A passport has to outlive the product, and the supplier.
Your passports must stay accurate, retrievable and interoperable for the statutory decade — through audits, ownership changes and the platform’s own continuity. Meeting that duty as a DPP service provider under ESPR Art 2(32) is not something a CMS can do.
Built for the statutory decade, not the demo.
Residency, immutability, interoperability and access are not features bolted on — they are how regulated infrastructure is constructed.
Data continuity
In-EU hosting with bundled backup and an escrow path, so the record survives any single operator — including us.
Interoperability
Built to the emerging two-layer DPP standard so a passport reads the same in every conformant system.
Sealing
Architected for qualified electronic seals from an EU-trusted-list provider, so authenticity is verifiable.
Tiered disclosure
Public and restricted layers, every restricted release recorded as an explicit, attributable action.
Identity
Per-item identifiers resolved from the data carrier, reconciled against the EU registry on submission.
Security posture
Information-security controls maintained toward formal certification as the regime matures.
Built for qualified electronic sealing, ahead of live registry onboarding.
The registry Implementing Regulation requires every DPP submission to carry a qualified electronic seal from a QTSP on an EU Trusted List; submissions without one are rejected automatically. Our submission pipeline is built with that sealing step in place. Qualified seal certificates will be procured from an EU Trusted List QTSP ahead of live registry onboarding; we do not hold one today, and no submission is sealed yet.
Source: Implementing Regulation (EU) 2026/1778, adopted 16 July 2026 (OJ 17.7.2026, in force 6 August 2026). Requirement carried from the draft text, pending our review of the adopted annex.
The obligation doesn’t end when the sale does.
Every passport stays live, queryable and sealed for ten years and beyond — independently of any single operator, including us.
Last reviewed 12 June 2026