Electronic Invoice Archiving: Legal Retention Period, Obligations and Evidential Value

Introduction: Why Electronic Invoice Archiving is a Legal Priority

With the generalisation of electronic invoicing 2026-2027 imposed by the 2020 Finance Act and its implementing decrees, French companies must imperatively master the rules for archiving their dematerialised invoices. Retaining an electronic invoice is not merely a matter of storing it on a hard drive: the law imposes a minimum duration, strict integrity conditions and the ability to produce the document in the event of a tax audit or dispute. Poor archiving exposes you to tax adjustments that can cover several years of VAT. This article reviews the applicable retention periods, the technical requirements for preservation, the concept of evidential value and the key role of the digital vault.

---

What is the Legal Retention Period for Electronic Invoices?

The question of the legal archiving duration is at the heart of the concerns of financial departments and chief financial officers. Several pieces of legislation apply simultaneously, and their deadlines may differ depending on the nature of the document or the evidence sought.

6 Years Minimum for Tax Law

Article L. 102 B of the Book of Tax Procedure (Livre des procédures fiscales, LPF) sets a 6-year minimum retention period for documents subject to the tax authority's access rights. This period runs from the date of the last transaction recorded in the relevant books or registers. In practice, an invoice issued in January 2025 must be retained until at least January 2031.

Furthermore, Article L. 169 of the LPF provides for a period during which the right to claim a VAT deduction can be challenged of up to 3 years. In cases of fraud, this period is extended to 6 years. Invoices constitute the primary supporting document for exercising the right to deduct VAT: their absence during an audit results in the automatic rejection of the deduction right.

10 Years for Commercial Law

Article L. 123-22 of the Commercial Code imposes a retention period of 10 years for all accounting documents, starting from the close of the financial year to which they relate. Invoices, being accounting documents, fall squarely within this obligation. This 10-year period is generally regarded as the benchmark standard, as it covers both tax and commercial obligations.

In practice, an invoice relating to the financial year closed on 31 December 2025 must be retained until 31 December 2035.

5 Years for Civil Law Obligations

Under civil law, the general prescription period is 5 years (Civil Code Article 2224). However, certain contractual liability claims may extend to 10 years. For invoices relating to construction or building work contracts, the ten-year structural warranty requires retention of at least 10 years. It is therefore always best to align with the longest applicable period.

---

The Technical Requirements for Archiving with Evidential Value

Retaining an electronic invoice for 10 years is not enough: the retention must also guarantee the integrity, readability and authenticity of the document throughout the retention period. This is what legal professionals refer to as evidential value.

The Legal Trilogy: Integrity, Authenticity, Readability

Article 289 of the General Tax Code (Code général des impôts, CGI), as amended by Ordinance No. 2022-1299 of 7 October 2022, sets out three cumulative conditions for an electronic invoice to be enforceable against the tax authority:

• Authenticity of origin: the identity of the issuer must be certain, guaranteed by a qualified electronic signature within the meaning of the eIDAS regulation, or by a reliable EDI (electronic data interchange).

• Integrity of content: the invoice must not have been altered since its issuance. A qualified electronic time-stamp associated with the signature guarantees this immutability.

• Readability: the format must remain usable throughout the entire retention period, including in the event of changes to the information system.

The Factur-X (PDF/A-3 with embedded XML data) and UBL 2.1 formats meet these requirements, subject to appropriate preservation. For a complete understanding of the hybrid format, the Factur-X: the Franco-German electronic invoice format page guides you through it step by step.

The Reliable Audit Trail (PAF): Alternative to Electronic Signature

Since 1 January 2013, companies may also satisfy the requirements of authenticity and integrity through a reliable audit trail (Piste d'audit fiable, PAF). The PAF is a set of documented management controls that link each invoice to the supporting documents surrounding it (purchase order, delivery note, bank statement). It must be formalised, archived and enforceable. Many companies underestimate it: in the event of an audit, the absence of a formalised PAF can be sufficient to invalidate the entire VAT deduction right.

The Role of the Digital Vault

A digital vault (Coffre-fort numérique, CFN) certified to NF Z42-020 is the reference tool for guaranteeing evidential value over time. It ensures:

• Cryptographic sealing of files upon deposit (SHA-256 or higher fingerprint).

• Qualified time-stamping in accordance with ETSI EN 319 421 standard, creating proof of the deposit date enforceable against third parties.

• Immutable logging of all actions (deposit, consultation, download, deletion).

• Format migration to maintain readability over the long term (PDF/A conversion when standards are updated).

• Guaranteed restitution even in the event of service provider business cessation (audit clause and data export).

The selection of a digital vault or a partnering dematerialisation platform (PDP) approved by the DGFIP (French Tax Authority) is therefore a strategic decision, not merely a technical one.

---

Archiving, E-reporting and Electronic Invoice Reform 2026

The reform introduced by Ordinance No. 2022-1299 and its implementing decrees redistributes responsibilities for archiving between companies, partnering dematerialisation platforms (PDP) and the public invoicing portal (PPF). It is essential to understand who archives what.

What the PDP Retains on Your Behalf

PDPs approved by the DGFIP are obligated to retain invoices they have transmitted for at least 10 years from the date of issue. They must also guarantee continuity of service and data portability. However, delegating archiving to a PDP does not relieve the company of its legal responsibility: in the event of service provider failure, it is the taxpayer who is answerable to the tax authority.

It is therefore advisable to duplicate archiving: the PDP maintains an operational copy, and the company maintains a backup copy in its own system, ideally in a certified digital vault.

E-reporting and Retention of Transaction Data

For B2C transactions and exchanges with foreign partners outside the scope of mandatory electronic invoicing, e-reporting requires the submission of aggregated data to the tax authority. This transaction data must also be retained according to the same rules as invoices themselves: 6 years minimum under the LPF, 10 years under the Commercial Code.

Monitoring the deployment timeline and Impact on Archiving Systems

Large enterprises and mid-cap companies have been subject to the obligation to receive electronic invoices since September 2026. The obligation to issue follows a phased timeline. This rollout requires urgent upgrades to archiving systems: companies receiving thousands of invoices per year must ensure that their document management or digital vault solution is dimensioned to absorb this volume whilst remaining compliant over time.

---

Best Practices for Compliant and Sustainable Archiving

Beyond legal obligations, effective archiving of electronic invoices is also a lever for productivity and organisational resilience.

Establish a Documented Archiving Policy

Every company subject to VAT should have a formalised electronic archiving policy (Politique d'archivage électronique, PAE) covering:

• The scope of documents concerned (invoices issued, received, credit notes, duplicates).

• Retention periods by document type and by applicable legal basis.

• Internal responsibilities (archiving manager, system administrator, Data Protection Officer for GDPR aspects).

• Procedures for migration and periodic integrity verification.

• Methods of secure destruction at the end of the retention period.

Automate Capture and Indexing

Manual archiving is a source of errors and losses. Modern solutions enable automatic capture of invoices in Factur-X or UBL format, with extraction of key metadata (invoice number, issuer SIRET, date, gross amount, VAT amount, due date) on receipt. This metadata enables rapid searching during a tax audit, reducing the time to respond to the tax authority from several days to just a few minutes.

Anticipate Technological Migrations

Digital formats age. Will a PDF issued in 2026 still be readable in 2036? Certified digital vaults manage this risk through format migration plans that automatically convert files to current standards without altering content or breaking the original electronic signature (by preserving the original version and its fingerprint). For further details on the legal validity of electronic signature in this context, our comprehensive guide details the long-term protection mechanisms.

Plan for Continuity in the Event of Service Provider Change

Changing PDP or digital vault whilst still within the legal period is an often-overlooked risk. Contracts must imperatively provide for:

• A complete export right of data in a standard format (PDF/A, XML).

• A transition period guaranteeing access to archives for at least 6 months after termination.

• An audit clause allowing the company to verify the integrity of its archives at any time.

The comparison of electronic signature and archiving solutions available on the market can help you select a reliable technology partner for the duration.

Legal Framework Applicable to Electronic Invoice Archiving

Electronic invoice archiving is governed by a hierarchical corpus of legislation covering tax, commercial, civil and technical dimensions.

Fundamental Tax Legislation

Book of Tax Procedure (LPF): Article L. 102 B requires retention of any document enabling the tax authority to exercise its access rights for 6 years from the date the documents were created, received or transmitted. Article L. 169 sets the period for challenging adjustments to income tax and corporate income tax at 3 years (extended to 10 years in the case of concealed activity).

General Tax Code (CGI): Article 289 of the CGI, as amended by Ordinance No. 2022-1299 of 7 October 2022, defines the three methods of issuing electronic invoices that guarantee authenticity, integrity and readability: qualified electronic signature, reliable EDI and the reliable audit trail (PAF). Article 1737 of the CGI penalises missing or non-compliant invoices with a fine of €15 per invoice (minimum €60,000 per financial year in case of serious breach).

Commercial and Civil Law

Commercial Code: Article L. 123-22 requires retention of 10 years for books, registers and accounting documents from the close of the financial year. Invoices, being accounting supporting documents, are directly covered.

Civil Code: Article 1366 recognises the probative force of electronic writing "provided that the person from whom it originates can be duly identified and that it is established and retained under conditions such as to guarantee its integrity". Article 1367 defines electronic signature as "the use of a reliable identification procedure guaranteeing its connection with the act to which it is appended".

eIDAS Regulation and ETSI Standards

The eIDAS Regulation No. 910/2014 (European Union), in force in its revised eIDAS 2.0 version since 2024, establishes the framework for mutual recognition of qualified electronic signatures throughout the EU. It recognises three levels of signature (simple, advanced, qualified) with differentiated legal effects. For electronic invoices, only a qualified signature creates an irrefutable presumption of reliability.

The ETSI EN 319 132 (XAdES), ETSI EN 319 122 (CAdES) and ETSI EN 319 142 (PAdES) standards define the technical formats for signatures enabling long-term verification (LTA format — Long Term Archival). These formats incorporate chained validation proofs allowing verification of a signature's validity even after the initial certificate's expiration.

The NF Z42-020 standard of AFNOR defines the functional requirements for a certified digital vault in France.

GDPR and Invoices

Invoices containing personal data (name of the private customer, address, payment method) are subject to GDPR Regulation No. 2016/679. The retention period must be limited to what is necessary: the minimisation principle applies. In practice, the legal basis for processing is legal obligation (Article 6.1.c of the GDPR), which justifies full retention for the applicable tax or commercial duration. After this period, data must be deleted or anonymised.

Risks of Non-Compliance

• Tax adjustment with repayment of deductible VAT for uncovered financial years.

• Fine under Article 1737 CGI (€15 per invoice, minimum €60,000 per financial year).

• Non-enforceability of the document in case of civil or commercial dispute.

• CNIL penalty in case of excessive or insufficiently secure retention of personal data.

Usage Scenarios: Electronic Invoice Archiving in Practice

Scenario 1 — A Small Industrial Manufacturing Company Managing 3,000 Supplier Invoices Per Year

A precision engineering SME with around fifty employees and annual revenue of approximately €8 million receives up to 3,000 supplier invoices per financial year, mainly in unstructured PDF format. As the obligation to issue electronically approaches, its CFO conducts an audit: invoices are stored on a shared server without cryptographic sealing, without integrity control and without a migration plan. In the event of a tax audit, the company would be unable to prove that files have not been altered after issuance.

By deploying a digital vault certified to NF Z42-020 connected to its invoicing solution, the SME automatically seals each received invoice with qualified time-stamping. The PAF is automatically generated by associating each invoice with the corresponding purchase order and goods receipt note. Result: during a VAT audit covering 3 financial years, the provision of the 9,000 invoices requested is completed in less than 2 hours compared to several days previously, and no invoices are rejected for lack of integrity proof. The estimated risk of adjustment of €180,000 in VAT is avoided.

Scenario 2 — A Multi-Site Distribution Group with Large Volumes

A distribution group with approximately ten retail outlets issues an average of 15,000 B2B invoices per year to professional customers. Before the reform, these invoices were generated by its ERP in simple PDF format, sent by email and archived in local folders by each site manager. Consolidating this archiving was impossible, and retention duration was not standardised across sites.

By integrating an approved PDP coupled with a centralised digital vault, the group standardises the entire cycle: issuance in Factur-X format, transmission via the PDP, automatic archiving with metadata indexing. Retention deadlines are automatically managed by the system, with alerts 6 months before the legal expiry date for each batch of documents. This centralisation reduces by 70% the time spent responding to tax authority requests and enables real-time monitoring of archive compliance rates for the first time.

Scenario 3 — A Digital Transformation Consulting Firm

A consulting firm with around twenty consultants invoices its services to large enterprises and mid-cap companies. Its invoices, often associated with complex master contracts and Statements of Work, must be retained not only to meet tax obligations but also to document services provided in case of contractual dispute. The prescription period for professional liability claims being able to reach 5 years from the date of discovery of loss, rigorous 10-year retention is essential.

The firm deploys a solution combining qualified electronic signature for its invoices and contracts, and a digital vault for long-term archiving. Each invoice is electronically linked to the corresponding contract and mission report, creating an uninterrupted documentary chain with evidential value. This arrangement, implemented in less than 3 months, represents an investment of a few hundred euros per month — roughly 10 times less than the cost of a single undocumented dispute according to sector estimates from professional liability insurers.

Frequently Asked Questions

What is the difference between the tax retention period and the commercial retention period for invoices?

Tax law requires 6 years' retention from the date of the last transaction (Article L. 102 B of the French Tax Procedure Code), whilst the Commercial Code requires 10 years from the end of the relevant financial year (Article L. 123-22). These two periods run differently and may therefore not end at the same time. In practice, adopting 10 years as a single rule allows both obligations to be met simultaneously without risk.

What is the probative value of an electronic invoice and how is it obtained?

Probative value refers to the capacity of a digital document to serve as evidence before a court or the tax authorities. For an electronic invoice, it rests on three cumulative guarantees: authenticity of the sender, integrity of the content and permanent readability of the file. These guarantees are obtained through a qualified electronic signature compliant with the eIDAS Regulation, a qualified timestamp, or a reliable audit trail duly documented.

Does a reliable audit trail completely replace electronic signature on an invoice?

Yes, since 1 January 2013, a reliable audit trail (PAF) constitutes a legal alternative to electronic signature for meeting the authenticity and integrity requirements set out in Article 289 of the French General Tax Code. In practical terms, it consists of a set of documented management controls linking each invoice to its supporting documents (order, delivery, payment). However, it must be formalised in writing and retained in the same manner as the invoices themselves.

Is simple storage in a cloud space sufficient for archiving electronic invoices?

No. Standard cloud storage does not guarantee the cryptographic integrity of files, their opposable timestamp, or the access logging required in the event of an audit. Archiving with probative value requires a system ensuring the sealing of files upon deposit, a qualified timestamp and the migration of formats over time. A certified digital vault meets these criteria; a simple shared online folder does not.

What sanctions may be incurred for improper archiving of electronic invoices?

The absence of usable invoices during a tax audit results in the rejection of the corresponding VAT deduction right, to which penalties and late-payment interest are added. From an accounting perspective, the irregularity may also call into question the accuracy of the accounts. In the event of proven fraud, the administration's reassessment period is extended to 6 years, exposing the company to adjustments covering multiple financial years.

Conclusion

Electronic invoice archiving is a legal obligation with precise parameters: 6 years under tax law, 10 years under commercial law, with strict technical requirements concerning the integrity, authenticity and readability of documents. The evidential value of an electronic invoice does not depend on its format alone but on the entire preservation system — certified digital vault, qualified time-stamping, reliable audit trail — put in place from its issuance.

With the phased entry into force of the electronic invoice reform in 2026 and 2027, companies no longer have the luxury of improvising their archiving policy. Every invoice not archived in compliance is a risk of tax adjustment, rejection of deductible VAT or non-enforceability in the event of dispute.

Certyneo supports you in bringing your electronic archiving into compliance, from selecting your approved PDP to integrating a certified digital vault. Request a demonstration or start for free today.