The question almost always comes from the same person at the same moment. It is the finance manager, and the wording runs like this: if an inspection arrives tomorrow, do the documents we scanned count as the paper ones? The answer turns on a step that is almost always missing. A scanned file dropped into a folder can be found, and for day-to-day work that is enough. If the document has to hold up against a third party it needs compliant digital preservation, which gives it a certain date and protects its integrity over time.
Filing and compliant digital preservation are distinct processes
A retail company had already completed half the journey. Its cloud business software had been running for just over a year, and an automated routine pulled electronic invoices from the provider’s portal and imported them. At that point the process went back to paper: to record and file them, the office printed them. The finance department wanted to stop producing paper, including invoices on both cycles and the accounting ledgers, linking them to internal protocol numbers.
During the analysis the distinction that governs the whole project emerged. Automatic protocol registration is strong evidence, because it records when a document entered and who handled it, but it does not produce a certain date. A delivery note needs registering. An invoice, an accounting ledger and a signed contract need preserving. These are two different decisions, taken by document class rather than document by document.
What is compliant digital preservation?
It is the process that maintains the validity, integrity, authenticity, legibility and retrievability of an electronic record over time, giving it a certain date and making it enforceable against third parties.
Compliant digital preservation is the accurate term, and it is preferable to the older wording of substitute archiving, which belongs to an earlier regulatory phase. The technical rules of the process, covering formats, metadata and responsibilities, sit at national level with the Agency for Digital Italy, within the European framework established by the eIDAS Regulation on electronic identification and trust services.
The practical point sits upstream. A contract signed on paper and later scanned does not automatically acquire the value of the original. Either the document is born digital and signed electronically, or the digitisation of the analogue original follows a formal process that preserves its value. Nobody notices while the document stays inside the company. The bill arrives when it has to be produced in front of an inspector, a counterparty or a court.
| Treatment | What it produces | Typical examples |
|---|---|---|
| Filing | Retrievability and order, with search metadata | Quotations, commercial correspondence, drafts |
| Protocol registration | Evidence of entry or dispatch, sequential number, traceability | Delivery notes, incoming correspondence, certified email |
| Compliant digital preservation | Certain date, integrity over time, enforceability | Invoices, ledgers, signed contracts, tax and HR records |
Which documents go into compliant digital preservation?
Electronic invoices, certified email, contracts and signed documents, tax, administrative and personnel records, digital case files: the scope is defined by document class.
Part of that scope is not negotiable and part of it is a company decision. Electronic invoices, accounting ledgers and tax records have to be preserved because tax and company law require it. Contracts, board minutes, personnel files and material correspondence go in by choice, when the company wants to be able to rely on them against a third party ten years later. The first list is written by the legislator, the second by management together with legal counsel.
The working rule of compliant digital preservation is easy to state and demanding to apply: the scope is decided once, during analysis, and the workflow then drives it. A commercial offer stays filed. The contract that follows from it, once signed, enters preservation without anyone having to remember. Where an organisation already entrusts preservation to an external provider, the arrangement need not be reopened: the document platform talks to that service and to the protocol system through application interfaces, and the regulatory responsibility stays where it is.
Certified email shows where compliant preservation becomes visible
In a healthcare group of thirteen companies, all certified email arrived in a single mailbox, read by an assistant who interpreted the content and forwarded it by hand to the right recipients. No separate protocol per company, no traceability of the handover, and some departments still asking for a paper copy.
Mailbox monitoring solves the mechanical part: the assistant moves the message into a subfolder and acquisition happens within seconds, with automatic protocol registration. The platform applies the protocol number to the message body and to attachments, with numbering rules differentiated by company, a three-character prefix and a sequence that resets each year. Delivery and acceptance receipts stay grouped with the original message, which is how correspondence needs to read when an exchange has to be reconstructed.
A case: twenty-five years of records and the fear of losing them
A welfare association with healthcare activities ran its records through a program developed in-house twenty-five years earlier. The secretariat received paper and electronic post, scanned it and filled in a subject line with a few search keys. The present was not the problem.
The organisation had already been through a system replacement in its clinical area, and the incoming supplier had settled the question of legacy records with a formula familiar to anyone working in business software: the history cannot be migrated, keep the old program. The management described the outcome, without softening, as close to a disaster. Two applications running in parallel, one of them out of maintenance, and operating systems progressively unable to run it. Any search on a document predating the migration required a machine nobody could update.
That experience produced the constraint set at the opening of the new project: twenty-five, thirty years of records must enter the new system. Not as a separate archive to consult, but as documents searchable on the same criteria as those produced today. Insight: migration quotes count the records that move. The item that actually weighs is the ones left behind, because each of them keeps an application, a licence and a machine alive that somebody has to go on maintaining.
How a historical archive enters compliant digital preservation
Recovering the legacy archive is the item that decides whether the project is worth doing, so it pays to know how it works before quoting it. Importing digital legacy records runs through an automated procedure, and under contract those documents do not count towards the annual volume of current production. Paper follows a different and more artisanal route, which nonetheless works. The operator applies sequential barcode labels, associates each code with the customer or reference field using a scanner, then scans the batch and files it in bulk. A construction firm of around one hundred and fifty people, with some twenty binders a year for sites alone, organised the return of its archive this way, with documents carrying a ten-year validity that must remain available throughout.
Volume counting deserves clarity at quotation stage, since it is the most recurring technical doubt. The reference is the main document with its own metadata record: a three-hundred-page PDF remains one document, and linked attachments do not generate a separate count.
Permissions are designed, not added later
The concern that recurs in every analysis is cross visibility between departments. On network shares the worry is well founded, because permissions follow the folder structure rather than the life cycle of the document. In a document platform, rights are defined by group and by individual user, by document class and by document state, separating viewing, preview, download, editing and access to attachments. A document that can be edited during approval closes once the workflow ends, and a salesperson’s profile can cover assigned customers only.
Checks before starting a compliant digital preservation project
- Which document classes require a certain date and which are served by orderly filing.
- Who currently holds responsibility for preservation, and whether the service stays with the present provider.
- How many years of legacy records must enter the new system, and in what form they exist today.
- How the documents that matter come into being: on paper and then scanned, or born digital with an electronic signature.
- Which certified email boxes need monitoring, and with which numbering rule per company or site.
- Who sees what, by area and by document state, before the first workflow goes live.
Recurring questions raised during analysis
Does a scanned document carry the same value as the paper original?
On its own, scanning is not enough. It produces an electronic copy that remains fully usable for day-to-day work, and operationally nothing changes. Giving it the value of the original takes two things together: a formal digitisation process, with the signatures and metadata the rules require, and submission into compliant digital preservation, which fixes the date. Where it is practicable, the simpler route is to have the document born digital with an electronic signature: the copy problem disappears altogether.
Can an existing preservation provider be kept?
Yes. The document platform integrates with external preservation systems and with protocol managers through application interfaces, and the choice of provider remains the organisation’s decision.
How long before the first workflow goes live?
A first digitised process typically takes around ten days of configuration, because the platform is low-code and workflows are designed with visual tools. Recovery of legacy records is planned in parallel, on a timescale proportionate to the volume and the state of the existing archive.
Let’s talk
The right moment to address compliant digital preservation is not when the inspection arrives, but when the decision is taken to stop printing. That is the point at which an organisation establishes which documents will have to stand up to scrutiny in ten years and which serve only to get work done. Aesir Srl works with finance departments on document classification, on the design of approval workflows and on the recovery of historical archives, as a system integrator on the document platforms available on the market.
The relationship between archive and process is explored in the article on corporate document protection, while the wider compliance framework is covered in the piece on the technical obligations of the GDPR.
If you would like to explore the subject or assess the situation in your own company, you can fill in the form at the bottom of this page or write to support@aesir-tech.it: we will arrange a free consultation and start from your numbers.