The reference standard for the qualified electronic archiving service of the eIDAS V2 Regulation is now known: end of the sterile debate between the NF Z 42 020 Digital Safe and the NF Z 42 013 archiving system?

Date :

With this new service, the eIDAS Regulation V2 has imported into French law the previously non-existent legal definition of "electronic archiving" (Art. 3.48 eIDas V2):

“electronic archiving” means a service ensuring the receipt, storage, retrieval and deletion of electronic data and electronic documents in order to ensure their durability and legibility as well as to preserve their integrity, confidentiality and proof of origin throughout the preservation period.

 According to the rule established for all trust services in the eIDAS Regulation, the archiving service has its "qualified" version (Article 45 undecies), which is accompanied by a double presumption:

  1. Electronic documents kept in a qualified archiving service “enjoy the presumption of their integrity and of their origin for the duration of the preservation period by the qualified trust service provider(Art. 45 decies 2). Comparing this provision with Art. 1366 of the French Civil Code, which defines the conditions for the probative value of an electronic document ("An electronic document has the same probative value as a written document on paper, provided that the person from whom it emanates can be duly identified and that it is drawn up and stored in conditions that guarantee its integrity"), it can be inferred that the probative value of an electronic document stored in a qualified electronic archiving service will de facto be presumed.
  2. If an archiving service complies with the standards and specifications defined by means of an implementing act, then it is presumed to be qualified. The expected implementing act was published on 16 December 2025 (IMPLEMENTING REGULATION 2025/2532) and it sets as a reference the standard CEN/TS 18170, entitled "Functional requirements for electronic archiving services", accompanied by a number of adaptations (mainly ETSI standards on the cryptographic, security, and interface parts). Thus, only an archiving service that complies with the CEN/TS 18170 standard (plus adaptations) can claim a legal presumption of reliability.

 In France, two types of "competing" services had developed in terms of "archiving with probative value": on the one hand, the "Digital Safe", defined by law (Art. L 103 CPCE) and standardized by AFNOR under the reference NF Z 42-020 (NF 203 certification); on the other hand, the "electronic archiving system", which has no legal definition but has been standardized by AFNOR under the reference NF Z 42-013 (NF 461 certification). 

 Basically, the archiving system and the Digital Safe have the same objectives, namely to store electronic documents in a secure way and maintain their evidentiary value for a certain period of time. The NF Z 42-013 compliant archiving system has more extensive functionalities than the Digital Safe, in particular in terms of document lifecycle management, archiving profile or event logging, but these are not required in all use cases and do not establish any "superiority" of the NF Z 42-013 compliant archiving system over the Digital Safe.

 It is unfortunate that this improbable hierarchy is sometimes debated in dark "expert quarrels", which have no other result than to disrupt a market that does not need it. Let us hope that the arrival of the qualified European archiving service, which will normally push French suppliers to obtain the new certification, will put an end to this.

Also read

Date :
Over the period from the end of March to mid-April 2025, the Courts of Appeal issued about fifteen decisions on electronic signatures. Nearly half of them refuse to acknowledge the signing of the contract electronically, which is an exceptionally high ratio compared to what we used to see. We have analysed these negative decisions
Date :
By a judgment handed down on February 14, 2024 (Social Chamber, No. 22-23.073), the Court of Cassation undermined the supposedly absolute nature of the right of individuals to be informed of the processing of personal data concerning them.
Date :
The Data Act has been applicable since September 12, 2025, and it does not only apply to connected data from the IoT. It also targets all European added service providers in SaaS mode, for example in the field of EDM, accounting, invoicing, archiving, etc. which will now have to allow their customers to terminate for convenience at any time and a reversibility whose scope is difficult to apprehend. It is not just a tool for digital sovereignty. It is also a text with dangerous side effects for national European suppliers, sometimes fragile, whose customers are offered on a platter the possibility of switching to competition, why not American...
The Data Act does not apply to ongoing contracts, which some companies, and even their lawyers, seem to be unaware of, as they see this text as a free and perfect opportunity to terminate a contract or to require the provision of information not provided for in the contract. They must moderate themselves, because the Data Act only applies to contracts concluded after September 12, 2025, which must now include clauses that make it possible to best adjust the provisions of the text.