DRC Readiness Scorecard: Ten Dimensions, Fifty Statements
Fifty statements across ten dimensions to measure how ready your company is for mandatory e-invoicing and real-time tax reporting, with a score out of 100, a readiness profile, the red flags that need action now, and what to do in the next ninety days.
Concepts · October 2026 · For tax, finance and IT leaders · About 45 minutes, together
<strong>A self-assessment to structure an internal conversation, not a compliance opinion.</strong> Scores depend on the honesty and evidence behind each answer. Your answers never leave your browser: nothing is sent or stored anywhere.
10
dimensions, from obligations to change readiness
50
statements, five per dimension, each scored 0, 1 or 2
8
red flags that call for action whatever the total
100
points: your readiness score, and a profile across the ten dimensions
Ten Dimensions, Fifty Statements, One Honest Number
Mandatory e-invoicing touches tax, finance, IT, master data and your suppliers at once. Most companies are strong in some of these and exposed in others, and the exposed ones are rarely visible from a single department. This scorecard puts all of them on one page.
How to score each statement
| Score | Meaning | Use it when |
|---|---|---|
| 0 | No | It is not in place, you are not sure, or nobody in the room can say who owns it |
| 1 | Partly | It exists for some entities, countries or systems, or it is planned with a date |
| 2 | Yes, with evidence | It is in place everywhere in scope, and you could show a document, report or log today |
Who should be in the room
| Role | Brings | Leads dimensions |
|---|---|---|
| Head of tax or indirect tax | The obligations, the deadlines, the authority's view | 1, 9 |
| Finance: AR, AP, controlling | How invoices really flow, where they get stuck | 5, 6, 8 |
| SAP or IT lead | Systems, release, connections, certificates | 3, 7, 10 |
| Master-data owner | Customers, suppliers, codes and their quality | 4 |
| Executive sponsor | Ownership, budget and the decisions that follow | 2 |
“Don't know” scores 0
If nobody can answer, that is the finding.
Score the weakest entity
A group is as ready as its least ready company in a mandated country. Or score each entity separately.
Plans count as 1, not 2
A project with a date is progress, not readiness.
Write down the evidence
Each dimension lists what to look for; a 2 without it is a 1.
<strong>What “DRC” means here.</strong> We use DRC (document and reporting compliance) for the whole set of obligations to exchange invoices electronically and report tax data to authorities. The scorecard works on any system; where it refers to SAP, it is because most of our clients run it, and SAP's solution carries the same name.
One Tick per Statement
Mark 0, 1 or 2 against each statement. The result is calculated in your browser as you go; unmarked statements count as 0, the same as a “don't know”.
01 Obligations and scope
0 / 10
Know exactly what applies to you
Every plan starts from a list of obligations. Companies that miss a mandate rarely ignored it: they did not know a subsidiary, a branch or a VAT registration was in scope.
<strong>Evidence to look for:</strong> The register itself, with an owner and a last-updated date.
02 Governance and ownership
0 / 10
Someone owns the outcome
E-invoicing sits between tax, finance and IT, and so it often belongs to nobody. Rejections, expired certificates and missed deadlines go unresolved when no one owns the result.
<strong>Evidence to look for:</strong> A written RACI, the budget line, minutes of the last review.
03 ERP and platform position
0 / 10
Two clocks, one decision
Strategy is decided by two dates per entity: when the mandate applies, and when the ERP stops receiving legal updates. Mainstream maintenance for SAP ERP 6.0 ends on 31 December 2027.
<strong>Evidence to look for:</strong> The system inventory, release documentation, the decision recorded per entity.
04 Master data
0 / 10
The format is easy; the data is hard
Most rejections trace back to tax numbers, addresses, units or codes that were never validated. Data problems surface on the first day of a mandate, not in testing.
<strong>Evidence to look for:</strong> A data-quality report from the last ninety days.
05 Issuing invoices
0 / 10
Outbound readiness is measured on exceptions
A rejected invoice often does not legally exist: the customer cannot deduct the VAT and may not pay. Readiness is judged by how exceptions are handled, not by the happy path.
<strong>Evidence to look for:</strong> The rejection log, the contingency procedure and its last test date.
06 Receiving invoices
0 / 10
Half of every mandate
Most mandates also change how supplier invoices arrive. In several countries the buyer has its own deadlines, and loses VAT deduction on invoices that are not valid.
<strong>Evidence to look for:</strong> The share of supplier invoices received as structured data.
07 Connectivity and security
0 / 10
The connection is part of the invoice
Certificates expire, credentials lapse and providers change. In a clearance country, a broken connection stops billing outright.
<strong>Evidence to look for:</strong> The certificate register and the alert configuration.
08 Monitoring and exceptions
0 / 10
Failure no one notices
After go-live, the risk is not failure: it is failure no one notices. One cockpit, one daily routine and a few indicators make the difference.
<strong>Evidence to look for:</strong> Last month's indicator pack and the daily review routine.
09 Reporting and reconciliation
0 / 10
The authority's version of your books
Once authorities hold every invoice, they can draft your VAT return. Every gap between their data and your ledger becomes a difference to explain.
<strong>Evidence to look for:</strong> The last reconciliation and a test retrieval from the archive.
10 Change readiness and people
0 / 10
Compliance is a subscription
Formats and rules change every year, in every country. What is compliant at go-live is not compliant two releases later unless someone keeps it so.
<strong>Evidence to look for:</strong> The change calendar, the runbooks, the last regression run.
Your results
Mark the first statement to see your score.
0/50 statements scored. The rest count as 0.
0/100
Exposed · 0–39
Compliance depends on people and luck. At least one obligation is probably already at risk.
<strong>Next ninety days:</strong> Build the obligation register, name an owner, close every red flag, check the nearest mandate date.
Reactive · 40–59
The normal flow works; exceptions, receiving and data are handled case by case.
<strong>Next ninety days:</strong> A daily monitoring routine, master-data clean-up at source, and a plan for the receiving side.
Managed · 60–79
Under control for today's mandates; exposed to change, new countries and the ERP clock.
<strong>Next ninety days:</strong> Period reconciliation, a legal-change calendar, and the ERP roadmap set against mandate dates.
Compliant by design · 80–100
Repeatable, measured and owned; ready for new countries and for ViDA.
<strong>Next ninety days:</strong> An annual review of this scorecard, ViDA 2030 readiness, and reuse of the template for the next country.
Profile by dimension
- 1 · Obligations0StrongestWeakest
- 2 · Governance0StrongestWeakest
- 3 · ERP position0StrongestWeakest
- 4 · Master data0StrongestWeakest
- 5 · Issuing0StrongestWeakest
- 6 · Receiving0StrongestWeakest
- 7 · Connectivity0StrongestWeakest
- 8 · Monitoring0StrongestWeakest
- 9 · Reporting0StrongestWeakest
- 10 · Change0StrongestWeakest
0–3 exposed 4–6 developing 7–10 in control
Red flags at 0: action for this month
- 1.1 Register of entities, registrations and the mandates that apply to each
- 2.1 One named executive owns compliance end to end
- 3.3 Mandate date compared with the ERP roadmap, decision taken per entity
- 5.2 Rejections corrected within the legal deadline by a named team
- 6.1 Able to receive through every mandatory channel
- 7.2 Certificates and credentials inventoried with expiry dates and owners
- 8.2 Open and failed documents reviewed every working day
- 9.2 What is reported or cleared reconciled to the ledger every period
No red flag at 0. Keep the evidence current.
Rule: any red flag scored 0 is an action for this month, whatever your total. A high score with a red flag at 0 is not a high score.
Read the shape, not only the total
A dent in dimensions 4–6 (data, issuing, receiving) shows up as rejections, unpaid invoices and lost VAT deductions: the costs arrive first here.
A dent in dimensions 1–3 (obligations, ownership, platform) is a planning risk: the problem is not visible yet, but the date is fixed.
A dent in dimensions 7–10 (connectivity, monitoring, reporting, change) is an operating risk: things work today and degrade quietly.
No block clearly lags behind: the profile is balanced.
<strong>Why self-scores run high.</strong> In our experience, self-assessments are most optimistic on master data, receiving and monitoring: the areas no single person sees end to end. Above 70, test three of your 2s against the evidence before you rely on the result.
The PDF carries your score, profile, red flags and answers, on 30 Advisory letterhead. It is created in your browser: nothing is sent.
What Each Band Means for the Next Ninety Days
| Band | Typical picture | Next ninety days |
|---|---|---|
| Exposed 0–39 | No single view of obligations; ownership split between tax and IT; rejections found by customers. | Build the obligation register, name an owner, close every red flag, check the nearest mandate date. |
| Reactive 40–59 | Sending works; receiving, data quality and monitoring do not; knowledge sits with one or two people. | A daily monitoring routine, master-data clean-up at source, and a plan for the receiving side. |
| Managed 60–79 | Current mandates under control; reconciliation and change handled, but not yet systematically. | Period reconciliation, a legal-change calendar, and the ERP roadmap set against mandate dates. |
| Compliant by design 80–100 | Owned, measured and repeatable; new countries follow a template. | An annual review of this scorecard, ViDA 2030 readiness, and reuse of the template for the next country. |
Red flags: check these first
Rule: any red flag scored 0 is an action for this month, whatever your total. A high score with a red flag at 0 is not a high score.
- 1.1 Register of entities, registrations and the mandates that apply to each
- 2.1 One named executive owns compliance end to end
- 3.3 Mandate date compared with the ERP roadmap, decision taken per entity
- 5.2 Rejections corrected within the legal deadline by a named team
- 6.1 Able to receive through every mandatory channel
- 7.2 Certificates and credentials inventoried with expiry dates and owners
- 8.2 Open and failed documents reviewed every working day
- 9.2 What is reported or cleared reconciled to the ledger every period
Read the shape, not only the total
- A dent in dimensions 4–6 (data, issuing, receiving) shows up as rejections, unpaid invoices and lost VAT deductions: the costs arrive first here.
- A dent in dimensions 1–3 (obligations, ownership, platform) is a planning risk: the problem is not visible yet, but the date is fixed.
- A dent in dimensions 7–10 (connectivity, monitoring, reporting, change) is an operating risk: things work today and degrade quietly.
A worked example
An illustrative mid-size manufacturer with entities in three EU countries, running SAP ERP 6.0, scores 43: <strong>Reactive</strong>. Strong on obligations (7): the tax team keeps a good register. Weak on platform (3): no decision yet against the 2027 maintenance date. Weak on receiving and monitoring (3 each), with red flag 8.2 scored 0.
First actions: a daily review of failed documents this month; a receiving plan before the next mandate; a build, bridge or migrate decision per entity this quarter.
Hypothetical example for illustration; not a client and not a benchmark.
Re-score in ninety days
With the same people. The change in the total, and in the shape, is the measure of progress. Each time, note the date, the total, the band, the red flags at 0 and the biggest change since last time.
The PDF dossier includes the sheets for the ninety-day plan and the score history.
From Score to Evidence
A self-score tells you where to look. Our readiness diagnostic checks the same fifty statements against evidence, entity by entity and country by country, and turns the result into a dated plan.
| Your self-assessment | The 30 Advisory readiness diagnostic |
|---|---|
| One score for the group | A heat map: every entity and country against the ten dimensions |
| Answers from memory | Evidence reviewed: system settings, data samples, rejection logs, certificates |
| A list of gaps | Gaps ranked by legal date and cost, with an owner and an action |
| General next steps | A roadmap that sets the mandate dates against your ERP clock: build, bridge or migrate |
Kick-off
Your completed scorecard reviewed with the people who filled it in; scope of entities and countries agreed.
Evidence review
System settings, master-data samples, rejection logs, certificates and reconciliations checked against each statement.
Heat map and red flags
Entity-by-dimension scores, with every red flag explained and assigned.
Roadmap and read-out
Actions dated against the mandate calendar and the ERP clock, presented to your sponsor.
Diagnose
The scorecard validated with evidence, a heat map and a dated roadmap.
Implement
SAP DRC set up for issuing, receiving, reporting and exceptions, country by country.
Run
Monitoring, indicators and legal change applied as it arrives, every year.
What to bring to the first conversation
- This scorecard, completed, even partly
- A list of legal entities and the countries they invoice in
- Your SAP release, and any non-SAP billing systems
- The mandates you already know apply, with dates
- Recent rejection or error figures, if you have them
- Who owns e-invoicing today, or who should
<strong>Basis.</strong> Dimensions and statements reflect the obligations and failure points described in 30 Advisory's country briefings, the “E-invoicing, explained from the ground up” dossier and our DRC delivery method (October 2026). The SAP ERP 6.0 maintenance date is from SAP's published maintenance strategy. Bands and thresholds are 30 Advisory conventions, not an industry standard.
This scorecard is a self-assessment tool for internal discussion. It does not constitute tax, legal or accounting advice, and a score is not an opinion on compliance. Obligations vary by country, entity and transaction and change frequently; confirm them with a qualified adviser. 30 Advisory accepts no liability for decisions taken on the basis of this document.