Compliance Readiness

Transparent status of SolaBill's UAE eInvoicing preparation. No item below should be read as an accreditation or certification claim.

Independent UAE ASP Accreditation

Not Held

SolaBill is not independently accredited by the UAE Ministry of Finance as an Accredited Service Provider.

SolaBill is presently a software and integration platform
Regulated services are planned through an eligible UAE ASP
No independent production Peppol exchange is currently offered
Future accreditation remains a separate, evidence-based programme

Peppol Network Role

Orchida-backed Model

SolaBill does not claim OpenPeppol membership or certified Access Point status. Regulated network responsibilities belong to Orchida under the partnership model.

Provider-neutral integration boundary is being designed
The appointed ASP will own regulated network responsibilities
Orchida validation versions and returned evidence will be retained
Sandbox and production status will be shown separately

Information Security

Evidence Review

SolaBill does not currently publish an ISO 27001 certification claim. Security controls and provider evidence must be verified before production.

Tenant isolation and authorization require production review
Provider credentials will require encrypted storage and rotation
Incident response and access review must be tested
Any future certification claim will link to current evidence

Business Continuity

Testing Required

SolaBill does not currently publish an ISO 22301 certification claim. Recovery objectives and provider continuity evidence must be agreed and tested.

Agree production RTO and RPO
Test backup restoration and delayed-document recovery
Document Orchida incident and escalation dependencies
Record evidence from recurring continuity exercises

Data Residency & Sovereignty

Production data architecture is under review. Locations, subprocessors, retention, access, and cross-border processing will be disclosed before production onboarding.

Production hosting and provider data locations are pending approval

Subprocessors and cross-border processing will be contractually disclosed

Encryption, key management, and credential rotation require verification

Retention and legal-hold controls will be tested before launch

Access reviews and incident procedures will produce auditable evidence

Legal and privacy review is required before customer data is onboarded

Compliance Roadmap

Aug 2026

Regulatory Baseline Review

Reviewed the current UAE programme, accreditation amendments, PINT-AE releases, and existing product gaps.

Q3 2026

ASP Partnership Due Diligence

Confirming the legal, technical, security, and operational model for the intended Orchida integration.

Q3-Q4 2026

Workflow and Integration Build

Implementing ordinary invoice inputs, provider mapping, evidence, reconciliation, and fail-closed production gates; regulated validation remains Orchida-owned.

Q4 2026

Sandbox and Pilot

Planned end-to-end sandbox testing followed by controlled pilot onboarding after required approvals.

Future

Independent Accreditation Assessment

A separate decision after the Orchida-backed service is stable and supporting evidence is complete.

Our operating model

SolaBill is the customer software, workflow, and integration layer. Orchida is the regulated Accredited Service Provider responsible for regulated document generation, validation, Peppol exchange, and authority reporting. SolaBill does not present itself as an independent Access Point or Accredited Service Provider.