Go to main content
Certyneo
Guide

The digital safe, explained simply

A digital safe is not simply a storage space: it is a preservation device that guarantees the integrity, date and origin of your documents over time. This guide explains how it works, its probative value, the regulatory framework (NF Z42-020, eIDAS) and the cases where it becomes essential.

What is a digital safe?

A digital safe is a secure preservation service that protects your electronic documents reliably and durably. Unlike a hard drive or standard cloud storage, it guarantees that each document remains unalterable, timestamped and retrievable throughout its retention period.

In France, it complies with a precise regulatory framework: the NF Z42-020 standard defines the functions of a "digital safe component". Its role is to provide technical proof of the date and integrity of each document, an essential condition for its probative value in case of dispute.

Digital safe deposit box or electronic archiving: what's the difference?

The two concepts are closely related but distinct. The digital safe (standard NF Z42-020) is a component: it seals and preserves individual documents with proof of integrity and timestamping. The electronic archiving system, or SAE (standard NF Z42-013), is a larger organizational and technical set that manages the entire lifecycle of the archive: submission, classification plan, final disposition, and traceability.

In practice, a digital safe is often the preservation component with probative value at the heart of an archiving project. To learn more, consult our electronic archiving guide and the electronic archiving glossary entry.

Evidentiary value: what makes the difference

The probative value is the ability of a document to serve as proof. It relies on four technical guarantees provided at the time of deposit.

Integrity fingerprint

A digital fingerprint (SHA-256) is calculated on entry: any subsequent modification, even of a single character, becomes detectable.

Qualified timestamping

A qualified timestamping token (eIDAS) certifies a definite date, binding against third parties.

Immutability (WORM)

The document is locked for write-once: it cannot be modified or deleted before the end of its retention period.

Guaranteed restitution

You retrieve your documents at any time, without dependency on a proprietary format.

The normative framework: NF Z42-020, NF Z42-013, and eIDAS

Three references structure preservation with probative value. The NF Z42-020 standard specifies the functions of a digital safe component; the NF Z42-013 standard (adopted in ISO 14641) governs the electronic archiving system as a whole.

At the European level, the eIDAS regulation defines qualified trust services, including qualified electronic timestamping, which provides a certifiable date that is enforceable against third parties. The eIDAS 2.0 revision extends this framework to the European digital identity wallet. Together, these texts establish the legal value of preserved documents.

When to use a digital safe?

The need arises whenever a document must be preserved in an enforceable manner, for a legal or contractual duration. The safe thus complements an electronic signature or HR dematerialization approach. A few common examples:

  • Pay slips — the employer must offer a secure storage space to the employee (Labor Code).
  • Signed contracts — preserve an electronic contract with probative value for the duration of its engagement.
  • Invoices — archiving with probative value required by the electronic invoicing reform.
  • Personal Documents — diplomas, documents, certificates kept secure and accessible for life.

Security and GDPR compliance

In a serious digital safe, each document is encrypted at rest with a key specific to the safe. Key management ideally relies on a hardware security module (HSM), which protects cryptographic secrets against any extraction.

The preservation of personal documents falls under the GDPR: data minimization, justified retention period, right of access and restitution. A compliant safe logs all access and ensures that only the holder, or an authorized person, can view or retrieve the documents.

Digital safe or cloud storage?

Cloud storage (Drive, Dropbox…) is designed for sharing and synchronization: files can be modified and deleted at will, without proof of their state on a given date.

A digital safe does the opposite: it seals, timestamps and makes each document immutable. The first meets a need for convenience; the second meets a need for proof and compliance. You can also verify the integrity of a signed document at any time.

How long should you keep your documents?

The retention period depends on the nature of the document and your legal obligations. A digital safe allows you to set, for each document, a period during which it remains immutable, then, if applicable, a controlled deletion. A few common guidelines in France:

DocumentIndicative retention period
Pay slip (employee)until retirement, then + 3 years (lifetime recommended)
Invoice (customer or supplier)10 years
Commercial contract5 years after the end of the contract
Tax documentsMinimum 6 years
Personal documents and diplomasFor life

Ready to preserve your documents with probative value?

Certyneo Vault: the digital safe for individuals and businesses.

See also our pricing and the Certyneo Vault offering.

Frequently asked questions

Is a digital safe mandatory?

It is not always mandatory, but it becomes so in several cases: dematerialization of pay slips, invoicing archival (e-invoicing reform), preservation of contracts with probative value.

What is the difference with electronic signature?

Electronic signature creates a binding document; the digital safe then preserves it in an unalterable and enforceable manner. Both are complementary.

Are my documents encrypted?

Yes, at Certyneo each document is encrypted at rest with a key specific to your vault.

How long is a document retained?

The duration is configurable according to your legal obligations, with a default of 10 years.

Does a digital safe have legal value?

Yes. Thanks to the integrity fingerprint and qualified timestamping, a document stored in a compliant digital safe has probative value: it can be produced as evidence, and its date and integrity are enforceable against third parties.

What is the difference between a digital safe and a SAE?

The digital safe (NF Z42-020) is the component that seals and preserves a document with probative value. The SAE (NF Z42-013) is the complete archival system that organizes the entire document lifecycle. The first is often a component of the second.

What is the NF Z42-020 standard?

It is the French standard that defines the expected functions of a digital safe deposit box: deposit with fingerprint, timestamping, immutable storage (WORM), traceability and guaranteed retrieval.

How do I retrieve my documents?

Retrieval is guaranteed at any time, in an open format and without dependence on a proprietary tool, with the file and its associated proofs (fingerprint, timestamping token).

Also read

Recommended articles

Certyneo Community

A question about electronic signatures?

Join the Certyneo community: ask your questions, share your answers and connect with thousands of users and our team.