Digital Product Passport Services Guide 2026: Hosting, QR Codes, Serialization and What Your Company Actually Needs

Last updated: October 20, 2026

Digital Product Passports stopped being a slide in a strategy deck this year. The EU DPP Registry went live on July 20, 2026, the first harmonized standards are published, and certain batteries need passports from February 18, 2027. If you are now shopping for Digital Product Passport services, this guide explains what you are actually buying, what you need for your type of company, and how to get more from the passport than a compliance checkbox.

The short answer

If you only have a minute, here's the whole guide in five points:

1. A Digital Product Passport service gets a product's data into a structured passport, gives it a permanent web address, puts that address on the product as a QR code, and keeps it available for the product's lifetime.
2. Hosting is your responsibility, not the EU's. The EU Registry only indexes passports. The full passport lives with you or your DPP service provider, and the ESPR expects a backup copy with an independent provider.
3. Serialization decides whether you need one passport per model, per batch or per unit. Your product rules decide this, and it drives most of the cost.
4. What you need depends on what you sell. Battery makers need item-level passports in months. Textile, furniture and appliance brands have time but should start on data now. US brands only need passports for products they sell in the EU.
5. The QR code is also your best post-purchase channel. The same scan can open registration, warranty, setup guides and support, which is how a compliance cost becomes a source of revenue and customer data.

---

What are Digital Product Passport services?

Digital Product Passport services are the software and expert work that make a product's passport exist, stay correct and stay reachable. They usually come as a platform plus implementation help, and they cover seven layers:

On top of these sits an eighth layer that the regulation doesn't require but your customers will notice: the experience people get when they scan. That's where passports either become a dead end or the start of a customer relationship.

For the legal side of the provider role (who counts as an independent DPP service provider and how the backup copy works), see our DPP service provider guide.

---

What a DPP implementation service includes

Buying a passport platform is like buying accounting software. The software matters, but the real work is getting your data into it. Most DPP projects follow the same six steps.

1. Scoping: which rules apply to which products

The first job is to sort your catalog by the EU rules that actually apply. Batteries follow the Battery Regulation. Textiles, furniture, iron and steel, aluminum, tyres and mattresses follow future ESPR delegated acts. Detergents and toys have their own regulations with later passport dates. Some products have no passport requirement at all.

A good service gives you a product-by-product view: required, preparing, voluntary or not required, with the date and the source for each. Our free DPP readiness checker and ESPR requirements checklist are a quick way to get a first answer.

2. Product-data migration

Your passport data already exists, just scattered across ERP and PIM systems, spreadsheets, supplier emails, PDF manuals and test reports. Migration means pulling it together, cleaning it and mapping it to passport fields.

Ask any provider how they handle:

• Bulk imports from CSV, spreadsheets and e-commerce catalogs
• ERP and PIM integration (SAP, Microsoft Dynamics, Oracle, Akeneo) for ongoing sync, not just a one-off upload
• Documents, because a lot of passport data is buried in PDFs, not in database fields
• Gaps: a clear list of what's missing per product, not a vague "data quality score"

3. Compliance data mapping and supplier collection

Much of a passport's data comes from your suppliers: material composition, recycled content, substances of concern, origin. The service should give suppliers a simple way to answer, ideally a portal where they upload declarations and certificates once and reuse them across customers.

Every value should be traceable to the document it came from. That's what makes a passport defensible in an audit.

How it works in Veribl. You send your supplier a data request for any passport field you need, or simply for everything that's still missing on a product. Save the requests you use often as templates. Your supplier sees the request in the Veribl supplier portal, where they can answer for every brand they supply. They drop in the files they already have (spec sheets, declarations, certificates, test reports), and AI fills in the request for them, with each value linked to the file and page it came from. The supplier checks the answers and sends them. You review what came back, and one click of Approve puts every answer in the right place on the passport, so nobody retypes data from PDFs. Because suppliers keep a library of their documents and past answers, the next request goes even faster.

4. Identifiers and serialization

Decide whether each product group needs passports at model, batch or item level (covered in detail below), then assign identifiers. If you already have GTINs, you're halfway there.

5. QR-code setup and testing

Generate codes, place them on product, packaging or documentation as your rules require, and test them on real printed samples before production. This step is often skipped and is the one most likely to cause expensive reprints. See the QR testing checklist below.

6. Launch, registration and upkeep

Publish passports, set who can see what, prepare Registry data, train your team and agree who updates passports when a supplier, material or repair process changes. A passport is a living record, not a one-time upload.

---

Where is a Digital Product Passport hosted?

This is the most common misunderstanding, so let's be precise.

The EU does not host your passport. The EU DPP Registry is an index. It stores identifiers and registration information and points to where the passport lives. The complete passport (composition, carbon footprint, repair information, documents) is hosted by the economic operator or a DPP service provider.

That makes hosting a long-term commitment. Here's what good passport hosting looks like:

• It lasts as long as the product. Your product rules set how long the passport must stay available, often a product's expected lifetime plus several years. For batteries and furniture, that can mean a decade or more.
• There's a backup with an independent provider. The ESPR expects a backup copy with an independent DPP service provider, so the passport survives if your company, or your software vendor, does not.
• The web address never changes. QR codes are printed once and live for years. The address they point to must keep working even if you change platforms. A passport on your own domain (for example passport.yourbrand.com) lets you switch providers without reprinting.
• It speaks two languages. People get a readable page. Software, customs systems and recyclers get a machine-readable version from the same address.
• Every version is kept. When a passport changes, older versions stay on record, so you can show what a product's passport said on the day it was sold.
• It can prove it hasn't been altered. With counterfeit products and greenwashing claims under scrutiny, a passport that can be independently checked carries more weight. Anyone can check a Veribl passport with our free passport verification tool.

Questions to ask about hosting

1. Who owns the passport data, and what exactly happens on the day our contract ends?
2. How long will you keep my passports available?
3. Can passports run on our own domain?
4. Can we export every passport, version and document in a standard format?
5. How is the independent backup copy handled?
6. Where is the data stored, and who can access it?
7. How do you keep restricted fields away from the public page?

---

How do people access a Digital Product Passport?

Scanning: QR codes, NFC and the GS1 Digital Link

For almost every product, access starts with a QR code on the product, its packaging or its documentation. Anyone can scan it with a phone camera. No app, no account.

Behind the best codes is a GS1 Digital Link: a web address that contains the product's GTIN (and, where needed, its batch or serial number), for example:

https://passport.yourbrand.com/01/09506000134352/21/A1B2C3

Here 01 marks the GTIN and 21 marks the serial number (10 would mark a batch). One code can serve your passport, product page and retail checkout systems, because the same standard is used for the 2D barcodes replacing traditional barcodes at the point of sale. You can create one with our free GS1 Digital Link generator.

NFC tags and RFID are optional extras for premium goods, textiles with sewn-in labels or products where a printed code would wear off. For most brands a well-placed QR code is enough.

What happens after the scan

A good passport recognizes who is asking and shows the right thing:

Restricted fields shouldn't sit behind a password your team has to email around. Look for access links or access requests that a brand can approve, time-limit and log.

QR code testing checklist

Before you send artwork to production, test codes on real printed samples, on the real material:

• Size: large enough for an older phone at arm's length. Around 2 × 2 cm is a sensible minimum for short links; longer links need more space.
• Quiet zone: a clear margin around the code, at least four modules wide.
• Contrast: dark code on a light background. Avoid colored codes on textured or glossy surfaces without testing.
• Durability: will it survive washing, heat, abrasion or years in a basement? Woven labels, laser marking and engraved plates behave differently from paper.
• Placement: findable by the people who need it, including after the packaging is thrown away.
• Destination: the right product, batch or unit opens; the page loads quickly on mobile data; the language matches the phone.
• Fallback: a short printed web address or ID near the code for people who can't scan.

Our free barcode generator creates print-ready QR and GS1 codes to test with.

---

What is serialization, and do you need it?

Serialization means giving each individual unit its own identifier, so each unit can have its own passport. It's the single biggest decision in a DPP project, because it changes how you print, how much data you store and how your factory works.

There are three levels:

When item level is required. The EU Battery Regulation requires a passport for each individual EV, light means of transport and industrial battery above 2 kWh from February 18, 2027, including data that changes over the battery's life, such as state of health. Our battery passport guide goes through every field.

When it's worth doing voluntarily. Even when model level is enough for compliance, item-level codes unlock a lot: you know exactly which unit a customer registered, warranty claims link to the right production date, counterfeit units stand out, and recalls can target specific units.

A sensible default: start at the level your rules require, but pick identifiers and a platform that can move to batch or item level later without reprinting your whole range.

---

What each type of company needs

Passport obligations are rolling out by product group, so two companies with the same "DPP project" can need very different things. Here is a practical summary as of October 2026. Dates for ESPR product groups are the Commission's indicative plans until each delegated act is adopted, so always check the current status.

A closer look: home appliance brands

Appliance brands get the most out of a passport-style QR code before any passport rule arrives. Since July 31, 2026, national laws applying the EU Right to Repair Directive cover washing machines, dishwashers, refrigerators, vacuum cleaners and more. That means repair information, spare-part availability and reasonable repair prices have to be easy to find.

Appliances also generate the most "how do I…" questions: installation, error codes, descaling, filter changes. A QR code on the appliance that opens the right manual section, a parts finder and an AI assistant trained on your own manuals answers those questions before they become support tickets or returns. See our page for home appliance brands.

A closer look: furniture manufacturers

Furniture is on the ESPR work plan, so passport rules are coming, just not yet. Use the time to fix data, which is the hard part: wood species and origin, foams and fillings, coatings, hardware, recycled content. Meanwhile, the QR code can already carry assembly guides (the most common reason for furniture returns), care instructions and spare parts. German manufacturers, among Europe's largest furniture producers, should check two things early: whether the service connects to their ERP (often SAP), and whether customer pages and guides read naturally in German as well as every export language. More in our furniture guide and on the furniture industry page.

A closer look: textile brands

Textiles combine complex supply chains, batch production and labels that must survive washing. Supplier data collection is usually the longest step. Our textile DPP guide covers the expected fields.

A closer look: multi-brand manufacturers

Groups that own several consumer brands have one extra requirement: shared data underneath, separate brands on top. Suppliers, materials and declarations are usually shared across brands, so they should be collected once. Customers, though, should only ever see the brand they bought, on that brand's own domain, design and language. Ask for reporting per brand and across the group, and for permissions that keep each brand team in its own lane. Veribl handles multi-brand groups on its Enterprise plan.

---

What "ESPR-aligned data" actually means

Many vendors say their software is "ESPR-ready". Since most ESPR product groups don't have final field lists yet, here is what that claim can fairly mean today:

• Structured fields, not PDFs. Each value (fibre composition, recycled content, carbon footprint) is its own field with a unit and a source, so software can read it.
• Fields per product group. Each delegated act will set its own list. The software should let you add or change fields when an act is adopted, without a rebuild.
• Standard identifiers. GTINs, batch and serial numbers in GS1 Digital Link format, plus operator and facility identifiers where required.
• A machine-readable version at the same web address as the human page, so customs systems, marketplaces and recyclers can read it.
• The harmonized standards. Six DPP standards were published in July 2026: EN 18216 (data exchange), EN 18219 (identifiers), EN 18220 (data carriers), EN 18221 (storage and persistence), EN 18222 (APIs) and EN 18223 (interoperability). Ask a vendor which ones they follow today and which are still in progress.
• Translations. Passport text in the language of each market you sell in.

A vendor that claims to know the final field list for textiles or furniture today is guessing. A good one shows you what is in force, what is planned and where each requirement comes from.

---

Compliance data mapping and audits

A passport is only as good as the evidence behind it. When an authority, a retailer or a journalist asks "how do you know?", you need an answer within minutes, not weeks.

Look for a service that:

• Links every value to a source: the supplier declaration, certificate or test report it came from
• Collects supplier evidence in one place, with reminders before certificates expire
• Keeps every published version, so you can show exactly what a passport said on any date
• Logs every change, with who made it and when, including changes made with AI help
• Seals published records so they can't be quietly altered later, and anyone can check them
• Separates record-keeping rules from passport rules. RoHS, REACH and similar rules need documentation, but they don't all belong on a public passport

---

Beyond compliance: what else the passport can do for you

Here's the part most DPP buyers miss. The passport QR code is the only marketing channel that is printed on every product you sell, by law, for the product's whole life. It reaches the people who actually own your products, including the ones who bought through a retailer or marketplace and never gave you an email address.

If the scan only shows a compliance data sheet, you've paid for a channel and switched it off. If it opens a useful product page with self-service built in (guides, troubleshooting, an AI assistant, registration and a way to reach support), the same scan does a lot more. This matters most for brands that sell through retailers: when a product goes wrong, the customer goes back to the store or calls you. A good scan experience reaches them first.

The post-purchase funnel, from one scan

Research from Bain suggests digital passports could double customer lifetime value when brands use them this way. For the full picture of what a strong post-purchase journey looks like, see our guide to the post-purchase growth loop.

Keep customer data out of the passport itself

One rule matters as soon as the passport and the customer experience share a QR code. The ESPR says personal data about customers must not be stored in the passport without their explicit consent. The European Commission's own DPP FAQ adds that general access to passport information should be anonymous: nobody should have to sign in to read the public fields.

In practice, that means two separate records behind one scan:

• The passport describes the product: materials, origin, repair, recycling. Anyone can read it without identifying themselves.
• The owner record (registration, warranty, purchase details, support history) lives in your customer data, collected with clear consent under the GDPR and never written into the passport.

A good service keeps the two apart for you, so registration can never leak into a public passport and the passport never asks a shopper for an email address just to read it.

What to measure

Once passports are live, track:

• Scan rate: scans per unit sold, by product and channel
• Registration rate: share of scans that turn into a known owner
• Support deflection: questions answered on the page instead of by your team
• Return rate for products with good setup guides versus without
• Attach rate for extended warranties, accessories and spare parts
• Owner sentiment: who is happy, who is at risk, and why

---

How Vera, Veribl's AI assistant, takes the busywork out of passports

The slowest part of any DPP project isn't the regulation. It's turning hundreds of documents into clean, structured data. That's why we built Vera, the AI assistant inside Veribl, for your team.

What Vera does for passport work:

• Turns documents into data. Hand Vera a supplier spreadsheet, a spec sheet or a test report, and it fills in your product and passport data, telling you which values it found and what's still missing.
• Turns manuals into product pages. Give it a PDF manual and get clear setup and troubleshooting guides for your product page, with the manual's diagrams, translated into every language you sell in.
• Sets up products from a photo. A picture of a label or barcode is enough to start a product.
• Looks up EU law. Ask which rules apply to a product and Vera points to the exact article, with a link to the official text, so you can check it yourself.
• Tells you how things are going. Ask which products are behind on passport data, which owners are unhappy or what needs attention this week.

You stay in control. Vera can look things up on its own, but every change waits for you to click Apply, and each one is logged as an AI change made on your behalf. Vera costs $19 per person a month, and your whole team can use it during the 14-day free trial. Meet Vera.

---

How to compare Digital Product Passport services

Most DPP vendors fall into two camps: compliance infrastructure (data, hosting, registry) and customer experience (pages, registration, support). Our comparison of the two goes deeper. Whichever you look at, score them on the same questions:

Run a pilot before you sign

Demos always look good. Before you commit, test a service with one real product family and your own messy data:

1. Import a product with variants and at least one missing document.
2. Publish the passport and scan the printed code on a real phone.
3. Change a value after publishing and check that the old version is kept.
4. Test access: open a restricted field as a member of the public, then as an approved repairer.
5. Export everything and look at what you would walk away with.

And ask to scan a passport the provider serves in production today, for a product a real customer bought. A mock-up is not a passport.

---

What Digital Product Passport services cost

Prices vary widely, but the cost drivers are consistent:

• Number of passports, and above all whether you need batch or item level
• Integrations with ERP, PIM and production systems
• Supplier onboarding, which grows with the number of suppliers
• Content work, such as manuals, guides and translations
• Add-ons like your own domain, API access and single sign-on
• Your own team's time, often the biggest hidden cost: chasing supplier data, cleaning records and approving changes
• Upkeep, because passports must be updated whenever a product, supplier or rule changes

Compare offers on the same scope and over several years, not on the first-year license alone. Be wary of per-scan pricing without a ceiling: a successful campaign shouldn't turn into a surprise invoice.

For reference, Veribl offers 100 passports free forever and paid passport tiers from $29 a month for 500. See pricing.

---

A launch checklist you can use this week

1. List your product groups and check each against the ESPR requirements checklist.
2. Name the economic operator for each market: you, your importer or your representative.
3. Pick a pilot: one product family that reflects your catalog's complexity.
4. Gather the documents for it: spec sheets, supplier declarations, manuals, test reports.
5. Decide the identifier level: model, batch or item.
6. Print and test a QR code on the real material, using the checklist above.
7. Design the scan for people, not just auditors: registration, warranty, guides, support.
8. Agree who keeps it current when products, suppliers or repair processes change.

Run the free DPP readiness checker to see your gaps in a few minutes.

This article is for general information and isn't legal advice. Passport obligations depend on the EU legislation for each product group, and dates for ESPR product groups remain indicative until the delegated acts are adopted. Check the official European Commission sources and talk to a qualified adviser about your products.