A digital safe is a storage space whose integrity of the deposited files is guaranteed by sealing mechanisms. Arkevia, operated by Cegedim, applies this principle to the preservation of professional and personal documents, particularly dematerialized payslips. The service relies on sovereign hosting in France and certifications that strictly govern data protection.
Encryption and sovereign hosting of Arkevia: what the certifications concretely imply
Most presentations of Arkevia mention security without detailing the technical layers that compose it. Three elements deserve to be distinguished.
Further reading : Discover how to choose the ideal lingerie to enhance your silhouette every day
The AES-256 encryption at rest protects each file stored on the servers. This standard, used in the banking sector, makes the data unreadable without the corresponding decryption key. In transit, the TLS 1.3 protocol secures exchanges between the browser or mobile application and the servers.
The infrastructure is hosted in France and certified ISO 27001. This international standard imposes a management system for information security that is regularly audited. Since 2025, the host has also obtained HDS certification (Health Data Hosting), a level of requirement designed for medical data, which is among the most sensitive under French law.
Further reading : Why adopt the OHSAS 18001 standard and how to successfully implement it in a company
Choosing the Arkevia application as a safe therefore means benefiting from a technical foundation that exceeds the standard requirements of current document management.
Two-factor authentication on Arkevia: a barrier against account hijacking
Since January 2025, access to the Arkevia account must go through two-factor authentication. A password alone is no longer sufficient. A temporary code, generated by a third-party application (Google Authenticator, Authy, or Microsoft Authenticator), is required at each login.
This mechanism significantly reduces the risk associated with password leaks. Even if an identifier is compromised during a data breach on another service, access to the safe remains blocked without the second factor.
Why 2FA changes the game for sensitive documents
Payslips, employment contracts, and certificates contain personal information that can be exploited in case of identity theft: social security number, address, salary. A simple username/password combination does not adequately protect this type of files.
The requirement for 2FA positions Arkevia above several competing digital safes that offer this option without making it mandatory. Mandatory 2FA closes the door to the majority of credential stuffing attacks, a technique where stolen credentials from other platforms are tested in bulk.
NF Z42-020 standard and long-term file preservation
Compliance with the NF Z42-020 standard distinguishes a digital safe from a simple cloud storage space. This French standard defines the functional and technical requirements to ensure the integrity of an electronic document throughout its retention period.
Concretely, a file deposited in Arkevia is digitally sealed. Any modification, even minor, of the content breaks the seal and becomes detectable. This mechanism meets a specific legal obligation: dematerialized payslips must be kept for fifty years or until six years after the employee’s retirement.
What digital sealing guarantees to the employee
The employee retains free access to their documents even after leaving the company. This point is often underestimated. Unlike a shared folder on a company server, whose access disappears with the employment contract, the digital safe maintains the availability of files regardless of the employer-employee relationship.
- The sealed document retains its evidential value in court, as its integrity is technically verifiable.
- The reversibility of data is guaranteed: the employee can recover all their files in a standard format at any time.
- Access does not depend on the longevity of the company that initially set up the service.
Automation of document management in companies with Arkevia
The deposit of payslips in the safe can be done automatically. The flow between the company’s payroll software and Arkevia eliminates the manual steps of sending, sorting, and filing.
For HR services, this automation represents a measurable operational gain. No more folding, no more postage, no more handling of postal returns. Each document is timestamped, classified, and accessible by the employee as soon as it is generated.
What files to deposit beyond payslips
The safe is not limited to pay slips. Companies also deposit:
- Employment contracts and amendments, which require long-term preservation with proof of integrity.
- Employer certificates and work certificates, useful during post-employment administrative procedures.
- Training and professional certification documents, for which traceability may be required during audits.
This versatility transforms Arkevia into a centralized digital archive for the entire employee file, with a uniform level of security across all types of files.
The choice of a digital safe is based on three verifiable pillars: the level of encryption, compliance with standards, and long-term access conditions. Arkevia meets these three criteria with HDS certified hosting, the NF Z42-020 standard, and mandatory two-factor authentication since 2025. For companies as well as for employees, the value of the service is especially measured on the day when an archived document must serve as evidence, sometimes decades after its deposit.