AR24 is an eIDAS qualified, RGPD compliant electronic mail service as defined by the European eIDAS regulation.
AR24 is a fast-growing ERM provider that was created in 2015 as a spin-off from a cloud service provider based in Strasbourg.
AR24 has offices in Paris, Strasbourg and Luxembourg for its European operations.
The company is supported by the Alsace region, and the Banque Publique d’Investissement (the French Public Investment Bank).
Thanks to the quality of its services and its high level of security, the company has quickly convinced the vast majority of french notaries, a profession that is in the middle of a digital transition and that has high expectations concerning registered letters.
After convincing notaries, AR24 is now used by thousands of lawyers and other professionals, public agencies, and a quarter of the french CAC40 listed companies in the fields of banking, insurance and real-estate development.
AR24 is also used by a growing number of clients based outside of France.
What is electronic registered mail ?
Registered mail (usually with reception acknowledgement) is a widely known and used system throughout the world, where physical mail is delivered in person by the postman to the recipient. This system allows a sender to be sure their recipient has been formally notified with legal binding. In many business cases, this legal notification is important to prove the recipient cannot claim to be unaware of an event or a fact.
In the early 2000’s, several European countries started working on an electronic version of the paper-based registered mail, so it could become paperless, instantaneous, and cheaper all the while just as, if not more, secure.
Several laws were passed and systems implemented, such as the 1369-8 in France or De-Mail in Germany or its equivalent in Italy.
The success of the Electronic Registered Mail (ERM) was not immediate, mainly due to a lack of communication towards the general public and professionals about the existence of these laws and systems.
In Europe, each country has implemented their own vision of this type of secure mailing system.
European and legal evolution – the eIDAS ERM
In 2010, European advisory boards (mainly the ETSI) decided to work together to unify the different standards for electronic registered mail, electronic signature, electronic timestamping, etc. All of which would be under the eIDAS regulation.
Mid 2015, the ETSI finalized the eIDAS regulation, which took effect across Europe on the 1st of July 2016.
Since then, several countries have been working on national regulations that would further specify how ERM fits in their legal system.
The eIDAS regulation is a standard to which ERM providers must comply and get an official qualification for. The qualification is “awarded” after an audit by an advisory board’s accredited auditing company.
Although it is technically acceptable for an ERM provider to only be compliant with the regulation (respecting its standards) without being qualified, it is hardly acceptable from a legal point of view, if not forbidden in the countries that have already set local standards for eIDAS ERM (ie. France, Belgium…).
AR24 is an eIDAS qualified service for electronic registered mail. eIDAS qualified ERM services will automatically be recognized by most European countries.
All eIDAS qualified ERM services can be used by senders from any country throughout Europe, provided that their own country’s advisory board recognizes the identification procedures which the service provides.
Some services can only be used with limited identification methods such as national electronic IDs. The more universally accepted the service’s provided identification procedures are, the more likely it is that it will be accepted throughout Europe.
Having implemented several identification systems either based on certificates or face recognition with physical ID verification and face matching, AR24 is a universal eIDAS qualified electronic registered mail provider.
Note, that a universally accepted eIDAS qualified ERM will be accepted anywhere in the world as such by any recipient, wherever he receives his ERM, just like its paper-based counterpart.
In fact, since email addresses are not geographically linked to the country where the recipient is located (a recipient could acknowledge receipt of an ERM while in international waters for example), an eIDAS qualified ERM does not depend on the recipient’s local jurisdiction.
As an eIDAS qualified electronic registered delivery service, AR24 is fully RGPD compliant.
Why AR24 ?
AR24 is the only service provider for ERM that offers such a high level of security.
In order to guarantee the highest level of security for the electronic timestampings of each ERM, AR24 works with different trusted service providers (TSP) that are independent from each others and independent from AR24 itself.
These TSPs are European and have also obtained the eIDAS qualification in their own field of speciality, timestamping.
The use of different TSPs for the timestamping of each ERM sent with AR24 has many benefits :
- It helps to get through any potential service outage from one of the service providers, one being able to backup the other in case of a problem. Even if these are qualified high level of security service providers and that there is almost no chance of a system breakdown, even for a few minutes, AR24 is committed to make sure that the ERM will get timestamped no matter what.
- It guarantees the independence and the reliability of the timestamping : not one single TSP timestamps each ERM, but two different TSPs.
- It allows the timestamping of the successive steps for the sending of an ERM.
100% in control
AR24 has its own secured Cloud infrastructure based in Strasbourg, France. Our systems include Bull hardware, a world-leader in secured IT systems.
Data is backed-up on two other sites, also based in France.
Our complete ownership of our systems ensures complete independency and privacy of the archived data.
For example, AR24 cannot be forced to secretly handout data to American government agencies as made possible by the US Patriot Act when data goes through US services.