Time to launch
Typically months
Certification status and market-specific requirements determine the schedule.
Peppol identity
Yours
Your own Access Point identity and PKI certificate.
ISO/IEC 27001
Yours
Certification must cover your Peppol scope.
Operations
Qvalia
Qvalia operates the Access Point infrastructure, monitoring, maintenance and network updates.
Our role in certification
Ondersteuning
Conformance testing, certification and launch support. Approval remains with the relevant authority.
Built for
Service providers · Outsourcing and BPO · Software vendors entering a mandated market · Organizations that need to hold the Peppol Service Provider role in their own name
Your Peppol identity, operated by Qvalia
Your organization holds the Peppol Service Provider role, Access Point identity and PKI certificate. Qvalia provides and operates the underlying Access Point infrastructure.
Hosted Access Point is for organizations that need to hold the Peppol Service Provider role in their own name. With Embedded Peppol and White-label platform, Qvalia holds that role.
Requirements for becoming a certified Peppol Service Provider
Certification combines organizational, technical and market-specific requirements.
| Step | What it involves | Responsibility |
| OpenPeppol membership | OpenPeppol membership in the appropriate Service Provider category, maintained in good standing | You |
| Service Provider Agreement | Signed with the relevant Peppol Authority, or with OpenPeppol as Coordinating Authority where no national authority applies | You |
| Legal entity verification | Legal entity and onboarding documentation reviewed by the relevant authority | You |
| Conformance testing | Your Access Point must pass the Peppol testbed for AS4 transport, using test certificates on the test network | Qvalia, with your participation |
| PKI certificates | Test certificates for conformance testing and production certificates for go-live, issued to your organization | You |
| ISO/IEC 27001 | ISO/IEC 27001 certification, or an accepted equivalent, covering your Peppol scope | You |
| Peppol Authority requirements | Additional requirements may apply in the jurisdictions and service domains you support. | You |
| Ongoing obligations | Specification updates, reporting, incident management and applicable renewals | You, with Qvalia support |
Requirements vary by Peppol Authority and service domain. Qvalia provides the hosted infrastructure and supports conformance testing and technical documentation. Approval remains with OpenPeppol or the relevant Peppol Authority.
ISO/IEC 27001 for the Service Provider role
The Service Provider legal entity must hold a valid ISO/IEC 27001 certificate, or an equivalent accepted by OpenPeppol, covering its Peppol scope. Certification held by a hosting or platform provider cannot be inherited by the Service Provider.
Qvalia provides the hosted infrastructure, operations and technical evidence agreed for those components. Your organization owns the management system, certification and remaining Service Provider obligations. If certification is not already in place, it must be included in the implementation plan before production launch.
Operating responsibilities
Once certified, your organization holds the Peppol Service Provider role and associated governance obligations. Qvalia operates the hosted Access Point infrastructure and supports the technical process.
| Responsibility | Qvalia | Partner |
| Certified Peppol Service Provider role | Partner | |
| Access Point identity and Peppol PKI certificate | Partner | |
| ISO/IEC 27001 certification for the Service Provider role | Partner | |
| Peppol Authority requirements | Partner | |
| Peppol governance and incident reporting | Partner | |
| Infrastructure, operations, monitoring and updates | Qvalia | |
| Agreed technical evidence for the hosted components | Qvalia | |
| End-customer contract, pricing and relationship | Partner |
With Embedded Peppol and White-label platform, Qvalia holds the Service Provider role and the corresponding Peppol obligations.
Veelgestelde vragen
What is a hosted Peppol Access Point?
Your organization holds the Peppol Service Provider role, Access Point identity and PKI certificate. Qvalia provides and operates the underlying infrastructure. This differs from Qvalia’s White-label platform, where Qvalia holds the Service Provider role.
Is Qvalia’s ISO/IEC 27001 certification enough for us?
No. The Service Provider legal entity must hold its own ISO/IEC 27001 certification, or an equivalent accepted by OpenPeppol, covering its Peppol scope. Qvalia provides the technical evidence agreed for the hosted components.
Do you guarantee certification?
No. Approval rests with OpenPeppol or the relevant Peppol Authority. Qvalia supports conformance testing, certification and launch.
Which markets can you support?
Requirements vary by Peppol Authority and service domain. Tell us which markets you need, and we will assess the applicable requirements and delivery scope.
How long does it take?
A Hosted Access Point project typically takes months. The schedule depends on existing certifications, conformance testing and the relevant authority’s process.
When is Hosted Access Point the right model?
Hosted Access Point is appropriate when your organization must hold the Peppol Service Provider role for commercial, contractual or regulatory reasons. Otherwise, Embedded Peppol or White-label platform usually has a lower implementation and governance burden.
Can we add a white-label interface?
Yes. The interface and Peppol identity are separate. You can use your own platform or add Qvalia’s White-label platform under your brand.
Alternative delivery models
In both alternatives, Qvalia holds the Peppol Service Provider role and the associated Peppol certification obligations.
Embedded Peppol
Embedded Peppol provides network access through one REST API while the interface remains in your product.
White-label platform
The white-label platform provides Qvalia’s complete application under your brand, domain and pricing.
Discuss your Hosted Access Point requirements
Tell us where your organization is established, which markets and service domains you plan to support, and whether ISO/IEC 27001 certification is already in place. We will assess the applicable requirements and define Qvalia’s delivery scope.
Neem contact op
Integreer e-facturering, e-bestellingen en gegevensverrijking in uw platform met Qvalia.
Dankzij onze partner-API, geavanceerde beheertools en white-labeloplossingen kunt u uw eindgebruikers een naadloos transactiebeheer bieden.
Werk met ons samen om de mogelijkheden van uw platform uit te breiden en de digitale transformatie te stimuleren. Neem contact met ons op voor meer informatie.
Zakelijke documenten uitwisselen via Peppol, EDI en meer
Schakel AI-gestuurde gegevensverrijking op regelniveau in
Breid uw productaanbod en gebruiksgemak uit