DIGG — the Swedish PEPPOL Authority

DIGG (Myndigheten för digital förvaltning) is the Swedish Agency for Digital Government and the official national PEPPOL Authority since 2018. It operates the public infrastructure of the Swedish PEPPOL network and coordinates Nordic alignment with Norway and Denmark.

DIGG mission

DIGG carries three main e-invoicing-related missions:

• Cross-cutting digital infrastructure: DIGG operates or coordinates shared infrastructure building blocks (BankID, e-legitimering, Mina meddelanden — citizen digital mailbox, national PEPPOL network).
• E-invoicing promotion: technical guides, support hotline, national registry of PEPPOL service providers (Aktörsregistret), training for public buyers on the use of PEPPOL BIS Billing 3.0.
• International representation: represents Sweden at OpenPEPPOL AISBL, CEN/TC 434 (EN 16931 standard), the European Commission for ViDA, and at Nordic Smart Government & Business (NSG&B).

PEPPOL Authority role

As national PEPPOL Authority, DIGG is the only entity authorised by OpenPEPPOL AISBL to issue PEPPOL certificates for AccessPoints operating in Sweden. The role breaks down into:

• AP certificate issuance: every Swedish AccessPoint must obtain an X.509 certificate issued via DIGG by the PEPPOL Authority. The PA often delegates technical issuance to a partner CA (Swedish CA — eIDAS QSCD provider), but DIGG remains the legal authority.
• Participant onboarding: DIGG publishes the official list of APs connected in Sweden (16 operators as of 2025-Q1, peppol.org/who-is-who).
• OpenPEPPOL compliance: annual compliance review (Self-Assessment Questionnaire) of Swedish APs, incident management (certificate suspension, revocation), enforcement of OpenPEPPOL SLAs (uptime >99.5%).
• Swedish CIUS publication: DIGG publishes the Swedish CIUS (Core Invoice Usage Specification) on PEPPOL BIS Billing 3.0 — SE-* Schematron rules and alignment with SFTI (Single Face To Industry — Swedish retail/industry collective).

Swedish SML/SMP infrastructure

The PEPPOL network uses a 4-corner model (sender, sender's AP, receiver's AP, receiver) with two central directory components: the SML (Service Metadata Locator) and the SMP (Service Metadata Publisher).

Nordic coordination (DFØ, ERST)

The Nordic countries were the earliest PEPPOL adopters (2010-2015) and maintain very close coordination via the NSG&B (Nordic Smart Government & Business) forum. DIGG plays a central role:

• Norway — DFØ (Direktoratet for forvaltning og økonomistyring): the Norwegian PEPPOL Authority. Norway was the first country in the world to mandate B2G invoicing via PEPPOL (1 January 2011). DIGG and DFØ align their CIUS on PEPPOL BIS Billing 3.0 (NO and SE share ~95% of the rules).
• Denmark — ERST (Erhvervsstyrelsen): the Danish PEPPOL Authority. Denmark mandated NemHandel/PEPPOL for B2G in 2005 (world first), even before PEPPOL formally existed. ERST and DIGG cooperate on SBDH profiles and Danish-Swedish routing.
• Finland — Valtiokonttori: the Finnish PEPPOL Authority. Finland has a hybrid approach (historical domestic Finvoice + international PEPPOL for cross-border flows).
• Iceland — Stafrænt Ísland: new member since 2024, gradual alignment on the Nordic profile.

# PEPPOL SMP query for a Swedish participant
# Identifier (iso6523-actorid-upis): 0007:2120000282 (Kammarkollegiet)
# Step 1: DNS resolution of the Service Metadata Locator (SML)
# MD5 hash of the participant ID in hex, then subdomain .iso6523-actorid-upis.edelivery.tech.ec.europa.eu

dig +short B-c14fa17b4d39c5e3aa66f06c0e0aeb6c.iso6523-actorid-upis.edelivery.tech.ec.europa.eu CNAME
# → smp.peppol.digg.se.

# Step 2: HTTP request to the Swedish SMP
curl -s "https://smp.peppol.digg.se/iso6523-actorid-upis%3A%3A0007%3A2120000282" \
  -H "Accept: application/xml"
# → <ServiceGroup> listing the PEPPOL processes supported by this participant

OpenPEPPOL governance

DIGG represents Sweden within OpenPEPPOL AISBL (international Belgian-law association based in Brussels). Governance structure:

• General Assembly: ~600 members in 2025 (Authorities + Service Providers + Users). Sweden: ~25 members including DIGG, Visma, Pagero, Unifiedpost, Tieto, CGI Sverige, Volvo Group.
• Steering Committee: Sweden represented by DIGG, permanent seat as PEPPOL Authority.
• Domain Coordination: Post Award Billing (PoaccBilling) domain, DIGG actively contributes to the May/November releases.
• OpenPEPPOL Conference: annual conference, Sweden will host the 2027 edition in Stockholm.

Sanctions and controls

Enforcement of the B2G mandate rests with Skatteverket (tax administration) for tax sanctions and DIGG for PEPPOL technical compliance controls. Mechanisms:

• Payment refusal: a Swedish public authority cannot legally pay a paper or PDF invoice non-compliant with the 2019 mandate (Lag 2018:1277, §2). The supplier must re-submit a valid PEPPOL BIS Billing 3.0 invoice.
• OpenPEPPOL technical sanctions: in case of repeated AP failures (malformed invoices, SLA breaches), DIGG can revoke the certificate (immediate suspension of routing).
• No dedicated tax sanction: unlike France or Hungary, there is no automatic administrative fine for B2G non-submission. The sanction is commercial (unpaid invoice).

Cross-links

• Sweden hub — mandate overview
• B2G mandate 1 April 2019 — Lag 2018:1277
• Real-Time Economy — Skatteverket roadmap
• PEPPOL BIS Sweden — CIUS and SveFaktura legacy
• Norway — DFØ and Nordic PEPPOL
• Denmark — ERST and NemHandel
• DIGG — official site (EN)
• OpenPEPPOL — Authorities registry