When a compliance team plans a Digital Product Passport rollout, the timeline usually allocates 2 weeks for 'reading the regulation' and 2 weeks for 'setting up the passport'. The remaining three to four months, nobody plans for — but that's where the actual project lives. It's supplier data collection: chasing cell manufacturers, dye-house operators, resin formulators, and tier-2 packaging converters for test reports, material declarations, and carbon footprints. Here's the shape of that work, the four things that make it harder than it looks, and the process changes that shrink a 16-week effort into roughly two.
How much of a DPP actually comes from suppliers
For a battery passport, of the 91 mandatory fields, roughly 47 originate outside your company: cell supplier provides the chemistry, hazardous-substance declarations, and internal-resistance curves; the cathode/anode raw-material suppliers provide origin + due-diligence evidence for cobalt, lithium, nickel, and natural graphite; the electrolyte supplier provides the SDS. For a textile DPP it's similar proportions but across more tiers — dye house, fabric mill, yarn spinner, fibre grower — each with two or three fields that only they can supply.
The rule of thumb: 40–70% of a DPP's data exists upstream of the economic operator. If your DPP project plan doesn't have a three-month supplier-outreach block, the plan is wrong.
Why it's harder than a spreadsheet-and-email workflow
The naïve approach — send every supplier a 30-page Excel template — looks reasonable on day one and collapses by week three. Four reasons it doesn't work at scale:
- Tier-2 and tier-3 suppliers don't know their customer's customer is covered by EU DPP. They see an unfamiliar form, deprioritise it, and your compliance team ends up cold-emailing in a language the supplier doesn't work in.
- The data exists — in QC records, test-report PDFs, supplier-system exports — but not in the shape your form asks for. A supplier with everything you need can still reply 'we don't have this' because translating their internal taxonomy to your form is a day of work.
- Evidence is a PDF, not a value. EU DPP mandates evidence links (test reports, EPDs, SDS files, conformity certificates). A form field that says 'enter recycled content %' without asking for the PDF that proves it is incomplete — and a field that asks for both is twice the friction.
- Response rate for cold 'please fill in this form' emails is typically 15–25%. Chasing the remaining 75% takes longer than the original outreach.
What the 16-week email workflow actually looks like
Week 1–2: identify suppliers, draft the request, translate to three languages, attach the template. Week 3: send. Week 4: chase the non-responders. Week 5–6: triage the first 8 replies — half are incomplete, one is the wrong format entirely (PDF of handwritten notes). Week 7–10: chase again, reconcile inconsistent units (kWh vs Wh, kg vs g, % vs ratio), ask clarifying questions. Week 11–14: second wave of chasing for supporting evidence files (the form had a value but no PDF). Week 15: QA sweep — catch the supplier who used 2022 SVHC list instead of the current one. Week 16: feed cleaned data into the passport. You've now used the entire calendar budget on what was scheduled as a two-week task.
Doing this for batteries? Get the field map
Free 26-page PDF: every one of the 91 mandatory battery-passport fields with its source-data origin (datasheet, SDS, PEF study, supplier declaration) and regulation reference. Useful for adapting the same approach to other DPP categories.
What collapses the loop
Four process changes do most of the work:
- Token-based access, no signup. The supplier clicks a unique link in their email and lands on a pre-filled form for their specific material. No account to create, no password to forget, no IT-team approval to wait for. Response rate jumps from ~20% to 60–70%.
- Supplier's language by default. Detect the supplier's country from the contact metadata, render the form in their language, auto-translate the fields. A Chinese cell-factory QC manager is 5× more likely to fill a form in Chinese than in English.
- PDF-in, values-out. Let the supplier upload the document they already have (datasheet, test report, SDS), and extract the values automatically instead of asking them to re-type. 'Upload this SDS' is a 10-second ask; 'transcribe the 14 fields on page 3 of this SDS into my spreadsheet' is a 20-minute one.
- Live dashboard for your compliance team showing every supplier's response state. Stops the weekly email ritual of 'who have we not heard from'. Makes it obvious where to spend the chase-budget.
What suppliers actually respond to
Most cold supplier requests fail because the framing is wrong, not because the supplier is unwilling. Imagine you run quality control at a lithium-cell factory in Korea: you receive 30 emails per day from buyer companies, half of them asking for data in formats that conflict with each other. An unfamiliar 30-page Excel template from a brand you've barely heard of lands somewhere between the bottom of the pile and the trash. The patterns that actually move response rates from 20% to 60–70%:
- Lead with the regulation, not the form. "EU Battery Regulation 2023/1542 requires us to publish your X by Feb 2027" lands harder than "please fill in this template". The supplier's compliance team can act on the first; their sales-support intern reading the second has to escalate.
- Scope the request to THEIR product, not your full schema. If the supplier provides 4 of the 91 fields, ask for those 4 with prefilled product names. Asking for the whole 91 invites "this isn't ours" replies.
- Make the deadline real and shared. "We need this by 30 March because our type-approval submission lands 18 April" travels up the chain better than "as soon as possible".
- Offer a small reciprocal value: a copy of the published passport, an extract of the carbon-footprint methodology you used, or a downloadable certificate that proves due diligence on their end. Nothing transformative; just enough that the request feels like a 2-way relationship.
When the supplier is asking YOU
Half the SaaS literature treats DPP supplier-data collection as a one-way street: brand asks, supplier provides. In practice every economic operator is downstream of someone and upstream of someone else. The same textile mill that's collecting cotton-origin data from its yarn supplier is being asked for fabric-composition data by its apparel-brand customer. The same battery-pack manufacturer chasing cell-chemistry data from Korea is being asked for pack-level performance data by the EV OEM placing the vehicle on the EU market.
Two practical implications: first, the data you're collecting from your suppliers can usually be republished cleanly to your downstream customer with minimal additional effort — same fields, same format. Second, your downstream customer's compliance team is going through exactly what you are. If you can serve your data via a token-based portal in their language, you skip 12 weeks of email threads and they'll thank you for it. The platforms that win the long game are the ones that make this two-sided.
Common process mistakes
Mistakes I've watched repeat across roughly twenty DPP rollouts in different categories:
- Treating the first DPP rollout as a project rather than an operational capability. The first 5 SKUs are a project; the next 500 — and the ones rolling onto the market every month after — need a process owner, not a Gantt chart.
- Letting marketing draft the supplier-facing emails. Marketing optimises for engagement; supplier compliance reads engagement as fluff and discards it. Compliance- or quality-team voice converts at roughly 3× the rate.
- No dedicated email address. Sending from a personal name@yourcompany.com gets filtered as spam by tier-2/tier-3 supplier MTAs. Use a dedicated dpp@ or compliance@ alias with a configured SPF + DKIM record. Half the "supplier didn't reply" cases are actually "supplier never received it".
- Asking for data the regulation doesn't require. Compliance teams add nice-to-haves to the request because the supplier portal lets them. Each unnecessary field drops response rate by 5–10%.
- Not separating draft data from approved data. A passport with values from 12 different reviewers, none of them flagged as approved-by-X, is not auditable. The simplest fix: a status flag per field — `pending_review`, `approved`, `flagged` — with the reviewer ID stamped on every transition. Authorities will eventually ask.
Frequently asked questions
How much DPP data comes from suppliers vs internal sources?
40–70% of mandatory Digital Product Passport data exists upstream of the economic operator. For a battery passport specifically, roughly 47 of 91 mandatory fields require data from cell suppliers, raw-material suppliers (cobalt, lithium, nickel, natural graphite), and electrolyte suppliers. Textile DPPs follow similar proportions across more tiers (dye house, fabric mill, yarn spinner, fibre grower).
How long does supplier data collection take for a DPP?
Typical first DPP via an email-and-spreadsheet workflow: 12–16 weeks. With token-based supplier portals, per-language forms, and PDF-in-values-out evidence handling, that compresses to roughly 2 weeks for repeat collections. The first round always takes longer than subsequent rounds because supplier relationships and field-mapping are being established.
What response rate should I expect for cold supplier DPP requests?
15–25% for cold 'fill in this form' emails, particularly for tier-2 and tier-3 suppliers unfamiliar with EU DPP scope. Response rates rise to 60–80% when suppliers receive a per-language secure portal, partial-submit support, and EU regulation context in the request.
Can AI extract DPP data from supplier datasheets automatically?
Yes — AI can extract structured field values from supplier PDFs (datasheets, SDS files, IEC test reports, EPDs) once the supplier has provided the document. AI cannot generate data the supplier hasn't published, so the supplier-engagement step still happens; AI accelerates the post-receipt parsing rather than the request itself.
Ready to publish your Digital Product Passports?
TracePass is live. Create an account, upload a product, and ship a compliant passport with a GS1 QR code today.
Get started