Role
Peppol Service Provider
Under the Swedish Peppol Authority
Verification
Before registration
Every end user is identified first
Security
ISO/IEC 27001 and ISO 22301
Annually audited and certified
Registration
Peppol ID included
In all plans
What a Peppol Service Provider does
Organizations do not connect to Peppol directly. They connect through a Peppol Service Provider, which signs a Service Provider Agreement with a Peppol Authority and operates or contracts the certified infrastructure. Sender and receiver can use different providers, and the network routes each document between them.
- Registers each organization’s Peppol ID and publishes its capabilities in a Service Metadata Publisher (SMP)
- Identifies and verifies each end user before registration, as the Peppol rules require
- Operates a certified Access Point that sends and receives documents over AS4
- Applies the Peppol specifications and the requirements of each Peppol Authority it works under
- Keeps registrations up to date and reports network statistics to OpenPeppol
Division of responsibility
What Qvalia runs, what you own
Qvalia runs
- The Peppol Service Provider role and its obligations towards the Peppol Authority
- Peppol ID registration and updates in Qvalia’s SMP
- The certified Access Point, validation and delivery
- Updates when the Peppol specifications change
- End-user identification and registration checks required by Peppol
You own
- Your business documents and master data
- The connection from your system: API, SFTP, an integration or the web app
- Correct and current company details for registration
- First-line identification of your own end users, if you onboard customers or suppliers through Qvalia
Getting started
From agreement to first document
Most organizations are connected in four steps. Qvalia handles the Peppol registration, and you decide how your own system connects.
1. Choose a plan
Pick a plan for your own organization, or a partner model if you offer Peppol to your customers.
2. Get your Peppol ID
We verify your organization and register your Peppol ID in Qvalia’s SMP, so other participants can find you.
3. Connect your system
Connect through the REST API, SFTP or an existing integration, or start right away in the Qvalia web app.
4. Test and go live
Exchange test documents, then switch to production. Qvalia supports registration, testing and go-live.
Who holds the Peppol Service Provider role
The Service Provider is accountable to the Peppol Authority for every participant it registers. Depending on how you use Qvalia, that is Qvalia or your own organization.
Your own organization
Qvalia is your Service Provider
Qvalia registers your Peppol IDs and carries the role towards the Peppol Authority.
Software platforms
Qvalia holds the role for your customers
With Embedded Peppol or the White-label platform, Qvalia carries the role. You own the customer relationship.
Service providers
You hold the role yourself
With Hosted Access Point, you sign your own Peppol Authority agreement. Qvalia operates the infrastructure.
What to check when choosing a Peppol Service Provider
The Peppol specifications are the same for every provider. What differs is certification, market coverage, integration options and who carries which responsibility.
- Certification status in OpenPeppol’s register, for both Access Point and SMP
- Registrations with the Peppol Authorities in the markets you trade in
- Support for the document types you need beyond invoices, such as orders, catalogs and despatch advices
- Integration options for your ERP, finance system or platform
- Contractual availability and independently certified information security
- How end users are identified, and how responsibilities are split in the contract
Compliance
Certifications and registrations
The links below lead to the official registers and certificates available for public verification.
- OpenPeppol: Access Point and SMP certified, Sweden, Peppol Authority NAPP
- Slovak Financial Administration: certified delivery service provider, PA SK ID EFSK000023
- Netherlands Peppol Authority (NPa): registered Peppol service provider, listed on peppol.nl for Dutch organizations
- Belgian FPS Finance: listed compliant software for sending, receiving and processing e-invoices under Belgium’s e-invoicing obligation
- Finland: access to the national ACL service for providers with Finnish customers
- ISO/IEC 27001:2022, certificate 246932
- ISO 22301:2019, certificate 272574
- 99.8% contractual availability per month, with service credits
Peppol Service Provider FAQ
What is a Peppol Service Provider?
A Peppol Service Provider is an organization that connects businesses and public bodies to the Peppol network. It has signed a Service Provider Agreement with a Peppol Authority, operates or contracts a certified Access Point and SMP, registers its customers’ Peppol IDs and is responsible for meeting the network’s rules on their behalf.
Is a Peppol Service Provider the same as a Peppol Access Point?
No. The Access Point is the technical service that sends and receives documents. The Service Provider is the organization that holds the agreement with a Peppol Authority and is accountable for the connection. Qvalia is both: it holds the Service Provider role and operates its own certified Access Point and SMP. Read how the Access Point works.
Do I need a Peppol Service Provider to send e-invoices on Peppol?
Yes. Every organization on the Peppol network is registered by a Service Provider, which sends and receives documents on its behalf.
Which Peppol Authority is Qvalia registered under?
OpenPeppol’s register lists Qvalia AB as AP Certified and SMP Certified under Sweden’s Peppol Authority, the National Agency for Public Procurement (NAPP). NAPP has held this role since 1 July 2026. Qvalia is also a certified delivery service provider in Slovakia (PA SK ID EFSK000023).
How do we get a Peppol ID?
Qvalia verifies your organization and registers your Peppol ID, normally based on your company registration number, in Qvalia’s SMP. Peppol ID registration is included in every Connect plan. Search existing Peppol IDs.
Can our suppliers send e-invoices to us through Qvalia?
Yes. Suppliers without their own Peppol connection can use the Qvalia supplier portal to send e-invoices and receive orders. Read more about accounts payable automation.
Who is the Peppol Service Provider when a software company offers Peppol through Qvalia?
It depends on the delivery model. With Embedded Peppol and the White-label platform, Qvalia holds the Service Provider role and registers your customers’ Peppol IDs. With Hosted Access Point, your company holds its own Service Provider agreement, Access Point identity and ISO/IEC 27001 certification, on infrastructure Qvalia operates.
What do we need to do if we onboard our own end users?
You identify and verify each end user before registration: legal name and address, company or VAT number, the Peppol ID to register and who may act for the organization. You keep a record of each check and report suspected misuse. Qvalia registers the Peppol IDs and remains responsible towards the Peppol Authority.
Can we change Peppol Service Provider later?
Yes. Peppol has a migration procedure that moves an existing registration from one Service Provider to another. Your Peppol ID stays the same, so trading partners can keep sending documents to you.
Discuss your setup
Tell us which markets, document types and systems are in scope, and whether you connect your own organization or offer Peppol to others. We will recommend a plan or delivery model and outline the next steps.