Düsseldorf, July 2026 – Tax is no longer just a matter of filing returns and meeting reporting obligations. It has become an organisational, process and risk management issue. Companies that want to meet their tax obligations reliably need more than technical expertise within the tax function. They need clearly defined processes, transparent responsibilities, effective controls and robust documentation that can withstand scrutiny during an audit.
This is where the journey begins: from traditional GoBD process documentation to a modern Tax Compliance Management System – or Tax CMS – and ultimately to a tax control system that not only brings structure to tax compliance, but can also reduce the burden on the organisation.
The GoBD provide the framework for the proper management, retention and accessibility of electronic books, records and documents for tax authority audits. For companies, this means ensuring that tax-relevant processes are transparent, traceable and properly documented.
Process documentation describes how data is generated, processed, controlled, stored and archived. It is therefore an important part of maintaining proper tax compliance. However, it does not by itself answer the key question: are tax risks actually identified, assessed, managed and controlled in day-to-day operations?
This is where purely descriptive documentation is no longer enough. Companies need a system that not only explains how processes are intended to work, but also demonstrates that they are working effectively in practice.
A Tax CMS brings together tax obligations, risks, processes, controls, responsibilities and evidence within a structured system. It makes it clear where tax risks may arise — for example in VAT, payroll tax, transfer pricing documentation, withholding tax, corporate income tax or cross-border transactions.
The key difference compared with purely descriptive documentation lies in effectiveness. A Tax CMS is not just a digital filing system. It is a management tool. It assigns responsibilities, defines controls, documents their execution, highlights deviations and provides a robust basis for both internal and external audits.
This makes tax compliance operational. Individual measures become part of a transparent control system, while scattered Excel files, process descriptions and email-based evidence are brought together in an integrated management approach.
An effective Tax CMS helps companies identify tax-related errors at an early stage, reduce risks systematically and establish clear responsibilities. This is particularly important because tax errors can have consequences beyond financial penalties. They can also damage a company’s reputation and raise questions of personal liability for directors and other responsible individuals.
The objective is not to create the illusion of complete error-free compliance. No system can prevent every deviation. What matters is whether a company can demonstrate that it has implemented appropriate organisational measures to ensure that its tax obligations are met properly.
A Tax CMS that is embedded in day-to-day operations demonstrates that tax compliance is not left to chance. It is structured, documented, verifiable and subject to continuous improvement.
With the tax control system — often referred to by the German abbreviation SKS — the focus on effectiveness becomes even more important. The application decree on Section 153 of the German Fiscal Code (AO) makes clear that an internal control system designed to ensure compliance with tax obligations may be taken as an indication against intent or gross negligence. This does not provide automatic protection from liability. However, it sends an important signal: a company that organises its tax obligations systematically, controls risks and manages error-handling processes in a transparent and traceable way is in a very different position from one without a robust control system.
Article 97 Section 38 of the Introductory Act to the Fiscal Code (EGAO) points in the same direction. It describes a tax control system as the entirety of internal measures designed to ensure that taxable bases are recorded and taken into account correctly and that taxes are paid in full and on time. The system must also continuously reflect tax-related risks.
This marks a clear shift in focus: away from isolated reviews and retrospective error correction, and towards continuous control, transparency and demonstrable effectiveness.
This is exactly where the CRISAM® x Deloitte standard comes in. It combines the technological capabilities of the CRISAM® GRC platform with Deloitte’s tax and compliance expertise. The result is a practical approach that goes beyond design and supports companies in implementing and operating their Tax CMS on an ongoing basis.
CRISAM® provides the structure, workflows, dashboards, risk-control matrices, task management, evidence documentation and reporting capabilities. Deloitte contributes methodological expertise, in-depth tax knowledge and proven content. Together, they create a standard that helps companies not only document tax compliance, but manage it effectively in practice.
The key advantage lies in bringing content and technology together. Risks, controls and measures are not managed in isolation, but integrated within a single platform. Responsible teams can see which controls are due, where evidence is missing, where risks are increasing and which issues require management attention.
This turns a Tax CMS into a manageable, auditable and scalable tax control system.
A common misconception is that a Tax CMS is only relevant for large corporations. In fact, companies of all sizes can benefit from it. Large corporate groups need a system that helps them manage complexity across legal entities, countries, tax types and reporting obligations. Mid-sized companies, in particular, benefit from clearly defined responsibilities, straightforward workflows and structured evidence management.
Smaller and mid-sized companies often face the challenge that tax-related knowledge is concentrated among only a few individuals. If processes are not documented, controls are performed only informally and evidence is stored in emails or local files, this creates significant organisational risk. A Tax CMS brings greater transparency, consistency and reliability.
The solution does not need to be overly complex. A good standard is scalable. It can grow with the organisation, adapt to the company’s size and support a pragmatic starting point — from key tax processes through to a comprehensive tax control system.
The journey from GoBD process documentation to a Tax CMS and, ultimately, to a tax control system is more than a regulatory development. It reflects a new understanding of tax governance.
Companies that invest in an effective Tax CMS are doing more than bringing structure to their documentation. They gain greater transparency into tax risks, more reliable processes, better support for those responsible and a stronger position when dealing with auditors and tax authorities.
The CRISAM® x Deloitte standard offers a practical way forward: grounded in tax expertise, supported by technology and scalable for companies of all sizes.
The key message is clear: tax compliance must not end with documentation. It needs to work in practice across the organisation.
The Tax CMS Day provided valuable insights into how tax compliance is evolving from documentation towards effective, continuously managed control systems. The real value emerges when these principles are applied to your organisation’s specific tax processes, risks and requirements.
Would you like to see how CRISAM® can support your organisation in building and operating an effective Tax CMS? Talk to our team. We would be happy to show you how tax risks, controls, responsibilities and evidence can be managed within an integrated platform.
You are currently viewing a placeholder content from Facebook. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Hubspot Embedded Content. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from HubSpot. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Hubspot Meetings. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from Instagram. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou are currently viewing a placeholder content from X. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More Information
