European Union · Digital Product Passport

The EU Digital Product Passport, physically anchored.

ESPR 2024/1781. Phased 2027–2030. Delegated acts, category by category.

The Ecodesign for Sustainable Products Regulation makes a Digital Product Passport mandatory across most physical goods sold in the EU. Aeroz binds each unit to its passport, so the digital record and the physical item cannot be separated.

Start a DPP audit → How the chip works
Fixed fee 14-day written report No commitment to proceed
ESPR 2024/1781GS1 Digital LinkEPCIS 2.0ISO 22385CIRPASS-alignedDelegated acts 2027–2030
The problem

A passport is only as trustworthy as its link to the item.

A DPP is a digital record — material content, origin, repairability, compliance. But the record is meaningless if it cannot be tied with certainty to the physical unit in front of you. A printed QR or 2D code is data, not identity: it can be photographed, reprinted, and applied to a counterfeit or swapped onto a different item.

When the carrier can be cloned, the passport it points to inherits the same doubt.

QR / 2D codeClonable
Printed label swapUndetected
Aeroz chip identityBound
Verification scan<300ms
Audit logAppend-only
What Aeroz does

Bind the unit to the passport. Make the link unforgeable.

A dual-frequency chip carries an AES-128 identity bonded to each unit; the GS1 Digital Link resolves that identity to the DPP; every custody change writes an EPCIS 2.0 event to an append-only log. The passport stops being a printed pointer and becomes a verifiable record of a specific physical item.

01 · Bound identity

Chip, not just a code.

A dual-frequency NFC + UHF chip with an AES-128 identity is bonded to each unit. A cloned QR resolves to the passport, but fails the cryptographic check the chip provides.

CarrierNFC + UHF
IdentityAES-128
ReadPhone · dock
02 · Open resolution

GS1 Digital Link.

The unit resolves to its passport through GS1 Digital Link — the standard the EU and CIRPASS converge on. No proprietary lookup, no vendor lock to read the record.

ResolverGS1 Digital Link
AlignedCIRPASS
AccessWeb · open
03 · Defensible history

Append-only audit log.

Commission, ship, receive, repair, resell — each event lands in an append-only EPCIS 2.0 ledger with no UPDATE, DELETE, or TRUNCATE for any role. The passport's history can't be quietly rewritten.

ModelAppend-only
StandardEPCIS 2.0
SigningPer-event
Macro detail of a circuit and chip carrier Chip · bound identity
Abstract data network resolving connections GS1 Digital Link · resolution
Automated warehouse handling tracked goods Custody · EPCIS 2.0 events
The categories rolling out

Delegated acts, one category at a time.

ESPR sets the framework; delegated acts switch on the DPP product group by product group through 2030. The priority categories are already named.

Priority · first wave

Textiles & apparel

Fibre composition, origin, and durability — the lead category for DPP enforcement.

EEE

Electronics

Electrical and electronic equipment: components, substances, and repairability data.

Interiors

Furniture

Materials, finishes, and disassembly information for repair and second life.

Industrial metals

Steel & aluminium

Grade, recycled content, and embodied-carbon attribution per batch.

Automotive

Tyres

Construction, materials, and lifecycle data tied to each unit produced.

Built environment

Construction products

Composition and performance declarations aligned to the construction framework.

What data you gain

A passport that records what happened.

Authenticity events

Every passport resolution logged — which market asked, and what it verified.

Custody chain

Each handoff from line to retail as a signed EPCIS 2.0 event.

Material & origin attribution

Composition, recycled content, and provenance bound to the unit, not a SKU.

Repair & second-life events

Repairs, refurbishments, and ownership changes written to the same record.

Tamper & seal state

Armed or breached, per unit, the moment the seal state changes.

Regulator exports

Unit-level custody and DPP data fields, generated from one log on demand.

Built on the open standards the EU Digital Product Passport converges on

GS1 DIGITAL LINKEPCIS 2.0ISO 22385CIRPASSESPR 2024/1781GS1 GS1 DIGITAL LINKEPCIS 2.0ISO 22385CIRPASSESPR 2024/1781GS1
Standards & interoperability

We help shape the standard we build to

Aeroz is a member of INCITS, the ANSI-accredited U.S. standards body, and participates in the U.S. Technical Advisory Group to ISO/IEC JTC 5 — Digital Product Passport. JTC 5's mandate is cross-system DPP interoperability: exactly the layer Aeroz is built for — a tamper-proof physical anchor with an EPCIS 2.0 provenance layer that works under any passport or ledger.

Membership in the standards process; not an endorsement or certification of Aeroz or its products by INCITS, ANSI, or ISO/IEC.

Talk DPP readiness →
How a DPP engagement runs

Your category, mapped to its delegated act.

DPP obligations arrive category by category, so the audit starts with yours: which delegated act, which data fields, which carrier requirements. We then issue live passports for one product line — UNTP-conformant credentials signed against each unit's chip identity — so your DPP works across borders, not just in Brussels.

Delegated-act mappingCarrier selectionUNTP-conformant issuanceOne line live first
Talk DPP readiness →
Cross-border · one passport, every market Cross-border · one passport, every market
EU DPP readiness audit

Be DPP-ready — in 14 days.

A fixed-fee Aeroz audit produces a written readiness assessment against ESPR 2024/1781 for your product category, a GS1 Digital Link and EPCIS 2.0 data-mapping review, and a scoped pilot plan with cost and timeline.

Turnaround
14 days
Engagement
Fixed fee
Deliverable
Written report
Commitment
None to proceed
Start a DPP audit → EU Battery Passport →
Fixed fee 14-day written report No commitment to proceed

What's included

  • ESPR 2024/1781 readiness for your delegated-act category.
  • GS1 Digital Link mapping from unit identity to the passport.
  • EPCIS 2.0 data inventory for the DPP fields you must carry.
  • Authenticity-binding plan against cloned-carrier risk.
  • Pilot scope for one SKU or product line.
FAQ

The EU Digital Product Passport, answered.

What is the EU Digital Product Passport?

The Digital Product Passport (DPP) is a structured digital record of a product's identity, materials, and lifecycle, mandated under the EU Ecodesign for Sustainable Products Regulation (ESPR), Reg. (EU) 2024/1781, and accessed through a data carrier on the physical product.

When is the EU DPP required?

Phased from 2027 to 2030. ESPR entered into force in 2024; delegated acts then set requirements category by category, with textiles and batteries among the first product groups.

What does Aeroz provide for the DPP?

The physical anchor. Aeroz binds each unit's identity to its DPP via a GS1 Digital Link URI and EPCIS 2.0 events, with an append-only audit log — so the digital passport is provably tied to the physical product, not just printed alongside it.

Does the DPP require a specific data carrier?

ESPR requires a data carrier such as a QR code or NFC tag linking to the passport. Aeroz pairs a GS1 2D barcode with a tamper-evident dual-frequency chip, meeting the carrier requirement while adding anti-counterfeit authentication.

Which products are covered first?

Batteries (under the separate Battery Regulation, from February 2027) and textiles are early priorities, followed by electronics, furniture, and other categories defined by ESPR delegated acts through 2030.