Skip to content
Malta · Agentic SaaS development

SaaS Development for Malta: VAT, Billing and Tenancy

What should a Maltese customer see on the invoice for a €49 monthly subscription? It depends on whether they buy as a business or a consumer and whether you sell from Malta or from another EU country. A business customer elsewhere in the EU usually accounts for VAT itself under the reverse charge, while a Maltese consumer buying from another EU country is usually charged Malta's 18% standard rate. Building that logic into the billing model at the start is cheaper than restating a year of invoices.

Curiosive is a studio in Ankara, Türkiye, that builds subscription products with AI coding agents, and a senior engineer reviews every change. Engineers design the multi-tenant data model, tenant isolation, plan and entitlement logic and idempotent billing webhooks. Agents produce the CRUD screens, admin views, migrations and test suites around them. Our day starts at 07:00 Malta time in winter and 08:00 in summer, so most of yours overlaps with ours.

24
published portfolio projects
5+
years building for production
12
countries the work runs in
100%
of code read by a senior engineer
1 day
to hear back, from the engineer

VAT on SaaS sold to customers in Malta and across the EU

Malta's standard VAT rate is 18%, with reduced rates of 5% and 7% and a parking rate of 12%, according to the Commission's Your Europe table last checked on 13 July 2026. Which treatment reaches the invoice depends on the buyer. Services sold to businesses in another EU country usually go out without VAT, because the customer pays at its own country's rate under the reverse charge, though there are important exceptions. Electronic services sold to consumers are taxed in the consumer's country, although below a EUR 10,000 threshold they may be taxed where the seller is established. The One Stop Shop lets a seller register in one EU country to declare and pay VAT on cross-border supplies to EU customers. For the product, that means storing each customer's country, business status and VAT number at checkout, then computing tax per invoice rather than per plan. Confirm the specifics with an accountant before launch.

Card and wallet checkout for Maltese buyers, with PSD2 authentication

The ECB's 2024 SPACE survey of 1,063 Maltese respondents found cards made up 52.8% of online payments by number, above the euro-area average of 48.3%, with e-payment solutions such as wallets and payment apps at 23.3% and instant payments at 7.0%. Card and wallet checkout therefore come first for Maltese subscribers. Under the PSD2 rules on strong customer authentication, in force since 14 September 2019, a payment provider may skip authentication for a remote payment of up to EUR 30, but only while the payer's payments since the last authentication stay within EUR 100 in total or five consecutive transactions, so checkout has to handle an authentication challenge cleanly. Subscription state is read from the payment provider's events, and each webhook handler records which events it has already handled, so a redelivery changes nothing. Trial endings, renewal failures, plan changes and cancellations each get a test of their own. PicKey (pickey.ai), a password manager we shipped, bills its subscriptions through Stripe.

E-invoicing in Malta now and the 2030 ViDA deadline

According to the Commission's eInvoicing page for Malta, last updated 14 August 2025, the country has no B2G, B2B or B2C e-invoicing mandate and no VAT real-time reporting system. Legal Notices 403 and 404 of 2018 only require central contracting authorities to receive and process EN 16931 e-invoices for procurement above EU thresholds, through Peppol using Peppol BIS Billing 3.0. Cross-border B2B billing will change. Under the VAT in the Digital Age directive, from 1 July 2030 invoices for intra-EU supplies between businesses, including reverse-charge supplies, are to be electronic invoices following the European standard, issued no later than 10 days after the chargeable event. A Maltese SaaS selling to businesses elsewhere in the EU should keep invoice data structured from day one: line items, VAT treatment, buyer identifiers and dates stored as fields, not as text in a PDF. Agents can write the export code and its tests; engineers decide the model.

NIS2 in Malta and EU Data Act switching duties for SaaS vendors

NIS2 was transposed through Legal Notice 71 of 2025 (S.L. 460.41), which defines cloud computing services to include SaaS and names the Critical Infrastructure Protection Department as competent authority; all of its provisions came into force on 23 January 2026. NIS2 covers medium-sized and larger entities in its sectors, and Article 21 makes them address supply chain security, so larger customers may ask about yours. The EU Data Act has applied since 12 September 2025: switching terms need a written contract, a notice period of no more than two months and a transitional period of no more than 30 calendar days, with only reduced switching charges until 12 January 2027 and none after that. A service mostly custom-built for one customer and not offered at broad commercial scale is exempt from parts of this, and the provider must say which obligations do not apply before signing. Engineers design tenant isolation and data export so departing data leaves cleanly. Our SaaS work includes Reveal Software (reveal.software) and This is HCD (thisishcd.com).

Questions

The things people ask before starting.

What VAT rate applies to a SaaS subscription sold in Malta?

The standard rate is 18%, per the Commission's Your Europe table last checked on 13 July 2026. Whether you charge it depends on the buyer: sales to businesses in another EU country usually fall under the reverse charge, while electronic services to consumers are taxed in the consumer's country, subject to the EUR 10,000 threshold.

Is e-invoicing mandatory for B2B SaaS billing in Malta?

Not yet, according to the Commission's eInvoicing country page last updated 14 August 2025, which lists no B2B mandate and no real-time reporting. From 1 July 2030 the ViDA directive requires electronic invoices to the European standard for intra-EU supplies between businesses, so cross-border billing data is worth structuring now.

Does NIS2 apply to SaaS companies in Malta?

It can. Malta's NIS2 order, L.N. 71 of 2025, defines cloud computing services to include SaaS and has been fully in force since 23 January 2026. NIS2 covers medium-sized and larger entities in its sectors, so a small SaaS may sit outside it while its larger customers still ask about supply chain security.

Can customers in Malta switch away from our SaaS under the EU Data Act?

Yes, the switching rules have applied since 12 September 2025. Terms must be in a written contract with no more than two months' notice and a transitional period of no more than 30 calendar days. Charges are capped at direct switching costs until 12 January 2027 and not allowed after that, unless the service is mostly custom-built for one customer and not offered at broad commercial scale.

How it starts

What happens after you write to us.

  1. 01

    You describe the product

    One paragraph on what you are building, roughly when you need it, and who it is for. No brief, no form with fifteen fields.

  2. 02

    You get a reply within a day

    From the engineer who would do the work, not a sales team. If we are not the right fit we say so, and where possible we point you somewhere better.

  3. 03

    You get a scoped plan

    Scope, price and timeline in writing before anything is committed. You decide with the numbers in front of you.

No long contract to begin, no lock-in to our tooling, and the code is yours from the first commit.

Start a conversation
Contact

Looking for an engineering partner for the long haul?

A short note about the product, the timeline and who it is for is enough to start. You will hear back from the engineer who would do the work, not a sales team.

Ankara / Türkiye · Working across European and US time zones