Hey guys,
in e-invoices, is it wanted behaviour that the seller’s e-mail-address will be filled out with the e-mail-address/login (!) of the Invoice-Ninja-user who made the invoice and not with the company’s (or another) one?
For this kinds of questions, just let us know when version of the e-invoice you are using.
ie. Zugferd or PEPPOL.
For Zugferd, the user who created the document has the email set as the “Seller Contact”
Hi, @david,
I didn’t know that there’s a difference. Yes, I use Zugferd.
Isn’t this a security-risk? Or is this part of the specification? I mean the e-mails aren’t sent by the user’s e-mail-account – and I think some invoice-writers do not want to have their own e-mail-address/invoice-ninja-account written in invoice-code. Just my 2 cents.
We have the same problem with the e-invoice XML for ZugFerd. When I select EN16931 as the e-invoice standard then the XML contains the Name and the e-mail address (used to log in) of the user who created the invoice. It also contains the private phone number that is used for 2FA.
We definitely don’t want to send private user information and login credentials of our users to every client who receives an invoice.
I suggest following up in a discussion on GitHub