ARTEVA Guide – The Reliable Audit Trail: From Compliance to Performance

Understanding the Reliable Audit Trail: Building Continuous Trust

A Clear and Practical Definition

According to the French tax authorities, the Reliable Audit Trail is defined as: “The set of documented and permanent processes, supporting documents and controls that establish an uninterrupted link between an invoice and the underlying transaction it represents.”

This definition is built around two fundamental principles.

• The first is end-to-end continuity. Every invoice must form part of a complete evidentiary chain, linking the original commercial transaction—such as a contract, quotation or purchase order—to its execution through the delivery of goods or services, followed by invoice issuance and ultimately payment. Without this continuous chain of evidence, the invoice loses its documentary value and can no longer support VAT recovery or demonstrate the reliability of the company’s accounting records.

• The second principle is continuous control. Compliance cannot rely on occasional or ad hoc reviews. The Reliable Audit Trail requires regular, recurring and fully traceable control procedures whose results must be documented, retained and produced upon request during a tax audit. These ongoing controls give invoices their evidential value in the eyes of the tax authorities.

The Reliable Audit Trail should therefore not be viewed as a single document, but rather as a comprehensive organizational and technical framework embedded within the company’s internal control system and corporate governance.

Above all, it represents both a legal and organizational framework and a practical working methodology that combines documented business processes, continuous controls, formal procedures and technical evidence generated by business systems such as ERP solutions, accounting software and Certified Platforms like Orchestrade® eFacture.

The Three Fundamental Principles: Authenticity, Integrity and Legibility (A/I/L)

The evidential value of an invoice does not arise simply because it has been issued. It depends on the company’s ability to demonstrate three essential characteristics explicitly required by Article 289 of the French General Tax Code.

• The first is authenticity of origin. The company must be able to demonstrate, using objective evidence, that the invoice issuer is genuinely who they claim to be. In practice, this may involve verifying the supplier’s VAT identification number, reviewing official company registration documents (such as the French Kbis extract), or applying Know Your Customer (KYC) procedures. These verification measures form the first line of defence against fraud.
• The second is integrity of content. The information contained within an invoice must remain unchanged from the moment it is created until the end of its retention period. Integrity applies not only to invoice amounts and VAT rates but also to every mandatory invoice field. It may be ensured through mechanisms such as timestamping, data locking or any system capable of maintaining a complete audit history of every modification.
• The third requirement is legibility. An invoice must always remain readable and understandable, whether viewed electronically or on paper, regardless of the technology used to transmit it. Even invoices exchanged via structured EDI must be capable of being presented in a human-readable format for auditors or tax inspectors.

Failure to demonstrate authenticity, integrity and legibility simultaneously may result in an invoice being rejected during a tax audit, potentially jeopardizing both VAT recovery and the reliability of the company’s accounting records.

A Core Component of Internal Control

The Reliable Audit Trail goes far beyond maintaining documentary traceability. It forms an integral part of a company’s internal control framework.

Its purpose is to demonstrate that business processes are effectively governed and controlled.

To achieve this, information systems themselves must provide evidence of their integrity by systematically recording who performed each action, when it occurred and under what circumstances.

System logs, audit histories and approval workflows embedded within ERP solutions all constitute valuable sources of evidence.

When these records are securely retained and remain readily accessible, they reinforce the legal robustness of the Reliable Audit Trail by demonstrating that every invoice is not only linked to a complete documentary chain, but is also processed within a secure, controlled and well-governed technical environment.

The Legal and Regulatory Framework: The Reliable Audit Trail at the Heart of Compliance

European Directives: Establishing a Common Framework

Directive 2010/45/UE marked a turning point in electronic invoicing. It removed the preferential status previously granted to paper invoices and recognized electronic invoices as having the same legal value, provided they guarantee the three fundamental principles of authenticity of origin, integrity of content and legibility (A/I/L).

To achieve these objectives, the Directive recognizes several technical methods. More importantly, however, it establishes the Reliable Audit Trail (RAT) as the primary evidentiary mechanism. Beyond ensuring authenticity, integrity and legibility, the Reliable Audit Trail requires businesses to demonstrate: the existence of the invoice, its connection to a genuine commercial transaction, and the implementation of appropriate controls over customers and suppliers.

This regulatory approach was further reinforced by Directive 2014/55/UE, which introduced mandatory electronic invoicing for public procurement (B2G) across the European Union, paving the way for broader harmonization and widespread adoption of e-invoicing practices.

French Implementation: A Universal Requirement

In France, these principles were incorporated into, Article 289 VII du Code général des impôts ,which requires every VAT-registered business to implement a Reliable Audit Trail.

The requirement is unequivocal: every invoice must be linked to the underlying transaction through documented processes, continuous controls and retained supporting evidence.

Although mechanisms such as qualified electronic signatures and structured EDI provide direct guarantees of authenticity, integrity and legibility, the Reliable Audit Trail remains essential for everything beyond those technical safeguards. It is still required to demonstrate the economic substance of the transaction, verify its legitimacy and validate business partners. In these situations, the Reliable Audit Trail is simplified—but never eliminated.

The Principle of Asymmetry: Flexibility Within the A/I/L Framework

While Article 289(VII) establishes the Reliable Audit Trail as a universal requirement, it also recognizes a specific situation: the issuer and the recipient of an invoice are not required to use the same method of ensuring compliance.

For example, the issuer may choose to secure an invoice using an advanced or qualified electronic signature, thereby directly guaranteeing its authenticity and integrity.

However, the recipient is under no obligation to rely on that signature. Instead, they may choose to demonstrate compliance through their own Reliable Audit Trail.

In that case, the Reliable Audit Trail once again becomes the primary means of proving that the three legal requirements—authenticity, integrity and legibility—have been met.

This involves, among other things: validating received invoices, systematically matching invoices against supporting documents such as purchase orders, delivery notes and contracts; and verifying the consistency of amounts, VAT treatment and business partners.

This principle of asymmetry highlights an important concept: trading partners are not required to adopt identical technical solutions. What ultimately matters is that each party is independently able to demonstrate the legal validity of its invoices. Regardless of the technology selected, the Reliable Audit Trail remains the universal compliance framework that guarantees the economic substance and tax validity of every transaction.

A French Specificity: Preserving the Integrity of the Original Invoice

Historically, France applied a particularly strict principle: the invoice received had to remain strictly identical to the invoice originally issued, without any change of format. Since 2018, digitization has been permitted, provided that the resulting copy is faithful, durable and secure. Simple scans that do not preserve evidential value are therefore insufficient.

A Major Change Introduced by the 2026 Reform

France’s e-invoicing reform introduces a significant evolution to this principle in order to accommodate the Certified Platform model. Certified Platforms will be authorized to convert invoices from one structured format to another, provided that no information is lost during the conversion process. Two situations may arise:

• If the destination format contains the same level of information as the source format, the converted invoice retains its full evidential value.
• If the destination format is less comprehensive than the original, the Certified Platform must provide a readable copy containing all the information present in the source invoice, ensuring complete traceability and preserving the evidential chain.

This development strikes a balance between France’s long-standing evidentiary requirements and the interoperability needed for modern electronic invoicing ecosystems, where invoices circulate between businesses, public administrations and international networks. Throughout this process, the Reliable Audit Trail continues to play a central role by ensuring that, even when technical format conversions occur, the link between the invoice, the underlying business transaction and the supporting documentary evidence remains complete, coherent and fully demonstrable.

Who Must Implement a Reliable Audit Trail?

A Universal Requirement Without Exception

The Reliable Audit Trail is not reserved for large corporations. Every business subject to VAT—regardless of its size, industry or invoice volume—must be able to demonstrate the traceability and consistency of its commercial transactions.

Whether a sole trader issues only a few dozen invoices each year or a multinational organization processes millions of invoices annually, the same legal requirement applies. This universal obligation makes the Reliable Audit Trail a genuine governance framework rather than a compliance exercise. Even the smallest organizations are expected to establish procedures that are proportionate to their operations, properly documented and capable of demonstrating compliance whenever required.

A Shared Responsibility Across the Organization

Implementing a Reliable Audit Trail is never the responsibility of a single department. By its very nature, it requires close collaboration between several business functions, each contributing to the integrity of the overall process.

• The Finance Department ensures the overall consistency of financial flows and verifies that internal controls support the organization’s financial governance.
• The Accounting Department is responsible for the accuracy and reliability of accounting records, ensuring that every invoice is correctly matched, validated and recorded.
• The Tax Department acts as the primary point of contact for the tax authorities and is responsible for ensuring compliance with VAT obligations and document retention requirements.
• Procurement and Sales Departments generate the supporting business documents—including contracts, purchase orders and delivery notes—that underpin the evidentiary chain and give meaning to the controls performed.
• The IT Department guarantees the integrity of information systems, data security and the reliability of technical evidence such as system logs, audit trails and workflow histories.
• The Legal Department ensures that the entire framework remains aligned with applicable legislation, regulatory requirements and contractual commitments.

Without close cooperation between these functions, the Reliable Audit Trail cannot be considered either robust or credible. Its cross-functional nature is precisely what transforms it from a simple compliance requirement into a genuine enterprise-wide governance framework.

Strategic Importance: Why the Reliable Audit Trail Matters

A Safeguard for Tax Compliance

Above all, the Reliable Audit Trail serves as a legal and tax safeguard. It represents the company’s first line of defence during a tax audit by demonstrating that every invoice relates to a genuine commercial transaction supported by appropriate documentary evidence. Without a Reliable Audit Trail, the tax authorities may: deny the right to deduct VAT, reclassify certain expenses as non-deductible; or impose tax reassessments together with financial penalties.

Protection Against Errors and Fraud

Beyond tax compliance, the Reliable Audit Trail also helps organizations mitigate operational risks. By structuring reconciliation processes and requiring systematic controls, it significantly reduces the likelihood of: duplicate payments; fictitious or fraudulent invoices; payments made to unauthorized third parties; and accounting errors resulting from insufficient verification procedures. It also strengthens anti-fraud and anti-money laundering measures by ensuring complete traceability throughout every stage of the invoicing process. Rather than simply documenting transactions, the Reliable Audit Trail creates a controlled environment in which anomalies can be detected before they generate financial losses.

A Driver of Performance and Transparency

The Reliable Audit Trail should not be viewed solely as a regulatory obligation. It also represents an opportunity to modernize financial processes. By standardizing controls and streamlining reconciliation procedures, organizations can: shorten invoice approval cycles, improve cash flow management, increase the reliability of financial data, and enhance operational efficiency. When combined with electronic invoicing solutions, the Reliable Audit Trail provides access to structured, reliable data that supports better decision-making, improves financial visibility and strengthens confidence among customers, suppliers, auditors and investors. Far from being merely a compliance requirement, it becomes a strategic governance tool that contributes directly to business performance.

Penalties and Risks: Understanding the Consequences of Non-Compliance

A missing, incomplete or poorly designed Reliable Audit Trail exposes an organization to significant risks, which generally fall into four main categories.

• Tax Risks: The tax authorities may: challenge the company’s right to recover VAT, reclassify certain expenses, issue tax reassessments and impose financial penalties and late-payment interest.
• Accounting Risks: Insufficient traceability undermines the reliability of accounting records and compromises the true and fair presentation of the company’s financial statements. This may ultimately affect the organization’s credibility with auditors, shareholders, and financial partners.
• Financial Risks: Weak controls increase the likelihood of: duplicate payments, payments to fraudulent suppliers, undetected invoicing errors, and unnecessary cash flow losses caused by ineffective financial controls.
• Legal and Criminal Risks: An inadequate Reliable Audit Trail may also expose the company to: administrative fines, civil liability, and in cases involving proven fraud, criminal liability for company directors.

The French Finance Act for 2022 significantly strengthened the enforcement framework by introducing a specific penalty for businesses that fail to maintain adequate Reliable Audit Trail documentation. Companies may now face a fine of €37,500 per financial year if they are unable to produce documentation supporting their Reliable Audit Trail, or if the documentation provided is considered insufficient by the tax authorities.

This development fundamentally changes the practical application of the rules. Although the French General Tax Code continues to recognize qualified electronic signatures and fully structured EDI as theoretical alternatives, the Reliable Audit Trail has become the practical solution adopted by the overwhelming majority of businesses. In reality, very few organizations rely exclusively on fully structured EDI or qualified electronic signatures for all their invoicing activities. For everyone else, the Reliable Audit Trail has become the reference framework—not only for avoiding penalties, but also for securing the entire invoicing process.

Building a Reliable Audit Trail: Methodology and Best Practices

Step 1 – Assess Your Current Processes

The first step consists of mapping your invoicing processes. This includes identifying: how invoices circulate throughout the organization, which supporting documents accompany them (contracts, purchase orders, delivery notes and proof of payment), which information systems are involved and which stakeholders intervene at each stage of the process. This initial assessment highlights potential weaknesses and provides the foundation for designing an effective Reliable Audit Trail.

Step 2 – Document the Procedure

Based on this process mapping, the organization should prepare a clear, documented and auditable Reliable Audit Trail procedure. In practice, this means:

• matching every invoice to the corresponding purchase order and delivery note,
• verifying that all mandatory invoice information is present (VAT number, supplier identification, etc.),
• checking the consistency of VAT treatment, including applicable rates, taxable amounts and the nature of the transaction,
• ensuring that duplicate invoices or multiple payments cannot occur,
• retaining evidence of every approval and validation, including workflow records, internal approvals, reports and timestamps.

Step 3 – Perform and Document the Controls

A Reliable Audit Trail has evidential value only if the controls are genuinely performed and properly documented. Every reconciliation, verification and approval should generate evidence that can be produced during an audit, such as: validation reports, timestamps, ERP approval records, audit logs  or other traceable system-generated evidence. Being able to demonstrate that the controls actually took place is just as important as performing them.

Step 4 – Keep the Reliable Audit Trail Alive

A Reliable Audit Trail is not simply a written procedure. It must be applied consistently and continuously throughout the organization’s operations.

• Every control should leave an auditable trace, whether in the form of: reports, system logs, exported records, screenshots, internal electronic approvals or ERP workflow validations
• These records must then be securely archived using appropriate document management systems, electronic archiving solutions or a Certified Platform such as Orchestrade® eFacture. Only through continuous application, documentation and secure retention can a Reliable Audit Trail demonstrate its full legal and evidential value.

Certified Platforms, Chorus Pro and Peppol: The Reliable Audit Trail Goes Beyond Technology

The Role of Certified Platforms (formerly PDPs)

Introduced as part of France’s 2026 e-invoicing reform, Certified Platforms are responsible for ensuring the technical compliance and traceability of electronic invoice exchanges. They play a key role in standardizing invoice formats, routing invoices between trading partners and the tax administration, and managing invoice lifecycle statuses. However, while Certified Platforms ensure the technical transmission of invoices, they do not replace the Reliable Audit Trail. Only the Reliable Audit Trail can demonstrate the direct link between an invoice and the underlying business transaction by documenting the supporting evidence, business controls and validation processes that justify the transaction. In other words, the platform guarantees how an invoice is transmitted; the Reliable Audit Trail demonstrates why that invoice is legitimate.

Chorus Pro

Since 2017, Chorus Pro has been the mandatory platform for exchanging electronic invoices with French public-sector entities (B2G). It represents one of the first large-scale implementations of electronic invoicing in France and has played a major role in accelerating digital transformation across both public administrations and suppliers. Nevertheless, invoices exchanged through Chorus Pro must still be incorporated into the company’s Reliable Audit Trail. Businesses remain responsible for linking each invoice to their own supporting documentation, including: purchase orders, contracts, delivery notes, acceptance records, and proof of payment. Using Chorus Pro therefore satisfies the technical transmission requirements, but it does not remove the obligation to maintain a Reliable Audit Trail.

Peppol

The Peppol network has become one of the leading frameworks for cross-border electronic invoicing throughout Europe and beyond. Its standardized architecture enables interoperability between businesses, public administrations and service providers operating in different countries. Although Peppol provides a highly secure and standardized communication network, organizations must still maintain their own Reliable Audit Trail. The existence of a secure transmission channel alone is not sufficient. Companies must continue to demonstrate the consistency of each transaction by linking invoices to their supporting business documents and documenting the controls performed throughout the invoicing process.

Turning a Regulatory Requirement into a Business Opportunity

The Reliable Audit Trail is far more than a tax compliance mechanism. It provides a common governance framework that brings together finance, tax, procurement, sales, legal and IT teams around shared business processes and documented controls. By connecting these functions through a common evidential framework, organizations can secure their invoicing processes, improve transparency and fully leverage the opportunities created by electronic invoicing.

Certified Platforms, Chorus Pro and Peppol ensure the technical compliance of electronic invoice exchanges and promote interoperability between systems. However, only the Reliable Audit Trail can demonstrate the economic and accounting consistency of an invoice from end to end by proving that every invoice corresponds to a genuine, documented commercial transaction. French invoicing legislation requires businesses not only to issue invoices, but also to document, control and retain evidence throughout the invoicing lifecycle. Organizations therefore have an opportunity to transform what may initially appear to be a regulatory obligation into a powerful driver of trust, operational excellence and long-term corporate governance.

ARTEVA and Orchestrade® eFacture: Combining Compliance with Business Performance

At ARTEVA, we view the Reliable Audit Trail as far more than a compliance exercise. We help organizations transform it into a genuine governance framework by assisting them in: mapping their invoicing and business processes, documenting Reliable Audit Trail procedures tailored to their organization, implementing continuous, documented control procedures, and aligning their practices with the requirements of France’s 2026 e-invoicing reform.

Our platform, Orchestrade® eFacture, registered (subject to final approval) as a Certified Platform (formerly Partner Dematerialization Platform – PDP) by the French tax authorities (DGFiP), complements this approach by providing: technical compliance with French e-invoicing regulations, end-to-end traceability of electronic invoice exchanges, seamless interoperability with your ERP and business applications, and secure legal archiving for ten years. Put simply, Orchestrade® eFacture ensures that invoices are transmitted through the correct channels and in the required formats, while the Reliable Audit Trail demonstrates the economic legitimacy and documentary consistency of every transaction.

By combining Orchestrade® eFacture with a robust Reliable Audit Trail, ARTEVA provides organizations with a comprehensive compliance framework that secures business processes, meets regulatory requirements and transforms electronic invoicing into a sustainable source of trust, operational efficiency and long-term business performance.