A Peppol access point manages the secure exchange of data between your software and the Peppol network. An access point is also known as a service provider.
Key considerations when selecting an access point
Consider the following when choosing an access point for your business:
- Peppol certified
- Australian capability
- Connection options
- Service offering
- Service levels
- International capabilities
- Cost
- Security
- Capability and experience
- Disaster recovery
- Change management
- Notifications
- Infrastructure
Peppol certified
Peppol service providers must be certified by a Peppol Authority to provide access point services.
Peppol service providers with Australian accreditationExternal Link have been through additional security, due diligence, and testing checks to meet Australian-specific requirements.
Australian capability
The ATO is the Australian Peppol Authority.
We have customised the international Peppol invoice and self-billing documents, for example, to accommodate goods and services tax (GST) instead of value added tax (VAT).
All access points accredited by us are certified to send and receive customised eInvoices. If you choose an internationally certified access point, you must ensure that they can provide services for Australian businesses.
Connection options
There are several ways your business software can connect to your access point to send eInvoices and other eDocuments.
Consider what:
- system or software you use to connect to your access point
- technical protocol you use for that connection, such as AS4, SFTP and API.
Check with both your technical and business teams to determine what works best in your circumstances.
Note: Access points must use AS4 to transmit between one another.
Make sure your access point can provide a solution suitable for your business.
Service offering
There are several access point services available, from simple send and receive functions to more complex options. These include:
- service metadata publisher (SMP) services – a type of digital business registry necessary if you want to receive eInvoices. It contains your delivery address, business processes and documents that you're able to receive, e.g. eInvoices.
- software integration (message translation) services – for accounting and procurement systems that are not eProcurement-capable or have customisation requirements that are incompatible with the Peppol document standards
- message response notifications, including success, failure, etc.
- web portals for ad hoc or infrequent eInvoicing trading partners.
Some software providers integrate with the Peppol network using their own access point and SMP services. You can choose a single provider to access eInvoicing or a separate service provider for SMP services.
Some service providers may partner with others to become a ‘one stop shop’. In this case, check who is accountable and who you must pay.
Service levels
Ensure the hours of support provided, system availability times, and contact options suit the needs of your business. Australian-accredited access points must guarantee services will be available 99.5% of the time.
International capabilities
If you require commercial and technical capabilities outside of Australia, check that your access point can meet your international eDocument business needs.
Cost
Consider both set up and ongoing costs.
Knowing approximately how many eDocuments you need to send or receive annually will help you select the right pricing model.
Security
Australian-accredited access points must meet the Australian and New Zealand eInvoicing security requirements. Some of these are additional to the security requirements of Peppol. You should ensure your access point also meets your business’s security requirements. This may include how your business connects with the access point and how they receive eDocuments.
Using an access point should not replace your business's own security processes and requirements. Consider your own business risks and appropriate controls to mitigate those risks.
Capability and experience
Consider the service provider's level of experience in digital document exchange, and whether they use manual processes or are fully automated.
Disaster recovery
You should have a disaster recovery plan in place that's regularly tested. This will ensure your services aren't affected by an unplanned event.
Change management
Ensure you understand the change management and notification processes your access point uses. This includes how ongoing changes to the Peppol software, security and infrastructure will be managed.
Notifications
Before you send eInvoices, understand the notification processes your access point uses. For example, what happens when messages or invoices can't be delivered.
Infrastructure
Some service providers use other Peppol service providers to deliver their services. If there's an issue, you may need to know who their service provider is.
What to consider when selecting a Peppol access point service provider for eInvoicing.