HOME

TheInfoList



OR:

Peppol (''Pan-European Public Procurement Online'') is a set of
specifications A specification often refers to a set of documented requirements to be satisfied by a material, design, product, or service. A specification is often a type of technical standard. There are different types of technical or engineering specificati ...
for establishing and also the primary implementation of a federated electronic procurement system for use across different
jurisdictions Jurisdiction (from Latin 'law' + 'declaration') is the legal term for the legal authority granted to a legal entity to enact justice. In federations like the United States, areas of jurisdiction apply to local, state, and federal levels. Jur ...
. Through Peppol, participant organisations can deliver procurement documents to each other including electronic invoices in machine readable formats, avoiding the
labour Labour or labor may refer to: * Childbirth, the delivery of a baby * Labour (human activity), or work ** Manual labour, physical work ** Wage labour, a socioeconomic relationship between a worker and an employer ** Organized labour and the labour ...
of
data entry Data entry is the process of digitizing data by entering it into a computer system for organization and management purposes. It is a person-based process and is "one of the important basic" tasks needed when no machine-readable version of the inf ...
. OpenPeppol, a non-profit international association registered in Belgium, is the governing body of the primary implementation and developer of specifications. The primary implementation of Peppol at the 1st of March 2022 had 485411 participant organisations from 78 countries registered to receive procurement documents. No other implementations of Peppol are known to be in use by businesses or government bodies around the world. Whilst it would be possible for an alternative Peppol implementation to be created with alternative governance arrangements, Peppol specifications would need to be adjusted to remove dependencies on the OpenPeppol association in aspects including mandatory use of OpenPeppol
public key certificates In cryptography, a public key certificate, also known as a digital certificate or identity certificate, is an electronic document used to prove the validity of a public key. The certificate includes information about the key, information about the ...
.


Architecture


Discovery

In an implementation of Peppol, a single central database known as a Service Metadata Locator (SML) lists participants with a unique identifier, the electronic procurement standards supported by each participant and reference to a separate database known as a Service Metadata Publisher (SMP) that each participant has chosen. A Service Metadata Publisher (SMP) extends the information listed on a participant to include technical information on a web application programming interface known as an Access Point (AP) chosen by each participant to deliver procurement documents. For the primary implementation used worldwide, OpenPeppol, as the governing body, operates th
Service Metadata Locator (SML)
OpenPeppol only allows participants to be listed in this database if they have registered with an OpenPeppol approved Service Metadata Publisher (SMP). Approval of Service Metadata Publishers (SMPs) is delegated by OpenPeppol to one o
numerous country-specific Peppol Authorities (PAs)
and is also contingent on candidate Service Metdadata Publisher (SMP) organisations being paid members of OpenPeppol. A Peppol Authority (PA) is typically an individual government body for a country and they may impose differing requirements and technical standards on Service Metadata Publishers (SMPs) prior to approval being granted.


Delivery

Delivery of procurement information in an implementation of Peppol occurs directly between the chosen Access Point (AP) of a sender and receiver, as obtained via the discovery process using the Service Metadata Locator (SML) and relevant Service Metadata Publishers (SMPs). A protocol name
eDiscovery AS4
(based on
AS4 AS4 (Applicability Statement 4) is an open standard for the secure and payload-agnostic exchange of Business-to-business documents using Web services. Secure document exchange is governed by aspects of WS-Security, including XML Encryption and X ...
) is used to deliver procurement documents between Access Points (APs).
Transport Layer Security Transport Layer Security (TLS) is a cryptographic protocol designed to provide communications security over a computer network. The protocol is widely used in applications such as email, instant messaging, and voice over IP, but its use in securi ...
is used and procurement documents will only be accepted by a receiving Access Point (AP) if the payload has been validly signed by another submitting Access Point (AP), providing a level of fraud protection against
phishing Phishing is a type of social engineering where an attacker sends a fraudulent (e.g., spoofed, fake, or otherwise deceptive) message designed to trick a person into revealing sensitive information to the attacker or to deploy malicious softwar ...
and other
confidence tricks A confidence trick is an attempt to defraud a person or group after first gaining their trust. Confidence tricks exploit victims using their credulity, naïveté, compassion, vanity, confidence, irresponsibility, and greed. Researchers have def ...
. For the primary implementation used worldwide, OpenPeppol, as the governing body, delegates responsibility to Peppol Authorities (PAs) to approv
Access Point (AP) service providers
Approval of Access Point (AP) service providers is additionally contingent on the service provider being a paid member of OpenPeppol. Peppol Authorities (PAs) may impose differing requirements and technical standards on Access Point (AP) service providers.


Governance

Peppol specification development and the primary implementation are governed by the OpenPEPPOL Association. The highest managing body is the General Assembly, which elects the Secretary General and the Managing Committee responsible for the operations. Development is prepared in the work groups handling specific tasks and owned by a management team member. The work groups function on a volunteer basis, though many of the members are actually sent to the work group by either their employer or client, for example a specific user.


History

PEPPOL originated via a project with the same name (with an uppercase stylised acronym) under the
European Union The European Union (EU) is a supranational political and economic union of member states that are located primarily in Europe. The union has a total area of and an estimated total population of about 447million. The EU has often been des ...
''Competitiveness and Innovation Programme'' from May 2008 to August 2012. The European Union provided funding of over 15 million Euros to support the development of Peppol. A consortium of 11 European countries being Austria, Denmark, Finland, France, Germany, Greece, Italy, Norway, Portugal, Sweden and the United Kingdom also contributed to the development of Peppol over this period. The goal of the project was to solve interoperability issues in electronic public procurement by aligning business processes using common standards, addressing common legal issues and developing open source technologies. Agreement on the common standards for document content and on the technical aspects was reached through consensus amongst consortium members. After the project ended the OpenPEPPOL Association was founded in
Belgium Belgium, ; french: Belgique ; german: Belgien officially the Kingdom of Belgium, is a country in Northwestern Europe. The country is bordered by the Netherlands to the north, Germany to the east, Luxembourg to the southeast, France to th ...
on the 1st of September 2012 to continue the work on the framework.


Adoption

PEPPOL is widely used in many European countries. It has also been considered as the e-invoicing solution in
Australia Australia, officially the Commonwealth of Australia, is a Sovereign state, sovereign country comprising the mainland of the Australia (continent), Australian continent, the island of Tasmania, and numerous List of islands of Australia, sma ...
and
New Zealand New Zealand ( mi, Aotearoa ) is an island country in the southwestern Pacific Ocean. It consists of two main landmasses—the North Island () and the South Island ()—and over 700 smaller islands. It is the sixth-largest island count ...
*
Denmark ) , song = ( en, "King Christian stood by the lofty mast") , song_type = National and royal anthem , image_map = EU-Denmark.svg , map_caption = , subdivision_type = Sovereign state , subdivision_name = Danish Realm, Kingdom of Denmark ...
: All public institutions are required to support e-invoicing using PEPPOL. *
Ireland Ireland ( ; ga, Éire ; Ulster Scots dialect, Ulster-Scots: ) is an island in the Atlantic Ocean, North Atlantic Ocean, in Northwestern Europe, north-western Europe. It is separated from Great Britain to its east by the North Channel (Grea ...
: Public bodies are required to accept e-invoices, and Ireland has chosen PEPPOL as the supported technology. *
Norway Norway, officially the Kingdom of Norway, is a Nordic country in Northern Europe, the mainland territory of which comprises the western and northernmost portion of the Scandinavian Peninsula. The remote Arctic island of Jan Mayen and t ...
: E-invoicing is mandatory in public institutions with PEPPOL recommended, and PEPPOL invoices are widely used. *
Austria Austria, , bar, Östareich officially the Republic of Austria, is a country in the southern part of Central Europe, lying in the Eastern Alps. It is a federation of nine states, one of which is the capital, Vienna, the most populous ...
: E-invoicing is mandatory for the federal government. PEPPOL is supported as one of the technologies. *
Italy Italy ( it, Italia ), officially the Italian Republic, ) or the Republic of Italy, is a country in Southern Europe. It is located in the middle of the Mediterranean Sea, and its territory largely coincides with the homonymous geographical re ...
: E-invoicing is mandatory in Italy. The Italian PEPPOL Authority is managed by AgID, the agency for digital transformation of the Italian public sector, and was established through initiatives directed by
Roberto Reale The name Robert is an ancient Germanic given name, from Proto-Germanic "fame" and "bright" (''Hrōþiberhtaz''). Compare Old Dutch ''Robrecht'' and Old High German ''Hrodebert'' (a compound of '' Hruod'' ( non, Hróðr) "fame, glory, honou ...
and Carmen Ciciriello. *
Sweden Sweden, formally the Kingdom of Sweden,The United Nations Group of Experts on Geographical Names states that the country's formal name is the Kingdom of SwedenUNGEGN World Geographical Names, Sweden./ref> is a Nordic country located on ...
: Accepting PEPPOL is mandatory in the public sector. *
Germany Germany,, officially the Federal Republic of Germany, is a country in Central Europe. It is the second most populous country in Europe after Russia, and the most populous member state of the European Union. Germany is situated betwe ...
: Public bodies are required to accept PEPPOL e-invoices. *
Singapore Singapore (), officially the Republic of Singapore, is a sovereign island country and city-state in maritime Southeast Asia. It lies about one degree of latitude () north of the equator, off the southern tip of the Malay Peninsula, borde ...
: Became the first Peppol Authority outside Europe in May 2018. The Nationwide E-invoicing Initiative is based on the PEPPOL technologies. *
Japan Japan ( ja, 日本, or , and formally , ''Nihonkoku'') is an island country in East Asia. It is situated in the northwest Pacific Ocean, and is bordered on the west by the Sea of Japan, while extending from the Sea of Okhotsk in the north ...
: Digital Agency, Government of Japan became Peppol Authority in September,2021. * UK: SCCL / NHS Supplychain - use PEPPOL formats extensively in the English NHS.


External links


PEPPOL.eu

PEPPOL directory


References

{{reflist Accounting software Business software Electronic data interchange