Peppol (Pan-European Public Procurement On-Line) is the international electronic document exchange network that Norwegian businesses use to send and receive structured invoices, order documents, and other business documents with trading partners across Europe and beyond. In Norway, Peppol Norway is the infrastructure underpinning the EHF e-invoicing standard and the 2026 B2B e-invoicing mandate.
Understanding Peppol is essential for any Norwegian business affected by the 2026 mandate. Peppol is not a piece of software you install — it is a network of certified access points connected through a shared directory infrastructure, operating under internationally agreed technical standards and governance rules managed by OpenPeppol, a non-profit association based in Brussels.
This guide explains what Peppol is, who runs it, how it delivers invoices through the four-corner model, why Norway chose Peppol as its e-invoicing infrastructure, the roles of access points and directories, which Norwegian companies are already using Peppol, and how Peppol differs from simpler invoice delivery methods like email or PDF.
Key Takeaways
- Peppol is an international e-document exchange network managed by OpenPeppol. It connects businesses through certified access points using the four-corner model: sender’s access point → Peppol network → receiver’s access point.
- Norwegian businesses register in the Peppol directory with their organization number formatted as “0192:[orgnummer]”. This makes them discoverable and reachable by any other Peppol participant worldwide.
- Norway has used Peppol for B2G invoicing since 2012 and extended the requirement to B2B invoicing in 2026. Norway’s national EHF format is a profile of the Peppol BIS Billing 3.0 standard.
- Access points are the certified service providers that connect businesses to the Peppol network. They handle routing, format validation, and directory registration on behalf of their clients.
- Peppol differs from email PDF delivery in three critical ways: documents are structured XML (not human-readable PDFs), delivery is through a secure certified network (not open email), and receipts can be confirmed technically (not just hoped for).
What Is the Peppol Network and Who Runs It?
Peppol is governed by OpenPeppol, an international non-profit association established under Belgian law. OpenPeppol defines the technical standards for document formats (Peppol BIS — Business Interoperability Specifications), the network infrastructure (Peppol Transport Infrastructure), and the governance rules for access point certification. It also manages the central directory (SML — Service Metadata Locator) that allows the Peppol network to resolve participant identifiers to access point addresses.
In Norway, the national Peppol authority is the Norwegian Digitalisation Agency (Digitaliseringsdirektoratet, or Digdir). Digdir is responsible for managing the Norwegian national Peppol infrastructure, maintaining the EHF format profiles, certifying Norwegian access points, and providing guidance to Norwegian businesses on Peppol compliance. Digdir operates under the Norwegian Ministry of Digitalisation and Public Governance and coordinates with OpenPeppol on updates to international Peppol standards that affect Norwegian practice.
Peppol Access point providers — the companies that connect Norwegian businesses to the Peppol network — are certified by OpenPeppol to operate within the Peppol infrastructure. Certification requires demonstrating compliance with Peppol’s technical and security standards, passing a conformance test suite, and entering into the OpenPeppol Transport Infrastructure Agreement. Certified Norwegian access points include software providers (Visma, Tripletex, Uni Micro, Accountor) and standalone e-invoicing service providers (Basware, Pagero, Edicom, DIFI Peppol).
How Does Peppol Deliver Invoices?
Peppol delivers invoices through the four-corner model, which is the defining architectural feature of the network. In the four-corner model, neither the sender nor the receiver of a Peppol document ever connects directly to the other party. All exchange is mediated through certified access points, with the Peppol directory providing the routing information that allows access points to find each other.
The four corners of a Peppol invoice exchange are: Corner 1 — the sender (the business issuing the invoice); Corner 2 — the sender’s access point (which receives the invoice from the sender’s accounting system and transmits it through the Peppol network); Corner 3 — the receiver’s access point (which receives the invoice from the Peppol network and delivers it to the receiver’s accounting system); and Corner 4 — the receiver (the business receiving the invoice into their accounting system). The Peppol Service Metadata Locator (SML) and Service Metadata Provider (SMP) infrastructure connect corners 2 and 3 by resolving the receiver’s Peppol participant ID to the address of their access point.
When a Norwegian business in corner 1 sends an invoice to a Norwegian business in corner 4, the process runs automatically: the sender’s accounting software generates the EHF 3.0 XML invoice and submits it to the sender’s access point (corner 2); the access point queries the Peppol directory using the receiver’s participant ID (0192:[orgnummer]) to find the receiver’s access point address (corner 3); the sender’s access point transmits the invoice to the receiver’s access point over a secure HTTPS channel; the receiver’s access point validates the invoice format and delivers it to the receiver’s accounting system. The entire process typically completes in seconds to minutes, with no human intervention required. When a Norwegian business in corner 1 sends an invoice to a Norwegian business in corner 4, the process runs automatically through compatible accounting software in Norway.
Why Does Norway Use Peppol?
Norway’s adoption of Peppol reflects a deliberate policy choice made in the late 2000s, when the Norwegian government was looking for a standards-based approach to B2G e-invoicing that would allow both Norwegian businesses and foreign businesses to participate without implementing a proprietary Norwegian system. Peppol’s open governance model, international reach, and technical neutrality made it the preferred choice over a Norway-specific closed network.
The practical benefits of the Peppol choice have been validated over more than a decade of B2G e-invoicing in Norway. Norwegian public sector entities can receive invoices from Peppol-registered businesses across Europe without needing bilateral agreements or country-specific integrations. Norwegian businesses supplying European public sector entities can use the same access point and format that they use for Norwegian domestic invoicing. The single Peppol registration serves both domestic and cross-border electronic invoice exchange.
For the 2026 B2B extension, Peppol’s established Norwegian infrastructure — access point market, directory population, and business familiarity — reduced the implementation complexity of extending the mandate. Norwegian businesses already supplying the public sector were already Peppol-registered, and accounting software providers already had EHF integration built. The B2B mandate extended an existing operational network to a broader set of transactions, rather than requiring the construction of a new system.
What Roles Do Access Points and Directories Play?
Access points are the technical intermediaries that make Peppol work for individual businesses. A Norwegian business does not connect directly to the Peppol network — it connects to its access point provider, which connects to the Peppol network on its behalf. The access point handles: receiving EHF invoices from the business’s accounting system; validating the EHF XML format before transmission; looking up the receiver’s access point address in the Peppol directory; transmitting the invoice to the receiver’s access point; receiving invoices addressed to the business from other Peppol participants; and delivering those invoices to the business’s accounting system.
The Peppol directory consists of two components: the Service Metadata Locator (SML) and Service Metadata Provider (SMP). The SML is the central Peppol directory maintained by OpenPeppol, which maps Peppol participant IDs to the address of the SMP that holds detailed endpoint information for that participant. The SMP is maintained by the participant’s access point and contains the detailed routing information — the access point’s endpoint URL, the document types the participant can receive, and the transport protocols supported. When a sender’s access point needs to find a receiver’s endpoint, it queries the SML to find the SMP, then queries the SMP to find the specific endpoint address. The received invoice can then be delivered to compatible SAP ERP systems.
For Norwegian businesses, the directory entry is created by their access point provider at the time of Peppol registration. The entry maps the business’s Peppol participant ID (0192:[orgnummer]) to the access point’s endpoint address and lists the document types the business can receive (EHF invoice, EHF credit note, Peppol BIS Billing 3.0 invoice, etc.). Businesses can verify their Peppol directory registration using the public Peppol lookup service at peppol.helger.com or through their access point provider’s portal.
Which Norwegian Companies Already Use Peppol?
Peppol has been in operational use in Norway since 2012 for B2G invoicing. All Norwegian government ministries, directorates, municipalities, county councils, state hospitals, and public universities are registered Peppol receivers. The Norwegian public sector comprises thousands of registered Peppol participants representing the largest concentration of Peppol-registered organizations in Norway.
Among private sector businesses, Peppol adoption in Norway has been driven by the public sector supply requirement. Businesses with significant Norwegian government contract revenue were among the first to register, given the B2G mandate that has been in place since 2012. Large Norwegian corporations — Equinor, Aker, Telenor, DNB, Norsk Hydro — have used Peppol for years for their Norwegian public sector and large enterprise invoicing. Mid-market Norwegian businesses are now completing Peppol registration as the 2026 B2B mandate approaches.
Nordic cross-border Peppol usage is also significant. “Norway, Sweden, Denmark, and Finland are all active Peppol participants, and Nordic businesses with cross-border supply relationships frequently use Peppol for inter-Nordic invoice exchange through solutions such as e-invoicing software in Finland. A Norwegian business that has registered for Peppol under the domestic mandate automatically becomes reachable by Peppol-registered businesses in other countries — no additional registration is required.
How Does Peppol Differ From Email or PDF?
The fundamental difference between Peppol invoice exchange and email PDF delivery is that Peppol exchanges structured XML data, while email delivers an image of an invoice that must be manually keyed or OCR-scanned into the receiver’s accounting system. A Peppol EHF invoice arrives in the receiver’s accounting system as a machine-readable record with all fields populated in the correct positions — the invoice number, date, supplier details, line items, and MVA amounts are all available as structured data, requiring no human keying to process the invoice.
Security and reliability also distinguish Peppol from email. Email is an open, unencrypted protocol in which invoice PDFs can be intercepted, modified, or fraudulently issued by third parties impersonating a supplier. Peppol transmits invoices over HTTPS between certified access points, with digital signatures and transport-level encryption preventing tampering in transit. A Peppol invoice that arrives at an access point from a certified Peppol sender has a verifiable chain of custody from the sending business’s access point through the network to the receiving access point.
Legal validity under the 2026 B2B mandate is the third distinction. A PDF invoice received by email does not satisfy the Norwegian B2B e-invoicing mandate. A Peppol EHF invoice delivered through a certified access point does. The legal compliance dimension of Peppol — not just efficiency or automation — is the reason Norwegian businesses are required to adopt it for B2B invoicing rather than simply encouraged to do so.
Conclusion
Peppol is the network infrastructure that makes Norway’s B2B e-invoicing mandate operationally achievable for businesses of all sizes. Its four-corner model separates the business-to-access-point relationship from the access-point-to-access-point technical exchange, allowing any business to connect to the global Peppol network through a single provider without bilateral agreements with trading partners. For Norwegian businesses, Peppol registration is a one-time setup that enables compliant invoice exchange with all Norwegian registered businesses, all European public sector entities, and an expanding population of private sector businesses across Europe and beyond.
Frequently Asked Questions
What does Peppol stand for?
Peppol stands for Pan-European Public Procurement On-Line. Despite the name, Peppol is now used for all business document exchange, not only public procurement, and extends beyond Europe to include participants in Australia, Singapore, and other countries.
Who manages Peppol in Norway?
The Norwegian Digitalisation Agency (Digitaliseringsdirektoratet, Digdir) manages the Norwegian national Peppol authority, including EHF format maintenance, access point certification, and guidance to Norwegian businesses.
How do I look up whether a Norwegian company is registered in Peppol?
You can search the Peppol directory using the company’s organization number at peppol.helger.com. Enter the participant ID as “0192:[orgnummer]” (e.g., 0192:987654321) to check if the business is registered and which document types they can receive.
Can I use Peppol to send invoices to companies outside Norway?
Yes. Peppol is an international network. A Norwegian business registered with a Peppol access point can send invoices to any Peppol-registered business in Europe and other participating countries using the Peppol BIS Billing 3.0 format.
Is Peppol the same as EDI?
No. Peppol and traditional EDI (Electronic Data Interchange) are different systems. Traditional EDI requires bilateral agreements between trading partners and uses proprietary formats. Peppol uses open standards and a shared network directory, requiring no bilateral agreement between sender and receiver.
What is AS4 in the context of Peppol?
AS4 (Applicability Statement 4) is the transport protocol used by Peppol for secure message exchange between access points. It provides encryption, digital signatures, and message acknowledgment. Norwegian businesses do not need to implement AS4 directly — their access point provider handles it.
How does Peppol handle invoice disputes or rejections?
If an invoice fails Peppol format validation, it is rejected at the access point with an error code. Business-level disputes (incorrect amounts, wrong goods) are handled between the parties through standard commercial processes — Peppol does not arbitrate commercial disputes.
Does using Peppol affect how I archive invoices?
Peppol delivery does not change the archiving requirement. Norwegian businesses must retain the original EHF XML file for five years under the Accounting Act. Your access point provider or accounting system should archive the transmitted and received EHF XML files automatically.
Source by:
Image by Pexels
