Security and Compliance

Your data In safe hands

The Digital Product Passport holds sensitive product and supply-chain data. Here is how we protect it and which standards we work to.

Data security

ISO/IEC 27001:2022 certification for information security management (reg. no. BG2026030401).
Infrastructure on AWS with role-based access and encryption.
Three access tiers — public (consumer), professional (technical data), and authority (full certificates via eIDAS).

Compliance and standards

eIDAS authentication for authority-tier access.
Conformance with the European CEN-CENELEC standards for the DPP (the EN 18216–18223 series) for identification, security, and long-term data storage.
Member of the CIRPASS-2 Stakeholder Community — the EU initiative preparing the DPP.

Retention and audit

An immutable audit trail and long-term data retention in line with requirements.
Full data portability in open standards (JSON-LD, Schema.org) — no vendor lock-in.

Have a question about the security or compliance of a specific process? Book a free consultation and we’ll answer it concretely.