MyArkevia is based on the infrastructure of Cegedim SRH and operates as a certified digital vault, linked to the employee rather than the employer. Since the deployment of two-factor authentication in the summer of 2026, the login process has changed significantly. We detail here the technical points that public guides overlook.
2FA Authentication on MyArkevia: What Changes for Login in 2026
Cegedim has implemented a mandatory two-factor authentication across all MyArkevia accounts. A password alone is no longer sufficient: each login triggers the sending of a verification code to the phone number or email address associated with the account.
This additional layer of security has a direct impact on scenarios of access loss. If the registered phone number is no longer active (due to a change of operator or an old work number), the verification code becomes unreachable. In this specific case, only Cegedim support can reset access, upon presentation of identity verification documents.
We recommend checking, at the first login, that the associated number is a personal number and not a business number. Any subsequent change to this data cannot be done in self-service: you must contact support.
The complete procedure for logging into My Arkevia vault details each step of the activation and access recovery process.
GDPR Responsibility of the Arkevia Digital Vault: Employer or Platform
A lesser-known legal point deserves clarification. The employer remains the data controller under GDPR, even when payslips are stored in the MyArkevia vault. Cegedim acts as a technical subcontractor.
In practice, this means that any request to exercise rights (access, rectification, deletion) regarding personal data contained in the deposited documents must be addressed to the employer, not to Cegedim. The platform does not have the legal latitude to delete a payslip solely at the employee’s request if the employer opposes it.
This distribution of responsibilities has a concrete consequence: in the event of a dispute over the content of an archived document, the employee must turn to their HR department. The vault guarantees the integrity and timestamp of the file, but not the accuracy of its content.
Personal Email Address and Management of Blocked MyArkevia Account
The choice of email address during account activation conditions everything that follows. Using a work email exposes you to a major risk: after leaving the company, this address is deactivated by the IT department, and the password recovery procedure becomes impossible.
Here are the checks to perform when creating the account:
- Use a personal email address (like Gmail, personal Outlook) to ensure access to the vault regardless of any employer.
- Associate a personal phone number with the account, to receive 2FA codes even after changing companies.
- Keep the initial activation code provided by the employer: it cannot be regenerated by the employee independently.
Cegedim support is the only entity capable of changing the email address linked to an existing vault. This operation requires the submission of identity verification documents and may take several business days.
Probative Value of Documents Stored in the Arkevia Employee Space
Not all files stored in MyArkevia have the same level of certification. Only documents deposited via the employer-vault automated flow retain their probative value. A payslip transmitted through this channel is timestamped, sealed, and compliant with legal requirements for the dematerialization of payslips.
Documents manually added by the employee to their personal space (scanned paper contracts, certificates downloaded from another service) do not benefit from this certification. They are stored securely, encrypted like other files, but their legal value in case of litigation is that of a simple digital copy.
This distinction is crucial for the preparation of a retirement file. Retirement funds accept certified electronic payslips. A file deposited manually will need to be supplemented with other supporting documents.
Retention Period and Portability of the Digital Vault
Archiving in MyArkevia is intended for a duration of fifty years, covering the entirety of a career and the period for liquidating retirement rights. This duration applies regardless of the contractual link with the employer: the vault remains accessible after the termination of the employment contract.
Regarding portability, the employee can download all their documents from their personal space at any time. We recommend performing regular local backups, at least once a year, on an encrypted medium. Here are the available download formats:
- Individual download of each payslip in PDF format.
- Bulk export of all documents over a given period.
- Download of certificates and other HR documents deposited by the employer.
The vault does not offer automatic transfer to another digital vault provider. In the case of changing employers using a different solution, Arkevia documents remain in the employee’s initial space, while new payslips arrive in the new vault.
Maintaining multiple digital vaults in parallel is therefore common throughout a career. Each space remains independently accessible, with its own credentials and document history.
