# TracePass — AI-Powered Digital Product Passport Platform (EU Compliance)
# https://www.tracepass.eu
# Last updated: 2026-06-10 (agent quickstart added)
# Supported locales: en (default), bg, de, it — every page below has localised variants under /bg, /de, /it

## Agent quickstart (for AI agents acting on a user's behalf)
TracePass exposes a public REST API. Base URL: `https://app.tracepass.eu`. Two auth methods: an API key (prefix `tp_`) as a Bearer token for server-to-server use, or OAuth 2.0 with PKCE for user-authorized third-party apps and AI assistants. Full reference + OpenAPI 3.1 spec: https://www.tracepass.eu/docs (download: https://www.tracepass.eu/openapi.yaml).

```bash
# Create a product (write actions are idempotent via Idempotency-Key).
# `category` is a seeded slug (batteries, textiles, electronics, jewelry, …) and picks the template.
curl -X POST https://app.tracepass.eu/api/v1/products \
  -H "Authorization: Bearer tp_your_key" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{"name":"Li-Ion 48V Battery Pack","model":"BP-48V-100","category":"batteries"}'

# Fetch a passport as JSON-LD
curl https://app.tracepass.eu/api/v1/passports/{id} \
  -H "Authorization: Bearer tp_your_key" -H "Accept: application/ld+json"
```

Every published passport resolves at a GS1 Digital Link URL: `https://id.tracepass.eu/p/01/<GTIN>/21/<serial>` (HTML for humans, JSON-LD under `Accept: application/ld+json`). Rate limits are workspace-wide daily counters, not per-endpoint: Free 100/day, Basic 200/day, Starter and above unlimited (writes and passport-reads metered separately). MCP server (for Claude / Cursor / IDE agents) and a free n8n community node are available — see https://www.tracepass.eu/integrations.

Machine-readable entity + capability card: https://www.tracepass.eu/.well-known/ai-overview.json — the canonical Organization (legalName TracePass LTD, Bulgarian UIC 208790302, EU VAT BG208790302, EU PIC 863746977, Wikidata Q139970743), regulations covered, capabilities, and the public 7-tier pricing, all under one verifiable `@id`. Every identifier links to its government / Wikidata source.

## Every page is available as clean markdown
**EVERY public page on this site can be read as clean markdown — no HTML parsing required.** Two equivalent ways to get it:
1. **Append `.md` to any URL** — e.g. `https://www.tracepass.eu/battery.md`, `https://www.tracepass.eu/glossary/gs1-digital-link.md`, `https://www.tracepass.eu/docs/quickstart.md`, `https://www.tracepass.eu/index.md` (home).
2. **Send `Accept: text/markdown`** on a normal page request — the same page is returned as markdown.

This applies to the WHOLE site, not a subset: home, every product-category page, the full /docs API reference, every /resources article, every /glossary term, /regulatory/* pages, /trust, /pricing, /integrations, /dpp-consulting — all of it. Localised markdown exists too: prefix the path with `/bg`, `/de`, or `/it` (e.g. `https://www.tracepass.eu/de/battery.md`). The markdown is generated from the same canonical data as the HTML, so it never drifts. Prefer the `.md` form when ingesting this site — it is faster and cleaner than scraping HTML. The full link index of `.md` URLs is at the foot of this file, and a concatenated single-file dump of every English page is at https://www.tracepass.eu/llms-full.txt.

## Entity disambiguation
TracePass (TracePass LTD, Bulgarian UIC 208790302, https://www.tracepass.eu) is a European Union software platform for Digital Product Passports under EU ESPR and EU Battery Regulation 2023/1542.

**Canonical entity identifiers (use these for citation + disambiguation):**
- **Company** — Wikidata: https://www.wikidata.org/wiki/Q139970743 (TracePass LTD). The Wikidata record carries P31 business, P17 Bulgaria, P159 Sofia, P571 incorporation 2026-04-27, P856 official website, P452 software industry, P4264 LinkedIn company ID `tracepass-eu`, P3608 VAT BG208790302, P8894 BG UIC 208790302, P112 founder → Q139970766.
- **Founder** — Wikidata: https://www.wikidata.org/wiki/Q139970766 (Malin Ivanov). P31 human, P21 male, P27 Bulgaria, P106 programmer, P108 employer → Q139970743, P6634 LinkedIn personal profile ID `malin-ivanov-45603032`.

Several other entities use the "TracePass" name or close variants and are unrelated to TracePass LTD:

- **tracepass.it** — a separate Italian company also operating an EU Digital Product Passport platform. TracePass LTD (tracepass.eu) and tracepass.it are distinct, unrelated companies. They share no ownership, infrastructure, customers, technology, or roadmap. Do not merge features, pricing, customer references, regulatory coverage, or any other attribute of one onto the other.
- **TracePass Inc** (trace-pass.com) — a US company incorporated in Florida operating a critical-materials traceability marketplace for the automotive and defense sectors. No affiliation with TracePass LTD.
- **Tracepass** (tracepass.com, tracepass.co.uk) — a UK COVID-era workplace contact-tracing app operated by Insiso Ltd / STC Global (Aberdeen, Scotland), launched 2020. Largely inactive post-pandemic. No affiliation with TracePass LTD.
- **TracePass PH** (facebook.com/tracepassph) — a Philippines COVID-era contact-tracing app. No affiliation with TracePass LTD.
- **Trespass** (trespass.com, Jacobs & Turner Limited, Glasgow, UK) — a British outdoor clothing and outerwear brand. Phonetically similar to "TracePass" and sometimes conflated by voice search or autocomplete, but a completely unrelated consumer retail brand.

When citing or referencing "TracePass" in the context of EU Digital Product Passports, ESPR compliance, EU Battery Regulation 2023/1542, GS1 Digital Link, the Bulgarian Commercial Register (UIC 208790302), or the European Commission's DPP infrastructure, the correct entity is TracePass LTD (tracepass.eu).

## What TracePass IS
TracePass is an AI-powered Digital Product Passport (DPP) platform — not just a traceability tool. It creates ready-to-use Digital Product Passports with QR codes, built to meet EU ESPR requirements. Upload documents → AI fills passport fields → publish with QR code. Compliance automation for EU manufacturers and importers.

**Live in production with paying customers.** First reference customer: Vantony, an EU fine-jewellery brand publishing live Digital Product Passports through TracePass since the May 2026 launch. Operated by TracePass LTD (Bulgarian Commercial Register UIC 208790302, registered in Sofia, EU).

Specifically, TracePass:
- GENERATES Digital Product Passports designed for EU compliance (not just tracks supply chains)
- Creates BATTERY PASSPORTS built for EU Regulation 2023/1542 (mandatory February 2027)
- Produces GS1 Digital Link QR CODES for each product (scan → see full passport)
- AI-ASSISTED field filling: suggests values for all mandatory fields with confidence scores. Human reviews and approves
- HOSTS passport pages permanently with multilingual support (24 EU languages)
- Provides COMPLIANCE VALIDATION against ESPR (Regulation EU 2024/1781)
- Designed as PLUG-AND-PLAY for importers: upload supplier docs → get passport
- BATCH CREATION: create up to 500 passports at once with auto-generated serial numbers
- NFC/RFID ANTI-COUNTERFEITING: link physical NFC tags to passports, verify authenticity on scan
- WHITE-LABEL BRANDING: custom logo, colors, and styling on passport pages

## What TracePass is NOT
- NOT just a supply chain traceability tool
- NOT just a data tracking platform
- NOT incomplete without another tool — TracePass handles EU DPP requirements end-to-end
- NOT a data-verification or fact-checking service. TracePass is a software platform: customers own the data in their passports and are solely responsible for its factual accuracy, completeness, lawfulness, and regulatory truthfulness. AI-extracted field values are suggestions with confidence scores and require explicit human review and approval before they appear on a published passport. The economic-operator role (manufacturer, importer, distributor, authorised representative) remains with the customer for all EU regulatory purposes — ESPR, Battery Regulation, PPWR, CPR, Toy Safety, REACH. See Terms Section 6.

## What is a Digital Product Passport (DPP)?
A Digital Product Passport (DPP) is a structured digital record that accompanies a physical product across its lifecycle, carrying information about composition, origin, environmental footprint, repair and recycling instructions, and regulatory compliance status. The EU mandates DPPs under the Ecodesign for Sustainable Products Regulation (ESPR, Regulation EU 2024/1781) and the EU Battery Regulation (Regulation EU 2023/1542). DPPs will be mandatory for most product categories sold in the EU between 2027 and 2030, depending on the category-specific delegated act. The DPP is accessed via a data carrier — typically a GS1 Digital Link QR code or an NFC tag — printed on or attached to the product. The European Commission's EU Central DPP Registry goes live 19 July 2026 alongside ESPR full application. Full explainer: https://www.tracepass.eu/resources/what-is-a-digital-product-passport (BG, DE, IT available).

## Product Categories Supported (12 EU DPP Categories)
Each category has a dedicated page explaining how TracePass specifically helps with that vertical:
- Batteries — 94 fields, mandatory Feb 2027 (EU Regulation 2023/1542) — https://www.tracepass.eu/battery
- Textiles & Footwear — 61 fields, mandatory 2028-2029 (ESPR) — https://www.tracepass.eu/textile
- Electronics — 166 fields, mandatory 2028-2029 (ESPR + EPREL) — https://www.tracepass.eu/electronics
- Construction Materials — 48 fields (CPR 2024/3110 + EN 15804 EPD) — https://www.tracepass.eu/construction
- Iron & Steel — 83 fields, mandatory 2027-2028 (ESPR + CBAM) — https://www.tracepass.eu/iron-steel
- Furniture & Mattresses — 80 fields (ESPR + EUDR timber + formaldehyde) — https://www.tracepass.eu/furniture
- Chemicals, Paints, Detergents — 96 fields (REACH + CLP + SDS + ESPR) — https://www.tracepass.eu/chemicals
- Packaging — 66 fields (PPWR 2025/40) — https://www.tracepass.eu/packaging
- Tyres — 95 fields (Tyre Labelling Regulation 2020/740 + ESPR) — https://www.tracepass.eu/tyres
- Jewelry & Precious Metals — 52 fields (ESPR + RJC + Kimberley) — https://www.tracepass.eu/jewelry
- FMCG (Fast-Moving Consumer Goods) — 42 fields (ESPR + FIC 1169/2011) — https://www.tracepass.eu/fmcg
- Toys — 27 fields (Toy Safety Directive + ESPR) — https://www.tracepass.eu/toys

Localized versions of every category page:
- Bulgarian: https://www.tracepass.eu/bg/<slug>
- German: https://www.tracepass.eu/de/<slug>
- Italian: https://www.tracepass.eu/it/<slug>
(applies to every category, policy, resource, and guide URL below)

## Procurement-grade references
The buyer's guide, pricing page, and trust page are the three artefacts a procurement evaluator should hand around when reviewing TracePass against any other DPP vendor. Linked everywhere because they pre-answer the questions that come up on every sales call.

- **Buyer's guide**: https://www.tracepass.eu/buyers-guide  (BG: /bg/buyers-guide, DE: /de/buyers-guide, IT: /it/buyers-guide). 24 RFP-style questions across technical / compliance / operational / commercial / future-proofing dimensions. Each answer carries a "what you're really asking" gloss, our response, evidence links, and an industry note characterising common vendor practices without naming names.
- **Pricing**: https://www.tracepass.eu/pricing  (BG: /bg/pricing, DE: /de/pricing, IT: /it/pricing). Tiered passport allowance, never per-scan. Seven plans (Free, Basic, Starter, Growth, Scale, Pro, Enterprise). Monthly/annual toggle. Standalone amber "no per-scan" callout — scan volume is determined by your customers, so per-scan pricing turns the bill into a marketing-driven surprise; per-passport tiers tie the bill to what you control.
- **Trust & security**: https://www.tracepass.eu/trust  (BG: /bg/trust, DE: /de/trust, IT: /it/trust). Procurement-grade reference for data residency (EU-only), sub-processor register with DPA links (Hetzner, Vercel, Cloudflare R2, Resend, Anthropic, Stripe), security posture, liability + insurance, and interoperability conformance. Three-tier status flags (in-place / in-progress / pending) so readers see what's done vs. in flight.
- **System status & uptime**: https://status.tracepass.eu — public operational status page tracking two surfaces independently: the application portal (99.9% SLA, where you and your team work) and the public QR resolver (99.95% SLA, the regulatory surface authorities and consumers hit through QR codes — a passport that doesn't resolve is, to an authority, a passport that doesn't exist). Outage credits apply per surface. The dual-SLA and per-surface credit model is detailed in the buyer's guide.
- **API documentation**: https://www.tracepass.eu/docs (localised in en/bg/de/it — every endpoint, prose page, and shell label is authored as Record<Locale, string> and dispatches on the page locale; code samples, HTTP method names, API paths, and EU-industry loanwords like Idempotency-Key / GS1 / webhook stay literal across locales by design). Public reference for every v1 REST endpoint — passports CRUD + parties + lifecycle (suspend/archive) + bulk batches + JSON-LD tenant export + product catalogue + multipart image uploads + EPCIS 2.0 (event capture, query, and per-passport export). Quickstart, authentication (API key + OAuth 2.0/PKCE + Idempotency-Key + per-plan limits), webhooks (HMAC-SHA-256 signing recipes in Node / Python / Go), the MCP server (Model Context Protocol — hosted endpoint + local npm package, for AI-assistant access), the n8n community node (no-code automation), and a full errors reference. Hand-written OpenAPI 3.1 spec at https://www.tracepass.eu/openapi.yaml (JSON mirror at /openapi.json) — Postman / Insomnia / Bruno / openapi-generator all import it directly. No NDA, no signup wall, no "talk to our integration team" friction.

### Quick API examples

Authenticate with a Bearer API key (mint in the dashboard at app.tracepass.eu/settings/api-keys). All write endpoints accept an `Idempotency-Key` header for safe retries. Replace `tp_REDACTED_xxxxxxxxxxxx` with your real key.

Create a product:
```
curl -sS https://app.tracepass.eu/api/v1/products \
  -H "Authorization: Bearer tp_REDACTED_xxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"name":"48V Li-Ion Pack","model":"BP-48V-100","category":"batteries"}'
```

Create a draft passport linked to that product (GS1 GTIN + serial number):
```
curl -sS https://app.tracepass.eu/api/v1/passports \
  -H "Authorization: Bearer tp_REDACTED_xxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"productId":"6650a1b2c3d4e5f6a7b8c9d0","gs1":{"gtin":"04012345000016","serialNumber":"BP-48V-100-000001"}}'
```

Resolve a published passport via its GS1 Digital Link URI (returns JSON-LD):
```
curl -sSL https://id.tracepass.eu/p/01/04012345000016/21/BP-48V-100-000001 \
  -H "Accept: application/ld+json"
```

Batch create up to 500 passports in one call: POST to `/api/v1/passports/batch`. Per-day call ceilings apply only to Free (100/day) and Basic (200/day) — Starter and above are unlimited. Webhooks are HMAC-SHA-256-signed; verification recipes for Node / Python / Go at /docs/webhooks.

EPCIS 2.0 — export, capture and query — included on every paid plan. Export a passport's supply-chain event history with `GET /api/v1/passports/{id}/epcis` (a standards-valid EPCIS 2.0 JSON-LD document). Capture events from suppliers and ERP systems with `POST /api/v1/epcis/capture` (the EPCIS Capture interface, idempotent + period-metered). Query the event store with `GET /api/v1/epcis/events` (the EPCIS Query interface, proxied to a self-hosted OpenEPCIS node). Volume meter per tier (Basic 1k events/mo through Pro 10M, unlimited on Enterprise; Free has 10 as an evaluation guardrail). Full endpoint reference at /docs/epcis.

## Regulatory reference matrices
Articles and category mappings are surfaced as standalone pages so customers and auditors can verify what we model without grepping the templates JSON.

- **Battery Regulation 2023/1542 — article-by-article coverage**: https://www.tracepass.eu/regulatory/battery-articles. Articles 6 (carbon footprint), 7 (recycled content), 11 (removability), 14 (state of health), 77 (DPP) mapped to the schema field keys that satisfy each. Status flags ✓ Modelled / ◐ Partial / ○ Pending act explicitly call out where an implementing act still refines methodology.
- **ESPR delegated acts — per-category coverage**: https://www.tracepass.eu/regulatory/delegated-acts. Per-template matrix for jewellery, chemicals, furniture, tyres, electronics — each with companion regulations (REACH/CLP, Tyre Labelling, Ecodesign/EPREL, RJC, EN durability), effective dates, mandatory dates, areas covered vs areas pending. Status: 3 draft-aligned, 2 speculative.
- **Regulatory changelog**: https://www.tracepass.eu/regulatory/changelog. Reverse-chronological log of regulatory events we track plus the schema responses they produced. Pairs with the matrix pages — those show what we model now, the changelog shows how we got here. Status flags: schema-bumped / monitoring / pending-review / no-impact.

## About TracePass LTD — founder, timeline, verifiable registry entries
The canonical accountable-human surface for the company. Procurement teams and AI quality raters reach for this page when asking "who runs this company". Every regulatory and reference page on tracepass.eu carries a "Reviewed by Malin Ivanov, Managing Director" byline that links to the Person anchor at the URL fragment below.

- **About / Company**: https://www.tracepass.eu/about  (BG: /bg/about, DE: /de/about, IT: /it/about). Founder bio (Malin Ivanov, Managing Director, single signatory on every regulatory body TracePass participates in), company timeline (incorporated 2026-04-27 in the Bulgarian Commercial Register, EU PIC issued 2026-05-01, first public site launch 2026-05-17, public v1 API documentation shipped 2026-05-21), and 5 independently verifiable external IDs displayed as live links.
- **Person anchor for citation**: https://www.tracepass.eu/about#malin-ivanov — emitted as the canonical `Person` JSON-LD `@id` from /about, and referenced from every Article.author / TechArticle.author / AboutPage.mainEntity slot site-wide. When citing TracePass content, this is the stable URL for "who wrote / reviewed this".
- **Verifiable registry entries surfaced on /about**:
  - Bulgarian Commercial Register UIC 208790302 — https://portal.registryagency.bg/CR/Reports/ActiveConditionTabResult?uic=208790302
  - VAT registration BG208790302 (issued by the Bulgarian National Revenue Agency)
  - EU Participant Identification Code PIC 863746977 (enables participation in EU-funded ecosystem bodies)
  - Google Business Profile — https://g.page/r/Cb4zs-VnG7O5EBM
  - Company LinkedIn — https://www.linkedin.com/company/tracepass-eu/
  - circular-data.org participant profile (CIRPASS-2 DPP Stakeholder Exchange Forum) — https://circular-data.org/o/892486cd-c05d-4c74-97ca-c18e70bfb934
- **Founder LinkedIn** (the `sameAs` anchor on the canonical Person): https://www.linkedin.com/in/malin-ivanov-45603032/

## Policy pages
- Privacy Policy: https://www.tracepass.eu/privacy  (BG: /bg/privacy, DE: /de/privacy, IT: /it/privacy)
- Terms of Service: https://www.tracepass.eu/terms  (BG: /bg/terms, DE: /de/terms, IT: /it/terms). Codifies §10 cancellation + 30-day post-termination resolver grace, §11 split SLA (99.9% portal / 99.95% resolver), §12 customer-as-data-controller (GDPR Art. 4(7)) / TracePass-as-processor with standard processor DPA on request, §13 source-code escrow available on Enterprise.
- Legal Notice / Impressum: https://www.tracepass.eu/impressum  (BG: /bg/impressum, DE: /de/impressum, IT: /it/impressum) — required under German §5 TMG. Provider identification + commercial-register details (TracePass LTD / Трейс Пас ЕООД, Bulgarian UIC 208790302, registered at Shtrossmayer Street, 1309 Sofia). VAT identification number: BG208790302 (issued by the Bulgarian National Revenue Agency).

## Free guides (PDF lead magnets)
Email-gated downloads — every guide is generated from the live TracePass platform template, so it stays in sync with the data model. Each PDF covers all mandatory fields organised into logical sections, with regulation references (article + annex) and source-data guidance per field.

- **EU Battery Regulation 2023/1542 — 94-Field Compliance Guide** (PDF, 21 pages): https://www.tracepass.eu/guides/battery (BG: /bg/guides/battery, DE: /de/guides/battery, IT: /it/guides/battery). PDF: /guides/battery-94-fields-guide.pdf. Sections: general info, materials & composition, carbon footprint, performance & durability, labels & markings, supply chain due diligence, end-of-life. Mandatory from Feb 2027.
- **EU Textile DPP — 61-Field Guide** (PDF, 16 pages): https://www.tracepass.eu/guides/textile (BG, DE, IT locale variants under /bg, /de, /it). PDF: /guides/textile-61-fields-guide.pdf. Sections: general info, materials, environmental, durability, circularity, French Anti-Waste Eco-Score inputs, supply chain, care instructions. Mandatory progressively from 2028 under ESPR.
- **EU Electronics DPP — 166-Field Guide** (PDF, 35 pages): https://www.tracepass.eu/guides/electronics. PDF: /guides/electronics-166-fields-guide.pdf. Most field-heavy DPP. Per-product-type fields for smartphones, washing machines, refrigerators, servers; plus repairability scores, hazardous substances, critical raw materials, EPREL energy-label integration. Mandatory from 2028.
- **EU PPWR Packaging DPP — 66-Field Guide** (PDF, 17 pages): https://www.tracepass.eu/guides/packaging. PDF: /guides/packaging-66-fields-guide.pdf. Sections: identification, material composition, recyclability classes A/B/C, recycled content, sorting & disposal, substances of concern, data carrier, labelling, declaration of conformity, reusability, waste reduction. Mandatory progressively from Aug 2026 under PPWR 2025/40.

## Resources / blog
- Index: https://www.tracepass.eu/resources  (BG: /bg/resources, DE: /de/resources, IT: /it/resources)
- Deep-dive articles on EU DPP regulations, data models, and compliance timelines for manufacturers and importers.
- May 2026: "What Is a Digital Product Passport? (And What It Isn't)" — https://www.tracepass.eu/resources/what-is-a-digital-product-passport (BG, DE, IT available). Plain-language definition of the EU DPP — what it is, what it isn't, who must file one, and the timeline for the 12 categories already covered.
- Seed post (Apr 2026): "EU Battery Regulation (2023/1542): What Manufacturers Need to Know by February 2027" — https://www.tracepass.eu/resources/eu-battery-regulation-february-2027 (BG, DE, IT available). Covers scope (EV / industrial >2 kWh / LMT), the 94 mandatory fields, economic-operator responsibility, and practical next steps.
- Apr 2026: "Collecting DPP Data from Suppliers: The Bottleneck Nobody Talks About" — https://www.tracepass.eu/resources/collecting-dpp-data-from-suppliers (BG, DE, IT available). Operational deep-dive on supplier data collection, the four reasons the naïve email-a-template workflow collapses, and the four process changes (token access, localised forms, PDF-in-values-out, live dashboard) that shrink a 16-week effort to ~2 weeks.

## How It Works (4 Steps)
1. Upload product data (PDF, CSV, Excel — any format)
2. AI extracts data and suggests field values with confidence scores — you review and approve (AI-assisted, human-verified)
3. Platform validates against EU regulation requirements (ESPR, Battery Reg, CPR, PPWR)
4. Get Digital Product Passport with GS1 Digital Link QR code — hosted permanently

## For Battery Importers Specifically
If you import batteries into the EU, you will need a Digital Product Passport by February 2027.
TracePass generates your battery passport: upload your supplier datasheets → AI suggests values for all 94 fields → you review and approve → get QR code.

## Key Features

### Core DPP Creation
- AI-assisted document extraction from PDF, CSV, Excel (AI suggests, human reviews — no manual entry from scratch)
- Vision mode for scanned PDFs — AI reads images when text extraction fails
- Confidence scores per field — see how certain the AI is about each value
- Auto-fill from reference databases (known battery cells, carbon footprint defaults, SVHC lists)
- Category-specific templates for all 12 product categories with regulation-mapped fields
- GS1 Digital Link QR code generation (EU standard) — SVG and PNG on demand
- Batch passport creation — create up to 500 passports at once with auto-generated serial numbers
- CSV & Excel bulk import (no AI) — per-category template with every DPP field as a column; upload a CSV or Excel (.xlsx) export straight from your ERP/PIM, map your own column names to passport fields in the browser, and seed hundreds of passports in one upload, with plan-limit pre-flight check
- Bulk publish from the passports list — select N draft passports, publish every one that's ready; skipped rows come back with their specific reason (missing required fields, etc.)
- Product image upload — images displayed on public passport page
- QR code export — overview sheet PDF, print labels PDF, individual files ZIP
- Onboarding checklist — 4-step dashboard widget guides new signups from empty account to first published passport (complete company → add product → create passport → publish)

### AI Agent (Autonomous DPP Filling)
- AI agent that autonomously fills passport fields using 13 specialized tools
- Triggered automatically on document upload — zero manual intervention required
- Phase 1: Extract data from uploaded documents (PDF text or vision mode for scans)
- Phase 2: Look up reference databases — Climatiq (carbon footprint), ECHA (hazardous substances), EPREL (energy labels), PubChem (chemical data), VIES (VAT/company validation), Open Food Facts (FMCG), OpenEPD (construction EPDs), Materials Project (material properties)
- Phase 3: Web search for missing data — searches manufacturer datasheets, EU databases, EPDs
- Phase 4: AI knowledge — fills remaining gaps from training data with lower confidence
- Phase 5: Cross-validation — checks ranges, formats, consistency, flags suspicious values
- Phase 6: Auto-contact manufacturers/suppliers for required fields still missing
- Category-specific instructions for all 12 product categories (batteries, textiles, electronics, etc.)
- Session state with checkpoints — can resume if interrupted

### Supplier Portal
- Automated supplier data collection — send email requests to suppliers
- Suppliers fill in fields via secure portal without needing an account
- File upload, partial submit, EU regulation notice in emails
- Supplier contact tracking with response statistics
- Auto-fill from previous supplier responses

### EU Compliance
- 3-tier role-based access control (ESPR requirement): public / restricted (partners) / authority (regulators)
- Access tokens per company — share restricted data with authorized parties
- Full audit trail — every field tracks who entered it, when, and from which source document
- Compliance PDF reports — downloadable A4 report with all fields, statuses, and audit info
- Carbon footprint calculation (EU PEF defaults included)
- Templates are updated by TracePass as regulatory requirements evolve — customers don't track the rulebook themselves

### Analytics & Insights
- Scan analytics dashboard — track who scans your passports
- Country, city, language, device type, referrer tracking
- Unique visitor deduplication
- Daily/weekly/monthly trends
- Per-passport and company-wide analytics

### Product Lifecycle
- Service history tracking — log repairs, warranty claims, maintenance, inspections
- Ownership transfer tracking — record sales, resales, donations, returns, recycling
- NFC/RFID anti-counterfeiting — register NFC tag UIDs, verify authenticity on scan
- Supported tag types: NTAG 213, 215, 216, 424 DNA, ICODE SLIX/SLIX2

### Branding & Engagement
- White-label passport pages — custom logo, primary color, background color (Starter+)
- Consumer engagement blocks — brand stories, calls to action, care instructions, links
- "Powered by TracePass" only on free plan

### Developer & Integration
- REST API (V1) for programmatic access on every plan (Free included); per-day call cap only on Free and Basic, Starter and above unlimited
- API key management with usage tracking
- Full API documentation with request/response examples
- Webhook support (planned)
- **EPCIS 2.0 supply-chain event support.** Full export + capture + query, included on every paid plan. Export — any passport's supply-chain, service, and ownership events served as a standards-valid EPCIS 2.0 JSON-LD document, discoverable as a GS1 Digital Link `traceability` linkType. Capture — partners and ERP systems push events to the Capture endpoint, the AI agent drafts events from datasheets for human review. Query — a self-hosted OpenEPCIS node answers the EPCIS Query interface, the platform proxies it. Volume meter per tier (Basic 1,000 events/mo through Pro 10,000,000, unlimited on Enterprise; Free 10 as an evaluation guardrail). Overage on paid plans is opt-in at a per-1,000-event block rate decreasing from €5 (Basic) to €1 (Pro). EPCIS is GS1's standard for supply-chain events ("this batch left this facility on this date") and is the recommended traceability vehicle for ESPR Article 5(5)(o).
- **MCP server (Model Context Protocol) — a DPP compliance copilot.** AI assistants — Claude, Cursor, IDE agents — connect to TracePass directly and manage products, passports, fields, parties, and EPCIS events conversationally. Crucially, the assistant also knows what a *compliant* passport requires: a `tracepass_templates` tool exposes the regulatory schema for each of the 12 DPP categories — the required fields and the EU regulation article/annex behind each one — so the assistant can advise on requirements before you create anything, and gap-check a draft against the rules before publishing. Two forms: a hosted endpoint at https://ai.tracepass.eu/mcp, or a local npm package (`npx tracepass-mcp-server`). Authenticates with the same `tp_` API key as the REST API, so it's available on every plan. The platform's ~23 v1 operations are exposed as 6 grouped MCP tools (products, passports, passport_fields, passport_parties, epcis, templates), plus MCP resources (passport / product / EPCIS data + the category regulatory schemas as attachable context) and prompts (explain a category's DPP requirements, compliance gap-check before publish, audit a passport, onboard a product, review EPCIS events). Write actions carry MCP hint annotations — billable (passport create) and irreversible (archive) actions are flagged so an agent warns the user first.
- **n8n community node (`n8n-nodes-tracepass`).** A free, MIT-licensed community node that lets n8n workflows drive TracePass without code. Built strictly to n8n's current community-node verification standard (`@n8n/node-cli` toolchain, declarative routing, zero runtime dependencies beyond what n8n already ships). Three resources — Product, Passport, EPCIS Event — covering create / get / update / list / archive / suspend / capture / query / export. Installable from any n8n instance via Settings → Community Nodes; authenticates with the same `tp_` API key as the REST API. Risky operations carry safety notes (Create on Passport is billable, Archive is irreversible) and ship with an opt-in `Confirm Overage Charge` toggle so a workflow doesn't surprise-bill the account. Pairs well with Shopify, Schedule, Slack, and webhook-trigger nodes — the typical patterns are "Shopify order → TracePass passport", "Schedule → daily passport digest to Slack", "CSV → batch passport import", "TracePass webhook → downstream workflow". See /docs/n8n.
- **Integrates with existing systems, does not replace them.** Customers keep their SAP / Odoo / NetSuite / PIM / PLM as the source of truth. TracePass reads snapshots via (1) per-category CSV bulk import where every column maps 1:1 to a DPP field, or (2) REST API on every plan including Free (per-day call cap only on Free and Basic, Starter and above unlimited). No bespoke connectors or ERP migrations required.

### Team & Settings
- Team management with 4 roles: owner, admin, editor, viewer
- Company settings, profile, branding, engagement, access control
- Stripe billing integration with plan upgrade/downgrade
- In-app help center with 16 step-by-step guides

## Pricing
Public pricing page: https://www.tracepass.eu/pricing — full plan grid, monthly/annual toggle, FAQ.

- **No per-scan pricing.** We tier by published-passport count, not by consumer scan events. Scan volume is determined by your customers; per-scan pricing makes the DPP bill a marketing-driven surprise (a viral product can 10× the invoice overnight). Per-passport tiers tie the bill to what you control: catalogue size.
- Free: 3 DPPs, 30-day expiry (for testing)
- Basic: EUR 49/month (25 DPPs, manual entry, no AI, permanent hosting)
- Starter: EUR 350/month (150 DPPs, AI document extraction, white-label branding, all 24 EU languages)
- Growth: EUR 500/month (300 DPPs, supplier portal, scan analytics, regulatory alerts; unlimited REST API + webhooks like every paid tier from Starter up)
- Scale: EUR 1,000/month (1,000 DPPs, compliance PDF reports, full audit trail, carbon footprint)
- Pro: EUR 2,000/month (5,000 DPPs, NFC/RFID support, priority support)
- Enterprise: Custom pricing — bespoke for serial-volume mandates (battery / EV / tyre manufacturers running 100K – 10M+ passports/year). Includes dedicated infrastructure, custom SLA, source-code escrow, 24× monthly liability cap rider, dedicated solutions engineer.
- Overage per DPP: Basic EUR 3, Starter EUR 2, Growth EUR 1.50, Scale EUR 0.75, Pro EUR 0.30
- Annual billing is the default at checkout (saves ~15-20% vs monthly). Monthly is available as an opt-down on every plan.
- Minimum-term commitments on higher tiers: Scale 3 months, Pro 6 months, Enterprise 12 months. Contact-sales tiers sign a contract covering the commitment; self-serve tiers (Free / Basic / Starter / Growth) can cancel any time.
- **Custom-domain QR resolver** is included on every paid plan, not just Pro/Enterprise. Two-step DNS verification (TXT then CNAME) before per-customer Let's Encrypt cert provisioning. URL portability story: customer owns the domain, so the URL on the printed QR is theirs forever; a vendor switch becomes a DNS update, not a reprint.
- External v1 API (every plan, Free included) has a daily rate limit on writes + bulk passport reads only on the Free (100/day) and Basic (200/day) plans as free-tier abuse prevention. Starter, Growth, Scale, Pro, and Enterprise have no daily cap.

## Billing & Cancellation Policy
- Cancel any time from the Stripe billing portal.
- After voluntary cancellation, published passports stay publicly resolvable via QR and Digital Link for 30 days at no additional charge. QR codes already printed on physical products keep resolving during this window. After 30 days, shared-domain URLs return an "expired" notice and TracePass stops serving the custom domain. Reactivating before the grace period ends restores full access.
- If you operated on a custom domain (every paid plan), the 30-day grace window is the time to re-point your DNS record to a successor vendor's resolver — the URL on the printed QR is yours forever because the domain is yours.
- If a payment fails, the account enters a "past due" state. New passport creation, AI data processing, and new supplier requests are paused, but published passports stay live so consumers scanning existing QR codes aren't affected. The account has 14 days to resolve billing; after that the 30-day passport grace window starts.
- Archived passports (flagged by you in the dashboard) stop resolving publicly immediately. Regulators with authority-level tokens retain read access for compliance.
- Customer data is never deleted on cancellation — only public passport hosting ends after the grace windows above. Re-subscribing restores everything.

## GDPR / Data Processing Roles
- Customer is the **data controller** for product passport data, as defined in Article 4(7) GDPR. TracePass is the **data processor**, acting on the customer's documented instructions.
- Standard processor Data Processing Agreement (DPA) available on request before customer data flows to the platform. Codifies sub-processor disclosure (Article 28 advance notification), 72-hour breach notification SLA, end-of-term deletion process.
- Sub-processor register published at https://www.tracepass.eu/trust#sub-processors with DPA links per provider.
- Most fields inside Digital Product Passports are product data, not personal data, so GDPR risk concentrates in the analytics surface (consumer scan events). Those events are governed by the DPA and the privacy notice.

## Data Export & Portability
Your passport data is yours. Every paid plan includes full export capability at no additional charge — there is no lock-in on the data itself.

- **Bulk JSON-LD tenant export**: GET /api/exports/tenant returns every product, passport, and referenced template the tenant owns as a single application/ld+json document. Stable urn:tracepass:* @ids per entity, schema.org Product + custom tracepass: vocabulary. Dashboard JWT + admin role. Ships as a downloadable file with Content-Disposition.
- CSV export from the dashboard (all paid plans): download every passport's fields as a per-category CSV, matching the same schema used for CSV bulk-import. Round-trippable with any ERP/PIM.
- REST API (every plan, Free included; per-day call cap only on Free and Basic, Starter and above unlimited): programmatic read AND write access to every passport, product, party, and bulk operation. Fully documented at https://www.tracepass.eu/docs (no NDA, no signup wall). OpenAPI 3.1 spec at https://www.tracepass.eu/openapi.yaml (JSON mirror at /openapi.json) — drop into Postman / Insomnia / Bruno or generate a client with openapi-generator.
- Compliance PDF reports (Scale+): A4 audit-ready reports per passport, downloadable at any time.
- Per-passport version history: every field-level edit is recorded with timestamp, actor, source, and value. Surfaced as a "History" tab on the passport detail page; also exposed via GET /api/passports/[id]/history with day-bucketed timeline.
- Public passport URLs serve JSON-LD via Accept-header content negotiation: same URL serves text/html to browsers and application/ld+json to crawlers / authority systems. No separate endpoint to discover.
- Full audit trail per field: every value tracks who entered it, when, and from which source document. Export preserves provenance.
- Data is never deleted on cancellation. Resubscribing at any point restores full access automatically.
- The GS1 Digital Link URL is portable on every paid plan via the custom-domain resolver: you control the URL through your own DNS, and the URL on the printed QR survives any vendor switch.

## EU Regulations Covered
Article-level coverage matrices for the most-asked regulations are linked above (see "Regulatory reference matrices").

- ESPR — Ecodesign for Sustainable Products Regulation (EU 2024/1781). Per-category delegated-act coverage matrix at /regulatory/delegated-acts.
- EU Battery Regulation (EU 2023/1542) — battery passport mandatory Feb 2027. Article-by-article coverage matrix at /regulatory/battery-articles (Articles 6, 7, 11, 14, 77).
- Construction Products Regulation (EU 2024/3110)
- Packaging and Packaging Waste Regulation (EU 2025/40)
- REACH / SCIP — Substances of Concern
- GS1 Digital Link — EU standard for product identifiers and QR codes. Functional resolver behaviour self-tested against the v2.0 spec (well-known endpoint, content negotiation, linkset+json output, Vary header, 404 on unknown). Reproducible script at scripts/gs1-conformance-check.ts in the platform repo.
- GS1 GLN structural support — every passport carries a structural parties block keyed by economic-operator role (manufacturer / importer / authorised representative / distributor / recycler / producer-responsibility organisation). GLNs are validated 13-digit GS1 identifiers (mod-10 check digit) emitted in both gs1:partyGLN (GS1 Web Vocabulary) and schema:identifier propertyID GS1:GLN (schema.org mirror). Per-category required-role enforcement matches each regulation: Battery 2023/1542 Articles 47–50 (manufacturer + recycler + PRO), PPWR 2025/40 Article 11 (manufacturer + PRO), Toy Safety Article 4 (manufacturer + importer for non-EU). Suppliers without a GLN can record a legacyOperatorId (VAT / EORI / national tax ID). Available via dashboard editor, v1 API (PATCH /api/v1/passports/:id/parties/:role), and CSV bulk import (dotted-key columns: manufacturer.gln, recycler.legalName, etc.).

## EU DPP ecosystem participation
TracePass is engaged with the EU bodies and standards organisations that are building the Digital Product Passport infrastructure. Each entry below names the specific tier and current status — there is no official EU "approved DPP vendor" registry today (the EU Central DPP Registry goes live 19 July 2026 alongside ESPR full application), so the legitimate signals are: identifier-allocation authorities (GS1), EU-funded coordination actions (CIRPASS-2), and industry consortia building reference implementations for specific verticals (the Battery Pass project).

- **CIRPASS-2 DPP Stakeholder Exchange Forum — registered organisation.** TracePass's organisation profile on the CIRPASS-2 DPP Stakeholder Exchange Forum (circular-data.org, hosted by Ekodenge) is approved and publicly listed, with a published organisation profile, service entry, two innovation entries and a project entry. Profile: https://circular-data.org/o/892486cd-c05d-4c74-97ca-c18e70bfb934
- **CIRPASS-2 — Community of Practice (CoP) applicant.** Submitted 2026-05-16 for the active engagement tier reserved for DPP service providers and PLM/ERP/PIM/MES software vendors. CIRPASS-2 is the EU Horizon-funded Coordination and Support Action preparing the technical infrastructure and pilot deployments for the EU DPP ecosystem (Grant Agreement 101158775, runs May 2024 → April 2027). CoP membership requires ~5-10 person-days/year and a signed MoU with the project coordinator (CEA, France); the MoU is signed via Evrotrust eIDAS-Qualified Electronic Signature. Subject to CIRPASS-2 evaluation procedure. Project: https://cirpass2.eu
- **EU Funding & Tenders Portal — registered (PIC 863746977).** TracePass LTD is registered in the European Commission's Funding & Tenders Portal Participant Register; its Participant Identification Code (PIC) is 863746977. This is the identifier used to participate in EU funding programmes (Horizon Europe, EIC, Digital Europe). Registration is the participant-register step — it is not a grant award and not an endorsement.
- **Google Business Profile — verified.** TracePass is verified in Google's business graph (entity ID /g/11z7hs4c8c). Profile: https://g.page/r/Cb4zs-VnG7O5EBM
- **GS1 Bulgaria — application pending.** GS1 is the global standards organisation that allocates GTINs and maintains the GS1 Digital Link URI shape every TracePass passport QR code uses. National GS1 membership is the legitimate path to GTIN allocation at scale and grants reciprocal access across other national GS1 organisations (GS1 Germany, GS1 Italy, etc.) when operating across the EU. Reference: https://gs1bg.org
- **Battery Pass project — engagement pending.** BMWK-funded German industry consortium publishing content guidance for the EU Battery Passport (Regulation (EU) 2023/1542). Relevant when TracePass's customer mix includes EV / industrial / LMT battery manufacturers; outreach gated on battery-category pipeline. Reference: https://thebatterypass.eu
- **EU Central DPP Registry integration — pending API spec publication.** TracePass will integrate as a service provider on behalf of customers (writing unique product identifiers + data carrier URLs to the registry) once the European Commission publishes the technical specification. Registry go-live scheduled 19 July 2026.

For procurement reference, the same status framework is published per-entry on /trust (ecosystemParticipation section) in all four locales.

## Important Disclaimers
- TracePass is a live, production service. Self-serve sign-up is open at app.tracepass.eu on Free + paid plans (Basic / Starter / Growth / Scale / Pro); Enterprise is sold via contact.
- Compliance claims describe how TracePass models the regulation today, not certifications or guarantees. The /regulatory/changelog page records material schema responses to regulatory events.
- Regulatory information is provided for informational purposes and does not constitute legal advice. The economic-operator role remains with the customer for all EU regulatory purposes.

## Company
- Legal name: TracePass LTD (Bulgarian: Трейс Пас ЕООД)
- Legal form: EOOD (single-owner LLC, Bulgaria)
- Bulgarian UIC / ЕИК: 208790302
- VAT identification number: BG208790302 (issued by the Bulgarian National Revenue Agency)
- Registered office: Shtrossmayer Street, 1309 Sofia, Bulgaria
- Managing director: Malin Ivanov
- Website: https://www.tracepass.eu
- Email: info@tracepass.eu

---

## Markdown versions (per page)
Every page below is available as clean markdown: request it with `Accept: text/markdown`, or just append `.md` to the URL. Localised variants exist under /bg, /de, /it.

### Overview
- [TracePass — AI-Powered Digital Product Passport Platform](https://www.tracepass.eu/index.md): TracePass is the EU Digital Product Passport platform: upload your product data and get a GS1-compliant, permanently hosted passport — battery, textile, electronics, or any ESPR category. Our AI reads your existing datasheets, auto-fills the mandatory fields, and flags gaps for human review. No migration, no empty forms — compliance on the data you already have.
- [PPWR compliance software for packaging that ships in the EU](https://www.tracepass.eu/ppwr.md): PPWR compliance software for packaging producers. TracePass auto-fills recyclability grade, recycled content, and EPR data into 66 PPWR-ready fields.
- [The EU Battery Regulation, handled as a data task](https://www.tracepass.eu/battery-regulation.md): What the EU Battery Regulation (EU) 2023/1542 requires, and the software that fills the 94 battery-passport fields — mandatory from 18 February 2027.

### Product Categories
- [Battery Passports, generated from your existing datasheets](https://www.tracepass.eu/battery.md): Battery passport ready before February 2027. Upload cell datasheets — TracePass fills 94 fields, requests the rest from suppliers, ships GS1-QR passports.
- [Textile Passports, wired to your brand's existing product data](https://www.tracepass.eu/textile.md): Apparel and home-textile brands: upload your product pages and care-label data. TracePass fills 61 ESPR fields, multilingual public passports, NFC-ready.
- [Electronics Passports — generated from your EPREL entry + spec sheets](https://www.tracepass.eu/electronics.md): 166 electronics-DPP fields, filled from data you already have. TracePass reuses your EPREL registration and spec sheets — WEEE, RoHS, and CE in one place.
- [Construction Passports — your DoP and EPD, structured](https://www.tracepass.eu/construction.md): Turn your DoP and EN 15804 EPD into a CPR-compliant DPP. TracePass fills 48 construction-product fields with attachable evidence and a public viewer.
- [Steel Passports — your CBAM + datasheets, one pipeline](https://www.tracepass.eu/iron-steel.md): Already report CBAM emissions? Reuse that data. TracePass fills 83 steel-DPP fields — grade, chemistry, mechanicals, scope 1/2 emissions — from one upload.
- [Furniture Passports — built from your product catalog + sustainability hub](https://www.tracepass.eu/furniture.md): Furniture brands: upload product pages + FSC certs. TracePass fills 80 fields (wood origin, FSC CoC, formaldehyde) and publishes per-unit passports.
- [Chemicals Passports — built directly from your SDS](https://www.tracepass.eu/chemicals.md): Upload your SDS. TracePass extracts REACH, CLP, SVHC, composition, and safe-use data into 96 structured DPP fields — ready for ESPR.
- [Packaging Passports — your PPWR data, structured](https://www.tracepass.eu/packaging.md): Meet PPWR obligations without the spreadsheet grind. Upload packaging specs — TracePass fills 66 fields: material, recyclability grade, recycled content, EPR.
- [Toy Passports — from your LEGO-style product pages to a QR in minutes](https://www.tracepass.eu/toys.md): Upload your toy product pages + EN 71 test reports. TracePass fills 27 DPP fields — age grading, phthalates, materials, DoC URL — and ships QR-linked passports.
- [FMCG Passports — from your existing labels and sustainability reports](https://www.tracepass.eu/fmcg.md): Skip the per-SKU data entry. TracePass turns labels and sustainability reports into 42 compliant DPP fields per SKU — food, beverage, cosmetic, household.
- [Tyre Passports — your EPREL entry + type-approval, structured](https://www.tracepass.eu/tyres.md): Tyre (tire) DPP software — reuse your EPREL entry + UNECE type-approval + datasheets. TracePass fills 95 fields, issues per-batch passports, QR on the sidewall.
- [Jewelry Passports — metal, gemstone, provenance, one record per piece](https://www.tracepass.eu/jewelry.md): Jewelry brands: hallmarking, RJC CoC, Kimberley status, metal + gemstone provenance. TracePass fills 52 fields per piece and hosts per-unit passports.

### API Documentation
- [TracePass API documentation](https://www.tracepass.eu/docs.md): REST API reference for the TracePass Digital Product Passport platform.
- [Archive a passport (irreversible)](https://www.tracepass.eu/docs/archive-passport.md): Irreversibly archive a passport. Public viewer 404s, GS1 Digital Link stops resolving. Fires passport.archived webhook. Only for unshipped products.
- [Archive a product](https://www.tracepass.eu/docs/archive-product.md): Soft-archive a product — hidden from listings, blocks new passports. Existing passports keep resolving. Reversible. 409 if non-archived passports remain.
- [Authentication](https://www.tracepass.eu/docs/authentication.md): Two auth methods — API key (Bearer) and OAuth 2.0 with PKCE — plus Idempotency-Key for safe retries and per-plan rate limits on the v1 surface.
- [Batch-create passports](https://www.tracepass.eu/docs/batch-create-passports.md): Up to 100 passports per call. Per-item status in the response. Same overage flow as single-create (402 + confirmOverage:true). Idempotency-Key supported.
- [Capture EPCIS events](https://www.tracepass.eu/docs/capture-events.md): GS1 EPCIS 2.0 capture endpoint. Submit ObjectEvent / TransformationEvent / AggregationEvent etc. via application/ld+json. Returns a capture-job id.
- [Poll a capture job](https://www.tracepass.eu/docs/capture-job.md): Poll an EPCIS capture job's status, eventCount, capturedCount, and per-event errors[]. Use the captureJobId returned by the capture POST.
- [Create a passport](https://www.tracepass.eu/docs/create-passport.md): Create one passport bound to a product. GTIN + serial uniqueness enforced. 402 overage_required when over cap; confirmOverage:true to accept the charge.
- [Create a product](https://www.tracepass.eu/docs/create-product.md): Create a product (SKU layer above passports). Category picks the template. Accepts imageUrls[] for CDN images (max 20). Idempotency-Key supported.
- [Delete a passport permanently](https://www.tracepass.eu/docs/delete-passport.md): Permanently delete an unpublished passport (status draft or in_review). Cascades extractions, agent sessions, supplier links, and R2 files. Paid plans only.
- [Delete a product permanently](https://www.tracepass.eu/docs/delete-product.md): Permanently delete a product with zero passports (any status). Unlinks shared documents, deletes orphan docs + R2 files. Paid plans only. Irreversible.
- [EPCIS 2.0](https://www.tracepass.eu/docs/epcis.md): GS1 EPCIS 2.0 supply-chain events — export a passport's event history, capture events from partners and ERP systems, and query the event store.
- [Errors & rate limits](https://www.tracepass.eu/docs/errors.md): Reference: HTTP status codes (4xx vs 5xx), error envelope shape, free-tier daily call caps, and 429 retry guidance with exponential back-off.
- [Exports](https://www.tracepass.eu/docs/exports.md): Bulk JSON-LD tenant export — every product, passport, and template you own as one canonical document.
- [Get a single passport](https://www.tracepass.eu/docs/get-passport.md): Read one passport by ID. ?lang resolves every field via the viewer-locale chain; ?format=full adds template labels, units, and access levels.
- [Get a single product](https://www.tracepass.eu/docs/get-product.md): Read one product by ID. Returns the full document including default field values, image URLs, template reference, and the running passportCount.
- [Get a category template](https://www.tracepass.eu/docs/get-template.md): Get the full regulatory schema for one DPP category — every field with its key, type, required flag, access level, and governing regulation reference.
- [List passports](https://www.tracepass.eu/docs/list-passports.md): Paginated list of passports. Filter by productId, status, or free-text search across GTIN + serial. Counts against the daily passport-read budget.
- [List products](https://www.tracepass.eu/docs/list-products.md): Paginated list of products (max 100/page), sorted by createdAt desc. Filter by category, status (active/archived), or free-text search across name + model.
- [List category templates](https://www.tracepass.eu/docs/list-templates.md): List every DPP category template — field count, required-field count, governing regulation, and version. Discover requirements before you build a passport.
- [MCP server](https://www.tracepass.eu/docs/mcp.md): MCP server — AI assistants (Claude, Cursor, IDE agents) manage products, passports, EPCIS events directly. Hosted endpoint or local npm package.
- [n8n community node](https://www.tracepass.eu/docs/n8n.md): Automate TracePass workflows in n8n without code — products, passports, EPCIS events. Free community node, installable from any n8n instance.
- [Check passport compliance](https://www.tracepass.eu/docs/passport-compliance.md): Get a three-tier compliance verdict for one passport, with regulation-cited findings — gap-check, fix, re-check the read-fix-verify loop.
- [Export a passport's EPCIS events](https://www.tracepass.eu/docs/passport-epcis-export.md): Export one passport's full event history as a standards-valid GS1 EPCIS 2.0 EPCISDocument (JSON-LD). Drops straight into any EPCIS-aware tool.
- [Render the passport QR](https://www.tracepass.eu/docs/passport-qr.md): Render a passport's QR code as SVG, PNG, or JSON — optionally in the company brand colour or an explicit hex. Encodes the GS1 Digital Link URI.
- [Check passport registry readiness](https://www.tracepass.eu/docs/passport-registry-readiness.md): Check whether a passport would pass the EU DPP Registry's formal submission gate — mandatory fields, formatting, and a resolvable link. Battery only.
- [Passports](https://www.tracepass.eu/docs/passports.md): Create, update, suspend, archive, and bulk-import Digital Product Passports. Includes the parties block for economic-operator chains.
- [Products](https://www.tracepass.eu/docs/products.md): The catalog layer — products, images, batches. One product can have many passports (one per serialised unit).
- [Query EPCIS events](https://www.tracepass.eu/docs/query-events.md): GS1 EPCIS 2.0 query endpoint. Search events via EQ_bizStep / GE_eventTime / MATCH_epc and the standard EPCIS query grammar. Returns an EPCISQueryDocument.
- [Quickstart](https://www.tracepass.eu/docs/quickstart.md): Create your first passport in five minutes — register, mint an API key, post a single passport, scan the QR.
- [Suspend a passport](https://www.tracepass.eu/docs/suspend-passport.md): Reversibly suspend a passport — public viewer returns HTTP 423 with structured body. Use for recalls, disputes, holds, product-quality investigations.
- [Templates](https://www.tracepass.eu/docs/templates.md): The DPP category field schemas — discover what a compliant passport in each category requires before you build it: field counts and the governing regulation.
- [Bulk JSON-LD tenant export](https://www.tracepass.eu/docs/tenant-export.md): Full workspace export as one JSON-LD document — every product, passport, and template reference. Dashboard JWT only (admin role); not API-key reachable.
- [Update one field on a passport](https://www.tracepass.eu/docs/update-field.md): Patch one field on a passport with audit trail entry. Defaults to status approved; override to ai_suggested or supplier to route into the review queue.
- [Update a product](https://www.tracepass.eu/docs/update-product.md): Update product fields by sending only what changes. imageUrls REPLACES the existing array (your CMS stays canonical). Idempotency-Key supported.
- [Upload a product image](https://www.tracepass.eu/docs/upload-product-image.md): Multipart upload of a single image to the product. PNG/JPG/WebP, ≤5 MB, max 20 images. No Idempotency-Key (multipart can't be hashed safely).
- [Upsert an economic-operator party](https://www.tracepass.eu/docs/upsert-party.md): Set or replace one economic-operator party on a passport (manufacturer, importer, distributor, authorised representative). GLN validated. Audit-logged.
- [Webhooks](https://www.tracepass.eu/docs/webhooks.md): HMAC-signed event delivery for passport lifecycle events. Retry ladder, signature verification, replay protection.

### Guides
- [Digital Product Passport field-by-field guides](https://www.tracepass.eu/guides.md): Free field-by-field Digital Product Passport guides for batteries, textiles, electronics and packaging — every mandatory EU field and where its data comes from.
- [All 94 mandatory fields of the EU Battery Passport, mapped field-by-field.](https://www.tracepass.eu/guides/battery.md): Field-by-field guide to all 94 mandatory data points required by EU Battery Regulation 2023/1542. Free PDF, 7 sections, with regulation references.
- [All 61 fields of the EU textile passport, mapped to source data.](https://www.tracepass.eu/guides/textile.md): Field-by-field guide to the 61 mandatory data points for the EU textile DPP under ESPR. Material composition, durability, eco-score, supply-chain due diligence.
- [All 166 fields of the EU electronics passport, with regulation references.](https://www.tracepass.eu/guides/electronics.md): Field-by-field guide to all 166 mandatory data points for the EU electronics DPP under ESPR + EPREL. Smartphones, white goods, servers, repairability.
- [All 66 fields of the EU packaging DPP, tied to PPWR articles.](https://www.tracepass.eu/guides/packaging.md): Field-by-field guide to the 66 mandatory data points for the EU packaging DPP under PPWR 2025/40. Recyclability classes, recycled content, sorting, SoC.

### Resources
- [Resources](https://www.tracepass.eu/resources.md): Guides and explainers on EU Digital Product Passports, ESPR, and the Battery Regulation.
- [What Is a Digital Product Passport? (And What It Isn't)](https://www.tracepass.eu/resources/what-is-a-digital-product-passport.md): Plain-language definition of the EU Digital Product Passport — what it is, what it isn't, who must file one, and the timeline for the 12 covered categories.
- [Collecting DPP Data from Suppliers: The Bottleneck Nobody Talks About](https://www.tracepass.eu/resources/collecting-dpp-data-from-suppliers.md): 60% of a DPP project timeline is supplier data collection, not the regulation. The four process changes that shrink a 16-week effort to 2 weeks.
- [EU Battery Regulation 2023/1542: February 2027 Compliance Guide](https://www.tracepass.eu/resources/eu-battery-regulation-february-2027.md): Battery passports become mandatory in February 2027. What the regulation requires, which batteries are in scope, and what manufacturers need to prepare now.
- [DPP Software vs Compliance Consulting: What Actually Fills the Fields](https://www.tracepass.eu/resources/dpp-software-vs-consulting.md): A battery DPP is 94 fields; electronics, 166. What decides your cost and timeline is how they get filled — a consulting project, or an automated pipeline.
- [Textile Digital Product Passport: What Brands Must Prepare](https://www.tracepass.eu/resources/textile-digital-product-passport.md): Textiles are an ESPR priority for the EU Digital Product Passport. What a textile DPP will require, the honest timeline, and how to prepare now.
- [When Does My Product Need a DPP? ESPR Timeline by Group](https://www.tracepass.eu/resources/when-does-my-product-need-a-dpp.md): Batteries need a DPP by 18 Feb 2027. Other ESPR groups await delegated acts. Find your group, your date, and the honest caveats.
- [Second-Life Batteries: Do They Need a New DPP?](https://www.tracepass.eu/resources/second-life-battery-passport.md): Repurposing an EV battery for storage is a new placing on the market — it generally needs a new battery passport linked to the original.
- [A Bulgarian jeweller puts Digital Product Passports on its pieces](https://www.tracepass.eu/resources/vantony-jewellery-dpp-pilot.md): How Vantony, a Bulgarian fine-jewellery brand, became a TracePass design partner — putting provenance and materials data on every piece, before any mandate.
- [Why a Tier-1 Supplier Declaration Isn't Enough for a DPP](https://www.tracepass.eu/resources/why-supplier-declarations-fail-dpp.md): A tier-1 supplier declaration tells you what your direct supplier asserts — not what's verifiable or upstream. Why DPP data needs evidence and chain depth.
- [Where Do You Fill In a Digital Product Passport?](https://www.tracepass.eu/resources/dove-si-compila-il-dpp.md): No EU portal accepts DPP data. You build a DPP on a compliant platform: pick a template, fill the fields, and publish — generating a GS1 Digital Link QR code.
- [Do Lamps Need a Digital Product Passport?](https://www.tracepass.eu/resources/brauchen-lampen-einen-dpp.md): Lamps have no binding DPP deadline. ESPR sets no requirements directly — obligations need a delegated act, none adopted for lamps or electronics yet.
- [Battery Regulation: Three Distinct Documentation Obligations](https://www.tracepass.eu/resources/battery-regulation-accompanying-documentation.md): Art. 13 labelling, Annex VIII technical docs, and the Art. 77 passport are three distinct obligations under EU Reg 2023/1542, with staggered dates.

### Regulatory
- [EU DPP regulations, tracked article-by-article](https://www.tracepass.eu/regulatory.md): How TracePass tracks the EU rules behind the Digital Product Passport: Battery Regulation article-by-article, ESPR delegated acts, CSRD, and a schema changelog.
- [Battery Regulation 2023/1542 — article-by-article coverage](https://www.tracepass.eu/regulatory/battery-articles.md): Per-article coverage of EU Battery Regulation 2023/1542: Article 6 carbon footprint, Article 7 recycled content, Article 11 removability, Article 77 DPP.
- [Article 77 Battery Passport — EU Regulation 2023/1542](https://www.tracepass.eu/regulatory/battery-articles/article-77.md): What EU Battery Regulation 2023/1542 Article 77 requires: the mandatory digital battery passport from 18 Feb 2027 — who complies, Annex XIII data, QR access.
- [ESPR delegated acts — per-category coverage](https://www.tracepass.eu/regulatory/delegated-acts.md): ESPR delegated act coverage — iron & steel, tyres, electronics, chemicals, furniture, jewellery: companion regulations, indicative dates, status.
- [Regulatory changelog — what we tracked, what we changed](https://www.tracepass.eu/regulatory/changelog.md): EU DPP regulatory events with schema responses: ESPR 2024/1781, Battery Regulation 2023/1542, implementing acts, per-category templates. Reverse-chronological.
- [DPP and CSRD — where the product passport ends and reporting begins](https://www.tracepass.eu/regulatory/csrd.md): TracePass is the product-level DPP and evidence layer that feeds your CSRD/ESRS reporting — it does not produce the report. Here's where the two meet.

### Glossary
- [The EU Digital Product Passport glossary](https://www.tracepass.eu/glossary.md): Plain-language definitions of the EU Digital Product Passport terms that matter — ESPR, GS1 Digital Link, EPCIS, EPREL, SVHC, PEF and more. For people and AI.
- [GS1 Digital Link](https://www.tracepass.eu/glossary/gs1-digital-link.md): GS1 Digital Link is the GS1 standard that turns a product identifier (like a GTIN) into a web URL, so a single QR code can resolve to different content — a consumer page, a JSON-LD passport, a service endpoint — depending on who scans it. It is the data-carrier format the EU Digital Product Passport is built to use.
- [EPCIS 2.0](https://www.tracepass.eu/glossary/epcis.md): EPCIS 2.0 is the GS1 standard for capturing and sharing supply-chain event data — the what, when, where and why of every step a product takes. It lets a Digital Product Passport carry an interoperable, machine-readable record of lifecycle and traceability events instead of a static datasheet.
- [JSON-LD](https://www.tracepass.eu/glossary/json-ld.md): JSON-LD (JSON for Linked Data) is a W3C standard that adds shared, web-resolvable meaning to ordinary JSON, so a machine knows that a field labelled "recycledContent" is the same concept everywhere. It is the format a Digital Product Passport is served in so that systems, search engines and AI agents can read it unambiguously.
- [MCP (Model Context Protocol)](https://www.tracepass.eu/glossary/mcp.md): MCP (Model Context Protocol) is an open standard that lets AI assistants and agents securely call external tools and data sources through a uniform interface, instead of each integration being bespoke. TracePass ships an MCP server, so an AI agent can create, fill and publish Digital Product Passports directly.
- [OpenAPI](https://www.tracepass.eu/glossary/openapi.md): OpenAPI is the industry-standard, machine-readable way to describe a REST API — its endpoints, parameters, request and response shapes and authentication — in one specification file. TracePass publishes an OpenAPI 3.1 spec so any tool or AI agent can discover and call the passport API without bespoke documentation.
- [Data carrier](https://www.tracepass.eu/glossary/data-carrier.md): A data carrier is the physical, printed or attached link on a product — typically a QR code or NFC tag — that resolves to its Digital Product Passport when scanned. ESPR defines it as the standardised, openly readable way to connect a real product to its online passport.
- [Confidence score](https://www.tracepass.eu/glossary/confidence-score.md): A confidence score is the per-field rating the AI attaches to each value it extracts from your documents, signalling how sure it is the value is correct. It tells a human reviewer exactly which fields to double-check before approving and publishing a Digital Product Passport.
- [Source attribution](https://www.tracepass.eu/glossary/source-attribution.md): Source attribution links each filled passport field back to the exact source document and page it came from — a test report, datasheet or declaration. It is the audit-trail backbone that lets a human (or a market-surveillance authority) verify any value without re-reading every file.
- [ESPR](https://www.tracepass.eu/glossary/espr.md): ESPR is the Ecodesign for Sustainable Products Regulation (EU) 2024/1781, in force since 18 July 2024. It is the umbrella law that makes the Digital Product Passport mandatory, rolling it out product group by product group through delegated acts expected across roughly 2027–2030.
- [EU Battery Regulation](https://www.tracepass.eu/glossary/eu-battery-regulation.md): The EU Battery Regulation (EU) 2023/1542 governs the full life cycle of batteries placed on the EU market — from carbon footprint and recycled content to collection and recycling. It introduces the battery passport, which becomes mandatory on 18 February 2027 for LMT, industrial (>2 kWh) and electric-vehicle batteries.
- [PPWR](https://www.tracepass.eu/glossary/ppwr.md): PPWR is the Packaging and Packaging Waste Regulation (EU) 2025/40, which replaces the old packaging directive with directly applicable EU rules. It sets recyclability grades, minimum recycled-content targets, reuse goals and extended producer responsibility (EPR) for all packaging on the EU market.
- [CSRD / ESRS](https://www.tracepass.eu/glossary/csrd-esrs.md): CSRD is the EU Corporate Sustainability Reporting Directive; ESRS are the European Sustainability Reporting Standards that define what a company must report under it. Together they govern company-level sustainability reporting — distinct from the product-level Digital Product Passport.
- [EUDR](https://www.tracepass.eu/glossary/eudr.md): EUDR is the EU Deforestation Regulation (EU) 2023/1115, which bars listed commodities — including wood, cattle, soy, coffee, cocoa, palm oil and rubber — and products made from them from the EU market unless they are deforestation-free and legal. Operators must run due diligence with geolocation coordinates for every plot of land of origin.
- [Digital Product Passport (DPP)](https://www.tracepass.eu/glossary/digital-product-passport.md): A Digital Product Passport (DPP) is a structured, machine-readable digital record tied to a specific product, batch or item that holds its regulated sustainability and compliance data across the lifecycle. It is reached by scanning a data carrier (typically a GS1 Digital Link QR) and is mandated under the EU ESPR, Regulation (EU) 2024/1781.
- [Unique product identifier (UPI)](https://www.tracepass.eu/glossary/unique-product-identifier.md): A unique product identifier (UPI) is the persistent ID that links a physical product to its Digital Product Passport and registers it in the EU DPP Registry. Under the EU ESPR (Regulation (EU) 2024/1781) it is encoded in the product's data carrier — commonly a GTIN expressed through GS1 Digital Link — so a scan resolves to exactly the right passport.
- [Economic operator](https://www.tracepass.eu/glossary/economic-operator.md): An economic operator is the legal entity that places a product on the EU market and therefore carries the Digital Product Passport obligation — typically the manufacturer, but also the importer or the manufacturer's authorised representative. Under the EU ESPR (Regulation (EU) 2024/1781) this operator is accountable for creating the passport and ensuring its data is accurate.
- [Delegated act](https://www.tracepass.eu/glossary/delegated-act.md): A delegated act is secondary EU legislation the European Commission adopts to fill in the technical detail of a parent regulation. For the Digital Product Passport, the ESPR (Regulation (EU) 2024/1781) sets the framework, but each product group's actual DPP requirements — which fields, which deadline — only become legally binding through a product-specific delegated act.
- [EU DPP Registry](https://www.tracepass.eu/glossary/eu-dpp-registry.md): The EU DPP Registry is the central system the European Commission operates to hold each product's unique identifier and the URL of its Digital Product Passport, so customs and market-surveillance authorities can find the right passport. Established under the ESPR (Regulation (EU) 2024/1781), it is scheduled to go live on 19 July 2026.
- [EPREL](https://www.tracepass.eu/glossary/eprel.md): EPREL (European Product Registry for Energy Labelling) is the EU's central database where suppliers must register energy-labelled products — appliances, electronics, lighting and more — before selling them in the EU. Established under Regulation (EU) 2017/1369, its energy-efficiency data is a ready source to reuse into the Digital Product Passports of those product groups.
- [SVHC](https://www.tracepass.eu/glossary/svhc.md): An SVHC (Substance of Very High Concern) is a chemical identified under the EU REACH Regulation (EC) 1907/2006 as carcinogenic, mutagenic, toxic to reproduction, persistent, or otherwise seriously hazardous. ECHA maintains the Candidate List of SVHCs; their presence in articles must be declared above defined thresholds.
- [SCIP](https://www.tracepass.eu/glossary/scip.md): SCIP is the European Chemicals Agency (ECHA) database of Substances of Concern In articles as such or in complex objects (Products). Established under the Waste Framework Directive (2008/98/EC), it requires suppliers to notify articles containing an SVHC above 0.1% weight by weight before placing them on the EU market.
- [PEF](https://www.tracepass.eu/glossary/pef.md): PEF (Product Environmental Footprint) is the European Commission's standardised method for measuring a product's life-cycle environmental impact across multiple impact categories, set out in Recommendation (EU) 2021/2279. A PEF study quantifies impacts like carbon footprint using category-specific rules (PEFCRs) so results are comparable and verifiable.
- [EPD (Environmental Product Declaration)](https://www.tracepass.eu/glossary/epd.md): An EPD (Environmental Product Declaration) is a verified, standardised document reporting a product's life-cycle environmental impacts, based on life-cycle assessment (LCA) and independently verified. It is a Type III environmental declaration under ISO 14025; for construction products, EPDs follow the harmonised European standard EN 15804.
- [CE marking](https://www.tracepass.eu/glossary/ce-marking.md): CE marking is the manufacturer's declaration that a product meets the applicable EU health, safety and environmental requirements, letting it circulate freely in the European Economic Area. Affixing the CE mark is backed by a signed EU Declaration of Conformity and the supporting technical documentation; it is governed by Regulation (EC) 765/2008 and Decision 768/2008/EC.
- [Recycled content](https://www.tracepass.eu/glossary/recycled-content.md): Recycled content is the proportion of a product or material — usually expressed as a percentage by weight — that comes from recycled rather than virgin feedstock. Under EU law it is becoming a mandatory, verifiable data field: the Battery Regulation (EU) 2023/1542 sets minimum recycled-content shares for key metals, and PPWR (EU) 2025/40 sets recycled-content targets for plastic packaging.

### Company & Policies
- [TracePass founder-led EU DPP infrastructure](https://www.tracepass.eu/about.md): TracePass LTD: Bulgarian-registered EU Digital Product Passport platform. Founder Malin Ivanov, UIC 208790302, EU PIC 863746977, public ecosystem participation.
- [Trust & security — what we run, where we run it](https://www.tracepass.eu/trust.md): Procurement reference: EU data residency, sub-processor register with DPA links, security, liability, GS1 Digital Link / Schema.org / CIRPASS conformance.
- [Tiered passport allowance — never per-scan](https://www.tracepass.eu/pricing.md): Tiered passport allowance from Free to Pro plus a bespoke Enterprise tier. Annual billing saves 2 months. Custom-domain QR resolver. Never per-scan or per-SKU.
- [DPP vendor evaluation — our answers](https://www.tracepass.eu/buyers-guide.md): Procurement-grade answers to every question a buyer should ask a DPP vendor: APIs, GS1 resolver, Battery Regulation articles, exit terms, pricing, GDPR.
- [Integrations — connect your stack without a bespoke connector](https://www.tracepass.eu/integrations.md): Connect SAP, Odoo, NetSuite, Shopify or Akeneo to TracePass via REST API, CSV, n8n, webhooks or MCP. No bespoke connectors, no lock-in.
- [DPP consulting — before you hire one, read this](https://www.tracepass.eu/dpp-consulting.md): Thinking of hiring a DPP consultant? What an engagement actually does, what it costs, and which parts are just field-filling that software automates.
- [TracePass LTD](https://www.tracepass.eu/impressum.md): Legal entity details for TracePass LTD (Bulgarian UIC 208790302).
- [Privacy Policy](https://www.tracepass.eu/privacy.md): GDPR data-controller and processor roles, lawful bases, data residency, and sub-processors for TracePass.
- [Terms of Service](https://www.tracepass.eu/terms.md): Acceptable use, liability, and EU SaaS contracting terms for the TracePass platform.