Import CSV contacts for annual report: the complete guide

Why import your contacts in CSV format for an annual report?

Every year, joint-stock companies, holdings and associations must have their annual report signed by a set of stakeholders: members of the board of directors, shareholders, statutory auditors and, depending on bylaws, all shareholders. Manually entering each email address into an electronic signature platform represents considerable time loss and a source of human error. Importing a CSV (Comma-Separated Values) file solves this problem by allowing you to inject hundreds of structured contacts directly into your signature workflow in just seconds.

This approach is part of an increasingly widespread logic of electronic signature in business: automating mass sends while guaranteeing the legal traceability of each signature. In this guide, we detail each step, from CSV file preparation to final signature validation.

---

Preparing your CSV file: structure and best practices

The quality of the import depends directly on the rigor with which the CSV file is constructed. A poorly formatted file generates import errors, missing contacts or duplicates that slow down the entire signature process.

Essential columns

For an annual report involving signatories and shareholders, your CSV file must contain at least the following columns:

• email: email address of the signatory (RFC 5321 format mandatory)
• firstname: first name of the contact, used to personalize the invitation message
• lastname: surname
• role: role in the signature process (e.g.: `signatory`, `reader`, `validator`)
• signature_order: integer indicating the position in a sequential workflow (leave empty for parallel signature)
• telephone (optional): number in international E.164 format (+33XXXXXXXXX) for SMS authentication as part of advanced signature
• group (optional): business category (e.g.: `majority_shareholder`, `board_of_directors`, `statutory_auditor`)

Certyneo accepts UTF-8 and UTF-8 BOM encodings, which avoids display issues with accented characters common with exports from Excel on Windows. The standard separator is the comma, but semicolon is also supported — specify it during import if your management software uses this convention.

Clean data before import

Before uploading your CSV, conduct a data cleaning phase:

1. Deduplication: a shareholder appearing twice with two different email addresses must be resolved beforehand. A duplicate generates two invitations and may create legal ambiguity about the value of the retained signature.
2. Email format validation: use a validation formula in Google Sheets (`=REGEXMATCH(A2,"^[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}$")`) or a dedicated tool like Hunter.io Verifier.
3. Role verification: for an annual report, some shareholders have read-only rights (management report) while others must affix a formal signature (assembly resolutions). Distinguish them clearly in the `role` column.
4. Phone number control: if you opt for advanced electronic signature with OTP by SMS, all numbers in the `telephone` column must be in E.164 format. A missing number blocks sending for that contact.

Example of valid CSV structure

```csv email,firstname,lastname,role,signature_order,telephone,group jean.dupont@exemple.fr,Jean,Dupont,signatory,1,+33612345678,board_of_directors marie.martin@exemple.fr,Marie,Martin,signatory,2,+33698765432,majority_shareholder pierre.durand@exemple.fr,Pierre,Durand,reader,,+33677889900,statutory_auditor ```

Note that `Pierre Durand`, statutory auditor with read-only access, has no order number (empty column) because he is not a signatory.

---

Importing the CSV into Certyneo: step-by-step procedure

Once your file is prepared, importing into Certyneo takes just a few steps from the signature folder creation interface.

Create the signature folder for the annual report

1. Log in to your Certyneo workspace and click New folder.
2. Upload the PDF document of the annual report (management report, consolidated accounts, resolutions). You can use Certyneo's AI contract generator if you need to prepare a complementary meeting minutes.
3. In the Signatories tab, click Import from CSV.

Configure the import

A configuration window opens:

• Encoding: select `UTF-8` or `UTF-8 BOM` depending on your file.
• Separator: comma or semicolon.
• Header line: check the box if the first line of your CSV contains column names (recommended).
• Column mapping: Certyneo proposes automatic mapping based on standard column names. Verify that each column is properly associated with the correct field. If your column is called `mail` instead of `email`, adjust the mapping manually.

Certyneo displays a preview of the first 5 contacts before validation. Check that no critical field is empty or poorly formatted. The system flags in red the lines containing blocking errors (invalid email, unknown role) and in orange non-blocking warnings (missing phone number for advanced signatory).

Validate and configure the workflow

After validating the import, Certyneo displays the complete list of imported contacts. You can then:

• Define the signature type per group: simple signature (eIDAS article 3.10) for readers, advanced or qualified signature for board members. Consult the comparison of electronic signature solutions to choose the level suited to your context.
• Configure signature order: sequential (majority shareholder signs before board members) or parallel (all signatories receive the invitation simultaneously).
• Customize the invitation message: integrate the signatory's name (`{{firstname}} {{lastname}}`) and the document title in the email body.
• Define the folder expiration date: for an annual report, 15 to 30 days allows sufficient time for non-resident shareholders.

---

Managing errors and follow-ups after import

Even with a well-prepared CSV, unforeseen situations arise once sending is launched.

Handling bounces and invalid addresses

Certyneo identifies soft bounces (full mailbox) and hard bounces (non-existent address) in real time. For an annual report with legal stakes, a bounce must trigger immediate action:

1. Identify the contact in the folder dashboard.
2. Update their email address from the contact record.
3. Resend the individual invitation without recreating the entire folder.

This granular correction capability is essential for respecting legal convocation deadlines or report distribution defined by your bylaws or the Commercial Code.

Automate follow-ups

For an annual report with many shareholders, manual follow-up management is impractical. Certyneo allows you to schedule automatic follow-ups:

• D+3: first follow-up for signatories who have not opened the invitation email.
• D+7: second follow-up for signatories who opened but have not yet signed.
• D+14: final follow-up with mention of the folder expiration deadline.

Each follow-up is logged in the folder with timestamp, which constitutes proof of diligence in case of future dispute. For companies managing multiple annual reports (subsidiaries, funds) and wishing to refine their electronic signature productivity calculations, the electronic signature ROI calculator allows you to estimate gains obtained compared to a paper or standard email process.

Export the signature report

Once all signatories have affixed their signature (or upon folder expiration), Certyneo automatically generates:

• The audit report (audit trail) in PDF format, listing each timestamped event: opening, authentication, signature, electronic identity used.
• The consolidated signed document with integrated electronic signatures, archived for a configurable period (from 5 to 30 years depending on the retention policy defined in your workspace).

This audit report is the key piece in case of dispute: it proves that each signatory properly received, opened and signed the document under the required conditions. It must be preserved at the same security level as the document itself, in accordance with the obligations of article 1366 of the Civil Code and the eIDAS regulation.

---

Optimize your import process for following years

CSV import of an annual report is not an isolated event: it repeats each fiscal year. A few best practices allow you to reduce preparation time from one year to the next.

Maintain a master CSV file

Keep a master CSV file of your permanent signatories (board members, statutory auditors, stable shareholders). Each year, you only need to update entries that have changed (departures, new shareholders, email changes) rather than rebuilding the file from scratch.

Use Certyneo folder templates

Certyneo allows you to save a folder as a template: workflow parameters, personalized invitation message, signature order, signature levels by group. The following year, simply load the template, import the updated CSV, and replace the report PDF. This configuration gain represents in practice 60 to 80% of the setup time for a new folder.

Connect your shareholder register via API

For companies with a shareholder register in management software (ERP, cap table tool), Certyneo's REST API allows you to completely automate export-import. A scheduled script can extract the list of shareholders the day before sending the report, generate the CSV, upload it via API and launch the signature folder without human intervention. This approach is particularly relevant for structures managing dozens of subsidiaries or several hundred shareholders. For teams wishing to evaluate Certyneo pricing suited to this usage volume, the dedicated page details API options and enterprise plans.

Legal framework applicable to electronic signature of an annual report

Importing CSV contacts and sending an annual report to signatories via an electronic signature platform falls within a specific legal framework that any company must master before deploying this type of process.

Legal value of electronic signature

Article 1366 of the French Civil Code states that "electronic writing has the same probative force as writing on paper" provided that "can be duly identified the person from whom it emanates and it is established and kept in conditions likely to guarantee its integrity". Article 1367 specifies that the electronic signature "consists of the use of a reliable identification process guaranteeing its connection with the act to which it is attached".

At European level, regulation eIDAS No. 910/2014 (and its eIDAS 2.0 update currently being transposed) defines three levels of signature: simple electronic signature (SES), advanced electronic signature (AES) and qualified electronic signature (QES). For an annual report intended for shareholders, the minimum recommended level is advanced signature, which requires strong authentication of the signatory (OTP SMS, certificate) and use of signature creation data uniquely linked to the signatory.

Personal data protection (GDPR)

Importing a CSV file containing personal data (name, first name, email address, phone number) constitutes data processing within the meaning of GDPR Regulation No. 2016/679. As such, the company performing this import is qualified as data controller and must:

• Ensure that data collection is based on a valid legal basis (article 6 GDPR): contract performance (shareholding) or compliance with legal obligation (accounts filing, general assembly) constitute solid legal bases.
• Inform signatories of data processing in accordance with articles 13 and 14 of GDPR (legal notices in the invitation message).
• Frame the relationship with Certyneo with a data processing agreement (DPA) compliant with article 28 GDPR. Certyneo provides this contractualized document in the terms and conditions of use.
• Respect retention periods: signatory data and audit report must be kept for at least 5 years (commercial statute of limitations, article L.110-4 of the Commercial Code) and up to 30 years for acts concerning real property rights or major corporate commitments.

Applicable technical standards

The advanced and qualified electronic signature formats used by Certyneo comply with ETSI EN 319 132 (XAdES), ETSI EN 319 122 (CAdES) and ETSI EN 319 162 (PAdES for PDFs) standards. These standards guarantee interoperability of signatures between EU Member States and their recognition by European judicial systems.

Finally, the NIS2 directive (2022/0383/COD), transposed into French law in 2024, imposes strengthened cybersecurity requirements on digital service operators, including electronic signature platforms. Certyneo integrates these requirements through TLS 1.3 encryption of communications, encryption of documents at rest and an active bug bounty program.

Use scenarios: CSV import and annual report in practice

Scenario 1 — A family holding managing about twenty subsidiaries

A family holding with interests in about twenty structures must have the consolidated annual report signed each year by all managers and partners of its subsidiaries, approximately 80 signatories. Before implementing CSV import, the general secretary spent an average of 3 hours manually entering coordinates in the signature tool, with a typographical error rate of approximately 8% (incorrect addresses, reversed first names).

After adopting structured CSV import on Certyneo, folder preparation time dropped to 25 minutes (including 15 minutes updating the master CSV). The typographical error rate fell to zero. Automatic follow-ups scheduled at D+3 and D+7 achieved 100% signature collection within an average of 9 days, compared to 22 days with the previous postal process. This 60% reduction in signature collection time is consistent with ranges published by professional associations of group general secretaries.

Scenario 2 — An agricultural cooperative with several hundred members

An agricultural cooperative with 340 active members must submit to members' approval each year the management report and certified accounts. Members, distributed across several departments, could not all attend the general assembly, which delayed formal process completion.

By integrating CSV import into Certyneo, the cooperative was able to simultaneously send documents to all members with a parallel signature workflow. The CSV file, exported directly from the share management software, contains all updated coordinates. Simple electronic signature (SES) was selected for member signatories of the approval act, this level being sufficient for routine management acts according to internal legal analysis. The signature rate within 10 days reached 91%, compared to 67% via the previous postal process, significantly reducing registered mail costs (estimated at 4 to 6 € per letter according to La Poste 2026 rates).

Scenario 3 — A consulting firm accompanying multiple clients to their annual closing

A consulting firm assisting about twenty TPE/SME clients with their annual accounting obligations centralizes signature collection of annual reports on behalf of its clients. Each client has a different list of signatories (partners, managers, accountants).

Thanks to Certyneo's multi-client sub-spaces and CSV import per folder, the firm standardized its process: one CSV template per structure type (SARL, SAS, SA), a documented import procedure provided to assistants, and a consolidated dashboard allowing the manager to track signature progress across all clients. The estimated time savings is 2 to 3 hours per client per fiscal year, or between 40 and 60 hours across the entire annual portfolio. This gain is reinvested in higher value-added missions for clients.

Conclusion

Importing contacts from a CSV file for an annual report is not simply a matter of technical convenience: it is a strategic decision that determines the legal reliability, execution speed and GDPR compliance of your signature process. A well-structured CSV, careful mapping, automated follow-ups and rigorous audit reporting form the four pillars of a seamless annual signature workflow.

Whether you are a holding, cooperative or firm assisting multiple clients, Certyneo provides the necessary tools to industrialize this import while respecting eIDAS and GDPR requirements. Ready to simplify your next annual report? Create your Certyneo account for free and import your first CSV in less than five minutes.