EU Peppol Archive Vault
Immutable 10-year e-invoice archive for the EU — SHA-256 hash chain, retention policies, legal hold, audit & export bundles
EU VAT law (Council Directive 2006/112/EC) requires every business to store its invoices for the national retention period — commonly 10 years — with guaranteed authenticity, integrity and legibility. This module seals every posted customer e-invoice into a tamper-evident, write-once vault and keeps it searchable and exportable for auditors across the 2026–2028 EU mandate wave (Belgium, Poland KSeF, France, Germany, Croatia, Greece, Romania, Spain).
SHA-256 hash chain
Each archived document stores the digest of its own canonical content concatenated with the previous entry's digest. Altering, deleting or reordering any historic document breaks every later link and is detected by a single full-chain recomputation — the same construction used by certified-billing regimes such as Spain Veri*factu and Portugal.
Merkle root anchoring
Per-document leaf digests fold into a single Merkle root that can be timestamped or notarised to externally anchor the whole archive at a point in time, with per-document inclusion proofs.
Per-jurisdiction retention
The statutory minimum retention period for every EU/EEA member state is built in (Germany 10y, France 10y, Italy 10y, Poland 5y, Spain 6y, the Netherlands 7y …), with editable overrides, archive- or issue-date anchoring and automatic disposal-date computation.
Legal hold & immutability
Integrity fields cannot be edited after sealing and entries cannot be deleted while inside the retention period. A legal hold suspends disposal of individual documents during an open audit or litigation.
Search & verify
Locate any archived e-invoice years later by document number, counterparty VAT, date range, amount or payload SHA-256. One-click full-chain verification pinpoints the exact sequence of any tampering.
Legal-retention export bundles
Build a ZIP for an auditor containing the original payloads, a JSON and text manifest, a CSV index and the full chain-verification report with the Merkle root — everything a tax authority needs in one package.
Real EU VAT validators
Genuine national check-digit algorithms for archive indexing and integrity: NL/DE ISO 7064 MOD-11,10, France SIREN key + Luhn, Italy Partita IVA, Spain NIF/CIF, Belgium, Poland NIP and Austria.
Automatic & safe
Posted customer invoices and credit notes are archived automatically, with an hourly catch-up and a daily retention-expiry flag that never auto-deletes — disposal always stays a deliberate manual action.
Compatible with Odoo 18 and Odoo 19
Built on the shared e-Invoice Core Engine. When a country e-invoicing connector has already produced the real UBL / Peppol BIS payload, the vault seals exactly those bytes; otherwise it preserves a deterministic canonical record.
Disclosure: this module stores e-invoice data and integrity hashes solely on your own Odoo database. It transmits nothing to any external service; the optional Merkle root is yours to anchor wherever you choose.
Screenshots
Archive Vault Entry With Has
Archive Vault Entries Sequen
Retention Policies
Search Archive
Update date: 2026-07-02