A deterministic cryptographic resolution core — engineered for MIL-STD-130 and CMMC-aligned deployments.
One resolution core with logically isolated, zero-trust profiles. Every trigger — QR & GS1 Digital Link, NFC 424 DNA, serial or direct API — normalises to a single deterministic verdict. Zero consumer surface area in this edition; deploy air-gapped, on-prem or tenant-isolated.
The same high-performance deterministic resolution core — scaled for Digital Product Passports, authentication and engagement.
Every trigger resolves the same way — QR & GS1 Digital Link (the majority carrier), NFC, serials or direct API. Passports, provenance and campaigns run as sandboxed, stateless configuration, never inside the security boundary.
No-code and no new hardware — add it to the barcode you already print and go live in days, without engineering.
EU Digital Product PassportQR & GS1 Digital LinkBrand protectionEngagement & loyalty
Resolver-first flow
The secret weapon
Instant dual-modality digital twins — GS1 QR and NFC, from one action.
Generate a GS1 Digital Link QR (or DataMatrix) and a matching NFC digital twin in a single step. One canonical identity resolves deterministically whether a customer scans or taps — with no blockchain bloat, and running costs up to 80% lower than legacy centralised platforms.
One identity, two carriers
A GS1 Digital Link and an NFC twin describe the same item, so a scan and a tap resolve to exactly the same verdict and passport.
Hardware-to-software continuity
Provision the physical carrier and its software twin together — item-level serialisation stays in lockstep from factory to shelf to resale.
No blockchain bloat
One deterministic resolver replaces heavy distributed ledgers — the same trust and provenance, at a fraction of the cost and energy.
Three no-code faces
One engine. Three no-code faces.
The same deterministic core powers three self-service control rooms — stand up any of them without writing a line of code.
Safety, authentication & NFC
Confirm genuine items, watch behavioural signals, and enforce a live kill-switch across your NFC estate.
The living label — content & QR
Turn every product into a living label: push stories, advice, campaigns — or an instant recall — and change what it says any day from your dashboard, with no reprint.
Compliance & Digital Product Passports
Publish ESPR-ready passports with audience-scoped views, GS1 serialisation and a direct EU Registry path.
The architecture
One deterministic core. Logically isolated, zero-trust profiles.
This is not "an app that does everything". The core does exactly three things — cryptographic validation, state checking and secure routing. Everything else is a sandboxed, stateless profile that never touches the security boundary.
The core only handles cryptographic validation, state checking and deterministic routing.
Profiles (defence, operations, engagement, integrations) are sandboxed, stateless configuration — no profile can reach another or the security boundary.
Isolation is enforced by cryptographic separation and policy, plus database-level tenancy — not by hoping code stays apart.
Like a micro-kernel (seL4). A small, verifiable trusted core; services run isolated above it. The kernel — not the services — is the boundary.
Like Oracle / PostgreSQL / AWS RDS. One engine runs everything from a wiki to classified systems. The engine isn't the risk — access control and tenant isolation are.
Like avionics partitioning. Flight-critical and non-critical functions share hardware safely through strict partitioning — safety comes from separation, not separate computers.
Core & isolated profiles
One lean resolver, not legacy cloud sprawl
Why one lean resolver beats a heavy centralised cloud — for QR and NFC alike.
Whether the trigger is a printed QR code or an NXP 424 DNA chip, legacy vendors route every scan through a heavy, multi-hop cloud. Our Resolver answers from a single deterministic path — cache-fronted, and served worldwide through a global edge network — for the same verdict, without the sluggish, energy-draining back-end.
A cache-fronted, deterministic resolver answers in a single hop — most scans never touch the database. Only a derived verdict + audit event ever move.
Legacy Centralised cloud round-trip
Scan / tapInternetCentral cloudBackhaulDecision
Every verification depends on a distant data centre — more latency, more infrastructure, more energy for the same answer.
Lower latencyA cached, deterministic resolver behind a global edge network
Lower infrastructure costNo massive centralised back-end to run
Lower energy & carbonAvoids per-verify cloud round-trips
Qualitative comparison of architectures. The point is structural: one lean, cache-fronted deterministic resolver — served through a global edge network — avoids the multi-hop round-trips and heavy centralised back-end legacy vendors depend on. (Additional regions and read-replicas for resilience are on our roadmap; the authoritative record stays centralised by design.)
Choose the right trigger
One core, every trigger — QR leads, NFC adds hardware assurance.
The trigger is a choice of ubiquity versus assurance. The QR code is the default carrier for Digital Product Passports; NFC chips add tap convenience and, at the top tier, on-chip cryptography. Whichever you print, the intelligence and the audit trail live in the Resolver.
QR · GS1 Digital Link
The default DPP carrier
Any phone camera, no app, the most economical label — a standard GS1 Digital Link QR. It resolves to an audience-scoped passport, and the server-side digital twin gives even a static code dynamic routing and live clone detection. For your tech team: /01/GTIN/21/serial
Best for
Digital Product Passports (ESPR / EN 18222)
Ubiquitous, app-free scanning
GS1 Sunrise 2027-ready 2D codes
The majority of triggers in the field will be a QR — so it's a first-class citizen of the core, not an afterthought.
NFC · NTAG 213 / 215
Tap convenience + behavioural twin
A tap-to-open chip with no on-chip AES — and it doesn't need it. The Resolver watches the digital twin's behaviour, so mass-replicated or cloned links expose themselves through impossible usage patterns.
Best for
Tap-to-open experiences
Lightweight routing & asset labelling
Clone & replay caught live
The twin flags anomalous sequence, timing and geography as it happens.
NFC · NTAG 424 DNA
On-chip AES — mathematically un-fakable
A hardware-secure chip generates a rotating cryptographic sequence on every tap; a counterfeiter cannot reproduce it. Bulletproof provenance — without the legacy centralised cloud.
Top assurance for high-stakes
Aviation & MRO parts (un-fakable provenance)
Serialised munitions & controlled items (IUID)
Collectibles, luxury & secure ticketing
Where a counterfeiter has real incentive to clone, the hardware sequence closes the gap.
Serials, barcodes and direct API calls resolve through the very same core — coverage is never locked to one carrier. RFID & BLE are on the roadmap.
Digital Product Passports
Scan a QR → the right passport for the right audience.
Under the EU's ESPR (EN 18222), every regulated product needs a Digital Product Passport behind a data carrier — overwhelmingly a QR code resolved via GS1 Digital Link. DSR turns one scan into an audience-scoped passport with true per-field disclosure.
QR + GS1 Digital Link — the ESPR data carrier, GS1 Sunrise 2027-ready. (for your tech team: /01/GTIN/21/serial/10/lot)
Per-field visibility — every field is Public or Authority-only; trade secrets default to Authority.
Public vs Authority / Customs — the same QR, two audiences, one deterministic resolve.
Education documents — care, repair & warranty manuals in a branded inline viewer.
EN 18222-aligned — all 24 official EU languages (plus Catalan, Turkish, Hebrew & Arabic with automatic RTL), detected per visitor on scan.
One QR · two audiencesPublicAuthority
Product & modelPublic
Materials & recycled contentPublic
Care, repair & warrantyPublic
Country of originPublic
Batch / lot & test certificateAuthority
Supplier & bill of materialsAuthority
Substance declarationsAuthority
Secure authentication
Proof of genuine in under a second — cryptographic and PII-free.
A secure scan resolves the trigger against its hardware or twin identity and returns a verdict from the edge. The gate is server-rendered so it paints in under 100ms; full provenance loads only once verified. No account, no cookies, no fingerprinting.
Deterministic verdict
Genuine or suspect is decided server-side (Resolver-first), never by the client — and every decision is explainable and logged.
424 DNA hardware proof
A rotating on-chip cryptographic sequence per tap — un-fakable, verified by the Resolver with no heavy centralised cloud.
Serialised chain-of-custody
Birth-to-retirement history per unit (IUID / GS1 serial); clone & replay caught live, sovereign and air-gap ready.
Designed to support
Built for standards-aware buyers.
The platform is designed to support the controls and workflows behind these standards — across defence, regulated and commercial supply chains.
EU ESPR (EN 18222)GS1 Digital LinkGS1 Sunrise 202728 languages · 24 EU officialGTIN / SGTINGDPRCCPA
DSR Protocol is a software platform. References above describe controls and workflows the platform is designed to support or align with — they are not claims of certification, accreditation, airworthiness approval or government endorsement. Customers remain responsible for their own compliance.
Where it's deployed
From a part on an aircraft to a bottle on a shelf.
The same deterministic core serves the most exacting regulated, aerospace and defence programmes — and high-volume commercial ones — each through its own isolated profile.
Defence & government
Serialised-asset chain-of-custody
Need-to-know, sovereign, zero-egress
Aerospace & MRO
Un-fakable part provenance (424 DNA)
Birth-to-retirement service history
Regulated goods
EU DPP / ESPR passports
Seed-to-sale & anti-diversion
Brand protection
Per-unit clone & replay detection
Grey-market & diversion signals
Munitions & controlled stores
Serialised munitions, optics & night-vision
COMSEC & controlled cryptographic items
Collectibles & luxury
Trading cards, artwork, designer goods, fine wine
Secure ticketing & high-value access
Your mission?
Tell us the assets you need to trust — we'll show the core working against your use case.
Each edition is a set of isolated capabilities on the same core — activated by entitlement, never a code fork.
Anti-counterfeit
Authenticate
Resolver-first verification on commodity and cryptographic tags alike.
NTAG 213/215 + NTAG 424 DNA
Clone & replay caught live
ESPR-ready
Passport
EU Digital Product Passports via QR + GS1 Digital Link, with audience-scoped, per-field disclosure.
EN 18222-aligned DPP flows
Public vs authority views
Most complete
Full
The whole core with entitlements and every profile available per tenant.
Entitlement engine + roles
Audit-ready event trails
Engagement profile
Sequential journeys, branching quizzes and reveals — sandboxed, never in the security path.
For commercial programmes, the same QR or NFC tag that proves a product is genuine can also run the whole experience. These are stateless templates layered on the core — they hold no secrets and can never reach a compliance workload.
SCAN 01
Reveal
Verified origin story unlocks
SCAN 02
Quiz
Branching questions, scored server-side
SCAN 03
Reward
Loyalty code / offer on completion
SCAN 04
Register
Ownership & warranty capture
Sequential journeys
One printed code whose destination advances on each re-scan — provenance stories, scavenger hunts and multi-step reveals, with per-visitor progress and points.
Branching quizzes
A true decision graph — questions branch on answers, scoring is deterministic and validated (no dead ends or loops), outcomes unlock content or rewards.
Branded media viewer
Scanned QRs open PDFs, images, video and audio in an inline branded viewer — never a bare download — with your logo, colours and copy.
VIP vault & galleries
Tiered "luxury vault" and VIP-tour experiences with a signed pass, plus gallery layouts for collections — gated by ownership, not logins.
Engagement analytics
Coarse, zero-PII signals for campaign performance — no tracking pixels, no fingerprinting, nothing on the security hot path.
Brand whitelabelling
Custom domains and full brand theming per tenant, partitioned from other tenants — plus EU-multilingual copy generated on demand.
Zero-egress economics
Assurance that also lowers running cost.
Most scans resolve straight from cache — only a tiny verdict and audit event ever move. One digital twin per asset replaces duplicated records across a dozen systems.
Cache-first
Most scans answered from cache, not a database round-trip
1 twin
vs many duplicated records across silos
Zero-PII
No liability collected on the hot path
Live on the core
Scan a real, programmable touchpoint.
Each is one printed QR code whose destination is decided server-side. Open one and re-scan to watch the journey advance.
Isolation and data-minimisation are structural properties of the core, not features bolted on afterwards.
Zero-PII telemetry — coarse, non-identifiable data only.
Database-enforced tenancy — row-level security; no cross-tenant reads, even on a bug.
Sovereign deployment — dedicated, on-prem or air-gapped for defence.
Deterministic, auditable routing — every decision is explainable and logged.
What we don't collect
No cookies or cross-site tracking
No device fingerprinting
No logins or personal identifiers on scan
GDPRCCPAZero-PII
Talk to us
Request a briefing.
Tell us your programme — defence, aerospace, regulated goods or commercial — and we'll show the core working against it. Briefing packs available under NDA.
Multi-tenant by default; dedicated / sovereign / air-gapped available
We use strictly necessary cookies to ensure our core infrastructure operates securely. By continuing to use our platform, you consent to our use of essential cookies.