P4 Software / cifraHQ

DGI Compliance Reference

DGI Compliance Reference

This page summarizes the legal framework CifraHQ's ITBMS withholding module is built against. It is not legal advice — consult your CPA or tax counsel for binding interpretations.

Decreto Ejecutivo 84 of 2005, Article 19

Establishes the ITBMS withholding agent regime in Panama. Designated agents withhold a portion of the ITBMS billed on supplier Invoices and remit it directly to DGI.

Decreto Ejecutivo 128 of 2017

Modifies DE 84/2005 Article 19, fixing the withholding rate at 50% of the ITBMS billed for designated agents.

Resolución 201-8055 of August 24, 2023

Designates the 736 entities that operate as ITBMS withholding agents for the 2026–2027 biennium. Each successor resolution covers a new biennium and may add or remove agents.

Verify your designation status: if your entity does not appear on the current resolution, you are not required to act as a withholding agent. Leave the Designated ITBMS Withholding Agent flag off in CifraHQ.

Tax Code (Código Fiscal)

  • Article 710-A — Sets the amendment window for income tax filings (one rectification within 36 months). The parallel rule for ITBMS withholding amendments follows the same cadence — confirm specifics with DGI for your case.
  • 5-year retention requirement — All fiscal documentation (including retention certificates, CSV Exports, and supporting Journal Entries) must be retained for at least 5 years.

ITBMS rates and buckets

CifraHQ aggregates retentions by ITBMS rate bucket. The current rates are:

Rate Applies to
7% Standard ITBMS rate for most goods and services
10% Alcoholic beverages, tobacco Products, hotel accommodations
15% Telecommunications services

The 50% withholding applies on top of whatever ITBMS the supplier billed. A USD 100 invoice with USD 7 ITBMS yields USD 3.50 withheld (rounded half-up to 2 decimals).

Filing cadence

Window Action
1st of month Filing period opens for the prior month's retentions
1st – 15th of month Upload Formulario 4331 to DGI e-Tax 2.0 with the prior month's data
15th of month Deadline. Late filings incur a minimum USD 10 penalty plus interest.

Filing follows the same monthly cadence as the supplier-side Formulario 430.

Verification

DGI provides a Certificate Authenticity Verification service in e-Tax 2.0 that lets DGI auditors confirm a retention certificate came from a designated agent. CifraHQ's per-certificate verification URL — https://verify.CifraHQ.cloud/cert/{token} — is a tenant-side complement that supplies the same data (number, agent, supplier, period, amount) without requiring DGI portal access.

Suppliers receiving a certificate should verify both:

  1. The CifraHQ verify URL (immediate, no login)
  2. The DGI e-Tax 2.0 authenticity service (authoritative, requires DGI login)

CPA attestation

Tenants with annual revenue over USD 11,000 must have a CPA attest to the monthly close. CifraHQ enforces this via the Require CPA Approval to Close toggle in Settings — when on, the Form 4331 cannot be Submitted until a CPA user has approved it.

The CPA's DGI code is recorded on the return for traceability.

Penalties

Violation Penalty
Late filing Minimum USD 10 + interest + surcharges (Fiscal Code)
Failure to file Higher penalties scaled to the unfiled amount
Failure to issue a certificate Penalty per missed certificate
Tampering with a certificate Criminal penalties under the Fiscal Code

Records to keep

Per the 5-year retention rule, retain at minimum:

  • Every issued RetentionCertificate PDF (stored automatically in Azure Blob by CifraHQ)
  • Every Form 4331 CSV export plus its SHA-256 hash
  • The DGI confirmation number for each submission
  • The Journal Entries posted by the retention engine
  • The supplier-side received certificate records (if you also operate as a supplier)

CifraHQ retains all of these as long as your tenant is active. After tenant deactivation, an export is recommended before any data purge.

Scope of CifraHQ's compliance posture

CifraHQ:

  • Calculates the withholding correctly per DE 84/2005 + DE 128/2017
  • Issues numbered, hashed certificates in the format expected by Panama tax convention
  • Generates the Formulario 4331 CSV with column headers in Spanish
  • Persists audit artifacts with 5-year retention

CifraHQ does not (today):

  • Submit directly to DGI e-Tax 2.0 — you upload the CSV manually. Direct API submission is on the Phase 3 roadmap, contingent on DGI publishing a stable submission API.
  • Verify against the DGI authoritative database — the verify URL is a tenant-side service, not a DGI service. Use DGI's own authenticity service for authoritative verification.
Form When it applies Where in CifraHQ
Formulario 4331 Monthly withholding agent declaration Accounting → Form 4331
Formulario 430 Monthly supplier ITBMS return — line 52 Reports retentions received Accounting → Form 430
Article 19(b) reverse-charge Phase 2: foreign-vendor services consumed in Panama Not yet implemented

Was this page helpful?

Previous Monthly Period Close Checklist Next Expenses