The French Agency for State Financial and IT Management (AIFE) held its monthly monitoring meeting with accredited platforms (Plateformes Agréées – PAs) on November 3, 2026. The session addressed cybersecurity obligations, regulatory compliance, system capacity growth, portability rules, and a new release of the Portail Public de Facturation (PPF).
1. Cybersecurity
AIFE has established a formal cyber incident reporting mechanism. Accredited platforms must report security incidents to AIFE immediately, without waiting for their own internal analysis to conclude. Each platform is required to provide and keep up-to-date a list of cybersecurity contacts at b2b-accompagnement.aife@finances.gouv.fr.
AIFE continuously monitors the compliance of data exchanges and retains the authority to temporarily suspend platform connections in the event of a cyber incident. Following initial security interviews, platforms are expected to submit two key documents: a compliance audit report and penetration test results.
2. Regulatory Compliance Issues
Contradictory Letters: Following security interviews, certain platforms received formal contradictory procedure letters regarding aspects of the regulation that may not have been complied with.
Operational Addresses: Operational addresses are reserved exclusively for inter-platform communication and for exchanges with the registration service and AIFE. They must not be disclosed outside the e-invoicing ecosystem.
ISO 27001 Certification: Platforms must verify that their chosen certification body is duly accredited under Article 41 septies A I-0. Platforms whose certifications have expired since submission should expect a formal request for a valid certification.
3. Best Practice Reminders
Invoice Readability: Platforms are required to provide a human-readable version of invoices to their clients when those clients consult invoices via a portal.
Formal Mandate: Each platform must hold a clearly defined and explicit mandate for electronic invoicing that enables it to validate the signatory’s authority. General management mandates are not sufficient for a mandatee to designate the reception PA on behalf of a client.
Compliance Audit: Several platforms have requested a deadline extension. A decision is under consideration and platforms will be informed before the end of November.
4. Portability
Portability management is the responsibility of accredited platforms, not of PA clients. Key rules include:
- The authoritative directory is the national public directory, not Peppol; however, consistency with Peppol (French PASR – Article 242 nonies E ter) must also be maintained.
- Platforms must not circumvent the portability process by opening a line themselves and asking clients to request closure from the previous platform.
- Portability requests must be acknowledged and processed within 5 business days, even if awaiting client validation.
- The service should only be contacted for disputes, with the subject line clearly marked “LITIGE.”
- Clients must be informed about the portability process (Article 41 septies A bis II).
5. System Capacity Ramp-Up
As of October 28, 2026, the national directory contains 5,458,226 legal entities (UL). Invoicing data confirms steady growth:
- The non-conformity (rejection) rate stands at 4.5% over the last two weeks (October 16–30), considered “under control.”
- Since September 1, more than 76% of large enterprises (GE) and more than 56% of mid-sized enterprises (ETI) have already transmitted at least one F1 flow.
Chorus Pro Connectivity: 155 PAs have completed registration as of the meeting date.
| Flow Type | Quality (QUAL) | Production (PROD) |
|---|---|---|
| B2G | 42 | 34 |
| G2B | 74 | 77 |
- B2G invoice volume via PA: +71,000 (×7 since the last meeting on September 22).
- G2B invoice volume: +39,000 (×10 since September 22).
6. PPF Release 26.2.7 — Production Launch: November 4, 2026
E-Reporting for Foreign Companies: Companies absent from the national directory can now be included in e-reporting declarations. PAs may transmit Flow 10 from any SIRENized declarant. Important caveat: this change does not add foreign companies to the directory; they remain outside the scope of e-invoicing.
Outgoing CFE Allocation: Outgoing CFEs (electronic invoicing status reports) will be bundled into a dedicated flow for PAs that do not regularly retrieve them from their outbox. Flow naming remains unchanged (F1 UBL: CFE0111A, F1 CII: CFE0112A, F6: CFE0614A, F10: CFE1025A, F13: CFE1235A). Note: This parameter must be manually activated by AIFE after prior notification to concerned PAs.
For invoice workflows connected to your business systems, explore Docnova e-invoicing and AP automation and the Melasoft SAP e-invoicing Add-On.