Executive summary · TL;DR
Kit Digital (Spain digitalization grant) justification requires an invoice, a service agreement, technical evidence and a minimum 12-month retention to avoid clawback. Red.es has intensified verification controls with AI tools to detect generic evidence. This guide covers every requirement, the most common mistakes and how to respond to a remediation notice.
If you already have your Kit Digital (Spain digitalization grant) voucher awarded and the solution deployed, justification is the final step that determines whether you keep the grant or have to return it. It is not a minor procedure: Red.es has intensified justification controls and incorporated artificial intelligence tools to verify the quality of the evidence submitted. This guide gives you everything you need to know to justify correctly, with category-specific checklists and the most common mistakes you must avoid.
Justification deadlines: do not let them pass
Justification deadlines vary depending on the call and the segment, but the principle is clear: justification must be filed within the deadlines established in the service agreement, usually between 6 and 12 months from formalization. Order TDF/39/2026 has made these deadlines more flexible but has not eliminated them.
If the justification deadline is close to expiring and you have not completed deployment, contact your digitalization agent and Red.es immediately to explore options. Letting the deadline expire without acting is the most serious and frequent mistake.
Mandatory documentation for justification
Regardless of the category contracted, every justification requires a minimum set of documents. The service agreement signed by the beneficiary and the agent must be complete with all pages. The invoice from the digitalization agent must detail the services provided according to the contracted category, with a breakdown of items and the corresponding VAT or IGIC. The payment receipt must be a bank record (transfer, direct debit or account charge) and never cash. And the technical deployment evidence is specific to each category.
Technical evidence by category
Website and Online Presence
Evidence must include the URL of the operational website, screenshots of every page, an active SSL certificate, responsive design evidence (mobile and desktop captures), registration in Google Search Console and Google Analytics, legal texts (legal notice, privacy policy, cookie policy) and WCAG 2.1 level AA accessibility compliance.
Customer Management (CRM)
Required: screenshots of the operational CRM with real data (anonymized), configuration evidence (pipelines, fields, automations), data exports demonstrating system usage, and proof of the contracted licenses.
Cybersecurity
Cybersecurity evidence includes monthly monitoring reports across the 12 months, a register of detected incidents and actions applied, evidence of installation on every declared device, reports of updates and patches applied, and proof of the antimalware or EDR solution deployed.
E-invoicing
Required: screenshots of the operational invoicing software, evidence of sending and receiving electronic invoices in Facturae format, electronic signature configuration and proof of VeriFactu compliance where applicable.
The 10 mistakes that trigger clawback
Mistake 1: invoice not matching the service agreement, meaning that the invoiced items do not exactly correspond to the services described in the agreement.
Mistake 2: cash payment or payment via non-traceable means. Every payment must be bank-based and linked to the agent's invoice.
Mistake 3: solution not operational at the time of verification. Red.es can verify at any point that the solution is working. If you stopped paying licenses or the service has been interrupted, justification will fail.
Mistake 4: generic or templated evidence. Red.es has deployed AI tools to detect evidence copied from other projects or generated with templates. Evidence must be real and specific to your company.
Mistake 5: incorrect number of declared devices in the cybersecurity category.
Mistake 6: website without legal texts or without accessibility compliance.
Mistake 7: failing to keep the solution operational for the 12-month minimum period.
Mistake 8: filing justification past the deadline.
Mistake 9: not keeping originals of invoices and payment receipts for at least 4 years.
Mistake 10: failing to respond to Red.es requests within the indicated deadlines.
What to do if you receive a remediation notice
If Red.es detects deficiencies in your justification, you will receive a remediation notice with a specific deadline to correct the shortcomings. Treat this notice with maximum seriousness, contact your digitalization agent immediately to obtain the supplementary evidence required, and file the remediation within the deadline.
If the remediation is not satisfactory, the clawback procedure will be initiated. In that case, you have the right to file objections and, where appropriate, appeal the resolution.
General justification checklist
Before submitting your justification, verify that you have: the signed and complete service agreement, the invoice with correct breakdown, the bank payment receipt, the technical evidence specific to your category, dated screenshots with metadata, the solution operational and accessible for verification, and backups of all documentation. Related: Kit Digital Cybersecurity: grants up to €29,000.
Have doubts about your Kit Digital justification? Let's talk. I will help you review your documentation and ensure your justification meets every requirement before submission.
Authorship: Ángel Ortega Castro · independent consultant in strategy, quality and digitalization for SMEs.
Frequently asked questions
- Who can apply?
- SMEs, micro-enterprises and self-employed professionals with tax residency in Spain that meet size, seniority and eligibility requirements. Every justification requires a minimum set of documents, including the signed service agreement, invoice, bank payment receipt and category-specific technical evidence.
- What are the deadlines?
- Justification deadlines vary by call and segment, generally between 6 and 12 months from the formalization of the service agreement. Order TDF/39/2026 made deadlines more flexible but did not eliminate them.
- How is the grant justified?
- Justification is filed in the official Red.es platform with technical rollout evidence, invoices and payment receipts. If the deadline is close to expiring without completed deployment, contact your digitalization agent and Red.es immediately.
- What happens if the grant is not justified properly?
- Incorrect or late justification triggers clawback: the company must return the voucher received plus default interest. If the remediation is not satisfactory, the clawback procedure starts; you have the right to file objections and, where appropriate, appeal.
Frequently asked questions
How does this apply to my SME?
It applies as long as you serve Spanish customers or process Spanish data; the framework is mandatory above thresholds we summarise in the table.
What does it cost in 2026?
Indicative ranges for SMEs 10-50 employees: 2,500-12,000 EUR for documentation + auditor fees vary by AENOR / BV / SGS / LRQA.
Which Spanish regulation applies?
BOE references RD 311/2022 (ENS), Regulation EU 2016/679 (GDPR), LOPDGDD, NIS2, DORA and the EU AI Act 2024/1689 depending on scope.
How long does the implementation take?
Average runs 4-7 months for a single ISO. Compound integrated SGI (9001+14001+27001) usually 8-12 months.
Can I co-finance it with Kit Digital or Kit Consulting?
Yes, Kit Consulting 2026 covers up to 24,000 EUR in advisory hours; Kit Digital covers tools (CRM, ERP, ciberseguridad) up to 29,000 EUR.
El marketing del cerebro es más predictible que el marketing de la opinión. — Ángel Ortega Castro