Audits

Six compliance audits. One audit team.

Fixed-fee, 14-day turnaround, and a written gap analysis you can defend to a regulator or your board.

Start an audit → What's assessed
Fixed fee 14-day written report No commitment to proceed
DSCSA §582EU FMDEU DPPEU BatteryEUDRForced LabourDFARS · CMMC · Tatmeen
The audits

One regulation per audit. No guesswork.

Each audit targets a single regime, benchmarks your current stack against it, and tells you exactly where you're exposed.

Fixed fee 14-day written report No commitment to proceed
US Pharma · Nov 27, 2026

DSCSA

Assesses unit-level authentication, saleable-returns verification, and recall traceback against Section 582 of the FD&C Act.

Start this audit → EU Pharma · 2011/62/EU

EU FMD

Assesses 2D-barcode and tamper-evidence coverage, and where a cloned code defeats authentication on its own.

Start this audit → ESPR 2024/1781 · 2027–2030

EU Digital Product Passport

Assesses data-carrier readiness and the durability of the physical anchor behind each passport.

Start this audit → Reg. 2023/1542 · 18 Feb 2027

EU Battery Passport

Assesses Article 77 unit identity across LMT, industrial >2 kWh, and EV batteries from cell to second life.

Start this audit → Reg. 2023/1115

EUDR Provenance

Assesses plot-level provenance and due-diligence statement readiness for cocoa, coffee, timber, palm, rubber, and soy.

Start this audit → Reg. (EU) 2024/3015

Forced Labour Compliance

Assesses supply-chain custody evidence against the EU Forced Labour Regulation's market-ban requirements.

Start this audit → Custom · DFARS · CMMC · Tatmeen

Custom / other regime

For DFARS 252.246-7008, CMMC, UAE Tatmeen, or any unit-level mandate not listed — we scope it to your stack.

Start this audit →
What's assessed

The same rigor, every audit.

Whichever regime you start with, the deliverable is a written report your compliance, quality, and legal teams can act on — not a sales deck.

14 daysFixed feeWritten reportNo commitment
Start an audit →

Every audit includes

  • Gap analysis against your regulation and current stack.
  • EPCIS 2.0 readiness across TraceLink, Antares, MediLedger.
  • Recall-traceback simulation on a sampled unit.
  • Scoped remediation plan with cost and timeline.
  • Pilot scope for unit-level authentication on one SKU or line.
14days
Turnaround from kickoff to written gap analysis in hand.
Fixed
Fee agreed up front — scoped before you start, no hourly surprises.
Zero
Commitment to proceed. The report stands on its own, defensible to a regulator or board.
Start today

Know where you're exposed — in 14 days.

Pick a regulation, share your current stack, and our audit team returns a written gap analysis with a scoped remediation plan. Fixed fee, no commitment to proceed.

Turnaround
14 days
Engagement
Fixed fee
Deliverable
Written report
Commitment
None to proceed
Start an audit → DSCSA first →
Fixed fee 14-day written report No commitment to proceed

What you receive

  • Written gap analysis against your chosen regulation.
  • EPCIS 2.0 readiness assessment of your stack.
  • Recall-traceback simulation to time-baseline your response.
  • Scoped remediation plan with cost and timeline.
  • Pilot scope for one SKU or line.
Auditor verifying a pallet with a handheld RFID reader in a dark warehouse In the field · pallet-level verification
FAQ

Aeroz compliance audits, answered.

How much does an Aeroz compliance audit cost?

Each audit is fixed-fee with no commitment to proceed. You receive a written gap analysis within 14 days; pricing is scoped to the specific regulation and stack covered.

How long does an audit take?

14 days. Each engagement delivers a written gap analysis you can defend to a regulator or board, plus an EPCIS 2.0 readiness assessment and a scoped remediation plan with cost and timeline.

Which regulations do the audits cover?

Six: DSCSA (US pharma), EU FMD, the EU Digital Product Passport (ESPR), the EU Battery Passport, EUDR (deforestation), and the EU Forced Labour Regulation.

Do I have to buy Aeroz after an audit?

No. The audit is a standalone, fixed-fee engagement with a written deliverable and no commitment to proceed. Many clients use it purely to size their exposure.

What is in the written report?

A gap analysis against your regulation and current stack, an EPCIS 2.0 readiness assessment across TraceLink, Antares, and MediLedger, a component mapping, and a scoped remediation plan with cost and timeline.