Going Paperless: Document Management and Archiving for European Trade Businesses

The ambition to go paperless — no more filing cabinets, no more searching through invoice folders, no more lost delivery notes — is near-universal among European trade contractors who have experienced the chaos of paper-based administration. The technology to achieve it is available and affordable. But paperless does not simply mean converting paper documents to PDF scans and storing them in a Dropbox folder. Tax authorities across the EU have specific requirements about how electronic documents must be stored — requirements that, if not met, can result in a cloud full of files that fail to satisfy a tax audit. Understanding these requirements, and choosing storage systems that meet them, is the foundation of a compliant paperless operation.

Retention Periods Across the EU: The Minimum You Must Keep

Every EU member state imposes minimum retention periods for business records — invoices, receipts, contracts, and payroll documents — primarily for VAT and income tax audit purposes. In Germany, the GoBD (Grundsätze zur ordnungsmäßigen Führung und Aufbewahrung von Büchern, Aufzeichnungen und Unterlagen in elektronischer Form sowie zum Datenzugriff) requires commercial documents including invoices to be retained for ten years and accounting records for six years. In France, Article L.123-22 of the Code de Commerce requires accounting documents including invoices to be retained for ten years. In Belgium, the VAT Code requires VAT records including invoices to be retained for seven years, and accounting law requires general accounting records for seven years. In the Netherlands, Article 52 of the Algemene Wet inzake Rijksbelastingen requires accounting records including invoices to be retained for seven years. In Spain, the Ley General Tributaria requires retention for four years for tax purposes, but other provisions effectively require retention for up to six years. In Poland, records must be retained for five years from the end of the tax year to which they relate. In Austria, the Bundesabgabenordnung (BAO) requires retention for seven years.

The Original Electronic Format Requirement: Why Printing Is Not Enough

A critical and frequently misunderstood aspect of EU document retention law is the requirement to preserve electronic documents in their original format. If you receive an invoice as a PDF by email, you must retain the PDF file — not a paper printout of it. If you receive a Peppol e-invoice in UBL XML format, you must retain the XML file (or a format that preserves all its data). If you generate an invoice in your accounting system, the system's internal record or an export in an appropriate format must be retained. Printing an electronic document to paper and discarding the electronic original does not satisfy the requirement in Germany, France, Belgium, the Netherlands, or any other EU member state with modern archiving legislation. This rule reflects the tax authorities' need to verify the integrity of the data — a printed PDF can be forged or altered, while a properly archived electronic document with an integrity seal cannot.

Immutability: Preventing Alteration After the Fact

The corollary of the original format requirement is that archived documents must be immutable — they cannot be altered after archiving. This is straightforward for documents received from third parties (a supplier's PDF invoice, a Peppol e-invoice), but requires specific system design for documents generated by your own system (your outgoing invoices, quotes, contracts). An invoice that exists only as an editable record in a word processor or spreadsheet does not satisfy immutability requirements: it can be altered without trace. An invoice archived as a cryptographically sealed PDF — where any alteration to the document would invalidate the seal — satisfies the immutability requirement. German GoBD explicitly requires that archived documents be stored in a "revision-safe" system that prevents unauthorised modification and records all access and changes. Several German software certifiers (IDW RS FAIT, KPMG) certify ERP and archiving systems as GoBD-compliant, and using a certified system is the practical approach for German contractors.

Cloud Storage and Data Residency

The obvious home for a paperless document archive is cloud storage — whether a general-purpose service like Microsoft OneDrive, Google Drive, or Dropbox, or a specialist business document archiving service. The GDPR implications of cloud storage are covered elsewhere, but the specific archiving consideration is whether the cloud service meets the immutability and accessibility requirements of the relevant national archiving legislation. General-purpose cloud storage services are generally not purpose-designed for tax document archiving: they allow files to be deleted, moved, or overwritten, do not provide an immutable audit trail of access, and cannot guarantee that documents will be accessible in the required format for the full retention period. Business document management systems designed for tax compliance — and invoicing and ERP platforms that include built-in compliant archiving — provide the appropriate immutability and access guarantees. Data residency within the EU is required for GDPR compliance and is an additional comfort factor for EU tax authorities.

Managing the Archive Across Multiple Document Types

A paperless trade contracting business generates multiple categories of documents that each have their own retention requirements and access patterns. Outgoing invoices — VAT records, retained for seven to ten years. Incoming supplier invoices — VAT records, same period. Signed contracts and quotes — commercial records, typically retained for the duration of the warranty period plus the applicable limitation period (up to fifteen or twenty years for high-value construction contracts with long liability tails). Time records — employment law records, retained for two to five years depending on country. Health and safety documentation — retained for the relevant statutory period under national safety legislation. Payroll records — retained for five to ten years. Building a coherent document management system that handles all these categories, with appropriate retention periods, access controls, and deletion schedules, requires either a comprehensive business management platform or a structured set of separate systems for each category.

Digital Archiving for Incoming Paper Documents

Going truly paperless requires addressing incoming paper documents as well as outgoing electronic ones. Paper delivery notes, paper supplier invoices, paper contracts, and paper tax certificates must be digitised if they are to be managed in a digital archive. The EU and most member states permit the destruction of original paper documents after digitisation under certain conditions — the digitised version must be a faithful copy (typically required to be scanned at minimum resolution), the digitisation process must be documented, and the digital copy must be stored in a compliant archive. Germany's GoBD provides specific guidance on document replacement scanning (ersetzendes Scannen), which permits destruction of original paper documents after compliant scanning, subject to a documented scanning process and a transfer note attached to each scanned document. For contractors who still receive a significant volume of paper documents from suppliers, a mobile scanning workflow — using a smartphone camera and a scanning app that sends directly to the compliant archive — is the practical solution.

How Long Is Long Enough? Building a Deletion Schedule

The storage limitation principle of GDPR requires organisations to delete personal data when it is no longer needed. For trade contractors, the tension between GDPR's deletion requirement and tax law's retention requirement is resolved by the latter: tax law retention obligations override GDPR deletion where they apply, for the duration of the obligation. After the retention period has expired — seven years for Belgian VAT records, ten years for German GoBD records — the documents should be deleted unless there is another reason to retain them (an ongoing warranty claim, litigation, or continuing contractual relationship). Building a deletion schedule — a systematic process for identifying and deleting records that have passed their retention period — is part of GDPR compliance and also good data hygiene. Without a deletion schedule, archives grow indefinitely, increasing storage costs and the volume of data that would be exposed in a data breach.

How QuotCraft Manages Document Archiving

QuotCraft provides compliant document archiving for all documents generated within the platform — quotes, invoices, contracts, and variation orders are archived automatically in immutable form upon creation and sending. Signed documents are sealed with a qualified timestamp from an EU Trusted List timestamping authority, establishing the exact moment of creation and sealing the document against alteration. The archive is stored on EU-based infrastructure with SOC 2 and ISO 27001 certifications, providing the security and immutability guarantees required by German GoBD, Belgian VAT archiving rules, and equivalent legislation across Europe. Retention periods are configurable by document type and by the country of the contractor's establishment, with automatic deletion reminders at the end of the applicable period. For contractors who receive paper documents from suppliers, QuotCraft's mobile scanning workflow allows documents to be captured by smartphone camera and uploaded directly to the project record, creating a digital record of the paper document linked to the relevant project or invoice. The result is a single, searchable, compliant archive of all business documents — accessible from anywhere, protected against loss, and available for tax audit at any time.