What Is Peppol? A Plain-English Guide to the E-Invoicing Network

If your finance team has been told that invoices must "go through Peppol", you have probably also heard that Peppol is a platform, a file format, a portal and a government system. It is none of those exactly, and the confusion makes vendor conversations harder than they need to be.

This guide explains Peppol from first principles: what the network is, how a document actually travels from seller to buyer, which components do what, how the European and international document formats differ, and why governments from Abu Dhabi to London have chosen it. It is written for CFOs, tax managers and CTOs who need to make decisions, not for engineers writing access point code.

What Is Peppol, in One Paragraph?

Peppol is an open network and a common set of rules that let any business send structured electronic documents, mainly invoices and credit notes, to any other business, whichever software or service provider each one uses. Think of it as the email system for invoices, with stricter identity checks and a fixed data format.

Three things make up Peppol:

• A network (the Peppol eDelivery Network) of certified service providers that exchange messages securely.
• Document specifications (Peppol BIS and Peppol PINT) that define exactly which data an invoice contains and how it is structured.
• A legal framework of agreements that every service provider and national authority signs, so that a provider in Dubai can trust one in Oslo.

The network is governed by OpenPeppol AISBL, a non-profit international association under Belgian law. It took over Peppol's services in 2012, after the original EU-funded project ended. Peppol started in European public procurement, and it now carries business-to-business (B2B) and business-to-government (B2G) documents worldwide.

How Does the Peppol Four-Corner Model Work?

In the four-corner model, the supplier and the buyer each connect to the network through their own service provider, and the two providers exchange the document between them. The "corners" are the four parties in that chain.

1. Corner 1, the supplier, creates the invoice in its ERP or accounting system.
2. Corner 2, the supplier's access point, converts and validates the data, looks up the buyer and sends the document.
3. Corner 3, the buyer's access point, receives and checks the document.
4. Corner 4, the buyer, gets the invoice into its own system, ready for matching and approval.

The model matters commercially. Before Peppol, many e-invoicing networks were "three-corner": supplier and buyer both had to be on the same vendor's platform. A supplier with fifty large customers could end up maintaining a dozen portal logins. Under the four-corner model, you choose one provider and reach every business on the network, much as your email provider can deliver to any address.

Several governments add a fifth corner, the tax authority, which receives a copy of the tax-relevant data. The UAE is the clearest example; our explainer on the five-corner model and how UAE e-invoices reach the FTA walks through that flow step by step.

What Is a Peppol Access Point?

A Peppol access point is the certified gateway that sends and receives documents on a business's behalf. Only access points operated by Peppol service providers can connect to the network; individual companies do not plug in directly unless they become a certified provider themselves.

To operate one, a provider signs the Peppol Service Provider Agreement with a Peppol Authority (or with OpenPeppol where no national authority exists), passes OpenPeppol's conformance testing and receives a Peppol PKI certificate. Messages between access points travel over AS4, a secure messaging protocol, with the transport profile published in each recipient's metadata.

National rules can add more requirements. In the UAE, a provider must also be accredited by the Ministry of Finance (MoF) to act as an Accredited Service Provider (ASP). Under Ministerial Decision No. 64 of 2025, that includes OpenPeppol conformance, ISO/IEC 27001 and ISO 22301 certification, audited financial statements and at least two years of e-invoicing operating experience.

What Are the SMP and SML, and Why Should a CFO Care?

The SML and SMP together form Peppol's directory: they tell a sending access point where a recipient lives and which documents it can accept. Without them, every provider would need a private list of every other provider's customers.

• Service Metadata Locator (SML): a single, central DNS-based registry. It does not store business details; it only records which SMP holds each participant's information.
• Service Metadata Publisher (SMP): run by service providers, it stores each participant's "capabilities": which document types it can receive, the access point endpoint URL, the certificate to use and the transport protocol.

When Corner 2 sends an invoice, it turns the buyer's participant ID into a DNS query against the SML, receives the address of the buyer's SMP, and asks that SMP whether the buyer accepts this invoice type and where to deliver it. Since a migration completed in November 2025, that DNS step uses U-NAPTR records rather than the older CNAME approach, and from 1 February 2026 SMP lookups must return HTTPS addresses, according to OpenPeppol's migration notice.

Why a CFO should care: if your SMP registration is wrong or missing, customers' invoices to you will fail at lookup, and suppliers will tell you they "can't find you on Peppol". Getting the registration right, and knowing who controls it if you change provider, is a contract point, not just an IT detail.

What Is a Peppol Participant ID?

A participant ID is a business's address on Peppol. It has two parts: a scheme code that says which kind of identifier is used, and the identifier value itself.

Each country chooses its schemes. In the UAE, the scheme is 0235 and the value is the 10-digit Tax Identification Number (TIN), which is the first ten digits of the 15-digit VAT Tax Registration Number (TRN). A UAE company therefore appears as 0235: followed by its TIN. Members of a VAT group each use their own TIN rather than the group representative's, a detail that trips up many groups. The PINT AE guide covers identifiers in more depth.

What Is the Difference Between Peppol BIS Billing 3.0 and PINT?

Peppol BIS Billing 3.0 is the invoice format used mainly in Europe, built on the European standard EN 16931. PINT (Peppol International) is the newer global invoice model that countries outside Europe specialise with their own rules, such as PINT AE for the UAE.

BIS 3.0 was designed so that one invoice format would satisfy the EU's e-invoicing directive across member states. It works well in Europe, but it carries assumptions (such as the EN 16931 tax model) that do not fit every tax system. PINT keeps the shared core and lets each jurisdiction add or tighten fields, codes and rules in a controlled way, so that invoices remain interoperable across regions.

For a business, the practical point is this: a UAE e-invoice is not "a Peppol invoice" in the European sense. Your provider must support PINT AE specifically, including its UAE-only fields and validation rules.

What Is a Peppol Authority?

A Peppol Authority is the national body that governs Peppol in its jurisdiction. It signs agreements with local service providers, can add country-specific requirements and represents the country inside OpenPeppol. Where no national authority exists, OpenPeppol plays that role itself.

OpenPeppol's list of Peppol Authorities, as of October 2026, includes tax and digital-government bodies such as:

• United Arab Emirates: Ministry of Finance
• Oman: Oman Tax Authority
• Japan: Digital Agency
• Singapore: Info-communications Media Development Authority (IMDA)
• Malaysia: Malaysia Digital Economy Corporation (MDEC)
• Australia: Australian Taxation Office; New Zealand: Ministry of Business, Innovation and Employment
• England: Supply Chain Coordination Ltd, alongside most EU and EEA states

The list is a good proxy for where Peppol is used. It also shows the shift in who runs it: more and more of the authorities are tax administrations, because governments now treat e-invoicing as a tax-control tool and not only a procurement tool.

Why Did the UAE, Oman and the UK Choose Peppol?

They chose Peppol because it gives them standardised, machine-readable invoices without the state having to run the exchange itself. Licensed private providers carry the documents, and the government defines the rules and receives the data it needs.

Several reasons recur in official documents and in how the models are designed:

• Interoperability from day one. A UAE business can reach a European or Asian trading partner on the same network, which matters for trade hubs.
• Competition among providers. Because any accredited provider can reach any other, businesses are not locked into a single government portal or vendor. When the UAE extended its provider-appointment deadline in May 2026, it cited the need for greater technical flexibility and competitive pricing among providers.
• Room for national rules. PINT lets each country add its own fields (the UAE's transaction-type flags, for example) without breaking the shared model.
• A tax-reporting layer can sit on top. The UAE's MoF programme documents describe access points reporting tax data to the Federal Tax Authority (FTA) in parallel with the exchange. That keeps the network's design and adds the control governments want.

The UK's route is similar. The government's November 2025 consultation outcome confirmed mandatory e-invoicing for VAT invoices from 2029, widely reported as from April 2029. In June 2026 HMRC's tax update named Peppol as the core interoperability network for UK e-invoicing. Our guide to the UK e-invoicing mandate for 2029 follows the details as they are published.

Does Every GCC Country Use Peppol?

No. As of October 2026, the UAE and Oman are the Gulf states that have adopted Peppol as Peppol Authorities. Saudi Arabia runs its own system.

Groups trading across the Gulf will usually need two integrations: a Peppol connection for the UAE and Oman, and a separate ZATCA connection for Saudi Arabia. The comparison in Saudi ZATCA vs UAE Peppol sets out where the data models overlap and where they diverge.

How Do You Get Connected to Peppol?

You connect by appointing a Peppol service provider (in the UAE, an accredited ASP), which registers your participant ID and links your finance system to its access point. The technical work sits mostly on the provider's side; the data work sits on yours.

1. Confirm your identifiers. Know your legal entities, TINs or other national identifiers, and any VAT group structure.
2. Choose a provider that is certified for every country you need, and check its accreditation status in regulated markets.
3. Map your data. Make sure your ERP holds every mandatory field in the national specification, with the right codes.
4. Integrate and test. Connect your ERP by API, file transfer or a certified connector, then test real scenarios, including credit notes and rejections.
5. Register and go live. The provider publishes your capabilities in its SMP so that suppliers can find you.

For UAE businesses, the complete UAE e-invoicing guide sets out the deadlines and obligations that sit on top of these steps.

How VEATEX Helps

VEATEX is a Shopify, web and software development agency that also builds Peppol e-invoicing platforms for the GCC, working with clients in the US, UK and the Gulf for over 11 years. We built a Peppol platform for a client that passed OpenPeppol testing and is now on the UAE pre-approved ASP list. We now help businesses and service providers in the UAE and Oman with ERP-to-Peppol integration, PINT data mapping and platform engineering, and Qatar and the UK are next on our roadmap. See our e-invoicing services or talk to our team.