liability, availability, price changes, two-factor sign-in and contract end, dated 11 August 2026, read-only access for the retention periods under clause 13, liability outside intent and gross negligence capped at 50 per cent (opens in a new tab)agb.lexware.de/lexware-office · As of 2026-09-28
  3. 3.Processing agreement with purpose clause, hosting in Germany, sub-processors in annex 1, right to object with the provider's right to terminate for cause, exception for backup copies, technical and organisational measures including a ten-year audit log in annex 2 and rules for contract end, dated 12 November 2025 (opens in a new tab)avv.lexware.de/lexware-office · As of 2026-09-28
  4. 4.Privacy policy separating the provider's own controllership from processing on instruction, Datadog, Mixpanel, training of the Intercom support chatbot on chat inputs and third-country rules, dated 23 September 2026 (opens in a new tab)datenschutz.lexware.de/lexware-office · As of 2026-09-28
  5. 5.Usage ceilings: 50,000 documents per calendar year, 50 payroll runs per month, dated 13 November 2025 (opens in a new tab)agb.lexware.de/lexware-office/fair-usage-policy · As of 2026-09-24
  6. 6.Prices of versions S to XL, payroll module, promotional discount for the first three months, tax adviser access used by more than 50,000 tax advisers according to the provider, and number of partner extensions (opens in a new tab)lexware.de/preise · As of 2026-09-28
  7. 7.Data centres around Frankfurt with ISO 27001 and PCI DSS, audit under IDW PS 880, customer count as stated by the provider (opens in a new tab)lexware.de/datenschutz-datensicherheit · As of 2026-09-24
  8. 8.GoBD attestation only after a form via the report portal of the commissioned audit firm (opens in a new tab)lexware.de/gobd-zertifikat · As of 2026-09-24
  9. 9.Four working rights plus a self-service right for one's own payslips, the right to documents withdrawable only for self-service users, any number of users, administrators can change the rights of other administrators (opens in a new tab)help.lexware.de/…/548789-benutzer-und-berechtigungen-verwalten · As of 2026-09-28
  10. 10.Log of changes and sign-ins with time and IP address (opens in a new tab)help.lexware.de/… · As of 2026-09-24
  11. 11.Entry of Haufe Service Center GmbH in the commercial register on 13 March 2006 and parent company (opens in a new tab)northdata.de/Haufe+Service+Center+GmbH,+Freiburg · As of 2026-09-28
  12. 12.Haufe Group revenue for financial year 2024/25, announced 13 August 2025 (opens in a new tab)haufegroup.com/… · As of 2026-09-24
  13. 13.Haufe Group revenue for financial year 2025/26, announced 23 July 2026 (opens in a new tab)presseportal.de/pm/106930/6320059 · As of 2026-09-24
  14. 14.Renaming of lexoffice to Lexware Office with contracts unchanged (opens in a new tab)lexware.de/lexoffice · As of 2026-09-24
  15. 15.Norman plans: bookkeeping and e-invoicing in the free plan, advance VAT return for the self-employed in the Pro plan at EUR 28 and for companies in the Max plan at EUR 52, each per month plus VAT (opens in a new tab)norman.finance/pricing · As of 2026-09-28
  16. 16.Retention periods since 1 January 2025: ten years for books and financial statements, eight years for accounting vouchers (section 147(3) of the Fiscal Code, Abgabenordnung) (opens in a new tab)gesetze-im-internet.de/ao_1977/__147.html · As of 2026-09-28
  17. 17.Programs and filing aids for social insurance filings need a system check before first use (section 19 of the data capture and transmission ordinance, DEÜV) (opens in a new tab)gesetze-im-internet.de/de_v/__19.html · As of 2026-09-28

Last reviewed: 2026-09-28 by Dr. Oliver Gausmann, Convios GmbH

Details out of date? Let us know.

From tool to decision

The offer that fits this tool

A tool profile tells you what the tool does and what it means for compliance. Whether it gets priority in your company is a management decision, and it takes one working day: the executive AI workshop ranks your initiatives by business value, risk, data readiness and ownership.