What Is a Peppol Access Point? A 2026 Explainer
What is a Peppol Access Point? How the four-corner network, SMP lookup and AS4 exchange work, and how to tell if your business needs one in 2026.
What is a Peppol Access Point?
A Peppol Access Point is a certified gateway that connects your business to the Peppol network. It sends and receives structured e-invoices — and other documents like orders and despatch advices — on your behalf, handling recipient discovery, encryption, delivery and proof of receipt. You integrate once with your Access Point, and through it you can reach every other participant on the network.
Think of it like email for legally-structured business documents: you don't connect directly to each recipient's mail server; you connect to your provider, and the network handles the rest. For the wider context, see how e-invoicing works over Peppol.
The four-corner model in plain terms
Peppol delivery is a four-corner model. No sender ever integrates point-to-point with a receiver:
| Corner | Who | What they do |
|---|---|---|
| C1 | Sender (you) | Create the invoice in your ERP/accounting software |
| C2 | Your Access Point | Validate, discover the recipient, transmit |
| C3 | Recipient's Access Point | Receive and hand off to the buyer |
| C4 | Receiver | Ingest the invoice into their finance system |
Corners C2 and C3 are Access Points. Everything technical — discovery, security, delivery, acknowledgement — happens between them. The same model underpins country regimes that add a fifth corner for the tax authority, such as the Oman Fawtara 5-corner model.
How SMP lookup and AS4 exchange work
When you send an invoice, two pieces of Peppol infrastructure make delivery automatic:
- SML (Service Metadata Locator) — the network's DNS-like root. Given a recipient's participant identifier, it points to that recipient's SMP.
- SMP (Service Metadata Publisher) — the recipient's directory entry. It declares which Access Point serves that participant and which document types it accepts.
Your Access Point performs that lookup, then opens a secure AS4 connection to the recipient's Access Point and delivers the document. AS4 provides encryption, digital signatures and reliable, acknowledged delivery — so the invoice arrives intact, confidentially, and with proof of receipt.
Access Point vs SMP vs SML
These three are frequently confused:
- Access Point — transmits documents (the active gateway).
- SMP — the directory entry that says who serves a participant and what they accept.
- SML — the root locator that finds the right SMP.
A full service provider like GoRoute operates both an Access Point and an SMP, and registers participants with the SML. If you're evaluating profiles rather than infrastructure, see Peppol vs PINT.
Do you need a Peppol Access Point?
You need one if any of these are true:
- A government buyer or large trading partner requires Peppol e-invoices.
- A national mandate applies to you — for example the Nigeria e-invoicing mandate 2026 or Oman's Fawtara programme.
- You want the cash-flow and error-reduction benefits of straight-through invoicing.
If you only ever email PDFs and no partner or regulator requires structured exchange, you may not need one yet — but the direction of global regulation is decisively toward mandated e-invoicing, tracked in our e-invoicing mandates 2026 tracker.
Self-host vs third-party provider
You can run your own Access Point, but it means OpenPeppol membership, formal certification, ongoing conformance testing and operating secure, highly-available infrastructure to a service level. For the overwhelming majority of businesses, a certified third-party provider with an API is dramatically cheaper and faster to adopt.
How to choose one
A short checklist when selecting an Access Point provider:
- [ ] Certification — confirm the provider's Peppol ID and OpenPeppol membership.
- [ ] Coverage — which countries and profiles (BIS Billing 3.0, PINT) they support.
- [ ] SMP operation — do they run their own SMP, and register you with the SML.
- [ ] Validation — layered UBL + EN 16931 + national Schematron, blocking on
error. - [ ] Reception — inbound as well as outbound, posted into your ERP.
- [ ] CTC support — where required (e.g. Oman TDD submission).
- [ ] API and support — a clean REST API and responsive onboarding.
The detailed version is in how to choose a Peppol Access Point, and the finance-team rollout view in the Peppol onboarding checklist.
How GoRoute helps
GoRoute is a certified Peppol Access Point and SMP (Peppol ID POP000991). One REST API connects you to 50+ countries, with automatic profile selection, layered validation and CTC support where mandated — no infrastructure for you to certify or operate. Book a demo to get connected.
Sources: OpenPeppol; Peppol network directory; Peppol BIS Billing 3.0.
Frequently asked questions
- What is a Peppol Access Point?
- A Peppol Access Point is a certified gateway that connects a business to the Peppol network. It sends and receives structured e-invoices and other business documents on your behalf using the AS4 protocol, handling discovery, security and delivery so you only integrate once.
- How does a Peppol Access Point work?
- Your software hands the invoice to your Access Point (corner 2). It looks up the recipient's Access Point via the Peppol SMP and SML, then delivers the document over a secure AS4 connection to the recipient's Access Point (corner 3), which passes it to the buyer (corner 4). You never integrate directly with the buyer.
- Do I need a Peppol Access Point?
- If you must send or receive Peppol e-invoices — because a government or trading partner requires it, or a national mandate applies — then yes. Almost all businesses use a certified third-party Access Point provider rather than building and certifying their own infrastructure.
- What is the difference between an Access Point and an SMP?
- An Access Point transmits documents; a Service Metadata Publisher (SMP) is the directory entry that says which Access Point serves a given participant and which document types it accepts. The SMP is looked up during sending; the Access Point does the actual delivery.
- What is AS4 in Peppol?
- AS4 is the secure messaging protocol Peppol uses between Access Points. It provides encryption, digital signing and reliable, acknowledged delivery, so documents arrive intact, confidentially and with proof of receipt.
- Can I run my own Peppol Access Point?
- Technically yes, but it requires OpenPeppol membership, certification, ongoing conformance and operating secure infrastructure to a service level. Most organisations find a certified provider far more cost-effective and use an API instead.
- How do I connect to the Peppol network?
- Register as a Peppol participant through a certified Access Point, have your participant identifier published to an SMP and the SML, and integrate your ERP or accounting software with the provider's API. From then on, sending and receiving is automatic.
About Dr. Syed Raza
Dr. Syed Raza is an IT Enterprise Architect at ClayDesk LLC and leads the GoRoute platform. He works across Peppol Access Point and SMP infrastructure, PINT jurisdictions (Oman, AU/NZ, EU, JP, MY, SG), and national CTC regimes, translating regulatory detail into production-grade e-invoicing systems.
Building on Peppol?
GoRoute is a certified Peppol Access Point & SMP. Book a demo or read the docs to get started.