No customer data at rest
We unlock your customer's .p12 in memory for 15 minutes at a time. Nothing fiscal lives on our disk or database. A leak on our side yields nothing fiscally signable — because we hold nothing.
Hosted, stateless e-Facturación for Dominican Republic. You hold the fiscal data; we hold nothing. One API key, ten e-CF types, no facturador status required.
40209547971, all 15 Pasos cleared. The bridge below is what we use ourselves. A stateless signing + submission bridge between your product and the Dominican Republic's DGII e-Facturación services. You hold the fiscal data (invoices, emisor profiles, .p12 certificates); we sign what you hand us and forward to DGII. You get back the signed XML and DGII's receipt.
(1 account per integrator company)
↓
[ your product ] ─────────► fiscaliacore ─────────► [ DGII ]
↑ (stateless) ↑
(your end customers — (the fiscal authority)
RNC holders, invisible to us)Three lines to issue an e-CF, from session open to TrackID:
# 1. Open a 15-minute signing session with your customer's .p12.
SESSION=$(curl -s -X POST https://api.fiscaliacore.com/api/v1/sessions \
-H "X-Api-Key: $YOUR_KEY" \
-F certificate=@customer.p12 \
-F password=$P12_PASSWORD \
| jq -r .bearer)
# 2. Issue an e-CF — typed JSON, no XML to build yourself.
curl -s -X POST https://api.fiscaliacore.com/api/v1/ecf/issue-stateless \
-H "Authorization: Bearer $SESSION" \
-H "Content-Type: application/json" \
-d @invoice.json
# { "trackId": "07a3e9...", "estado": "EN_PROCESO", "signedXml": "<ECF>..." }
# 3. Poll for DGII's verdict (or wait for the ACECF push to your webhook).
curl -s https://api.fiscaliacore.com/api/v1/ecf/$TRACK_ID/status \
-H "Authorization: Bearer $SESSION"
# { "estado": "ACEPTADO", "mensajes": [] }No XAdES manipulation, no certificate-chain validation, no XSD wrangling, no managing the DGII session token rotation. The form-shape you see above is what you build against — the build-payload sandbox generates it interactively if you'd rather click than type.
DGII e-Facturación cert is non-trivial. We did it. Here's what's on the receipt:
| Roll your own | fiscaliacore | |
|---|---|---|
| Time to first certified e-CF | 2–4 months (DGII paso process + XAdES debugging + XSD validation iteration) | Hours — your cert + our API |
| Engineering investment | 1 senior + 1 junior, full-time, ~3 months | An afternoon to wire one POST |
| DGII technical manuals to internalize | 9 PDFs, 1,200+ pages, Spanish only | We read them so you don't |
| e-CF types to implement | All 11 yourself before launch | All 11 already covered |
| XAdES signing quirks | DGII's signature spec has ~12 non-obvious rules. Get one wrong → submission rejected | All twelve already memorialized in our signer |
| Receiver gateway | Wildcard DNS + TLS + tenant routing + signature verification | Included — {rnc}.ecf.fiscaliacore.com per customer |
| Monthly ops cost | DGII fines for missing ACECFs · cert renewal calendar · DGII outage handling | $0 of your engineering time on DGII surface |
Our $499/mo Business tier costs less than one week of a senior engineer's salary in DR. We sized it that way deliberately.
Companies whose software needs to issue, receive, or approve Dominican e-CFs on behalf of their own customers — POS vendors, ERPs, accounting SaaS, payment processors, anyone who wants a hosted DGII pipe instead of building + certifying one internally.
You are an integrator. Your end-customers (the RNC holders) stay inside your product. They never see fiscaliacore. We only ever see transactions — never a relationship.
.p12 + password; we hand back an opaque bearer token good for 15 minutes. Every signing call reuses that token. Keys stay in memory; nothing is written to disk.{rnc}.ecf.fiscaliacore.com). DGII sends inbound e-CFs, ACECFs, and cancellations there; we verify XAdES, forward to your registered callback with an Ed25519-signed envelope, proxy the response back.Everything else — invoice history, audit logs, customer profiles, billing, retry on outage — lives in your product.
What's running in production today (2026-05-25):
| Status | |
|---|---|
| DGII certification | Live RNC 40209547971 fully certified — all 15 Pasos. |
| e-CF issuance | Live Stateless endpoint default-on. All 10 e-CF types + RFCE. |
| Status polling | Live Stateless proxy with one-shot 401 retry + state normalization. |
| ACECF issuance + receiver gateway | Live Wildcard subdomain per tenant. Case-insensitive routing per DGII §1956. |
| Webhook v1 (Ed25519) | Live JWKS auto-bootstraps on first inbound push. |
| Sandbox utilities | Live Sign postulación · Inspect signature · Build payload. All free, all browser-side. |
| Integrator pricing | Live Five-tier matrix. Self-service tier selection from the dashboard. |
| Billing dashboard | Live Tier card · period progress · cap editor · "Pay now" overage flow. |
| Tier subscriptions (recurring) | Live PayPal Subscriptions auto-charge the tier base monthly. Upgrade / cancel from /app/dashboard. |
| Webhook config UI | Live Receiver registration + rotate + revoke from the dashboard. |
| Overage auto-charge from saved method | Roadmap Phase 3c — today overage is click-to-pay; auto-debit needs PayPal Vault. |
| Mid-period tier upgrade proration | Roadmap Phase 3c — today, time upgrades to your billing anniversary. |
See the architecture phase plan for the full refactor timeline.
Free Sandbox tier (100 e-CFs/month, CERT env only). Paid tiers start at $49/mo for 5,000 e-CFs and step down per-unit as you scale. Hard cap protects you from runaway scripts. Full matrix →