Engineering
•
5 min read
•
October 25, 2026
Weekly Update: European Accounting Integrations, Fast Sprint Triage, and Webhook JWKS
What shipped to Pomodio this week: new cloud accounting adapters (sevDesk for Germany, Pennylane for France), contractor-scoped accounting connections with auto-sync on invoice finalization, keyboard-first sprint triage, dynamic webhook JWKS discovery, and European statutory e-invoicing (Veri*factu, TicketBAI, ZUGFeRD, Peppol).
We use Pomodio daily to manage both our engineering iterations and our billing pipelines. When your team includes contractors billing across different countries, managing invoices and keeping external accounting software in sync can turn into a weekly headache.
This week we rolled out a major series of updates to solve that problem: new European cloud accounting adapters, contractor-level accounting connections, automated sync on invoice finalization, and statutory e-invoicing compliance. We also added keyboard triage to our sprint views and upgraded our webhook authentication infrastructure. Here is a rundown of what shipped.
1. Cloud Accounting: sevDesk, Pennylane, and Contractor-Level Sync
Until recently, accounting integrations were tied strictly to the organization level. That worked for company-wide books, but fell short for freelance contractors and independent engineers who need their client invoices to route directly into their personal bookkeeping software.
We redesigned the accounting architecture from the ground up:
- User-Scoped Contractor Integrations: You can now connect your personal accounting accounts directly inside your User Profile. When you generate or receive an invoice for project work, Pomodio routes the sync directly to your personal account.
- sevDesk Integration (Germany / DACH): Added a native REST API adapter that synchronizes contacts, finalized invoices, line items, and German VAT categories into sevDesk.
- Pennylane Integration (France): Added direct REST synchronization for customer profiles, invoices, and French accounting plan mappings.
- Auto-Sync on Invoice Finalize: Invoices now trigger a background worker (AutoSyncFinalizeWorker) the moment they are finalized. It automatically pushes payloads to connected accounting engines (including Xero, QuickBooks, Holded, Alegra, sevDesk, and Pennylane) without requiring manual exports.
- Safe Legacy Migration: An automated migration pipeline was run to duplicate historical organization connections to existing user profiles without disrupting active API tokens or webhook subscriptions.
2. European Statutory E-Invoicing: Spain, Germany, France, and Italy
European countries are rolling out specific technical requirements for electronic billing and anti-fraud reporting. To ensure invoices generated from tracked time remain legally compliant across borders, we implemented several new serialization and validation engines:
- Spanish Veri*factu (Order HAC/1177/2024): Implemented sequential SHA-256 chained hashing (where each invoice’s cryptographic fingerprint embeds the previous invoice’s hash) and official Spanish Tax Agency (AEAT) verification QR codes.
- Basque TicketBAI 1.2: Province-specific XML generation and CRC-16 checksum calculations for Gipuzkoa, Bizkaia (Batuz), and Álava.
- German ZUGFeRD 2.2 / Factur-X: Generates hybrid PDF/A-3 electronic invoices containing machine-readable XML and public sector Leitweg-IDs.
- Italian SDI & French Chorus Pro: Compliant XML serializers for the Italian Tax Agency SDI clearinghouse and the French B2G Chorus Pro portal.
- Pan-European Peppol BIS Billing 3.0: Standardized UBL 2.1 exporters for cross-border public procurement invoicing.
- Tax ID Validation: Built algorithmic checksum validation for Spanish DNI, NIE, and CIF identifiers to prevent invalid billing data before finalization.
3. Keyboard Shortcuts and Inline Editing in Sprints
Sprint planning and backlog grooming involve dozens of small adjustments. Opening a full modal or edit page just to change a point estimate or status slows the whole meeting down.
We updated the Sprint Backlog and Sprint List views with keyboard-first ergonomics:
- Row navigation: Use j and k (or the up/down arrows) to move through tasks.
- Single-key actions: Press s for status, p for priority, a for assignee, e for estimates, and c for epic assignment.
- 1-click inline title editing: Press Enter on any selected task (or click the title) to edit it directly in place with instant updates.
- Estimate popover: Pressing e brings up a quick Fibonacci pomodoro picker (1, 2, 3, 5, 8, 13) plus custom inputs.
4. Webhook Security: RS256 and Public JWKS Discovery
For teams integrating Pomodio events into external services or custom CI/CD pipelines, managing shared HMAC secrets across distributed systems can be cumbersome.
We implemented asymmetric RS256 token signing and standard public key discovery (RFC 7517):
- RS256 Signatures: Webhooks can now deliver an RSA-signed JSON Web Token in the Authorization header.
- Public JWKS Endpoint: External systems can verify incoming webhooks by retrieving our public keyset directly from /.well-known/jwks.json, eliminating shared secret distribution.
- Key Rotation: Keys are identified by deterministic Key IDs (kid), allowing keys to rotate with zero downtime.
- Audience Claims: Each webhook endpoint can enforce an expected audience target (aud) to protect against cross-service token replay.
5. Authentication Cleanup
We audited our sign-in options and decommissioned legacy Slack and Bitbucket OAuth login strategies. Both had negligible usage, and removing them tightens our attack surface and simplifies our login screens.
We are focusing our web login on Google, GitHub, and GitLab, while laying the technical groundwork for native Google and Apple authentication on our upcoming mobile app releases.
Wrapping Up
Whether you are tracking freelance invoices with sevDesk or Pennylane, finalizing e-invoices across Europe, or triaging sprint tasks with your keyboard, we hope these updates make your day-to-day workflow noticeably faster.
You can find the new accounting settings under your User Profile, and test the new keyboard triage in any active sprint backlog. As always, let us know your feedback!
Streamline your software delivery
Supercharge your team's sprint velocity
Integrated time-tracking, statutory e-invoicing, Git commit linking, and keyboard-first agile backlog management in one unified workspace.