Certification catalogue

Requirements Peppol imposes on members, and the certifications that qualify for each · read-only — switch to the Administrator user to edit

ISO 22301 — Business continuity management

Active Code ISO22301 · version 2 · last changed 1 Apr 2025 by Pieter Hendriks

Applies toService Providers

Default validity36 months or certificate expiry if earlier

Lead time before expiry90 days

Members9 applicable · 6 verified · 3 in progress

Expected documentation

Valid ISO 22301 certificate with scope statement, or an assurance report covering availability and continuity controls for the Peppol service.

Qualifying certifications

1 primary · 0 full equivalent · 1 conditional

Certification	Classification	Conditions for acceptance	Validity	In use	Status
ISO 22301 certificate Certification body accredited under ISO/IEC 17021	Primary	None — the requirement itself.	Up to 36 months	5 members	Active
SOC 2 Type II report (availability criteria) AICPA Trust Services Criteria — Availability in scope	Conditional equivalent	Case handler must confirm: Availability criteria in scope for the Peppol service Report period ended less than 12 months before submission Opinion is unqualified	Up to 12 months	1 member	Active

Re-verification. Deactivating a qualifying certification does not invalidate existing verifications; they run to expiry. To re-check members verified against a certification now, use "Re-verify" on that row — it opens a new case for each of them and sends the request e-mail.