BokaPOS for WooCommerce

BokaPOS for WooCommerce connects your shop to BokaPOS (https://bokapos.rs), a cloud ESIR that issues fiscal receipts through the Tax Administration’s virtual fiscal processor (V-PFR) for distance commerce in Serbia. BokaPOS 1.0.0 is approved by the Tax Administration as ESIR IB 1656 (decision 000-092-00-00171/2026-0000 of 2 September 2026).

Install, enter the client id and secret BokaPOS issued, and map your tax classes and payment methods once. From then on you fiscalize an order with one click from the order screen, or switch on automatic fiscalization and let every order at the status you choose get its receipt: the PFR number, the Tax Administration verification link, the QR code and the PDF, stored on the order and delivered to the customer.

What it does

• Fiscalizes orders manually from the order screen and the orders list, or automatically at the status you choose (Completed recommended).
• Refunds through the BokaPOS refund workflow, including the signed copy for cash refunds.
• Advance chains (advance receipt at payment, advance refund and final receipt at delivery) for gateways you mark as prepaid.
• Copies, proforma and training documents from the order screen.
• Receipt delivery: WooCommerce e-mails with the PDF, BokaPOS platform e-mails, the order-received page and My Account.
• Company purchases: PIB field at checkout (classic and block checkout). The receipt carries the buyer identification; the registered company name BokaPOS resolves is shown on the order screen.
• Local fiscal journal, BokaPOS journal search, CSV export and the turnover report inside WordPress.
• Optional product catalogue sync.
• Serbian (Latin) and English.

Safety rules the plugin follows

• A receipt exists only when BokaPOS answers 201 with fiscalized: true. Nothing else counts.
• Every request carries an idempotency key stored before sending, so a network problem can never produce two receipts for one order.
• Unknown outcomes are never resent; the plugin checks the result with BokaPOS and tells you when a person needs to decide.
• Tax labels are read live from the V-PFR through BokaPOS; nothing is hard-coded.

External service

This plugin requires a BokaPOS account and sends order data to BokaPOS in order to issue fiscal receipts. The “External services” section below lists what is sent, when, and where the terms and the privacy policy are.

External services

This plugin connects to BokaPOS, the cloud ESIR operated by BOKA GROUP DOO (Belgrade, Serbia), to issue the merchant’s fiscal receipts through the Tax Administration’s V-PFR. Without a BokaPOS account the plugin does nothing. Nothing is sent until an administrator enters a BokaPOS credential, and nothing is ever sent about visitors who do not place an order.

The plugin talks to two hosts, both operated by BOKA GROUP DOO: https://api.bokapos.rs, the BokaPOS API that issues the fiscal documents and serves receipts, reports and catalogue data, and https://auth.bokapos.rs, the BokaPOS identity service that issues the OAuth 2.0 access tokens. No other host is contacted.

What is sent and when:

• Access tokens. When an administrator saves or tests a credential, and whenever a stored token has expired before an API call, the plugin sends the client id and secret to https://auth.bokapos.rs (OAuth 2.0 client credentials) and receives a short-lived bearer token.
• Fiscal documents. When a receipt, refund, advance receipt, copy, proforma or training document is issued, either from the order screen or by the automation the merchant switched on, the plugin sends to https://api.bokapos.rs the order lines (name, quantity, unit price, tax label, unit of measure, GTIN), the amounts and the payment type, the order number as a reference, the cashier name, the buyer identification the customer or the merchant supplied (for example a company PIB) and the shop’s host name and plugin version as metadata.
• Receipt e-mails. When the merchant enables the BokaPOS e-mail channel, the customer’s billing e-mail address is sent with a delivery request so BokaPOS can send the receipt.
• Reads. Connection checks, the taxpayer and premise list, tax labels, receipt PDFs and QR codes, journal searches, turnover reports and the daily health check read from https://api.bokapos.rs when a merchant opens the matching screen or the scheduled check runs.
• Catalogue. When the merchant enables catalogue sync, product SKU, name, gross unit price, unit of measure, tax label and GTIN are sent to https://api.bokapos.rs.

No data is sent to any other service and no analytics or advertising data is collected. This service is provided by BOKA GROUP DOO. Terms of use: https://bokapos.rs/uslovi (English: https://bokapos.rs/en/uslovi). Privacy policy: https://bokapos.rs/privatnost (English: https://bokapos.rs/en/privatnost).