DSR Protocol
Digital Product Passport
Start free
ESPR · EN 18222 · GS1 Digital Link

Digital Product Passports that stand up to scrutiny.

Create, serialise with GS1 Digital Link, attest, and publish — with authority-grade evidence packs and a direct EU Registry path. Go live in days, not months.

Free includes 1 live GTIN No credit card required Upgrade any time
ESPR-aligned DPP workflows GS1 Digital Link serialisation Audit trail + sealed outputs
The secret weapon

One Digital Link. Two ways to reach the passport.

Serialise every item with a GS1 Digital Link and render it as a QR or DataMatrix — with an optional NFC twin carrying the same identity. No blockchain overhead and no re-platforming: go live in days, at running costs far lower than legacy compliance suites.

Dual-modality access

A single canonical identifier resolves to the right passport view whether it is scanned as a 2D code or tapped as an NFC twin.

Authority-ready by design

Public and authority views, sealed conformity reports and a full audit trail come from one source of truth.

Low-cost, low-carbon

Deterministic resolution keeps infrastructure light — the same provenance without the cost and energy of a distributed ledger.

Why now

The deadline is a data problem, not a document one.

ESPR is moving Digital Product Passports from ‘nice to have’ to mandatory, product group by product group.

GS1 Sunrise 2027 accelerates 2D barcode adoption — the same data carrier on your packaging can be your DPP access point.

The fastest path is a platform that treats a passport as structured, updatable data — not a static PDF.

Sunrise 2027 readiness

  • Add a GS1 Digital Link 2D code to packaging
  • Resolve it to a public passport view
  • Maintain an authority-ready dossier behind the scenes
How it works

From product data to a compliant passport

1

Create the passport

Model product data to ESPR/EN expectations and your category’s delegated act.

2

Serialise with GS1

Generate item-level identifiers and a resolvable Digital Link for QR or DataMatrix.

3

Attest and seal

Attach evidence and approvals, and produce sealed PDF Conformity Reports.

4

Publish and push

Publish public and authority views, and push to the EU Central DPP Registry when required.

Example Digital Link https://id.yourbrand.eu/01/09506000134352?10=ABC123
Differentiators

The moat: authority-grade accountability

Most DPP tools stop at a public page. DSR Protocol is built for the moment an authority asks: ‘Show your evidence.’

Authority & Customs Attestation Dossier Moat

Hard-gated evidence packs with legal accountability and a full audit trail — defensible, not just presentable.

EU Central Registry connector

Format, seal, push and confirm against the EU registration workflow without rebuilding your stack.

GS1 Digital Link serialisation

One resolvable identifier for packaging, retail scanning and DPP access — item level.

Audience-scoped views

Public consumer view and restricted authority view from a single source of truth.

Sealed PDF Conformity Reports

Cryptographically sealed outputs for procurement, audits and internal sign-off.

Multilingual by design

Publish consistent passports across EU markets with controlled translations.

Compliance risk to avoid

A compliant passport carries no ad-tech.

Some QR platforms advertise a ‘GS1-compliant’ Digital Link, then quietly load Google and Meta advertising pixels into the scan. Under EU law, a Digital Product Passport is a compliance record — not a consumer-profiling surface. GS1-compliant syntax does not cure trackers layered on top.

What many ‘DPP-ready’ QR tools do

  • Embed third-party advertising and retargeting pixels (Google, Meta) in the scan journey.
  • Route passport scans through analytics and ad-tech sub-processors.
  • Reserve rights to aggregate, analyse and market the data you send them.

Turning a passport scan into an ad-tech profiling event is difficult to reconcile with the ESPR’s restriction on reusing passport data and with the GDPR’s data-minimisation principle.

The DSR Protocol position

  • No advertising or analytics pixels — ever — in the passport experience.
  • Zero-egress processing with EU data residency by design.
  • Purpose-limited to the passport; your data is never pooled, sold or used for retargeting.

We treat data minimisation and reuse restrictions as requirements, not options — so the passport stays audit-ready, not marketing-led.

Basis in EU law
  • ESPR — a Digital Product Passport service provider must not sell, reuse or process passport data beyond what is necessary for the service without the economic operator’s specific agreement (Regulation (EU) 2024/1781, Article 11(2)); customers’ personal data must not be stored without a valid legal basis (Article 10(1)(e)). eur-lex.europa.eu/eli/reg/2024/1781/oj
  • GDPR — personal data must be adequate, relevant and limited to what is necessary for the stated purpose (Regulation (EU) 2016/679, Article 5(1)(c), data minimisation). eur-lex.europa.eu/eli/reg/2016/679/oj
Built to last

Your passport must outlast the product.

Under the ESPR, a Digital Product Passport — its GS1 Digital Link and QR — must keep resolving for the product’s regulated lifespan, and that duty survives insolvency or a company ceasing to trade. Ten years is the regulatory default where none is set. DSR is engineered to guarantee it — independently of any one company, including us.

Independent back-up copy Art. 10(4)

A second, EU-resident copy of every passport, refreshed automatically, that keeps resolving even if a supplier — or the brand — ceases to trade. The back-up the regulation makes mandatory.

Persistent identifiers on your domain

Every tag carries a GS1 Digital Link on your own domain, never a vendor’s, and identifiers are never reassigned — so the code on the piece resolves for its whole regulated life.

Open-standard export, no lock-in

Each passport downloads as GS1 Digital Link + JSON-LD and can move to any conformant resolver at any time — the opposite of a marketplace or a tokenised ledger.

Immutable record + lawful erasure

The mandatory compliance history is preserved for the full retention window, while personal data is erased or pseudonymised on request — the reconciliation of ESPR permanence with GDPR erasure that an append-only blockchain cannot do.

EU registry pointer, kept current

The identifier is registered in the EU’s thin index for discovery and verification, while the passport content stays with you, under your control.

A guarantee, funded up front

A written longevity commitment matched to your delegated act (10 years as the stated minimum), prepaid at onboarding — so decades of availability do not depend on anyone still trading tomorrow.

Basis in EU law
  • ESPR — the passport must remain available for the period set in the applicable delegated act, and the economic operator must keep a back-up copy with an independent service provider so the data survives insolvency or cessation (Regulation (EU) 2024/1781, Article 10(4)). eur-lex.europa.eu/eli/reg/2024/1781/oj
  • EU Battery Regulation — the battery passport must remain available for at least 10 years after the battery is placed on the market (Regulation (EU) 2023/1542). eur-lex.europa.eu/eli/reg/2023/1542/oj
Pricing

Simple pricing that scales with your catalogue

Start free with 1 live GTIN, then upgrade when you’re ready to expand.

See full pricing — all editions, with a € / £ / $ switch
Best value in the category

50 live GTINs from €79 — and far more than a QR generator.

Most QR and DPP entry plans include only a handful of GS1 Digital Links — if any — and reserve them for their higher tiers. DSR includes GS1 Digital Link as standard, so smaller brands can go live before GS1 Sunrise 2027 without paying enterprise prices.

  • GS1 Digital Link included as standard on every plan
  • Sealed PDF Conformity Reports
  • EU Central Registry push
  • Geolocation & real-time scan analytics
  • Interactive experiences — journeys, quizzes & offers
  • NFC authentication tiers: Standard, Connected & Certified
  • EU data residency & zero-egress by design
  • No per-scan fees — a viral moment never triggers an overage
Value calculator

How much would you save?

Set your catalogue size and compare your DSR plan with a typical per-link rival estimate.

50

Estimate only, excluding VAT. “Typical rivals” is based on a common entry plan of around 10 GS1 Digital Links; your actual costs depend on the provider and tier you choose.

Total cost of ownership

See the 10‑year cost — do it yourself vs DSR

A Digital Product Passport must stay available for about a decade. For a typical small brand that is roughly €14,500 · £12,900 · $16,700 saved over ten years versus building and maintaining it yourself — and your passport is never switched off. Try your own numbers in £, € or $.

Prices exclude VAT/tax. Final pricing is confirmed on enquiry.

FAQ

Frequently asked questions

A Digital Product Passport is a structured digital record that makes product information accessible across the value chain — supporting compliance, transparency and end-of-life processes under ESPR.

Requirements phase in by product group via delegated acts. If you sell into the EU, the safest approach is to pilot early so your identifiers, data model and governance are ready.

Typically no. DPP expectations are for machine-readable, updatable information accessed via a data carrier (for example a QR or DataMatrix) — not a static document.

GS1 Digital Link is a standard way to express GS1 identifiers (like a GTIN) as a web link, so a single scan can resolve to the right product information for the right audience.

You do. DSR Protocol is the system of record for your passport content and evidence; you control what is public, what is restricted, and what is shared with authorities.

Yes. Publish a public view for consumers and a restricted authority view backed by an attestation dossier and audit trail.

Start with 1 GTIN. Go live this week.

Free forever for pilots. Upgrade inside your workspace whenever you’re ready.