PREUVES ÉLECTRONIQUES
e-Evidence Compliance Platform for EPOC and EPOC-PR
Receive, validate and answer European Production and Preservation Orders on time. One modular platform covers intake, data extraction, delivery and audit under Regulation (EU) 2023/1543.
An e-Evidence compliance platform is software that lets service providers receive, process and answer European Production Orders (EPOC) and European Preservation Orders (EPOC-PR) within the legal deadlines. The ICS e-Evidence compliance platform automates this lifecycle under Regulation (EU) 2023/1543, from order intake to data extraction, delivery and audit.
Chiffres clés
- Legal basis: Regulation (EU) 2023/1543 has applied since 18 August 2026. Directive (EU) 2023/1544 had to be transposed by 18 February 2026.
- Deadlines: EPOC within 10 days, in emergencies within 8 hours.
- Preservation: EPOC-PR data must be preserved for 60 days, extendable by 30 days.
- Penalties: up to 2 % of worldwide annual turnover (Art. 15).
- Exchange: a decentralized IT system based on e-CODEX, plus national channels.
- Déploiement : on-premise, hosted in ICS-managed EU infrastructure, or hybrid.
Quelles sont les exigences du règlement sur les preuves électroniques ?
Le Règlement sur les preuves électroniques lets judicial authorities in one EU member state order a service provider in another member state to produce or preserve electronic evidence. Providers must respond directly, without the traditional mutual legal assistance route.
Deadlines are short, and non-compliance can be expensive. The companion Directive (UE) 2023/1544 requires providers to appoint an addressee. Providers established in the EU name a designated establishment. Providers outside the EU appoint a legal representative.
| Order | Objectif | Deadline |
|---|---|---|
| EPOC | Production of electronic evidence | 10 days after receipt |
| EPOC (emergency) | Production in cases of imminent threat | 8 hours after receipt |
| EPOC-PR | Preservation pending a later production request | Preserve for 60 days, extendable by 30 days |
Modules of the e-Evidence compliance platform
The platform is modular. Providers start with the modules they need and add more later.
01
Order intake engine
Receives orders via the decentralized IT system (based on e-CODEX) and national channels. Parses and validates each certificate and classifies urgency: 10 days or 8 hours.
02
Objection and clarification workflows
Structured handling of incomplete or erroneous orders, de facto impossibility, and concerns about immunities or press freedom, using the standardized form of the Regulation.
03
Data extraction module
Adapters for BSS/OSS, CDR repositories, CRM, RADIUS/Diameter logs, cloud storage and databases. Custom adapters connect in-house systems.
04
Preservation management
Freezes the requested data for EPOC-PR orders, tracks the 60-day period and any extension, and releases data when the obligation ends.
05
Audit trail and reporting
Every step is logged. Dashboards and SLA tracking show open orders, deadlines and response times at a glance.
06
Integration with the ICS LI stack
Shares the architecture of the ICS lawful interception and data retention stack. Reuses the same secure delivery and audit components as ICS LIMS and mediation.
How does the platform process an order?
1
Recevoir
The order arrives via the decentralized IT system or a national channel and is registered with a timestamp.
2
Validate and classify
The platform checks form and completeness, identifies the data category and sets the deadline.
3
Legal review
Your legal team reviews the order. If needed, it triggers a clarification or objection workflow.
4
Extrait
Adapters retrieve the requested data from the relevant source systems and map it to the Regulation’s categories.
5
Approve and deliver
An authorized user approves the result, and the platform delivers it through the secure delivery components.
6
Document
The audit trail records every action, and the case is closed or kept under preservation.
Which data categories does the platform map?
The Regulation defines four data categories. Orders for traffic data and content data are subject to stricter issuing conditions. They may also require notification of the enforcing authority, which affects when data can be transmitted.
The data extraction module maps source data to these categories:
- Données relatives à l'abonné: for example, name, address and contract details from CRM or BSS.
- Données demandées dans le seul but d'identifier l'utilisateur: for example, IP address assignments from RADIUS/Diameter logs.
- Données sur le trafic: for example, connection records from CDR repositories and OSS.
- Données de contenu: for example, stored files or messages from cloud storage and databases.
Options de déploiement
| Option | Description | Typical fit |
|---|---|---|
| On-premise | Runs in your own data center under your control | Operators with existing LI infrastructure |
| Hosted | Runs in ICS-managed EU infrastructure | Providers that prefer a managed service |
| Hybrid | Hosted and on-premise components combined, for example hosted order handling with local data extraction | Providers that keep data in their own network |
Who needs an e-Evidence compliance platform?
01
Telecom operators and ISPs
Electronic communications providers already handle LI and data retention. The platform extends the same processes to cross-border orders. En savoir plus
02
Cloud, SaaS and digital platforms
Hosting, messaging and online services that store or transmit user data receive orders too. En savoir plus
03
Prestataires hors UE
Providers outside the EU that offer services in the Union must appoint a legal representative. En savoir plus
Pourquoi ICS ?
01
LI heritage
More than 20 years in telecommunications and lawful interception, with multiple BNetzA acceptances.
02
One stack
The e-Evidence compliance platform reuses proven delivery and audit components from ICS LI and data retention.
03
Personnel habilité
Our team is security-cleared by the German Federal Ministry of the Interior.
04
End-to-end support
Consulting, integration, custom adapters and managed operations from one partner.
Questions fréquemment posées
What is an e-Evidence compliance platform?
An e-Evidence compliance platform is software that helps service providers handle European Production Orders and European Preservation Orders. It receives the orders, validates them, tracks deadlines, extracts the requested data from internal systems and documents every step. The ICS platform covers this full lifecycle under Regulation (EU) 2023/1543 and integrates with existing LI and data retention systems.
Dans quels cas le règlement sur les preuves électroniques s'applique-t-il ?
Regulation (EU) 2023/1543 has applied since 18 August 2026. The accompanying Directive (EU) 2023/1544 had to be transposed into national law by 18 February 2026. It requires providers to appoint a designated establishment or, if they are established outside the EU, a legal representative. Providers should have their processes and systems in place now.
What are the response deadlines for EPOC and EPOC-PR?
An EPOC must be answered within 10 days of receipt. In emergency cases, the deadline is 8 hours. An EPOC-PR requires the provider to preserve the data for 60 days. This period can be extended by 30 days if the issuing authority needs more time for a production request. The platform tracks each deadline automatically.
How are orders transmitted to providers?
Orders and related communication are exchanged via a decentralized IT system based on e-CODEX. The ICS platform receives orders through this system and through national channels. It parses and validates each order, classifies urgency and starts the workflow. This avoids manual re-entry of order data and reduces the risk of missed deadlines.
What happens if a provider does not comply?
Member states set penalties for infringements. Under Article 15 of Regulation (EU) 2023/1543, pecuniary penalties can reach up to 2 % of the provider’s total worldwide annual turnover of the preceding financial year. A documented, deadline-driven process with a complete audit trail helps providers demonstrate that they handled each order correctly.
Can the platform be hosted by ICS?
Yes. The platform can run on-premise, in ICS-managed EU infrastructure or in a hybrid setup. In a hybrid setup, for example, order handling can run in the hosted environment while data extraction stays inside your network. ICS also offers designated establishment and legal representative services, so non-EU providers can combine technology and legal presence.
Handle European Production Orders with confidence
See how the platform receives, processes and documents EPOC and EPOC-PR orders in your environment.