Help — dIR manual

Contents

1. What is dIR

dIR stands for digital Invoice Release: compose, issue, and tax-confirm an invoice in a single step — without intermediate programs, manual copying, or waiting.

dIR is a service, not software to install: it runs on a server in Slovenia and talks to FURS directly, while you access it from a browser. It is provided by Svetovanje Denis Žvegelj s.p. It covers three areas:

• Invoices — issue invoices with FURS confirmation, or separate quotes and pro formas without FURS submission. Documents support Slovenian, English, German, Polish and Croatian.
• Customers — register companies and individuals you invoice, with invoice history and private CRM notes.
• Price list — standard services and items you insert into invoices with one click.

Free allowance and subscription

• Up to 12 issued invoices per calendar month are free (the dIR FREE plan) — forever, not just a trial.
• Issued invoices and advance invoices count towards the limit. Drafts, quotes, and pro forma invoices do not count and are never limited; neither are credit notes or imported history.
• dIR Me is for 1 user and 1 company.
• Plans: dIR FREE (0 €, 12 invoices/month), dIR Me (4.99 €/month, unlimited invoices, 1 user), dIR Lite (6.99 €/month, 2 users), recommended dIR 365 (15.99 €/month, 5 users, stock and purchasing), and dIR Corp (35 €/month, 7 users and production). Higher plans include the lower modules; with annual payment, two months are free. All prices exclude VAT.
• Each plan applies to one company. With one login you can run several companies — each has its own subscription, data, invoice numbering, FURS certificate, and settings. No company pays for another. A new company starts on the free plan.
• One payer can pay for all companies. In Subscription under Payer you set who the subscription invoice is issued to — this company, another of your companies, or a person. Subscriptions remain separate per company, but one person can pay for all.
• Track usage on the Subscription screen (§8).

The app never triggers a tax event on a schedule — you always trigger issuing and FURS confirmation. Only accounting copies can be sent automatically if you explicitly enable it.

Fields and headings marked with have a built-in hint — point at it, focus it with Tab, or tap it.

The moon or sun icon in the header switches between dark and light mode. Your choice is remembered in this browser; before your first choice, the device setting is used. Invoice previews and PDFs are unchanged.

2. Sign-in, roles and password

• The admin URL is dir365.si/admin/.
• Sign in with the email and password of your user account — each user has their own; there is no shared key.
• If you do not have an account, choose Create a new account. Enter your company or activity name, email, and optionally your name or alias. dIR creates an independent company on the free plan; only the one-time email link (valid for 30 minutes) activates the account and lets you choose a password. It is not connected to any existing company.
• The session is kept in a cookie, so you do not sign in again on the same computer. On a shared or public computer, log out (top right).
• On error the message is "Wrong email or password". After ten wrong attempts, sign-in from your network address is locked for 15 minutes and the message changes to Too many sign-in attempts, so you know it is no longer about the password. This protects against password guessing — wait and try again.
• Change your password in Settings — enter the old and new password (at least 10 characters). A password may be any length and any script: accented letters, €, emoji and whole sentences all work. Leading and trailing spaces are part of the password and are never stripped.
• If you forgot your password, choose Reset it on the sign-in form. A one-time link valid for 30 minutes is sent to the account email. The same self-service action resends an activation link when the account has not set its first password yet; no administrator is required.
• Roles. Administrator, sales, purchasing, and accountant have separate permissions; accountant can only read documents, bank, and exports.
• The header shows who is signed in, which company is active, and the plan badge with usage, e.g. dIR FREE · 3/12 invoices this month. The workspace selector appears only when the current company has at least one active specialist workspace.

3. Quick start — first invoice in 5 steps

1. Customer. In Customers add a recipient (name, address, tax/VAT ID, payment term).
2. Price list. In Price list add your services — or click Add service templates and edit the prepared templates.
3. Invoice. In Invoices click New invoice, choose the customer (recipient and maturity are prefilled), and add lines manually or from + From price list….
4. Preview and sending. For a draft, Preview first saves current changes and then opens the document. For an issued invoice, Preview / Print opens it directly without attempting a change. Send by email confirms the saved recipient and actual sender, then attaches the selected-language PDF. The email contains no public document link.
5. Duplicate. Any listed document can become a new editable draft with the same recipient and lines. Dates move together; number, payment, fiscal identity and recurrence never follow the copy.
6. Issue. An invoice gets its premise/device number and FURS confirmation. A quote or pro forma gets its own PON/PRED series and is not sent to FURS.

The invoice-list PDF button first opens the clean document preview, following the Vila Elasan workflow. Choose Download PDF there to receive a real PDF without a web header, URL, or browser print dialog.

3a. Getting started screen — the guided setup

After a new independent account is activated, its first successful sign-in opens this wizard automatically. Existing users can open it at any time from More → Getting started or the account menu in the top right. It is written for someone who has never used an invoicing program: one question per screen, answered with a single click, with no jargon. Every step can be skipped and every answer changed later.

1. What do you do? One of seven activities — I issue invoices, I drive passengers, I run a car park, I sell tickets, I run guided tours, I have a bar, I have a restaurant. One click answers and moves on.
2. How many of you work? Just me · two to five · six or more. The activity and the size together drive the plan proposal, which is never weaker than the activity requires. Bar and Restaurant sell goods, so they start at the edition that includes Stock.
3. Company details. Only what must appear on an invoice: name, tax number, address, IBAN and whether you are VAT registered. A live preview of the invoice header is drawn beside the form as you type. Everything else is hidden under More details — optional. It is the same record as in Settings; while VAT says No, dIR never adds VAT to an invoice.
4. Plan. One large card with the recommended plan and why it is that one. The main button starts the one-time free trial, no card required. The full price list and the immediate order are folded away so they do not crowd the decision.
5. Workspace. This step appears only when the chosen activity needs one and you do not have it yet. It says what the workspace does for you, what it costs and what happens after you send the message.
6. Finish. A plain-language task list — company details, bank account, plan, FURS fiscal confirmation, price list and workspace. Each unfinished item has a button that takes you straight there.

A message is not a purchase. You cannot enable a workspace yourself. The wizard records what you need — variant, number of installations and a contact — and notifies us. It is switched on from Administration, by agreement; until then the message stays open and you may amend it at any time. Granting the package closes it automatically. Only a company administrator can send it.

Your answers are stored in your browser separately for each company, so you can leave the wizard, switch companies, and return to the correct step later. Start again clears them. The progress bar at the top shows which step of how many you are on.

3b. Invoice setup screen — guided to your first invoice

More → Priprava računov walks you, step by step, to the point where FURS will accept your invoice too. Every field says what it is and where to find it, and checks your entry before saving. If you prefer manual entry, the same room is in Settings — the wizard and Settings write to the same data, so you can mix them freely.

Wizard progress is computed from what is actually saved, not from browser memory. You can therefore leave it, continue on another device, or have an administrator complete part of it.

1. Company. Name, tax number and registration number. Poišči na Bizi.si copies the name to the clipboard and opens Bizi, where the section »Matično podjetje« holds both numbers (each with a copy icon); the official source is AJPES. The tax number is also checked by its check digit, because FURS will not confirm an invoice with a wrong number.
2. Address and contact. Registered address, responsible person, email. All of it prints on the invoice.
3. VAT. Registered or not. A registered company picks its rates (22 %, 9.5 %, 5 %, 0 %) and a default; an unregistered one gets the suggested clause »DDV ni obračunan na podlagi 1. odstavka 94. člena ZDDV-1«. The small-taxpayer limit is €60,000 of annual turnover (current and previous year); consult your accountant on the decision.
4. Bank account. The IBAN that prints on the invoice and in the payment QR code. The check digit is verified, so a typo is caught at once.
5. Invoice appearance. Logo (JPG, PNG or WEBP up to 3 MB), short name, header and footer text, and an optional signature and stamp. On the right a numbered preview of the invoice with a legend of what is what.
6. How customers pay. The key question: invoices paid by direct bank transfer do not have to be confirmed with FURS; invoices paid in cash or by card must be. A business paid only by transfer skips the three FURS steps. If unsure choose »Nisem prepričan« — we switch confirmation on.
7. Codes and numbers. The premise and device codes (letters and digits, up to 20 characters; you choose them), the operator's tax number (the person issuing the invoice) and the default payment term.
8. Digital certificate (confirmation only). The request in eDavki (form »Zahtevek za pridobitev ali preklic namenskega digitalnega potrdila«, DPR-PridobitevDP), collecting the .p12 file at the retrieval portal, and uploading it here. The certificate is valid for five years. The FURS environment follows the certificate by itself: a test certificate works only in the test environment, a production one only in production.
9. Business premise (confirmation only). For a fixed premise, the cadastral municipality code, building number and building-part number from the e-Prostor public viewer (Surveying and Mapping Authority); enter 0 for a whole building or one without parts. A vehicle or stall is a movable premise of type A, B or C.
10. FURS registration (confirmation only). A checklist of prerequisites, then the official registration of the premise and a connection test. If FURS refuses, you see its message and code unaltered.
11. Ready. A step-by-step summary, the number of the first invoice and links to your first invoice, customers and price list — and, optionally, to the AI assistant.

Why not everything is mandatory. Logo, header, footer, signature and stamp are optional. The FURS steps do not appear for a business paid only by transfer. Whatever you do not know you can skip and return to — each step in the left list is marked urejeno (done), preverite (check), odprto (open), neobvezno (optional) or ni potrebno (not needed).

If you are VAT registered, only the rates you ticked are allowed on an invoice line, which prevents typing mistakes. An unregistered business charges no VAT whatever rate is chosen.

The recommended detailed history import uses paired GLAVE and POSTAVKE fiscal CSV files. Prenos/VOD XML imports summaries only. JSON may contain only VAT-band summaries without item lines; e-SLOG/JSON need operator inspection. Include a separate Services list for unused catalogue items and keep original PDFs for the archive.

Fiscal and non-fiscal CSV invoices are supported. If the export omits the seller tax number, explicitly confirm that both files belong to the selected company. Enable summary enrichment to add source lines and exported payments to matching previous XML summaries; original headers and totals remain unchanged. Other conflicts stay blocked. Missing EOR does not establish a fiscal exemption. Prenos/VOD XML also supports balanced non-VAT journals but contains no original service lines.

Archive copy / PDF: detailed Čebelca CSV imports and manually recorded history allow a clearly labelled reconstructed copy, not the original PDF or a new issue. Original numbers/totals stay unchanged. Exported CSV prices are labelled gross after discount and are not recalculated. Summary-only records stay blocked. Current stamps/signatures and new payment/public QR links are not added.

4. Invoices screen

The invoice list shows drafts and issued documents. Use the search box and Status filter. Columns include number, date, recipient, amount, and status.

• New invoice. Choose the document type (invoice, pro forma, quote, credit note), select a customer, set dates, and add lines.
• Numbering for new companies. The default compact number is year + numeric premise + device + sequence, for example 26 01 1 0001 without spaces. A premise code ending in digits (such as C22) supplies its numeric part unless an explicit mapping is saved. Existing companies' settings and issued numbers do not change.
• Import from Čebelca. Open Podatki → Izvoz podatkov → Izvoz po pravilniku FURS, select the premise, full date range and CSV (predpisan). Download GLAVE and POSTAVKE with identical settings; RAČUNOVODSKO is not a substitute. Upload both, preview invoice/item counts and warnings, then confirm. dIR reconstructs detailed historical records for the current company, retaining original numbers, exported amounts, payment information and fiscal references without issuing numbers or contacting FURS. Optionally add missing catalogue descriptions as inactive items for price review. Combined addresses and original pre-discount prices cannot always be recovered; keep original PDFs. Prenos/VOD XML remains a summary-only alternative. Historical imports cannot be sent or printed as original documents.
• Due date. A new invoice takes it from the payment term in Settings; a customer with its own term overrides it when you pick that customer. The date is the calendar issue date plus the number of days, so eight days from 29 September is always 7 October. An existing draft keeps whatever you entered.
• Language. Preview, download, print or email the same invoice in Slovenian, English, German, Polish or Croatian. Only system labels and known units are localized (for example KOS → PCS); customer names and entered product/service descriptions remain unchanged. On an issued invoice this is presentation only and never changes its number, values, FURS data or accounting record. Slovenian is always available.
• Lines. Description gets the remaining width while quantity, unit and price keep usable fixed widths, including three-decimal prices. Whole quantities are shown without redundant decimals; fractional quantities retain up to four places. Trailing semicolons inherited from imports are removed when a draft is edited; issued invoices remain unchanged. VAT is selected only from the rates enabled in Settings. Preview safely saves the draft first, so it includes the values you have just entered.
• Recipient address. Country is selected from the complete ISO country list and tax/VAT identity uses one field. Slovenian postcode and city fill each other and print as 4260 Bled, SI. Foreign countries print their full English name on the next line; for the US enter the locality as City, ST.
• Draft. You can edit everything until you press Issue. Drafts do not count towards the plan; a draft is not a fiscal document and can be deleted.
• Recurring invoice. Choose daily, weekly, or monthly. After each period dIR creates an editable draft and shifts the issue, service, due, and line-service dates together. A monthly draft is prepared on the first day of the following month, while its related dates advance by a whole calendar month: a previous-month period remains previous-month and a current-month period remains current-month. Review and adapt it before issuing; automatic generation never assigns a number or contacts FURS.
• Issue. Assigns a number and freezes the document. Invoices go to FURS if enabled; quotes and pro formas have their own PON/PRED numbers and never go to FURS.
• Corrections. An unpaid issued invoice can be reviewed as a linked full storno, then copied into a corrected draft. Paid invoices need the separate credit-note and refund process.
• PDF. The button opens the preview first. Select SL/EN/DE/PL/HR in its toolbar, then Download PDF downloads the server-rendered A4 file. Its archive name includes that language before the extension, for example RPZB2601259-en.pdf.
• Document layout. Settings offers dIR or Vila Elasan presentation. Vila Elasan places the number and dates in consistent right-aligned label/value columns; both group the VAT breakdown, payment details and fiscal confirmation in bordered blocks. The responsible issuing person is printed by name. An ordinary invoice fits one A4 sheet; long line lists continue with their table heading repeated.
• Before issue. A draft shows the next number and payment reference without consuming either. With the all-digits format you can give premises codes, e.g. PZB=01, VE=02.
• Payments. To an issued invoice you add the date, amount and method of each payment. The list, the invoice and the print then always show the amount received and the balance still due. The Payment button sits right in the invoice row while an amount is open.
• Issue and confirm with FURS. Irreversible: the number is used, the data freezes and the request goes to FURS. On success you see »Issued and fiscally confirmed«; if FURS cannot be reached the invoice stays issued and its state is temporary_failure — retrying is safe (see §11).
• Plan allowance. When you have used the 12 free issued invoices of the month, an attempt to issue the next one shows a notice and is refused; the sequence number is not used. Upgrade on the Subscription screen or wait for the next month.
• Active and historical devices. New PZB and VE invoices in dIR use device 03 with its own shared sequence. The imported PZB/1 and VE/2 devices stay visible for filters and review but are marked as history and cannot be chosen for a new issue. dGost uses its own device 04.
• Automatic platform invoices. Confirmed subscription payments also issue an invoice on dIR device 03, using the same safe sequence as other dIR invoices, so automation and manual issue cannot allocate the same fiscal identity.
• Save recurrence. On an issued invoice this changes or stops only future draft scheduling; it never changes the issued invoice or its fiscal record.

Use one service date for work performed on one day. For work spanning several days, enable Period and enter the inclusive from/to dates; the last day is also used as the accounting and e-SLOG service date.

5. Customers screen

A register of everyone you invoice — companies and individuals. Search works on name, email, tax number and VAT ID; the Show archived checkbox also shows hidden ones.

• Payment term (days) — the default due date of a new invoice, counted from the issue date. A customer can have its own term (in Customers); it takes precedence and is used when you pick the customer on an invoice. If no term is set anywhere the due date stays empty. It applies to new drafts only and never changes an existing invoice.
• Tax number / VAT ID — both are printed on the invoice; always enter them for companies.
• Invoices at the bottom of a customer card — the history of all its documents.
• Archived — the customer disappears from lists and pickers, the data stays. Archive rather than delete.

Personal records — for CRM only. The photo, private notes and birthday are a separate block that never reaches an invoice and never an export. The photo is stripped of location data (EXIF/GPS) on upload, stored outside the web root and reachable only when signed in; deleting the customer also deletes the photo.

6. Price list screen

Standard services by category (IT and AI, Consulting, Seminars, Biotherapy, Logistics, Other).

• Code — a short internal label (e.g. SV-URA) that makes searching easier. It is not copied to the invoice.
• Unit — hour, piece, month … printed on the invoice.
• Description — default text carried into the invoice line.
• Sort order — a lower number comes earlier in the list and in the invoice picker.
• Active — inactive items are no longer offered on new invoices; existing invoices do not change.
• Add service templates — one click adds 16 prepared items at price 0; edit their prices and codes.

Choosing from the price list on an invoice copies the price and text — a later price-list change never alters an invoice already created.

7. Settings screen

Settings apply to the currently selected company and are split into five tabs: Company and account, Invoices and documents, Bank, FURS and AI access. The Save settings button switches on only once the form has fully loaded, so saved values cannot be wiped by saving an empty form.

• Seller — official details printed on documents. Must match the tax register and FURS certificate.
• Invoice logo — an administrator can upload JPG, PNG or WEBP. On issue it is frozen into the seller snapshot, so replacing it never changes older invoices.
• Signature and stamp — upload them separately and independently choose whether each is included on new documents. Slightly rotated, they overlap one another and cross the issuer line beside the named issuing person. They are frozen on issue, so changing or disabling an image never rewrites an older or fiscalized invoice.
• Bank accounts and payment QR — add multiple IBANs, choose the default UPN account, and show either only that account or all selected accounts on new documents. You may exclude the UPN QR while retaining the IBAN, BIC, payment reference and amount in the Payment details box. Issued invoices retain their original selection.
• Invoice email sender — select the temporary dIR address or configure your company's authenticated SMTP account (host, port 587/465, username, From address and password). The password is stored outside the database and web root. An incomplete account cannot send. Optionally number email subjects dIR-001-Invoice 2601257; each company has its own 001–999 cycle. This is an email index, not an invoice-number change.
• Document layout — choose dIR or the Vila Elasan-style right-aligned number and dates. The letterhead prints VAT ID when available, otherwise the tax number, never both forms of the same identifier.
• Invoice header and footer — default text that every new invoice starts with: the header sits above the lines, the footer below them. The text is copied into an invoice when it is created on the Invoices screen and becomes part of that invoice, so invoices already issued stay as they were even if you change the text later; you can override it on any single invoice. dIR prints the company details (name, address, email, website) itself beneath it. Invoices from taxi and guided tours are created with their own description and do not get this text. You can edit the same text in the wizard, which also shows a preview.
• Field-level help — nearly every field on this screen carries a ?. Hovering shows a short explanation; clicking pins it and offers a longer one linking into this manual.
• Payment term (days) — the default due date of a new invoice, counted from the issue date. A customer can have its own term (in Customers); that one takes precedence and is used when you pick the customer on an invoice. If no term is set anywhere the due date stays empty. It applies to new drafts only and never changes an existing invoice.
• Numbering — see the number shapes in §19. On saving you see the forecast of the next number.
• FURS — environment (TEST/PRODUCTION), saved premise and device combinations and the operator's tax number. The saved combination is then offered on a new invoice. The connection is direct — dIR runs on a server in Slovenia, so there is no bridge, tunnel or intermediary.
• Your business premise — the codes on this screen always show your premise and your device, even when dIR serves several companies. A premise is registered with FURS once per company; you choose the device code yourself and do not register it — but it must not be the same as in another till of yours, or numbers will collide.
• Bank mailbox — each company has its own, IMAP/TLS or POP3/TLS; the password stays on the server. Besides the sender you can set a subject pattern: * means any text, ? one character; messages that do not match stay unread.
• Premise registration — a one-off action at setup: for a taxi vehicle choose Movable premise and type A; for real estate the cadastral data and full address are required. Both parts of the form stay visible; only the one matching the chosen type can be edited. Choosing a saved premise loads its details; a blank choice starts a new premise without the previous one's data. The status shown is only a confirmation recorded by dIR, not a lookup in FURS records. The Register business premise button uses the details you just entered and saves them on success; on error they stay visible for correction. Changed premise/device codes must be saved separately before registering. Historical codes remain only in filters and on issued invoices, not in the picker for new issue.
• Users — add people to the company and assign roles. Each user gets an email invitation; the number of users is set by the plan (extra users can be bought).
• QR for import — prints a signed link and QR on issued documents so the recipient can import the e-SLOG XML.

Digital certificate — step by step

The DavPotRac certificate is your electronic signature for FURS; without it an invoice cannot be fiscally confirmed. The state issues it, it is valid for five years and it is tied to your tax number. The Invoice setup wizard walks the same procedure with a link for every step.

1. Open eDavki (edavki.durs.si), sign in and submit the form »Zahtevek za pridobitev ali preklic namenskega digitalnega potrdila« (DPR-PridobitevDP). If you do not use eDavki yourself, an authorised accountant can submit it.
2. After submitting, eDavki shows a reference number and a collection password. Keep both.
3. On the collection portal (taxca.gov.si/prevzem) enter them and download the .p12 file. Remember the file password — you need it when uploading.
4. The certificate must match the environment: production for real invoices, test only for practising in the test environment (the Environment field in Settings). If they do not match, dIR warns you.
5. In Settings (FURS tab) upload the file together with its password; the certificate is checked before it is saved.
6. Click Test connection — it must show Ready for confirmation: yes.

Next to the certificate you see its validity date; 60 days before expiry it turns red — then request a new one in eDavki by the same procedure and upload it the same way. Each company has its own certificate; it is stored outside the web root and cannot be reached from the web. If the company's own certificate is missing, the check fails safely — dIR never uses another company's certificate.

8. Subscription screen

Your plan, usage, add-ons and payments. All prices exclude VAT.

• Current state — plan, monthly cost and paid-through date.
• Usage — invoices issued this month, users and SMS against what is included. The plan badge in the header of every screen shows the same in short form.
• Your companies — each company shows its effective plan; a temporarily free plan also shows its end date and is not confused with the base plan it will return to.
• Free trial — once per company, no card: Me 60 days, Lite 45, 365 30 or Corp 15. When it ends the previous plan returns automatically; the data stays.
• Plans — a comparison of all tiers with an Order button; monthly or yearly payment (yearly = two months free). You can pay by card on the bank's secure hosted page or by bank transfer. A card activates the plan after the bank confirms; a transfer after the operator confirms the money actually arrived. An active trial stays in force while you wait.
• Add-ons and workspaces — extra user €3/month, SMS message €0.08 and Invoice without the dIR mark €5/month (the printed document carries no dIR mark). Taxi €7.99, Taxi Pro €49 and Park €6.99 a month have fixed prices; Entry, Guide, Bar and Restaurant are by agreement until standard packages exist. All seven can be added to any accounting plan. Every additional company has its own subscription and starts on dIR FREE.
• On non-payment or cancellation the plan reverts to free — your data and issued invoices stay untouched; only new issuing above the free allowance is limited.

9. Export screen

For your accountant and for you. The data is yours — export is always free, even if you leave.

• Selection — a period by issue or service date, document type, business premise and search. The cards immediately show issued, open and overdue.
• Accounting programs — Vasco and Opal use the verified Čebelca Prenos XML, e-Računi the same XML with payments, SAOP/Minimax its own format with customers and journal entries. An administrator confirms the accounts and cost centres before the first import.
• Reports — invoice list (CSV/Excel/JSON/XML), sales by day and service, open items, biggest customers, and FURS headers, lines and a VAT summary.
• PDF collection — all selected issued documents in one multi-page file.
• e-SLOG 2.0 (XML) — a single issued invoice in the national e-invoice standard, following the official GZS mapping. The structure is not yet XSD-validated, as the screen also says — check one invoice with the recipient before mass use.
• Automatic delivery — you choose the recipient, PDF or their program's format, and »on new documents«, a weekday or a month day 1–28. An administrator edits every member, an accountant their own schedule.
• The export contains only issued invoices, advance invoices and credit notes. Drafts, quotes, pro forma invoices, personal records and customer photos are not part of the hand-over to the accountant.

9a. Specialist workspaces

Taxi, Park, Entry, Guide, Bar and Restaurant are dedicated workspaces. Select them in the header beside the company; only enabled workspaces are shown.

• dIR Taxi is optimised for dispatch and trips: passenger, saved route or manual destination, driver and tariff. It records the outbound leg and an empty or occupied return separately. Direct work accepts cash, a confirmed external-terminal card payment or card QR and issues the invoice on the selected premise/device. A VB-style principal contract records guest or room/date plus destination while the principal invoices the guest; an MZ-style supplier contract records passenger and destination while the supplier may invoice the operator later. The taximeter supports fixed, time, distance or combined pricing.
• Taximeter and navigation. The Taksimeter in navigacija tab shows large counters for time, distance driven, waiting and the current amount. Distance comes from the device GPS — samples worse than 60 m are rejected, and movements under 2 m or jumps over 1 km are ignored, so a stationary vehicle cannot accumulate kilometres. The amount is always calculated by the server from the stored tariff; the screen only displays it. The Čakanje button measures standing time separately. Navigation opens in the device's maps app and works with no key; if GOOGLE_MAPS_API_KEY is set in app.env, an embedded map with the route appears as well.
• Taxi setup — under Drivers, vehicles, tariffs and contracts you manage drivers (with a phone number, and an existing one can be edited), vehicles with registration and model, tariffs and contracts. Besides base, €/min and €/km, a tariff also has a minimum fare, a waiting rate and included kilometres and minutes that are not charged again — the taximeter applies all of them. A trip can carry a vehicle and a note.
• Distance: predicted or measured. A trip or tour can carry a predicted distance (or take one from a saved route). Until something is measured it reads predicted; stopping a leg or the taximeter records measured while keeping the prediction, so plan and outcome can be compared.
• dIR Taxi Pro adds consent-based live availability and nearest-driver dispatch. It stores no route history for this assignment feature.
• dIR Park gives the driver a signed page showing parking start, paid-until time and exit deadline. They may pay elapsed time and leave within 15 minutes, or pay elapsed time together with 30, 60, 120 or the zone-default minutes of future parking.
• dIR Entry issues signed QR passes with atomic first-entry, temporary-exit, re-entry and completed states. Every scan is auditable.
• dIR Guide manages group, participant count, meeting point, guide and fixed or timed pricing, using the same secure payment flow as Taxi.
• Customer QR with PIN (Guide) — you can issue a customer a QR code and tell them a PIN. Scanning it and entering the PIN shows that customer their own sessions, total time, amount and what they have already paid — only their own, and nothing about anyone else. Only tours where you selected that dIR customer in Group or customer reach the page — a hand-typed name does not link. The screen therefore shows how many sessions each code covers and warns you when a customer would see an empty page. The paid figure is the one in your books: whatever is settled by cash, card or transfer counts once. A code belongs to one customer; issuing a new one revokes the old, and you can revoke manually. Only a hash of the PIN is stored, so it cannot be read back — if the customer forgets it, issue a new code. Ten wrong PINs lock opening for a few minutes.
• dIR Bar provides price-list search, favourites and persistent guest tabs with cash, bank transfer or card QR settlement. Restaurant-only areas, courses and preparation controls stay out of Bar.
• dIR Restaurant uses a three-pane floor, catalogue and active-check workspace. Setup defines areas, tables, courses, logical preparation stations and product presentation/routing.
• New lines are sent explicitly, then move through sent → preparing → ready → served on the Preparation board. A later round reopens a served table as new/unsent, so settlement cannot appear early. A sent line can only be voided with a reason; it is not silently deleted.
• Bar and Restaurant convert settled orders into ordinary dIR invoice drafts. Existing invoice issue/FURS logic remains the only numbering and fiscalisation authority.
• A Park extension stays on the same parking timeline, but every card charge remains a separate auditable payment. Verified payment refreshes the signed exit code; callback replay cannot add money or time twice. Park and Entry QR codes remain in their specialist pages and never appear on an ordinary invoice.
• Administrators assign purchased workspace seats to installation UUIDs under Subscription → Specialist workspace devices. Lost devices can be released or revoked.

The QR amount is always read from the server. A payment screen turns green only after a verified payment-provider response. Public pages retain the selected sl or en language through hosted card checkout.

10. Document types

dIR supports four types:

• Invoice — the final document; on issue it goes to FURS and receives an EOR. It counts towards the monthly plan allowance.
• Pro forma invoice — a prepayment request with its own PRED number; not fiscally confirmed and not stamped »NI IZDANO«, but a document with its own number. It does not count towards the allowance and is never limited (see §1).
• Quote — a non-binding offer with its own PON number; not fiscalised, does not count.
• Credit note — a correction of an issued invoice (refund, mistake). The only correct way to correct an issued document; it does not count towards the allowance.

11. Fiscal confirmation (FURS)

On issue the invoice is signed (ZOI) and sent directly to FURS — dIR runs on a server in Slovenia, so no intermediary is needed. FURS returns the EOR — a unique confirmation code that is printed on the document together with the ZOI and the fiscal QR code. Anyone can verify the invoice at FURS with that QR code.

• Confirmed — EOR received; the invoice is fiscally confirmed.
• pending — not sent yet (for example mode »Off«).
• temporary_failure — the connection did not work (your server or FURS unreachable). This is not a rejection — the invoice is valid; use Retry FURS in its row. A retry resends the same frozen invoice and changes neither number nor content.
• rejected — FURS refused the invoice on its content. Read the error message; it is usually about premise registration or a certificate of the wrong environment.
• not_required — the document is not fiscalised (quote, pro forma) or was imported from miniBlagajna.
• Before the first issue save each company's own premise and device codes. APL/DZS examples are not defaults for new companies. For a movable premise choose the type explicitly: A is a vehicle or movable stall, B a kiosk at a fixed location, C a stand-alone device with no other premise. A production certificate needs the production FURS environment, a test one the test environment; on a mismatch dIR stops the request before sending it. If an invoice has already been issued with a wrong code, do not change it and do not resend without first resolving the fiscal identity.
• FURS confirmation is needed only for a business paid by cash or card: invoices paid by direct bank transfer to a payment account do not have to be confirmed. See How customers pay in the Invoice setup wizard; the FURS steps are skipped for a transfer-only business.

The certificate and its password are stored on the server and are never returned to the browser.

11a. AI access — connecting ChatGPT

With your consent ChatGPT can read the data of one of your companies: you ask, it reads and answers. It cannot issue, change or delete anything. Using it is optional. The guided route is the screen More → AI assistant; the same switch is in Settings → AI access.

Three keys

Access is blocked by default and works only when all three conditions are met — none suffices alone:

1. Approval by the dIR operator for you and exactly this company (Administration → Users). You cannot approve it yourself.
2. Your opt-in in Settings → AI access or on the AI assistant screen, separately for each company.
3. Your consent in ChatGPT: when you add the connection, ChatGPT opens a dIR page where you sign in, choose the company and press Allow read-only (the button is worded in Slovenian: »Dovoli samo branje«).

How to add the connection

1. In ChatGPT open the adding of your own connection (an MCP server). Menu names and availability depend on your ChatGPT plan and may change.
2. Enter the address the AI assistant screen shows (on this installation https://dir365.si/api/mcp.php) and choose OAuth as the sign-in. Never type a password or API key into ChatGPT.
3. In dIR choose the company and confirm read-only access. The number of active connections is shown on the AI assistant screen.

What ChatGPT can read

Seven tools, all read-only: profile (name, email, company name), system status, the invoice list (up to 50; number, date, recipient, amount, paid, FURS state), invoice details (without individual lines), FURS state, recent FURS attempts (without requests, ZOI and EOR) and bank-connection state (without credentials). What you see of this also depends on your role: invoices need the right to read invoices, bank connections the right to read the bank (sales and purchasing do not have it), profile and status the right to read settings.

ChatGPT cannot issue or change invoices, send payments, change settings, see passwords, certificates, bank tokens or other companies, or run tests. dIR logs every call (tool, person, company), not the content of the questions.

Privacy. Once ChatGPT has read data it is processed by OpenAI under the terms of your ChatGPT account — dIR does not control that. Invoices contain customer names, which are personal data; switch the connection on only if that is acceptable for your customers.

Revoking

The button Switch off and revoke AI access immediately ends every connection and unfinished authorisation for your company. The connection also ends when the operator withdraws approval, when you change your password, when the account is deactivated and when you are removed from the company. An access token lasts one hour, a refresh token 30 days; on every request dIR re-checks all three keys, so revocation does not wait for expiry. Reconnecting needs a new opt-in and new consent.

12. Stock (dIR 365 and dIR Corp)

• Stock is the sum of movements, not a number typed in by hand: every receipt, issue and correction stays on record and the level is calculated from them. Level and history therefore never drift apart.
• A receipt increases stock and brings the purchase price. An issue reduces it.
• The valuation method is chosen in Settings:
  • FIFO — the oldest stock is used first (the most common choice);
  • LIFO — the newest first;
  • Average cost — the average of the current stock.
  Example: you buy 10 pieces at €10 and 10 pieces at €14. Issuing 5 pieces is worth €50 by FIFO, €70 by LIFO and €60 by average cost. The value of an issue is frozen when it is booked, so later receipts never change documents already issued.
• When an invoice or delivery note is issued, goods are written off automatically — only items with stock tracking switched on, never services. The write-off happens once, on issue: a draft moves no stock.
• If you do not have a warehouse yet, nothing is written off on issue — first add a warehouse on the Stock screen.

13. Banking and reconciliation

Transactions is the full bank history; Reconciliation is a review tab for unresolved entries from that same history. Transaction detail offers Bank fees, FURS taxes, FURS enforcement, expense, stock and other groups. Classification is not accounting and does not change original statement data. Classified entries remain in history, outside the review queue.

Attach a supplier invoice as PDF/XML (up to 5 MB, ten attachments per transaction), marked for expense or stock review. Uploading does not automatically post an expense, deduct VAT or receive stock. Attachments are private to users with banking access to that company.

In Settings → Bank, administrators of both companies can copy a mailbox and/or keyword filters. Passwords stay on the server; subsequent filters are independent. Shared inboxes import only configured company IBANs and scan the most recent 500 IMAP messages, including already-read ones. This does not share Revolut/API credentials. Logo settings also offer a separate company icon for the header, company menu and favicon.

• The screen shows the balance by bank, account and currency, all inflows and outflows, and a separate queue for transactions that need review. Revolut refreshes manually or automatically; access is read-only.
• The state of the Revolut connection is not a guess. You see whether the server settings and key are ready, the consent state, the scope of permissions, the webhook, the last successful refresh and the last error. Without a created connection the screen says plainly that Revolut is not connected.
• Each company has its own access. dIR derives the label of the server-side credentials from the company and environment; a user cannot point it at another company. A manually added IBAN is marked unverified and is not a Revolut API connection. The dIR administrator arranges the separate certificate, READ consent and token on the server, and only then can you press Refresh.
• Add Revolut currently saves only a planned-connection record. Open Finance → Banking → Add Revolut; the button does not upload a certificate, does not authorise API access and does not notify an administrator by itself. Set up the Revolut Business API in your own business account, not in a Merchant or Open Banking procedure. The callback address /api/revolut/callback does not exist in dIR yet; before entering an address and a public certificate you need details from the dIR administrator. Never send keys or tokens in chat.
• For every synced account you see the account type, IBAN/BIC, the bank's country and payment schemes (when Revolut returns them), the current and available balance and the API state. Payments, exchanges and sensitive card data are not enabled.
• Every invoice from dIR carries an SI00 reference. For possible matches dIR weighs the reference, open amount, IBAN, payer and date proximity and shows why with each suggestion. It may record a safe unambiguous match itself; if two invoices are possible it picks neither.
• Partial and combined payments are supported. One transfer can be split across several invoices, and an invoice can be paid by several transfers. An excess stays as customer credit and is not lost.
• A transfer between your own accounts and a currency exchange are neither income nor expense. dIR links both sides and stores both currencies, the rate and any fee. A card settlement is also matched to the net Exact package, not to one random invoice.
• You upload a statement (a camt.053 XML file) or dIR reads it from the company's mailbox. In Settings you choose IMAP/TLS or POP3/TLS; each company has its own mailbox and the password stays on the server.
• With IMAP we read only unread messages and mark them read only after a successful import. POP3 has no read flag, so we leave the message on the server and store its UIDL locally after a successful import. In both protocols an error is retried safely.
• Automatic checking runs every hour. In Bank next to the mailbox you see the time and result of the last check; the Read mailbox button starts the same process at once. If the mail server uses a private certificate authority, the operator installs it on the server and dIR still strictly verifies the name and validity of the certificate.
• The same statement can be imported repeatedly: the file is recognised and not imported twice, so a payment is never booked twice.
• We recognise the reference in every form the banks write it — SI00 26-7, 00 26-7 or 26-7.
• Outflows stay visible and can be classified; automatic matching of supplier invoices will come when dIR has a register of received invoices. Until then the system does not guess it from the description alone.
• Revolut secrets, private key and tokens are on the server only. If a connection shows AUTH_REQUIRED, the operator must renew the permission; do not enter such data into notes or support mail.

14. Payments, settlement and automatic renewal

• You pay the subscription by card on the bank's secure page. dIR neither sees nor stores card data — the payment gateway and dIR verify the signed request and response, and only a confirmation that the payment succeeded comes back.
• You can also choose a bank transfer. dIR shows the payee, IBAN, amount and a unique reference. The plan is activated only when the operator checks the receipt on the bank account and confirms it in Administration.
• At the order automatic renewal is on by default: the bank makes the payment itself each period and you receive an invoice every time, so the subscription does not stop mid-month.
• You can switch renewal off at any time — with us or with your bank. If a payment does not go through, the subscription reverts to the free plan; the data stays, and so do the issued invoices.
• For every successful payment you receive a real invoice addressed to the payer you set. You see it in Subscription under Payment history.
• Bank confirmation and settlement are not the same step. NestPay confirms the authorisation first; the daily Exact file later tells whether the acquirer put the transaction into a settlement. A payment can therefore be successful yet still »awaiting settlement« — especially the same day, at weekends and on holidays.
• The Cards screen is seen only by the dIR operator. It shows the gross amount, the actual fee, the net amount, the card brand, the masked number, the authorisation code, the plan and the due date. Unlinked or ambiguous bank records stay in the queue for manual checking; dIR never guesses from amount and date alone.
• A pre-authorisation (a reservation of an amount) is not a payment. Capture or release happens only after an explicit business decision; unknown capabilities such as partial or multiple capture are switched off.

If NestPay approved but Exact has no record yet: wait for the next working-day file. Unlinked record: check the AuthCode, invoice, amount and currency and link it manually if needed. Duplicate file: not dangerous — the name and content fingerprint prevent a double import. SOAP sign-in error: the operator checks it; the password is never shown on the screen. Invalid NestPay signature: the response is rejected and logged as a security event, and the payment does not change.

15. Administration (for the dIR operator only)

Only the person who runs the service sees this screen — customers do not see it in the menu at all.

• New company: enter a name and dIR adds it to the same user account. The company gets its own subscription, data, numbering and FURS settings; its creator automatically becomes its administrator. Afterwards Settings opens, where you enter the official details and upload its certificate.
• Users: search across all accounts, create or add to a company, change a role, remove a membership, activate/deactivate and send a new-password link. Passwords cannot be read or created for handing over: a new account receives a one-time email link and is activated when the user sets their own password. Here the operator also approves AI access for a specific user and company.
• Overview: how many companies use dIR, how many pay and how many are on the free plan, how many users there are, how many invoices customers issued this month, how many subscriptions were paid and what the monthly recurring revenue is.
• Customers: company, plan, paid-through date, number of users, invoices this month and an active trial or complimentary plan. Here the operator can temporarily set any paid plan, even a lower one, until a chosen day, or revoke access; the base subscription and its history do not change, and the plan returns automatically after the date.
• Transfers to confirm: pending bank transfers with reference and amount. Use the button only when the money is actually visible on the bank account; the plan is then activated and the subscription invoice issued.
• To invoice: payments that arrived but have no invoice yet. The button issues them all at once; the nightly job does the same.
• Specialist workspaces: the operator can open Taxi, Taxi Pro, Park, Entry, Guide, Bar or Restaurant until a chosen day, set the number of devices and choose whether the workspace is the primary package or an add-on.
• Administration does not open other people's invoices — it shows only counts. To look into a single company the operator must be its member, like any other user.

Subscription invoices

• When a customer pays a subscription, dIR issues the invoice automatically — a real, numbered, fiscally confirmed document, not just a row in a ledger. It is addressed to the payer the customer sets.
• The invoice is issued on the same dIR device and with the same sequence as the platform company's other dIR invoices (PZB uses device 03). A single sequence prevents automation and manual issue from allocating the same fiscal identity.
• An invoice is issued once per payment: the return from the payment page and the bank's response both arrive, but the second does not create a new document.

16. QR for import into other programs

• Every issued document carries a QR code with a link to that document. The recipient scans it and their program reads the e-SLOG 2.0 (XML) from the same address — the national e-invoice standard that most Slovenian programs import — or JSON for a home-grown solution.
• Someone who opens the link in a browser sees a short overview of the document and buttons for the XML and JSON download. For automatic import add &f=eslog to the same address; a program can also send the header Accept: application/xml and receive the XML without the suffix.
• You also find the link in the app: open an issued invoice and copy it under Import link — handy when the customer receives the invoice by email.
• Security: the link is signed and valid for one document only — it cannot reach other invoices, drafts or your settings. No sign-in is needed because the recipient is not a dIR user.
• If you do not want the QR on documents, switch it off in Settings (QR for import into other programs). Existing links then stop working at once.
• A document can carry three codes: the UPN QR for payment (while an amount is open), the FURS code for fiscal confirmation and the import QR.

17. Production (dIR Corp)

• A recipe says what a product is made of and for what quantity — e.g. 10 cakes from 5 kg of flour and 2 kg of sugar.
• Waste is entered as a percentage on an ingredient: 5 % on 5 kg means 5.25 kg is actually used. That quantity is used both in the cost calculation and in the write-off.
• Own cost is calculated from stock: every ingredient is valued as if it were issued — by your valuation method (FIFO, LIFO or average cost). If an ingredient is not in stock, its own recipe is used (multi-stage production), and only last the price-list price. So the figure always matches the warehouse and is not a second, silent estimate.
• A work order is created from a recipe for the wanted quantity. The Check stock button says whether there is enough material and what is missing.
• On completion the ingredients are written off in one transaction and the product comes into stock at the price the ingredients actually had. A completed order cannot be completed twice, nor cancelled.
• A recipe used in a work order is not deleted — only switched off, so the order's history stays readable.

18. Users and permissions

• Every person has their own account and password — there are no shared sign-ins. You add users in Settings under Company users; how many you may have is set by the plan (you can buy an extra one).
• Roles:
  • Administrator — everything, including users, account settings and the subscription.
  • Sales — issues invoices, manages customers and the price list; stock is view-only.
  • Purchasing — manages suppliers, the price list and stock; sales documents are view-only.
  • Accountant — read-only for documents, bank, settings and exports; can edit their own email schedule.
• For a new user only the email is required; the administrator may add a name or alias, and the user can edit it at any time under Settings → Your account. dIR does not create a password to show the administrator; it sends the user a one-time link valid for 30 minutes. When the user sets a password, the account becomes active. If an active account with that email already exists, it is only added to the company and its name and password stay unchanged.
• The user list shows whether an account is active, inactive or awaiting activation, and whether the link was sent, used or expired. The administrator can send it for the first time or again with the button; as protection against spam at most three links per user per hour are allowed. An account awaiting activation cannot sign in until a password is chosen and is not shown as active.
• A company must have at least one administrator; the last administrator cannot be removed, nor can you remove yourself.
• Removing a user from a company does not delete their account — if they work in another company, it stays untouched there.
• An administrator can create an additional company in Administration or under Subscription → Your companies. You then switch between them in the menu at the top right; the data never mixes.

19. Numbering and reference

• New companies use YEAR + PREMISE NO. + DEVICE + SEQ. by default — e.g. 260110001 (26 · 01 · 1 · 0001). An older company's saved shape does not change. The premise is registered with FURS; every device has its own series so numbers cannot collide.
• You choose the shape in Settings → Numbering; five are available:
  • PREMISE-DEVICE-SEQ → IDZ1-WEB-1
  • YEAR+SEQ → 2600001
  • YEAR-PREMISE-SEQ → 2026-APL-0001
  • YEAR-PREMISE NO.-SEQ → 2026-1-0001
  • YEAR + PREMISE NO. + DEVICE + SEQ. → 260110001 — no separators: year, premise number, device number and sequence number. You set the number of places for each part.
  For the shapes with zeros use Sequence length to set the padding (4 → 0001) and choose a four-digit (2026) or two-digit (26) year. The preview of the number and reference updates as you type, before you save.
• Several tills (devices) — if several devices issue at the same premise, give them their own places (Places for device) in the shape YEAR + PREMISE NO. + DEVICE + SEQ. and set each a Device number. With the option Separate numbering for each premise and device every device has its own sequence — the way FURS expects when numbering per device. Each premise and device has its own sequence, and you see the choice on every invoice draft.
• Changing the shape applies only to new documents — those already issued keep their number. To FURS only the bare sequence number goes in every shape, so the shape does not affect fiscal confirmation.
• The series restarts every year — the same number can exist in different years.
• A number is assigned on issue and is never duplicated or returned — even if you delete a draft, an issued number stays used. Quotes (PON) and pro forma invoices (PRED) have their own series and never use an invoice number.
• The payment reference is by default SI00 <year>-<seq> — SI00 accepts only digits and dashes, and the classic number APL-DZS-1 contains letters.
• In Settings you can choose »reference the same as the invoice number«. The customer then pays with the same label that is printed on the invoice — one number instead of two. It works only if the number consists of digits and dashes (e.g. the shape YEAR-PREMISE NO.-SEQ); otherwise the classic reference is used automatically so the bank does not reject it.
• The payment block contains a UPN QR code — the customer scans it in their mobile bank and the payment is ready.

20. VAT

If the company is not VAT-registered, the rate is 0 % everywhere and cannot be changed — it is locked on the server too, not just in the form. The invoice prints the VAT-exemption clause (by default Article 94(1) of ZDDV-1; edit the text in Settings).

If your tax status changes, switch on VAT-registered in Settings — the VAT fields then unlock and the default rate 22 % applies. Enter your VAT ID (SI12345678) too; the rates you allow are the only ones offered on an invoice line.

21. Corrections and deletion

• A draft can be changed or deleted freely — it is not a fiscal document.
• An issued document is immutable. The issuer's and recipient's details freeze into the document on issue, so later changes of settings or of the customer do not affect it.
• A mistake on an unpaid issued invoice? In the list click Storniraj and review the entire negative storno draft. Only after you confirm the issue does it get a new number and go to FURS; the original stays unchanged. Then click Copy on the original and correct the new draft. A storno is possible only once for the same invoice.
• Is the invoice already paid? Storno is not available; use a separate credit note and arrange any refund separately. dIR does not refund money automatically. If FURS confirmation of the original has not succeeded yet, resolve that first.
• Storniraj ⓘ explains why cancellation is unavailable: a payment, zero total, imported history or unresolved FURS confirmation. Opening the explanation changes nothing. The ordinary Storniraj button prepares a draft only for an eligible unpaid issued invoice without a previous storno. An older quote that was mistakenly fiscally confirmed can get a storno after review; a new quote never gets FURS confirmation.
• Invoices imported from miniBlagajna (until 2026) are locked and cannot be fiscalised again — FURS already knows them.

22. FAQ

• How much does dIR cost? Up to 12 issued invoices per calendar month are free (dIR FREE) — forever. No limit from €4.99 a month (dIR Me). For more you choose a subscription by module (see §1 and §8).
• What happens at the thirteenth invoice of a month? Issuing is refused with a notice, the sequence number is not used and invoices already issued stay valid. Upgrade the plan in Subscription or wait for the next month.
• Sign-in fails? Check the spelling of your email and password. If you do not know the password or the account is still awaiting its first activation, choose Reset it on the sign-in form. The system itself sends the right kind of link; it is valid for 30 minutes and once only. After several wrong attempts wait a few minutes (protection against guessing).
• Where do I get the digital certificate? Submit the request in eDavki (form DPR-PridobitevDP) and collect the file at taxca.gov.si/prevzem — the step-by-step procedure is in §7, and the Invoice setup wizard guides you too.
• FURS does not confirm an invoice? In Settings → Test connection check the line Ready for confirmation. The most common causes: an expired or wrong certificate, or FURS unreachable. For a pending or failed issued invoice use Retry FURS in its row; it resends the same frozen invoice without changing its number or contents.
• Still temporary_failure after a long time? The invoice is issued and valid; when the connection returns, repeat the confirmation from the invoice list. The document already carries the ZOI, which proves the time of issue.
• The customer is not in the picker on an invoice? They are probably archived — in Customers switch on Show archived and restore them.
• Why can't I see a module? It may not be included in your plan or your role does not have permission.
• How do I get a PDF? The PDF button in the list opens a preview. Choose SL/EN/DE/PL/HR, then Download PDF; the file gets a language suffix, e.g. RPZB2601259-en.pdf. No print dialog is needed.
• Can I import old invoices? Yes — from Čebelca (see §4); imported history does not count towards the plan.
• Where is my data stored? On a server in Slovenia (a PostgreSQL database). Nothing goes to third parties except the mandatory fiscal confirmation to FURS; subscription payment happens on the bank's page. Export is always free (see §9). If you connect ChatGPT, what it reads is processed by OpenAI (see AI access).

23. Security and privacy

• All dIR screens are noindex and unreachable without signing in. The session is in an HttpOnly cookie, passwords are hashed, and after ten wrong attempts in fifteen minutes sign-in from that address is suspended for a while.
• Roles limit who may do what: an administrator manages the company, sales and purchasing change only their own area, and an accountant only reads documents, bank, settings and exports.
• Secrets (passwords, the certificate, database access) are stored outside the web root and cannot be reached from the web.
• The FURS certificate physically stays on this server in Slovenia and never leaves it; each company has its own.
• Customer photos are a special category of personal data (GDPR): stored outside the web root, stripped of location data, reachable only when signed in.
• Payment-card data never goes through dIR — the subscription payment happens on the bank's hosted page.
• AI access is off by default, read-only, limited to one company and needs three separate approvals; see AI access.
• Communication with FURS and banks uses TLS. Bank mailbox passwords and certificate passwords are never shown back in the browser.
• A Taxi Pro worker's location may be received only with their explicit consent. dIR keeps the last point and time, not the route; withdrawing consent deletes the location. Automatic assignment considers only available workers with a fresh location.
• Screenshots from the Android app are always voluntary. The camera button appears only after the user explicitly switches it on in the app settings. When pressed, only the dIR window is captured, but it may contain customer, invoice or financial data. The screenshot travels through the signed-in session to private storage outside the web root and only to two authorised dIR Telegram support accounts; the bot key is not in the app.