Every e-invoicing vendor's homepage says roughly the same thing: compliant, secure, easy to use. That's not a useful basis for a decision that affects your legal invoicing record for years. Here are seven concrete criteria you can actually check — and, since we're one of the providers you might be evaluating, an honest note on where Sumu currently sits on each, gaps included.
1. Accreditation status
Ask directly: is this provider listed on OTA's own Fawtara service provider portal, and can they show independently verifiable certifications rather than a badge on their homepage? See our full guide to verifying accreditation for exactly how to check.
Where Sumu stands: As of September 2026, Sumu holds ISO 27001 certification, Fawtara certification, and Peppol Access Point Certified Provider status — all independently verifiable, not self-reported claims.
2. Format compliance
A provider claiming "e-invoicing" support isn't automatically producing genuinely compliant output. See our PINT-OM explainer for what compliant actually requires — the right CustomizationID, PDF/A-3 with embedded XML, correct handling of self-billing and credit-note variants, not just generic UBL.
Where Sumu stands: Our Peppol Access Point Certified Provider and Fawtara certifications are specifically what get audited against this bar — that's what those certifications mean. Don't take our word for it any more than any other provider's: ask any vendor, us included, for their actual conformance evidence rather than a marketing claim.
3. Pricing transparency
Can you see actual pricing, or does every page push you toward "contact sales"? Opaque pricing isn't automatically a red flag — some genuinely complex integrations need a conversation — but a provider who won't give you even a ballpark until you've sat through a sales call is worth noting.
Where Sumu stands, honestly: pricing isn't yet published on our site as of this writing. If that matters to your evaluation — and it's fair if it does — don't assume; ask directly before you commit to any provider, us included.
4. Local support and language
Fawtara is an Oman-specific mandate with Arabic-language legal and tax terminology throughout. A support team that doesn't operate in Oman's timezone, or can't handle a question in Arabic, is a real friction point when something breaks close to your deadline.
Where Sumu stands: Sumu is built specifically for the Oman market, not a global platform with Oman support bolted on, with both English and Arabic content and support.
5. Integration and API
If you already run accounting, ERP, or POS software, your invoicing provider needs to connect to it — manually re-entering invoice data defeats the purpose of automating compliance in the first place. Ask for real API documentation, not a promise that "integration is possible."
Where Sumu stands: Sumu is built API-first as an invoicing platform, not retrofitted onto a different product. If a specific integration matters to your evaluation, ask directly what's currently supported rather than assuming from a feature list.
6. Data residency
Where your invoice data is actually stored — which country, which cloud region — matters for some businesses' internal compliance or data-protection requirements, separate from the Fawtara mandate itself. This is worth asking any provider directly and getting a specific answer, not a vague "we use enterprise-grade cloud infrastructure."
Where Sumu stands, honestly: we're not going to publish infrastructure specifics in a blog post — that's not a decision to make casually, for any provider, security-wise. If data residency is a hard requirement for your business, ask us (or any provider you're evaluating) directly and get a specific, current answer before you sign anything, rather than assuming based on a provider's general marketing.
7. Archiving and retention
Compliant e-invoicing isn't just about the moment of issuance — it's about being able to produce that record correctly for the full retention window: 10 years generally, 15 years for real estate-related records, under Article 70 of Royal Decree 121/2020 (see our complete Fawtara guide). Ask what happens to your records if you ever switch providers, not just how they're stored while you're a customer.
Where Sumu stands: this is a requirement we design around rather than treat as an afterthought — but as with any provider, ask directly about export and retention specifics relevant to your own contract before you sign, rather than assuming.
Putting it together
None of these seven criteria alone tells you everything — a provider can be accredited and still have thin local support, or have great support and an unclear data residency answer. Check all seven, for any provider you're evaluating, us included. For a broader look at how several Oman e-invoicing options compare against these criteria, see our roundup of e-invoicing software in Oman.
Unfamiliar term? Check our Oman e-invoicing glossary.
Sources: Oman Tax Authority (Fawtara service provider portal, Peppol Authority approval); Royal Decree No. 121/2020, Article 70; joinsumu.com certifications section.
