Fixed asset inventory: the asset number D406 requires

The file fails validation again, and the message has not changed. The most common reason the “Assets” section of the Romanian D406 (SAF-T) return gets rejected is not a broken formula in the accounting system: it is fixed assets reported with an empty inventory number. SAF-T will not accept a missing identifier for an asset that appears in the return. On paper the fix is trivial — assign a unique code to every asset, regenerate the file, push it through DUKIntegrator again. In practice, somebody has to get up from their desk and work out which physical object matches the line “laptop, RON 4,200, 60% depreciated” in the fixed asset register.

That is where the work breaks down. For many companies the inventory number was a sticker put on a cabinet and forgotten there — an archival detail, not an obligation with a deadline. From the moment it became a mandatory field in an XML file filed with ANAF, the Romanian tax authority, the gap between what the register says and what actually stands in the corridors stopped being an internal matter. It became a validator error with a filing date attached.

What D406 Assets actually wants from every fixed asset

The “Assets” section does not ask for a list of names. Every reported fixed asset needs an inventory number, a description, a classification code, the standard useful life, the acquisition date, the in-service date, the inventory value and the accounting account. Eight fields, and the inventory number is the only one that cannot be derived from something else — the others sit somewhere in the accounting records, while this one exists only if somebody assigned it and kept track of it.

Who files, and when: SAF-T was phased in by taxpayer category — 1 January 2022 for large taxpayers, 1 January 2023 for medium ones, 1 January 2025 for small ones. In 2026 the assets part is reported by every company, micro-enterprises and businesses outside the VAT system included. The Assets section is filed annually, on the deadline for filing the financial statements for that financial year, and the information is compiled at financial-year level. For financial year 2025 the deadline was 2 June 2026 — the same date as the annual financial statements (30 April 2026 for non-profits).

Remember the rule rather than the date, because forum threads mix several deadlines together. “31 July 2026”, for example, is the deadline for an ordinary monthly or quarterly filing — which falls on the last calendar day of the month following the reporting period — not for Assets. The Assets deadline moves with the statutory accounts deadline, whatever that turns out to be in a given year. And the Assets section gets no grace period equivalent to the one granted for a first monthly or quarterly filing: that grace is counted in months from the end of a monthly or quarterly reporting period, and it does not map onto an annual report.

The deadline is not the real problem, though. The state of the register on the day you open it is. In a company that has not physically counted anything for a few years, the fixed asset list typically holds:

• assets with no inventory number — bought in a hurry, booked straight off the invoice, never passing anyone holding a label;
• duplicate numbers, created when two people numbered assets independently, in two spreadsheets, in different years;
• equipment physically scrapped but still sitting in the register — someone took it to be recycled and nobody closed the line;
• real equipment that appears nowhere, because it was expensed or inherited from a site that has since closed;
• assets moved between locations, with the register still pointing at an address abandoned years ago;
• stickers that fell off, went illegible, or were stuck on a case that has been replaced since.

The cost of that state is not hypothetical. For D406, late filing carries a fine of RON 1,000 to 5,000, and incorrect or incomplete filing RON 500 to 1,500. Separately, failing to carry out the stocktake is an offence under Accounting Law 82/1991, with a fine of RON 400 to 5,000. And since 1 January 2026, under Law 239/2025, ANAF can declare a company tax-inactive if it does not file its financial statements within 5 months of the legal deadline — an outcome that has nothing to do with the size of the fine any more.

The obvious alternative — “we will put a spreadsheet together in December” — fails for a mechanical reason. A paper or spreadsheet count requires somebody to read a code off an object and type it into a cell, then somebody else to match the field list against the accounting list by hand. Both steps generate errors, and transcription errors are invisible: they produce a register that looks perfect and does not describe reality.

The law has named the barcode reader since 2009

Here is the part few companies know. The stocktake obligation is not new and does not come from SAF-T: entities must carry out a general inventory of assets, liabilities and equity at least once during the financial year. The implementing rules — Romanian Ministry of Finance Order 2861/2009 — require, at point 5, that the director approve the company’s own written stocktake procedures, adapted to the specifics of the business. Not a form downloaded off the internet: a procedure the company owns.

And at point 34(3), those same rules explicitly describe assets being counted through electronic identification methods — “for example: barcode reader etc.” — with the data sent straight into the IT system and the inventory lists printed directly from it. The text dates from 2009. We are not selling anyone a new idea: we are operationalising a method the law has named for 17 years and that few SMEs have ever put in place. The professional literature points the same way — the stocktake committee should be equipped, among other things, with barcode readers and identification tools.

The reason the method matters is arithmetic. A classic comparative data-entry test, across 3 million entries, measured roughly 10,000 errors with manual keying, 300 with OCR and exactly one with barcodes. The reference research on typing error rates — 0.42-0.48% of keystrokes, or about one error every 208-230 characters — comes from the same era. These are old figures, published in 1990, and should be read as such: they are not recent measurements. The order of magnitude still holds, though, because the physics of optical reading has not changed in the meantime — a code that is read correctly or not at all is a different thing from a code typed almost correctly.

The inventory number has stopped being a sticker on a cabinet. It is a mandatory field in a file the validator rejects if you leave it empty — and it does not get filled in from a desk, it gets filled in down the corridor.

One walk through the offices produces two registers

Companies that also run an information security management system usually do the work twice. The accounting register says “laptop, RON 4,200, 60% depreciated”. The security register says “laptop, with Ionescu, encrypted, patched, named owner”. Same physical objects, counted twice, by people who never compare notes.

ISO/IEC 27001:2022 requires, through control A.5.9, that an inventory of information and other associated assets be developed and maintained, including an owner named for each asset — exactly the information you collect anyway when you scan a label and note down who uses the device and where it sits. It is, incidentally, a typical nonconformity at the stage 2 audit. In the same vein, CIS Critical Security Control 1 — “Inventory and Control of Enterprise Assets” — is the first control on the list, and the detailed asset inventory requirement sits in IG1, the essential cyber hygiene set aimed at small and medium organisations.

The figure that justifies the effort is narrow and measured: in the Verizon DBIR 2025, 46% of the devices from which corporate credentials were harvested were unmanaged endpoints — personal laptops, home devices, kit outside the visibility of protection tooling — and 30% of the devices showing up in infostealer logs were running enterprise editions of Windows. A complete inventory does not solve that on its own, but it is the minimum condition for a security plan to be applied to something real. The same inventory is also the starting point for a serious IT cost calculation: you cannot plan the replacement of a fleet you do not know.

How to run a fixed asset count with scanning, step by step

The order matters more than the tools. The sequence below works just as well whether you run it in-house or hand it to someone else.

1. 1Export the current fixed asset list from your accounting software into a spreadsheet, with all eight fields D406 Assets requires. The empty columns are the map of the work ahead.
2. 2Assign a unique code to every asset that has no inventory number, and resolve the duplicates before you print anything. A scanned duplicate is still a duplicate, only faster.
3. 3Print and apply the labels, to one standard across the whole company, on a surface that will not be swapped out at the first repair.
4. 4Do the physical walk with the scanner, site by site, and record the location and the person using the device at every scan. This is where the accounting data and the security inventory data get collected in a single pass.
5. 5Reconcile the surpluses and the shortfalls. Surpluses are valued under the accounting rules, shortfalls attributable to staff are recovered at replacement value, and offsetting surpluses against shortfalls is allowed only for goods that risk being confused because they look alike — not as a way to make the list add up.
6. 6Print the inventory lists from the system and respect the formalities: every page signed by the chair and the members of the committee, no blank spaces, no crossings-out.
7. 7Present the results of the stocktake to the director within 7 working days of the end of the operation.
8. 8Send the export to your accountant for the D406, and keep the database current between counts, at every acquisition, move or disposal. Next year the walk becomes a check, not a reconstruction.

One calendar detail that takes a lot of pressure out of December: the annual stocktake does not have to happen on 31 December. The rules say “as a rule, on the occasion of the financial year-end”, and entities with complex operations may count earlier, provided the results are reflected in the annual financial statements. If you have several sites, a month in autumn is far more practical than the last week of the year.

What we deliver — and what stays with your accountant

The Digital Fixed Asset Inventory + Scanners package, from our package list, covers exactly the operation above: a mobile app with a barcode scanner (Android and iOS), a web admin for reporting and export to accounting, printable labels, import of the initial inventory from a spreadsheet, and training for the local administrator. Setup comes in three tiers, prices excluding VAT: Micro, up to 10 devices and one scanner, RON 4,500, one week; Small, 10-50 devices and two scanners, RON 9,500, two weeks; Medium, 50-100 devices and three scanners, RON 18,500, three weeks. Above 100 devices the configuration is quoted on request. After go-live, the software licence costs RON 250 per month per scanner — a recurring cost, not a hidden fee.

Just as important is what we do not do, because this is exactly where disappointments start:

• We do not generate or file the D406. We deliver clean data, in a format your accountant or the fixed asset module of your ERP can use. The return stays their responsibility.
• We cover fixed assets, not stock. The “Inventory” section of SAF-T is filed at the request of the central tax authority, within a deadline that cannot be shorter than 30 calendar days from the request, and it follows a different working logic.
• We work with barcodes, not RFID. The “whole building inventoried in two days” figures circulating in the market are about RFID, which reads without line of sight. Barcode requires you to see the label, object by object — slower, and much cheaper.
• We do not replace the written stocktake procedure or the committee. The system supports them; the director’s approval and the signatures remain the company’s obligations.
• We do not fix accounting history. If an asset was physically scrapped years ago and the line was never closed, scanning brings it to light, but the correction stays an accounting decision.

For companies that already have an IT infrastructure support relationship, the scanned inventory ties naturally into the rest of the records — replacement planning, warranties, documentation that no longer depends on one technician’s memory.

Conclusion

A fixed asset register is not an accounting document you open once a year; it is the description of what your company actually owns — and from the moment the tax authority reads it field by field, the gap between the description and reality carries a cost with a fixed date on it. The good news is that the same walk through the offices, done once and with the right tool, settles three things at once: the inventory number D406 demands, the stocktake the law requires, and the asset inventory any security auditor will ask for. If you want to see how far your real list has drifted from the floor, let’s talk for 30 minutes.

Sources

• ANAF Order 1783/2021 — Annex 4 (deadline and content of the “Assets” section) and Annex 5 (reference dates by taxpayer category), Romanian Legislative Portal (legislatie.just.ro)
• Law 207/2015 — Romanian Fiscal Procedure Code, art. 337 (penalties for informative returns)
• Accounting Law 82/1991, art. 41-42 (offences, including failure to carry out the stocktake)
• Ministry of Finance Order 2861/2009 — Rules on organising and carrying out the stocktake, points 2, 4, 5, 34 and 40
• Law 239/2025 — declaration of tax inactivity for failure to file financial statements, applicable from 1 January 2026
• CECCAR Business Magazine — “Inventarierea patrimoniului, operațiune obligatorie în vederea întocmirii situațiilor financiare” (ceccarbusinessmagazine.ro)
• Nexus ERP — “Erori la validarea declarațiilor SAF-T (D406)”, product documentation (docs.nexuserp.ro)
• SoftPro — D406 assets section documentation, mandatory fields (softpro.ro)
• Avocatnet — SAF-T 2026, the assets filing extended to small companies (avocatnet.ro); Digi Economic — 2026 deadlines for filing financial statements (digi24.ro)
• ISO/IEC 27001:2022, control A.5.9 — Inventory of information and other associated assets; CIS Critical Security Controls v8.1, Control 1 — Inventory and Control of Enterprise Assets (cisecurity.org)
• Verizon — Data Breach Investigations Report 2025 (verizon.com/business/resources/reports/dbir)
• Library Systems Newsletter, vol. 10 no. 10, October 1990 — barcode / OCR / manual keying error rate comparison, via Library Technology Guides (librarytechnology.org)