Not as a general rule. For specific requirements, the ESPR provides certain simplifications for SMEs, and the European Commission is required to offer support measures (such as guidelines, digital tools, and training). However, there is no general exemption from the DPP obligation.

No US-controlled provider is involved anywhere in our stack: SecIdent is developed and operated entirely in Europe, in German data centers, by a German company. There is no party in the chain through which the US CLOUD Act or similar extraterritorial laws could reach your data.

ESPR does not mandate a single carrier. EN 18220:2026 treats QR Code, Data Matrix, NFC, HF RFID and UHF RFID as admissible technologies and provides selection criteria rather than a fixed choice. The binding requirement is set per product group in the applicable delegated act. QR is the pragmatic default for consumer and authority access; RFID and NFC earn their place in specific operational scenarios. We help you read the selection criteria against your actual production and logistics reality.

We build to align with the published standards (EN 18216, 18219–18223) and track the two pending ones (EN 18239, EN 18246). Nobody can honestly claim certified conformity yet: the standards are published but not yet harmonized, and revisions are possible. We say so — and we adapt when they change.

Yes, by design. The DPP ecosystem makes you, the economic operator, legally responsible for your passports; we keep you in charge accordingly. Built-in export produces XML and PDF for full lot documentation, and a documented handover workflow or custom export moves everything to a successor system. Leaving SecIdent is a documented path, not a negotiation.

SecIdent helps customers identify relevant data sources in their supply chain, assign attributes at batch and type label level, and structure data flows step by step, without requiring full ERP integration beforehand. The experience gained from over a decade of regulated data processes (including pharmaceutical serialization in accordance with 2011/62/EU) flows directly into this consulting service.

Your data and your resolver domain remain yours. The DPP ecosystem is decentralized by design, and you, as the economic operator, are responsible for your passports, so SecIdent is built to let you export your data and move your resolver elsewhere. We treat that as a requirement of the regulation, not a concession.

On the battery. Article 13(7) of Regulation (EU) 2023/1542 requires the QR code to be printed or engraved visibly, legibly and indelibly on the battery; placement on packaging or accompanying documents is permitted only where the nature and size of the battery make on-product marking impossible or unwarranted. For EV, LMT, and industrial batteries over 2 kWh that QR code must resolve to the battery passport under Article 77.

An honest assessment: building or self-hosting gives you full control, no license fees and an exact fit — and it can be the right call if you have a permanent team for it. Weigh against that: the regulation is a moving target (two standards pending, the Article 77 implementing act ahead, revisions signalled), the audit and validation burden, printing-line integration, registry connection, and liability sitting with you as economic operator. A passport platform is not a project that ends — it is a product that must be maintained for as long as your batteries live. Most manufacturers underestimate that second part. If you build: budget for regulatory tracking as a standing function, not a side task.

Yes. A GTIN via a GS1 Company Prefix is inexpensive and quick to obtain, and it remains the best-supported default. Where your value chain is standardised on a different identifier system, EN 18219 admits alternatives. The decision is part of onboarding, not a blocker. We make sure you pick a scheme that the EU registry and your supply-chain partners will actually accept.

SecIdent is an established solution that has proven itself over many years in the highly regulated EU pharmaceutical context. It is ready for immediate use. It is not a prototype, beta version, or version 1.0.

In addition to the technical requirements for a DPP provider set by the EU, SecIdent offers advanced audit and validation options for maximum security and compliance. Digital sovereignty has always been a matter of course for us. We develop, operate, and host SecIdent 100% in Europe.

SecIdent has matured over many years and communicates seamlessly with printing systems, partner systems, and EU systems without the need for major integration projects. Thanks to its extended range of functions, which include geolocation, gray market detection, and document management, SecIdent also offers long-term added value beyond the pure DPP requirements.

A product page with a QR code simply displays information. A compliant DPP, however, must also provide structured, machine-readable data, adhere to standards and data carrier requirements, be connectable to the EU registry, and remain available over many years. SecIdent covers this entire framework—not just the presentation layer.

The base license starts at €490 per month, plus a volume component. The per-passport cost falls as volumes rise; we propose the most economical configuration for your case.

A structured digital dataset linked to a physical product via a data carrier, containing information on materials, hazardous substances, repairability, recyclability, and end-of-life handling. It is based on the EU Ecodesign Regulation (ESPR, Regulation (EU) 2024/1781).

Stable, established serialization and ID solution. Battery passports can be recorded and integrated into production immediately. Subject to the technical specifications from the EU, which are not yet final. These will be retrofitted as soon as possible (at no extra cost) as soon as they are available. The same applies to the connection and testing of the EC registry, which is expected to be available for the first time in summer 2026.

Manual entry or import of the data you already have. Customers issue their first valid passport in weeks, then automate data flows and partner integrations where the volume justifies it. The bottleneck is rarely the software — it is collecting supply-chain data, and that starts whenever you do.

From 18 February 2027, every EV battery, every LMT battery and every rechargeable industrial battery above 2 kWh placed on the EU market needs a digital battery passport, accessible through a QR code on the battery (Regulation (EU) 2023/1542, Article 77).

There is no single correct answer — it depends on your value chain, not on which identifier you happen to already own. ESPR Annex III calls for a GTIN per ISO/IEC 15459-6 “or equivalent”, and EN 18219:2026 confirms that issuing-agency schemes (GS1, others), web-URI schemes (ISO/IEC 18975), registry schemes (LEI, DOI), and self-issued decentralized identifiers are all admissible. The right choice balances regulatory acceptance, downstream tooling, and 10-year-plus persistence. We work through that trade-off with each customer in our optional onboarding workshop rather than defaulting everyone to the same scheme.