fiscal.am

GAVR Group Ltd. — software-side co-inventor of VERO Code, publisher of Vero Tax Stamp

Yerevan-based software company, software-side co-inventor of the VERO Code anti-counterfeiting system jointly developed with AM-PG Group in 2014. Founded by Alex Grigoryan; develops the Vero Tax Stamp scanner that integrates with Armenia's State Revenue Committee tax-stamp backend, published on Google Play under the «Innovative Security Solutions» display name on a developer account whose APK namespace is «com.gavrgroup.vero_scanner».

Last reviewed Apr 30, 2026

GAVR Group Ltd.

ActiveForeign incorporation pending registry verification

Software-side co-inventor of the VERO Code anti-counterfeiting system (joint with AM-PG Group; Tax Stamp Forum Best New Innovation Award, Dubai 2014; Miami 2015 for the cloud platform). Founded in 2014 by Alex Grigoryan and operating from 12 Saryan str., Yerevan. Builds the optical / NFC scanner stack and the cloud platform that authenticates the marking AM-PG prints. Publishes the consumer-facing Vero Tax Stamp scanner on Google Play under the «Innovative Security Solutions» display name; the publicly distributed APK declares its native Android namespace as «com.gavrgroup.vero_scanner», confirming the publisher identity is on top of GAVR's own developer account.

  • Software developer
  • Marking-system operator

Names and brands

  • Trade name
    GAVR Group Ltd.

    Public-facing English brand on the company's own corporate site (gavrgroup.com); also stated verbatim on AM-PG's innovations page as one of the two co-inventor companies of the VERO Code. The «Ltd.» suffix (rather than the Armenian «ՍՊԸ») indicates foreign incorporation; the registered jurisdiction is not yet identified.

    gavrgroup.comGAVR Group Ltd. corporate sitechecked 4/30/2026
  • Trade name
    Innovative Security Solutions

    Display name of the Google Play developer account that ships every consumer Vero app (Tax Stamp, Warehouse, …). Treated as a publisher identity on top of GAVR Group's developer account, not a separate legal entity: every published APK declares its native Android namespace as «com.gavrgroup.vero_scanner», pinning the publisher to GAVR. The earlier package id was «com.innovativesecuritysolutions.taxstamp», which we list separately as a former name.

    play.google.comVero Tax Stamp on Google Play (publisher attribution)checked 4/30/2026
  • Product line
    Vero

    Product line name. The same Flutter codebase is built into multiple flavors («taxstamp», «production», «warehouse», «delivery», «retail», «scanner», «made_in_armenia», «cigaronne»), each with its own icon set under assets/images/<flavor>/.

  • Internal codename
    vero_native

    Internal project name. Surfaced via the absolute build path embedded in the public APK's Dart object pool.

  • Former name
    Tax Stamp

    Former Play Store name. The previous package id was com.innovativesecuritysolutions.taxstamp; the 8.0.0 release renamed both the user-visible name and the package to «verotaxstamp», meaning installs of the old app are not auto-upgraded.

Products

  • Vero Tax Stampplay.google.com

    Consumer-facing Android scanner. Reads the encrypted DataMatrix code on Armenian excise stamps, supports NFC tags (nfcA/B/F/V plus Innovision NFC-Barcode), submits the scanned code to the State Revenue Committee tax-stamp gateway, and lets the user file a counterfeit report. Includes a coin-based gamification layer that rewards users for scanning.

    Integrates with: tax-stamp.taxservice.am

Government counterparties

  • State Revenue CommitteeSoftware vendor for the State Revenue Committee's tax-stamp scanner stack. The Vero Tax Stamp app integrates with the SRC-operated gateway at tax-stamp.taxservice.am (production-info endpoint) and tax-stamp-feedback.taxservice.am (counterfeit-feedback endpoint).

Related companies

Ownership and beneficiaries

Pending verification

Beneficial ownership of GAVR Group Ltd. (the entity that brands the «Innovative Security Solutions» Play Store publisher) is not in the Armenian state legal-entity registry — letter-by-letter calques («ԳԱՎՐ ԳՐՈՒՊ»), phonetic letter-name transliterations («ՋԻԷՅՎԻԱՌ» — the convention used by AM-PG, which surfaces as «ԷՅԷՄՓԻՋԻ ԳՐՈՒՊ»), and direct name searches all return no Armenian-registered LLC matching the 2014 founding date and 12 Saryan St. address. The «Ltd.» suffix in the brand name itself signals foreign incorporation (HK / BVI / Cyprus / UAE / UK are typical for Armenian tech IP holdings). Verifying the registered jurisdiction and beneficial ownership therefore requires foreign-registry lookup or an FOI to the State Revenue Committee for the contracting entity name. AM-PG Group, the printing-side co-creator, is by contrast fully Armenian-registered and profiled at /reference/company/ampg-group; GAVR Group remains the only side without an identified legal-entity registration.

Notes and findings

  • VERO Code: provenance, co-creators, and corporate structure

    The VERO Code is publicly disclosed as the joint invention of two individuals — Albert Taroyan and Alex Grigoryan — and two companies: AMPG Group (printing / physical security) and GAVR Group Ltd. (software). The Code was named joint winner of the Best New Innovation Award 2014 at the Tax Stamp Forum in Dubai; the cloud-based platform built around it won the Best New Innovation 2015 award at the Tax Stamp Forum in Miami. GAVR Group Ltd. operates from 12 Saryan str., Yerevan 0002 (established 2014); AMPG Group operates from 82 Bagrevand str., Yerevan and lists IHMA, ISO and UNICRI affiliations. On Google Play the Vero Tax Stamp scanner is published under the «Innovative Security Solutions» brand — a third surface name; the Android manifest internally names «com.gavrgroup.vero_scanner». «Innovative Security Solutions» is therefore best read as a Play-Store-publisher front for the GAVR Group Ltd. + AMPG Group joint venture, not an independent legal entity. The Armenian state legal-entity registry returns no LLC matching any of these names with the 2014 founding date and Saryan / Bagrevand addresses, which is consistent with foreign incorporation of the IP-holding parent (HK / BVI / Cyprus / UAE / UK are typical for Armenian tech holdings).

  • One codebase, eight flavors — full supply-chain coverage

    Static analysis of the publicly distributed APK reveals that the same Flutter codebase ships eight build flavors, each with its own icon and branding under assets/images/<flavor>/: «taxstamp» (consumer), «production» (manufacturers / importers), «warehouse» (warehouse intake), «delivery» (logistics), «retail» (retailers), «scanner» (likely SRC inspector), «made_in_armenia» (the national-origin certification programme), and «cigaronne» (a white-label build for the largest Armenian cigarette manufacturer). Only the «taxstamp» flavor is publicly distributed on Google Play. The other flavors imply a vertically integrated supplier relationship covering the entire excise supply chain in Armenia, from manufacturer registration through to consumer scanning.

  • Proprietary DataMatrix variant with a static, hardcoded key

    The native scanner library «libvero_kit.so» is a fork of ZXing's DataMatrix decoder with an extra «KeyManager» class that overlays a fixed bit pattern on the matrix at decode time. Disassembly of the constructor reveals 20 hardcoded coordinates in a 20×20 matrix, each fed to a «setAndfillAroundKey» helper that paints a 3×3 cluster around the position. The same key is present in versions 7.5.4 and 8.0.0, suggesting it has not been rotated. Because the key positions are visible to anyone who decompiles the publicly distributed APK, the offline authenticity check provided by this scheme can be reproduced or bypassed by an adversary; the substantive anti-counterfeit decision therefore depends on the server-side check at tax-stamp.taxservice.am, not on the client-side cryptographic step.