What is Peppol BIS Billing 3.0?
The invoice specification behind the Peppol network: which version is mandatory, how a recipient is addressed, and what the German federal administration expects on top of it.

Specification
Peppol BIS Billing 3.0 is a Core Invoice Usage Specification, a CIUS, of the European standard EN 16931. It is published by OpenPeppol AISBL and it covers two documents, the invoice and the credit note. An instance that conforms to this specification is compliant with EN 16931, so the same file that satisfies a Peppol receiver also satisfies the European core model.
What makes it different from a national specification is the second half of the arrangement. Peppol is also a network with its own addressing, its own access points and its own rules on who may send what to whom. The BIS says what the document must contain, the network says how it travels and how the recipient is found. Both parts have to be right before an invoice arrives.
A Peppol invoice is not sent to an email address. The sender hands the document to its own access point, the access point looks up where the receiver is registered and delivers it to the receiver's access point, which passes it on. This is the four-corner model, and it is the reason a single registration makes you reachable for every sender in the network.
A certified service provider operates the access point and registers you in the network. No OpenPeppol membership, no access point of your own, and the same connection can carry other Peppol documents later.
OpenPeppol membership is required and so is the technical operation: setup, certificates, availability, updates twice a year. It makes sense when the volume or the control justifies it.
In the model above the document travels between two parties and nobody else sees it. A fifth corner appears when a tax authority joins the exchange and receives the invoice data as it moves. That is what continuous transaction controls mean in practice, and it is the direction European VAT law is taking.
The timetable comes from the VAT in the Digital Age package, adopted on 11 March 2025 and in force since 14 April 2025. Digital reporting for cross-border business-to-business transactions applies from 1 July 2030. By 1 January 2035 member states that run a domestic real-time reporting obligation have to align their systems with the EU model.
Peppol publishes two releases a year, in May and in November. Each one is first put to member review, then published, and then becomes mandatory about three months later. The gap is the migration window: during it both the old and the new artefacts are accepted, after the mandatory date only the new ones.
20 May 2026, mandatory since 17 August 2026
A new optional profile 02, billing with an invoice response, which needs its own registration. The EAS code list was corrected and fourteen unusable codes were removed. Rules PEPPOL-COMMON-R052 and R053 became errors. New warnings for Dutch identifiers, announced as future errors. Validation artefacts UBL and CII 1.3.16 of 10 April 2026.
27 January 2026
Added code 0245 for the Slovak tax identification number to the EAS and ICD code lists. Mandatory from 23 February 2026, together with 3.0.20.
24 November 2025
The passage that forbade attaching a PDF copy of the invoice was removed from the compliance section. New Danish identifier rules were introduced as warnings, which is the usual way Peppol phases a rule in.
21 May 2025
French VAT exemption codes added, three German invoice type codes added to the code list, and the Danish CVR rule rewritten with a transition period that ran until the 2026 May release.
Warnings become errors. Peppol introduces most new checks as a warning first and makes them fatal in a later release. An invoice that only produces warnings today can be rejected after the next mandatory date, so the warning list from your validator is worth reading rather than ignoring.
Every participant in the network has an identifier made of a four digit scheme and a value, written as scheme and value separated by a colon. The scheme says what kind of number follows, the value is the number itself. This identifier is what the network routes on, and it is not the same thing as the buyer reference inside the invoice.
The identifier appears in the invoice as the endpoint of the seller and of the buyer, with the scheme in an attribute. What a given receiver actually accepts is decided by what that receiver registered in the network, which is why a document can be perfectly valid and still be refused as undeliverable.
A Peppol BIS Billing document is a UBL invoice or credit note. Two elements at the top of the file decide how it is read: the specification identifier, which says the document follows this BIS, and the business process identifier, which says which process it belongs to. Both are mandatory and both are checked by fatal rules.
Validation is not one check but three sets that run on the same file. Knowing which layer rejected an invoice tells you who can change it and who cannot.
The rules of EN 16931, identified with the BR prefix. They are the same across Europe and they are maintained by CEN, not by Peppol.
Rules with the prefixes PEPPOL-EN16931 and PEPPOL-COMMON, which narrow the European model and check identifiers, code lists and the specification identifier itself.
Rules that only fire when a party is in a particular country, such as the Danish, Dutch, Swedish and German sets. They are governed by a separate OpenPeppol policy, which is why they cannot simply be invented by a single receiver.
Each rule has a severity. A fatal rule stops the document, a warning does not, and the release notes announce which warnings are scheduled to become fatal. Rules are also added and corrected in every release, so the same file can pass in February and fail in September without anyone having touched it.
Germany's federal administration runs one submission portal for e-invoices, the OZG-RE, to which all bodies of the direct federal administration are connected. Invoices reach it in four ways: through the Peppol network, by email, by uploading a file in the web interface, or by typing the invoice into the web form. Peppol is the only one of the four that supports machine to machine exchange and mass sending.
Peppol is a channel, not a format. Sending over Peppol does not turn an invoice into an XRechnung, and an XRechnung does not have to travel over Peppol. German public bodies ask for both: the content in the format they require, the delivery through the channel they have registered for.
All three are built on the same European core model, which is why the comparison is about scope rather than about data. The question in practice is which set of extra rules your recipient applies and which channel it listens on.
A practical consequence: if you already produce a valid XRechnung, the step to Peppol is a delivery question, not a data question. If you produce Peppol BIS Billing for other European customers, the German rules are an additional layer on top, not a different document.
Peppol has a second family of billing specifications, PINT, built so that regions outside Europe can define their own billing rules on a shared base. PINT BIS Billing was published on 8 June 2026 and is mandatory from 7 September 2026, together with its regional versions, among them PINT BIS Billing EU for the European Union.
Both families are currently published side by side, and OpenPeppol lists them together in its post-award documentation with their own publication and mandatory dates. Peppol BIS Billing 3.0 remains the published EU specification with its own release cycle, so the sensible reading is that an implementation has to follow the dates in that table rather than any announced end date for the older family.
If your service provider handles the specification versions for you, this is their work rather than yours. If you operate your own access point, the dates in the OpenPeppol documentation table are the ones to watch.
Peppol publishes validation artefacts for UBL and CII with every release, and they are versioned separately from the BIS itself: the May 2026 release carries artefacts 1.3.16, published on 10 April 2026, with code lists from 6 March 2026. Checking against the right artefact version is as important as checking at all.
A file can fail for three quite different reasons, and they need different fixes: the XML is not schema valid, a business rule is broken, or the document is valid but the recipient is not registered for what you sent. Only the first two are visible in a validator.
For a German business the structured file is the invoice, and it is the structured file that has to be kept. The retention period is eight years under section 14b of the German VAT Act, and the document has to stay readable and unchanged for that whole period. A transmission log from an access point is evidence of delivery, not a substitute for the invoice itself.
Invoice Portal connects you to the Peppol network and takes care of the parts that change twice a year, so that your own system keeps producing the same thing.
No. Both are usage specifications of EN 16931, but they are maintained by different bodies and they narrow the standard in different places. An XRechnung is frequently delivered over the Peppol network, which is where the confusion comes from: one is the document, the other is the way it travels.
Only if you want to run your own access point. Going through a certified service provider requires no membership and no access point of your own, and it is the usual route for a company that simply wants to send and receive invoices.
Release 3.0.21, which was published on 20 May 2026 and has been mandatory since 17 August 2026. The version number does not go into the document: the specification identifier names the BIS without a version, and writing a version into it is a fatal error.
Peppol publishes validation artefacts for both syntaxes and the BIS has an annex on the Cross Industry Invoice, but what you may send is decided by what the recipient has registered in the network. UBL is the syntax the specification is written around, and it is what you should assume unless the recipient says otherwise.
Validity and reachability are separate. Check that the participant identifier is the one the recipient uses, that the scheme in front of it is right, and that the recipient is registered for the document type and the profile you sent. Profile 02, billing with a response, in particular needs its own registration on the receiving side.
No. The German rules say what an invoice must be and from when; they do not prescribe a channel. Peppol is one way to meet them, email with an attached XML is another. What Peppol adds is automated delivery and a directory in which recipients can be found.
Tell us who you need to reach and we set up the connection, the identifier and the format.
Free and unlimited · the file stays in your browser session
Prefer to talk directly? info@invoice-portal.de · +49 561 56014568
Let us start with the basics.
Three questions, so the first answer is a useful one.
Add a message and send it.