Partner compliance and KYC requirements

To maintain a secure and trusted network, partners working with Qvalia must follow specific Know Your Customer (KYC) and compliance procedures. These requirements support regulatory obligations, ensure compliance with the Peppol framework, and protect the integrity of electronic business messaging services.

Partners play an important role in verifying the identity of end users and ensuring that organisations using the service are authorised to exchange documents and messages over the network.

Why KYC and compliance are required

Electronic business networks such as Peppol rely on trusted participants. Service providers and partners must ensure that organisations using the network are legitimate and authorised to operate under the identifiers they use.

Partner responsibilities

Partners are responsible for performing first-line identification and verification of all end users connected through their services, and for maintaining accurate onboarding information.

Perform Know Your Customer (KYC) checks. Partners must verify the legal identity of each end user before enabling access to the service. This includes confirming that the organisation exists as a legal entity and that the onboarding information provided is accurate.

Validate service identifiers. Partners must verify that end users are authorised to use the identifiers associated with the service. This includes confirming the right to use identifiers such as Peppol IDs or other electronic addresses used for document exchange.

Provide essential onboarding information. Partners must provide Qvalia with the necessary onboarding information for each end user when requested. This typically includes the organisation’s legal entity details, registration number, and the service identifiers used within the network. This information may be required to meet regulatory or Peppol network obligations.

Maintain verification records. Partners must retain documentation and records of KYC and verification procedures performed for each end user. These records must be maintained in accordance with applicable legislation and internal compliance policies, and provided to Qvalia upon justified request for compliance, audit, or fraud prevention purposes.

Report suspicious activity. Partners must promptly inform Qvalia of any suspected misuse, fraud, or other irregular activity involving an end user or service identifier.

Cooperate on compliance measures. If regulatory requirements, network policies, or compliance checks require investigation, suspension, or restriction of an end user, partners must cooperate with Qvalia to support these actions.

Ensure accurate information. Partners must ensure that onboarding information remains complete and accurate. If required information is incomplete, inaccurate, or cannot be verified, Qvalia may suspend or restrict access to the service for the affected end user.

Supporting Peppol compliance

As part of the Peppol ecosystem, Qvalia and its partners must follow the rules defined by the Peppol network. These rules require service providers to maintain clear records of participants' identity and ensure that identifiers used within the network belong to authorised organisations.

Qvalia may also perform verification activities where required by applicable laws, regulatory frameworks, or network rules, such as the Peppol interoperability framework.

Compliance requirements may be updated from time to time to reflect changes in laws, regulations, or network governance frameworks.

By fulfilling these responsibilities, partners help maintain a reliable and compliant environment for secure electronic document exchange.

For further reading, see the official listing of rules and obligations. 

Need assistance?

If you have questions regarding partner onboarding, KYC procedures, or compliance requirements, contact Qvalia support or your partner manager for guidance.