Show download pdf controls
  • Select a Peppol access point for eInvoicing

    A Peppol access point manages the secure exchange of data between your software and the Peppol network. An access point is also known as a service provider.

    Consider the following when choosing an access point for your business.

    Peppol certified

    Peppol service providers must be certified by a Peppol Authority to provide access point services.

    Peppol service providers with Australian accreditation have been through additional security, due diligence, and testing checks to meet Australian-specific requirements.

    Australian capability

    The ATO, as the Australian Peppol Authority, has customised the international Peppol invoice and self-billing documents (e.g. to accommodate goods and services tax (GST) instead of value added tax (VAT)).

    All access points accredited by us are certified to send and receive customised eInvoices. However, if you choose an internationally certified access point, you must ensure that they are capable of providing services for Australian businesses.

    Connection options

    There are several ways your business software can connect to your access point to send eInvoices and other eDocuments. This might be a question of which:

    • system or software you use to connect to your access point (existing or new)
    • technical protocol you use for that connection (such as AS4, SFTP and API).

    Check with both your technical and business teams to determine what works best in your circumstances (note: access points must use AS4 to transmit between one another).

    Make sure your access point can provide a solution suitable for your business.

    Service offering

    There are a variety of access point services available, from simple send and receive functions to more complex options, including the following.

    • Service metadata publisher (SMP) services – a type of digital business registry necessary if you want to receive eInvoices. It contains your delivery address, business processes and documents that are you able to receive, e.g. eInvoices.
    • Software integration (message translation) services – for accounting and procurement systems that are not eProcurement capable or have customisation requirements that are incompatible with the Peppol document standards.
    • Message response notifications, including success, failure, etc.
    • Web portals for ad hoc or infrequent eInvoicing trading partners.

    Some software providers integrate with the Peppol network using their own access point and SMP services, so you can choose a single provider to access eInvoicing. You can also choose a separate service provider for SMP services.

    Some service providers may partner with others to become a ‘one stop shop’ – in this case, check who is accountable and who you must pay.

    Service levels

    Ensure the hours of support provided, system availability times, and contact options suit the needs of your business. Australian-accredited access points must guarantee services will be available 99.5% of the time.

    International capabilities

    If you require commercial and technical capabilities outside of Australia, check that your access point can meet your international eDocument business needs.

    Cost

    Consider both set up costs and ongoing costs.

    Knowing approximately how many eDocuments you need to send or receive annually will help you select an appropriate pricing model.

    Security

    Australian-accredited access points must meet the Australian and New Zealand eInvoicing security requirements, some of which are additional to the security requirements of Peppol. You should ensure your access point will also meet your business’s security requirements. This may include how your business connects with the access point and how they receive eDocuments.

    Using an access point should not replace your business's own security processes and requirements. Consider your own business risks and appropriate controls to mitigate those risks.

    Capability and experience

    Consider the level of experience of the service provider's technical team in digital document exchange, and if they use manual processes or are fully automated.

    Disaster recovery

    An adequate disaster recovery plan should be in place (and regularly tested) to ensure your services are not affected by an unplanned event.

    Change management

    Ensure you understand the change management and notification processes used by your access point, including how ongoing changes to the Peppol software, security and infrastructure will be managed.

    Notifications

    Before starting to send eInvoices, ensure you understand the notification processes used by your access point – for example, when messages/invoices cannot be delivered.

    Infrastructure

    Some service providers use the infrastructure of other Peppol service providers to deliver their services. If an issue arises, you may need to know who their service provider is.

    Last modified: 20 Dec 2021QC 67577