// SPOKE — DPP REGISTRY
DPP Registry Explained — How Digital Product Passport Infrastructure Works
A Digital Product Passport registry is the infrastructure that hosts DPP data and makes it accessible to market surveillance authorities, customs officials, consumers, and recyclers. Under ESPR (EU 2024/1781), every product requiring a DPP must have its DPP data hosted in a compliant registry. This page explains how DPP registries work, what technical requirements they must meet, the difference between the EU Product Database and third-party registries, and how to register your products.
What Is a DPP Registry?
A DPP registry is a digital infrastructure system that stores, manages, and provides access to Digital Product Passport data. The registry is the backend system that the QR code or NFC chip on a product links to — when a market surveillance authority, consumer, or recycler scans the data carrier on a product, they are directed to the DPP data stored in the registry. The registry must be accessible via a standardised API, must store DPP data in a machine-readable format (JSON-LD is the expected standard), and must implement access controls that allow different stakeholders to access different subsets of the DPP data.
The registry must also guarantee data durability — the DPP data must remain accessible throughout the product's entire lifecycle, including after the manufacturer ceases to exist. This durability requirement is one of the most technically challenging aspects of DPP registry compliance, because it requires either escrow arrangements, data transfer agreements with the EU Product Database, or other mechanisms to ensure that DPP data does not disappear if the manufacturer goes out of business or the registry operator ceases operations.
The EU Product Database
ESPR Article 12 requires the Commission to establish and maintain an EU Product Database that serves as the central registry infrastructure for ESPR. The EU Product Database will store DPP data for all products subject to DPP requirements and will provide a standardised API for accessing DPP data. The database will also serve as the registry for EU Declarations of Conformity and technical documentation references.
The EU Product Database is being developed by the Commission and is expected to be operational before the first DPP requirements enter into force (i.e., before the Battery Regulation DPP requirements apply in February 2027). However, the Commission has indicated that manufacturers will also be able to use accredited third-party DPP registries, provided that those registries meet the technical specifications for data accessibility, portability, security, and durability, and that they integrate with the EU Product Database for market surveillance authority access.
Third-Party DPP Registries
Third-party DPP registries are commercial or non-profit services that provide DPP hosting and management services to manufacturers. They offer an alternative to self-hosting DPP data and to using the EU Product Database directly. Third-party registries typically provide a user-friendly interface for uploading and managing DPP data, automated data carrier generation (QR codes and NFC chip programming), API access for integration with the manufacturer's ERP or PLM systems, access control management for different stakeholder types, and data durability guarantees.
For most manufacturers — particularly SMEs and exporters who do not have dedicated IT resources — a third-party registry is the most practical and cost-effective approach to DPP compliance. The registry provider handles the technical complexity of meeting the ESPR technical requirements, leaving the manufacturer to focus on providing accurate product data.
Technical Requirements for DPP Registries
ESPR Article 10 and the implementing regulations set out the technical requirements for DPP systems. The key requirements are: data accessibility (the DPP data must be accessible via a standardised API at all times, with a minimum uptime of 99.9%); data portability (the DPP data must be exportable in a standardised machine-readable format, enabling transfer to another registry or to the EU Product Database); data security (the registry must implement appropriate security measures to prevent unauthorised access, modification, or deletion of DPP data); data accuracy (the registry must implement mechanisms to verify the accuracy of DPP data and to flag data that appears to be inconsistent or incomplete); and data durability (the registry must guarantee that DPP data remains accessible for the full lifecycle of the product, including after the manufacturer ceases to exist).
How to Register a DPP
The DPP registration process involves the following steps. First, select a DPP registry — either the EU Product Database (when available) or an accredited third-party registry such as digitalproductpassports.co.za. Second, create a product record in the registry, providing the product identification data (manufacturer details, product model, batch or serial number). Third, upload the DPP data for the product, including all the data categories required by the applicable delegated act. Fourth, generate the data carrier (QR code or NFC chip programming data) that links to the DPP record. Fifth, affix the data carrier to the product, its label, or its packaging. Sixth, verify that the data carrier correctly links to the DPP data by scanning it with a standard QR code reader or NFC reader.
| Registry Type | Operator | Cost | Best For | Status |
|---|---|---|---|---|
| EU Product Database | European Commission | Free (planned) | All manufacturers | In development |
| digitalproductpassports.co.za | LinkDaddy® LLC | Subscription | African exporters, SMEs | Operational |
| Self-hosted registry | Manufacturer | High setup cost | Large manufacturers with IT resources | Available |
| Industry consortium registries | Industry associations | Membership fee | Sector-specific manufacturers | Emerging |
Frequently Asked Questions
A DPP registry is a digital system that stores and provides access to Digital Product Passport data. It is the backend infrastructure that the QR code or NFC chip on a product links to, making DPP data accessible to authorities, consumers, and recyclers.
No. ESPR permits manufacturers to use accredited third-party DPP registries, provided they meet the technical requirements for data accessibility, portability, security, and durability. The EU Product Database will be available as a free option when it launches.
Yes, but self-hosting requires significant technical investment — API development, security implementation, durability guarantees, and integration with the EU Product Database for market surveillance access. Most SMEs and exporters find third-party registries more practical.
DPP data must be accessible throughout the product's entire lifecycle — which for durable goods may be 10–20 years or more. The registry must guarantee data durability beyond the manufacturer's existence.
ESPR implementing regulations are expected to require JSON-LD as the primary machine-readable format for DPP data, aligned with the W3C Verifiable Credentials standard and the GS1 Digital Link specification.
What a DPP Registry Does
A Digital Product Passport registry is the infrastructure layer that stores, manages, and provides access to DPP data records. The registry receives DPP data from manufacturers, assigns unique product passport identifiers, links those identifiers to data carriers (QR codes, NFC chips), and makes the DPP data accessible to authorised parties throughout the product's lifecycle. The registry is the persistent, durable storage layer that ensures DPP data remains accessible even after the manufacturer ceases to exist.
A compliant DPP registry must meet the technical requirements set out in the ESPR implementing regulations. These requirements address data security (DPP data must be protected against unauthorised modification), data integrity (the registry must be able to demonstrate that DPP data has not been altered since it was submitted), data accessibility (DPP data must be accessible 24/7 via a standardised API), data portability (DPP data must be exportable in machine-readable formats including JSON-LD), and data durability (DPP data must be preserved for the full lifecycle of the product, which may be 10–25 years for durable goods).
The EU Product Database vs. Third-Party Registries
The EU is developing a centralised product database (the ESPR Product Database) that will serve as the reference registry infrastructure. However, the regulation explicitly permits manufacturers to use accredited third-party DPP registries that meet the technical specifications. Third-party registries offer several advantages over the EU Product Database: faster onboarding (the EU Product Database is still under development), more flexible data management tools, sector-specific features (such as battery state of health tracking or textile supply chain traceability), and integration with existing product information management systems.
The key requirement for any DPP registry — whether the EU Product Database or a third-party registry — is that it must be accessible to market surveillance authorities, customs authorities, consumers, and recyclers. This means that the DPP data must be publicly accessible (for the data categories that are required to be public) and that the registry must provide an API that allows authorised parties to query DPP records by product passport identifier, GTIN, or other product identifier.
How to Register a DPP at digitalproductpassports.co.za
The DPP Registry at digitalproductpassports.co.za provides the infrastructure to mint, host, and verify DPP records for manufacturers and exporters supplying the EU market. The registration process involves: creating an account and verifying your organisation's identity; submitting your product information (product model, batch or serial numbers, material composition data, performance data, and compliance documentation); receiving a unique product passport identifier for each product or batch; generating a GS1 Digital Link QR code that links to your DPP record; and receiving a hosted DPP record that is accessible to market surveillance authorities, customs authorities, and consumers.
The registry provides ongoing management tools that allow you to update DPP data as products are repaired, refurbished, or reach end-of-life. It also provides verification tools that allow market surveillance authorities and customs officials to verify the validity of a DPP by scanning the QR code. The registry is designed to meet the technical requirements of ESPR implementing regulations and is updated as those requirements are finalised.
DPP Registry Selection Criteria
When selecting a DPP registry provider, manufacturers should evaluate the following criteria. Technical compliance: does the registry meet the technical requirements of ESPR implementing regulations, including the data architecture requirements, the API specifications, and the data carrier standards? Data security: does the registry use appropriate security measures to protect DPP data against unauthorised access and modification? Data durability: does the registry have a credible plan for preserving DPP data for the full lifecycle of the product, including after the manufacturer ceases to exist? Integration: does the registry provide APIs and integration tools that allow DPP data to be submitted from the manufacturer's existing product information management systems? Verification: does the registry provide verification tools that allow market surveillance authorities and customs officials to verify the validity of a DPP?
Cost is also a consideration, but it should not be the primary criterion. The cost of a DPP registry is small relative to the cost of non-compliance — a product withdrawal order or market ban is far more expensive than the annual fee for a DPP registry subscription. Manufacturers should evaluate registry providers on the basis of technical capability and compliance credibility, not on the basis of the lowest price.
DPP Data Management Over the Product Lifecycle
The DPP is not a static document that is created once and never updated. ESPR requires that DPP data be updated throughout the product's lifecycle to reflect changes in the product's condition. For durable goods, this means updating the DPP when the product is repaired, refurbished, or repurposed. For batteries, it means updating the Battery Passport with state of health data as the battery ages. For products that contain substances of concern, it means updating the DPP if new information becomes available about the hazardous properties of those substances.
Managing DPP data over the product lifecycle requires a data management strategy that goes beyond the initial DPP creation. Manufacturers need to establish processes for collecting lifecycle data (repair records, refurbishment records, state of health measurements), submitting that data to the DPP registry, and ensuring that the updated DPP is accessible to authorised parties. For manufacturers with large installed bases of products in the field, this is a significant data management challenge that requires investment in systems and processes.
// NEXT STEP
Register Your Digital Product Passport
Compliance with ESPR begins with a registered, machine-readable Digital Product Passport. The DPP Registry at digitalproductpassports.co.za provides the infrastructure to mint, host, and verify DPP records for manufacturers and exporters supplying the EU market.
Register Your Digital Product Passport →