A DPP service provider operates the technical system that hosts a product's passport data, serves the public view behind a QR code or GS1 Digital Link, and keeps identifiers and versions stable over time. Under the ESPR the economic operator remains responsible; the provider supplies reliable infrastructure and workflow, not a compliance certificate.
What does a DPP service provider do?
A provider gives you a governed place to collect structured data and supplier evidence, run validation, publish a redacted public version, and keep it reachable for the retention period the rules require. A hosted web page alone is not a passport system if the claims behind it cannot be checked or versioned.
Who stays responsible for the passport?
The ESPR places the duty on the economic operator that places the product on the EU market. A service provider can host, serve and version the data, but accuracy, completeness and legal scope remain the operator's responsibility. Choose a provider that makes that boundary explicit.
How does DPP Shield work as a service provider?
DPP Shield stores versioned passports and evidence, applies review and second-factor gates before publication, supports QR and GS1 Digital Link carriers at product, batch or serial level, and preserves the approved public release while later revisions are reviewed. Scoped API keys and signed webhooks connect it to your existing systems.
Frequently asked questions
Does a DPP service provider make my product compliant?
No. It supplies the system to collect, validate, publish and maintain passport data; the responsible operator keeps the legal and factual duty.
Can I move my data later?
Yes. DPP Shield exposes scoped API access and exports, so your passport data and version history are portable.