How ComplyStream connects to FBR

Short answer: software, not a licensed integrator

ComplyStream is Shopify invoicing software. It reads order and product data, applies the mappings configured by the merchant, prepares the required invoice payload and sends it with that merchant's credentials. ComplyStream is not licensed by FBR as an integrator and does not claim to be.

The registered person remains responsible for registration and invoice accuracy. The licensed-integrator relationship is selected separately in IRIS.

How the licensed-integrator system works

Chapter XIV of the Sales Tax Rules, 2006 provides the framework for integrating notified registered persons. A merchant selects an FBR-licensed integrator, and FBR maintains the official list of licensed integrators. That list, not a software vendor's website, is the source to check before selection.

The integrator relationship establishes the approved route to FBR. A software application can then prepare business-system data for that route. Selecting ComplyStream in Shopify does not nominate an integrator in IRIS, and selecting an integrator does not automatically map Shopify products.

Why PRAL free matters

Rule 150XF identifies PRAL as a licensed integrator for specified purposes and provides for free-of-cost integration services to registered persons on demand. That means a merchant does not have to assume that licensed integration itself requires a private implementation fee.

“Free integration” does not mean every piece of operating software is free. A merchant may still choose to pay for Shopify workflow software, field mapping help, an ERP implementation or advice. PRAL and ComplyStream perform different functions.

What we do with your token

You enter the sandbox or production token issued for your registered person into the app. ComplyStream stores it encrypted and uses it server-side to authenticate invoice requests for that shop. It is not displayed back in full in ordinary screens and is not shared between merchants.

The token authorises FBR endpoint calls; it is not your IRIS username or password. Setup also requires the relevant submission IP to be whitelisted. The exact sequence is in the setup guide.

What we don't do

• We do not register your business for sales tax or decide whether a notification covers you.
• We do not select or impersonate a licensed integrator.
• We do not provide an IRIS account, shared token, NTN or tax advice.
• We do not set HS codes or tax rates without merchant-configured mappings.
• We do not guarantee FBR or PRAL availability or acceptance of incorrect data.

Your data and the right to revoke access

Order fields needed for invoice preparation and FBR responses are processed for the connected shop. Access is scoped by Shopify permissions and the credentials supplied by that merchant. Operational logs are kept to diagnose submissions and protect the service, subject to the published terms and privacy commitments.

You can rotate the token in IRIS and replace it in app settings. You can also uninstall the app to revoke Shopify access. Read the security page for controls and the terms for the contractual position.

Who we are

ComplyStream is a product of WizzyTek focused on Pakistani Shopify operations. It is independent software. Neither ComplyStream nor WizzyTek is affiliated with, endorsed by or part of FBR or PRAL.