Czech data boxes: who monitors official messages?
A Czech company’s data box needs a named monitor, a backup and a clear route from each official message to an approved response. Access alone does not organise the work.
For a foreign director, Czech administration can appear well covered: the company has an accountant, a registered office and someone locally who speaks Czech. Yet each person may assume that another is watching the official mailbox.
That gap matters when an authority requests documents or sends a decision. Someone must identify the action, involve the right specialist and make sure the response is completed. Forwarding a message to headquarters is only one step.
This guide is for international owners and directors of Czech companies whose administration is shared across countries, employees and external advisers.
What a Czech data box does
A datová schránka, or data box, is the Czech system for formally exchanging electronic documents. It is different from an ordinary email account. Czech legal entities entered in the Register of Persons have a data box established under Section 5 of Act No. 300/2008 Coll..
The official portal is datovka.gov.cz. Identify the company’s box and its ID explicitly in your internal instructions, especially where a director or adviser can access several personal and business boxes.
The operating question is straightforward: who checks this company’s messages, who handles them and how does management know that the work is complete?
Logging in can have delivery consequences
For official documents sent to a company, Section 17 sets out two important rules:
- A document is delivered when a person with the relevant access rights logs into the box. Opening the individual attachment is not the trigger.
- If no such person logs in within the statutory ten-day period after arrival, the document is generally deemed delivered at the end of that period. Exceptions apply where substitute service is excluded by another law.
These rules concern delivery, not a universal ten-day period for answering. The applicable procedure determines response or appeal deadlines and how time is counted. Ask the responsible adviser to confirm the actual deadline for a particular document. See Section 17 of the Act and the official explanation of received messages.
A practical consequence follows: an accountant who logs in to collect routine correspondence may also cause delivery of other messages they are entitled to access. A director’s later review does not restart delivery. The person monitoring the box therefore needs an escalation route beyond accounting matters.
Agree the roles before the first urgent message
The following is a suggested operating model, not a legal allocation automatically attached to these job titles.
| Role | Practical responsibility | Handover to define |
|---|---|---|
| Director or management owner | Approves the arrangement, appoints suitable people and resolves decisions outside delegated authority | Who approves a formal response and who substitutes for that approver |
| Primary monitor | Checks incoming messages, preserves records, logs actions and routes each item | How quickly a new item reaches its task owner |
| Accountant, tax adviser or lawyer | Handles matters within the agreed professional engagement | Which subjects are covered, who confirms deadlines and what needs escalation |
| Backup monitor | Takes over during absence or access problems | When cover starts and which tasks remain open |
| Access administrator, if appointed | Maintains user access and permissions | Who requests, approves and records changes |
One person may perform several roles in a small company. The responsibilities should still be explicit. Ask an accountant what their engagement includes rather than assuming that bookkeeping covers every message from courts, authorities or other senders.
Data-box access and authority to represent the company in a particular matter also need separate consideration. Confirm the required mandate with the adviser handling that matter.
Give each person their own access
Use an individually assigned account for someone operating the box on your behalf. The official guidance discourages sharing the director’s credentials because the system would record another person’s actions as the director’s own.
The system distinguishes the primary entitled person (oprávněná osoba), an authorised user (pověřená osoba) and an administrator. An administrator can manage authorised users; access to message content depends on the rights assigned. Reading ordinary messages, reading messages marked do vlastních rukou and sending messages are distinct permissions. See the official user and administrator guidance.
For your own arrangement, record:
- Which named users can monitor and read the required message types.
- Who may send, and which internal approval must precede sending.
- Who can change access and who reviews those changes.
- Which login method each user will use and how access can be recovered.
Treat the ability to send as a meaningful delegation. Section 18(2) provides that specified authorised acts through a data box can have the effect of a signed written act, subject to its conditions and exceptions. A company should agree its approval process before enabling someone to send formal submissions. Act No. 300/2008 Coll., Section 18
Use notifications alongside a monitoring routine
The portal offers email alerts, paid SMS alerts and Mobile Key push notifications. Notification settings belong to individual users, so a backup should check their own configuration. The official notification guide explains the options.
An email alert is not the official document. Even an expanded notification does not forward the message’s actual contents. This distinction is stated in the ISDS operating rules, Section 7.
As an operational starting point, arrange checks each working day, with coverage for absences and a process suited to the company’s deadlines. This is a recommended routine, not a claim that legislation prescribes that monitoring frequency. Do not make the process depend entirely on an alert reaching one person’s email inbox.
Turn each message into an owned task
Consider a hypothetical Czech subsidiary with a director abroad, a local coordinator and an external accountant. An authority asks for supporting records. The coordinator can read the Czech message, but the accountant holds some evidence and the director must approve the response.
A workable sequence is:
- Record and preserve. Note the company, sender, message ID, reference, arrival and delivery information, and save the message and attachments.
- Understand the request. Prepare a short English explanation for management where needed. Keep the Czech original alongside it; distinguish a working translation from professional legal interpretation.
- Assign an owner. Name the person responsible for preparing the response and obtain confirmation that they have accepted the task.
- Confirm timing. Have the responsible adviser verify the legal deadline. Set an earlier internal date for collecting documents and approval.
- Approve and submit. Record the approved version, sender and submission route. Preserve the outgoing message and its delivery evidence; sending alone does not establish that a submission meets every substantive requirement.
- Close or follow up. Record what was done and whether another response or decision is expected.
The task record can be a simple controlled register. Useful fields are the reference, responsible person, confirmed deadline, next action, status and link to the stored documents. Limit access according to the sensitivity of the material.
Cover holidays, departures and failed access
Before an absence, the backup should have working access, appropriate permissions and a list of open matters. Test the handover while the primary monitor is still available. Include the director’s and advisers’ absence arrangements, not just the mailbox operator’s holiday.
When an employee leaves or an external engagement ends, review and remove their access promptly. Update notification routes, connected applications and the contact list, and transfer pending work and archived records. Identify who handles access recovery if the usual administrator is unavailable.
An out-of-office email is not a handover of the company’s official correspondence.
Archive the complete message and delivery evidence
Standard mailbox storage is not a permanent company archive. The current operating rules specify 90 days from delivery by login for message storage; this is not simply 90 days from arrival or deemed delivery. Messages not delivered by login have different storage treatment. The official deletion guidance explains automatic deletion without the Datový trezor service.
Set up preservation during normal processing. The portal can export the complete message as a ZFO file, including its envelope and attachments. Saving one PDF attachment is different from saving that complete message. Official full-message export guide
Keep the relevant delivery receipt too. It records message events, including arrival and delivery, and can be exported in PDF or ZFO format. Official delivery-receipt guide
For a practical archive, preserve received and sent messages, attachments, receipts, approved responses and the related task record. Assign a storage owner, access rules, backup and a retrieval method. A paid vault or document-management system may form part of the solution; verify its coverage and export arrangements.
Mailbox storage duration and legal retention requirements are different questions. Agree document-specific retention and any long-term evidential preservation needs with qualified advisers. A downloaded file alone is not a promise of indefinite evidential validity.
Frequently asked questions
Does our accountant automatically monitor every official message?
Can a message be delivered even if we have not opened its attachment?
Is an email notification enough?
What should happen while the usual monitor is on holiday?
Are messages always deleted 90 days after they arrive?
Is saving the PDF attachment a complete archive?
Should everyone who reads messages also be able to send them?
The main conclusion
Name the monitor and backup, verify their access, and connect every actionable message to a responsible person, a confirmed deadline and a retrievable record. Review that arrangement whenever the team or its advisers change.
How Kodo can help
Kodo helps international companies organise Czech communication and the handover of local operational questions. Our local coordination service can clarify an institutional request, organise available records and follow up with the appropriate person within an agreed mandate. Data-box monitoring, access, availability and formal submission authority would need explicit agreement; they do not arise automatically from general coordination support.
For legal, tax, regulatory, certification and investment-incentive matters, companies should work with qualified specialists and the responsible authorities.
Contact Kodo with the part of your Czech correspondence process that needs clearer ownership.
Related reading
- Setting up a company in Czechia from abroad
- Czechia, Slovenia, Slovakia and Croatia: digitalisation and market entry
- Business support in the Czech Republic: what to send for a non-binding proposal
Sources
Legal text, official system guidance and service scope checked on 19 October 2026. Official Czech sources below are in Czech.
- Act No. 300/2008 Coll., current text effective from 1 January 2026 — particularly Sections 5, 8, 9, 17 and 18
- Data-box portal: authorised users, administrators and permissions
- Data-box portal: receipt and delivery of messages
- Data-box portal: notification settings
- ISDS operating rules, 26 June 2026 — Sections 6–7, printed page 17
- Data-box portal: deletion and standard storage
- Data-box portal: exporting the complete message
- Data-box portal: delivery receipts and export formats
This article provides general operational information, not legal or tax advice. Confirm delivery, deadlines, representation and document-retention requirements for the particular company and proceeding with qualified advisers.