For ten years, product review collection on PrestaShop was the territory of every approximation: discretion-moderated reviews, fictitious reviews bought in bulk, third-party modules with no buyer traceability. In 2026, that’s over. The Digital Services Act, the French January 2025 decree, and the NF ISO 20488 standard (replacing the old NF Z74-501) have structured the framework. First DGCCRF fines fell in 2025 on mid-market stores: up to 6% of global revenue for deceptive commercial practice.
That said, product reviews remain an essential SEO and conversion lever: +12 to +35% conversion on product pages with properly displayed reviews, up to +18% SERP CTR with Schema.org stars. This article reviews the 2026 framework, the NF ISO 20488 certification, the comparison of available PrestaShop solutions, and the workflow that captures the lever without falling under the sanction.
The 2026 legal framework
NF ISO 20488: the reference standard
The NF ISO 20488 standard, published by AFNOR and internationally recognized, defines requirements for online consumer review collection, moderation, and publication. Main requirements:
- Author identification: impossible to publish an anonymous review. The author must be identifiable (at least by verified email, ideally linked to an actual order).
- Purchase traceability: each review must be linkable to an order, or clearly flagged as « unverified ».
- Transparent moderation: public criteria, author’s right of reply on rejection, preservation of negative reviews (no selective deletion).
- Evidence preservation: for 13 months minimum, the history must allow auditing of any publication or moderation.
- Clear display: average rating accompanied by number of reviews, visible distinction between verified and unverified reviews if any.
Digital Services Act and French 2025 decree
The DSA, applicable to all EU platforms since 2024, qualifies displaying reviews without verification control as « unfair commercial practice ». The French January 2025 decree clarified sanctions: DGCCRF warning, administrative fine up to €75,000 first instance, criminal procedure for deceptive commercial practice on recidivism, with fines up to 6% of group global revenue.
The first 2025 convictions targeted mid-market stores between €5M and €50M revenue. The threshold has been clearly crossed.
Four certified third-party solutions in 2026
On PrestaShop, four solutions dominate with active NF ISO 20488 certification.
Avis Vérifiés (NetReviews / Skeepers)
- Historical leader in France, integrated on 50,000+ stores.
- Official PrestaShop 8/9 module, plug-and-play integration.
- Price: €65-250/month depending on volume, annual commitment.
- Strengths: AFNOR certification since 2014, cross-shop review base (Skeepers), Google Seller Ratings.
- Limits: high price on small volumes, aging moderation interface.
Trustpilot
- European leader, strong in UK / DACH, growing FR presence.
- Integration via official module + JS widget.
- Price: €0 free (limited), €200-2000/month paid plans.
- Strengths: brand recognition, mature ecosystem, rich API.
- Limits: limited free moderation, complex right of reply, regular conflicts on hard-to-remove suspicious reviews.
eKomi
- Strong DACH presence, growing in France.
- Official PrestaShop module.
- Price: €89-499/month.
- Strengths: double author validation (call and email), close to NF ISO 20488 framework.
- Limits: English interface, limited FR support.
Trusted Shops
- Heavily implanted DACH, growing in France.
- Official module, buy-protection integration as complement.
- Price: €99-490/month depending on order volume.
- Strengths: trust label recognized in Germany, complete ecosystem (reviews + buyer protection + mediation).
- Limits: less recognized in France for local SEO.
The DIY option: cheaper, riskier
Several third-party PrestaShop modules offer in-house review collection, without AFNOR certification: DataFirefly dfreviews, native ProductComments, Addons Marketplace modules. Advantages: zero or very low recurring cost, full control of interface and data.
Real 2026 drawbacks:
- No AFNOR certification: in case of DGCCRF inspection, burden of proof on the merchant. Must be able to demonstrate standard compliance through internal audit.
- No access to Google Seller Ratings: SERP shop stars require a Google-certified partner provider.
- Internal compliance effort: documented moderation, 13-month archiving, rejection workflow with right of reply, verified / unverified distinction.
DIY is therefore defensible if:
- The merchant implements a documented NF ISO 20488-compliant workflow (internal audit template, data preservation, transparent moderation).
- Review volume is low (under 500/year) and DGCCRF risk perceived as limited.
- Google SERP stars aren’t an SEO priority.
Measured ROI: why the lever justifies the cost
From 2025-2026 e-commerce audits, measured effect of well-displayed reviews on product pages:
- +12 to +35% conversion on product pages with ≥10 reviews and rating ≥ 4/5.
- +8 to +18% SERP CTR with Schema.org Review stars activated on individual product pages.
- +4 to +12% SERP CTR with Google Seller Ratings shop stars (visible in ads and organic).
- 3 to 8% return rate reduction thanks to usage feedback shared by buyers (size, real quality, delivery).
For a €1M/year store, investment in a certified solution (€1,200-4,800/year) is amortized by conversion gain in 1-3 months.
Compliant workflow on PrestaShop
1. Post-delivery solicitation
Automatic transactional email 7 to 14 days after delivery (so after carrier-confirmed reception, not after shipping). Unique token-signed link, expiring at 30 days. No monetary incentive for the review (banned by DSA if linked to a positive rating).
2. Collection and verification
The review is linked to an order number. Rating (1 to 5) is required, text comment optional. Anti-spam verification (Akismet or equivalent), automatic detection of insults or illegal content.
3. Moderation
Any moderation must follow public, auditable criteria. Valid rejection reasons: insult, illegal content, off-topic (e.g., carrier review posted on product page), manifest conflict of interest. Invalid reason: simply negative review. On rejection, author’s right of reply within 14 days.
4. Publication and display
Review published within 72h of collection. Display: rating, text, date, first name and initial, « verified review » mention. Average rating explicitly accompanied by review count (« 4.3/5 on 247 reviews »). Visual distinction if unverified reviews coexist.
5. Preservation and audit
13-month minimum history, accessible during inspection. Moderation log: who moderated, when, why, communication with author. This log is the central element of a DGCCRF audit.
Pitfalls that erase the lever benefit
1. Moderating to remove negative reviews
Classic temptation, maximum 2026 risk. A DGCCRF audit comparing the ratio of published vs collected negative reviews immediately detects abusive moderation. More effective: respond publicly to negative reviews with a real proposed solution. Conversion effect higher than deletion, and compliant with the standard.
2. Mixing verified and unverified without visible distinction
Particularly risky if unverified reviews are imported from an old base or added manually. The distinction must be clear, and the reader must not confuse them.
3. Incentivizing positive reviews
« Give 5 stars and receive €10 off » is now clearly unfair commercial practice. Permitted incentive: a generic voucher offered for publishing a review (whatever the rating), explicitly disconnected from the review nature.
4. Underestimating Schema.org scope
Schema.org Review and AggregateRating must apply to the individual product page, not the global store. Common error: displaying store average rating on each product page via JSON-LD. Google detects and downgrades, even removing all SERP stars.
5. Forgetting multilingual scope
On a Polylang FR/EN/ES/DE store, FR reviews aren’t relevant for EN visitors. Either reviews are displayed per language, translated (with clear automatic translation mention), or explicitly pooled.
Conclusion: compliance has become the entry cost
In 2026, product reviews remain one of the most profitable conversion levers on PrestaShop. But the era of casually collected reviews is over. The cost of a NF ISO 20488-certified solution (€1,200-4,800/year for most cases) is negligible compared to DGCCRF risk (up to 6% of global revenue) and conversion gain (12-35%).
For a serious store, the default choice is now Avis Vérifiés or Trustpilot. DIY remains defensible only with a documented, audited compliance workflow, and accepting the loss of the Google Seller Ratings lever. In all cases, post-delivery solicitation, transparent moderation, and right of reply have become non-negotiable elements.
