Croatia — Fiskalizacija Sandbox Onboarding
Operational guide for getting test credentials at the CIS Fiskalizacija sandbox.
| Property | Value |
|---|---|
| Authority | Porezna uprava (PU) |
| Sandbox base URL | https://cistest.apis-it.hr:8449/FiskalizacijaServiceTest |
| Cost | Test cert free; production FINA cert ~€60/yr (5-yr validity) |
| Time to provision | 1-2 weeks for FINA test cert |
| Identity required | Croatian OIB (11-digit tax number) |
Steps
- Apply for a FINA test certificate at
fina.hr. FINA is the only authorized CA for Croatian fiscalization certificates. - FINA delivers a P12/PFX cert with password (one-time on issuance).
- Register at the CIS test environment using your OIB.
- In the production system (when going live): register your business premises (
oznaka poslovnog prostora) and cash registers (oznaka naplatnog uređaja). - Validate with a
RacunZahtjevSOAP envelope test submission.
GitHub secrets to set
HR_OIB
HR_FINA_PFX_BASE64
HR_FINA_PFX_PASSWORD
HR_BUSINESS_PREMISE_ID
HR_CASH_REGISTER_ID
Gotchas
- SOAP-only API — XML-DSig enveloped signature is mandatory and the most common point of failure. Adapter's
dsig.rshandles this; sandbox-nightly must sign correctly or get HTTP 500. - Production cert has 5-year validity. Rotation must be calendared; expired certs cause immediate compliance failure.
- ZKI is computed locally with RSA-SHA1 + MD5 (note SHA1, not SHA256 — different from Slovenia's ZOI).
- Sync-with-fallback (per fi-rah): B2C consumer receipts attempt sync POST with timeout; on failure fall back to 48h offline grace and print receipt with "naknadna dostava" label. B2B invoices use deferred mode.
- JIR returned synchronously by CIS in normal operation. JIR + ZKI both required on the receipt by regulation.
Non-resident path
Croatian OIB is required. FINA test certificates are available to foreign companies but only via an authorised representative under power of attorney.
- POA route. A Croatian fiscal representative handles OIB issuance and FINA cert procurement on the platform's behalf. This is the standard non-resident path; FINA does not deal with foreign vendors directly.
- Cheapest dev path: Croatian fiscal representative — budget
€200-500/month plus FINA cert (€60/yr in production). 2-4 weeks to first credentials. - Production. Either a Croatian branch or VAT registration for the platform, or the platform-serves-merchants model where each merchant holds their own OIB and we integrate. The intermediary model keeps us off CIS as a direct issuer.
Related
- Research doc: croatia.md
- Adapter crate:
rust/adapters/croatia/ - Sandbox tests:
rust/adapters/croatia/tests/sandbox.rs