A passport has to outlive the product, and the supplier.
Your passports must stay accurate, retrievable and interoperable for the statutory decade — through audits, ownership changes and the platform’s own continuity. Meeting that duty as a DPP service provider under ESPR Art 2(32) is not something a CMS can do.
Built for the statutory decade, not the demo.
Residency, immutability, interoperability and access are not features bolted on — they are how regulated infrastructure is constructed.
Data continuity
UK-hosted primary, with an independent encrypted back-up copy held in the EU on separate infrastructure and immutable storage outside the primary provider, so the record survives the loss of any single system.
Interoperability
Built to the emerging two-layer DPP standard so a passport reads the same in every conformant system.
Sealing
Architected for qualified electronic seals from an EU-trusted-list provider, so authenticity is verifiable.
Tiered disclosure
Public and restricted layers, every restricted release recorded as an explicit, attributable action.
Identity
Per-item identifiers resolved from the data carrier, reconciled against the EU registry on submission.
Security posture
Information-security controls maintained toward formal certification as the regime matures.
Three copies, two platforms, one beyond our own reach.
A back-up that has never been restored is a hope, not a back-up. This is what actually stands behind the retention promise.
Layered, not single
Platform database back-ups for fast operational recovery; an independent append-only custody store holding an encrypted copy of every published passport; and regular encrypted snapshots held with a second provider entirely, in an account isolated from the systems that produce them.
Written once, deletable by no one
Off-platform copies are written with object locking: the credentials that create back-ups are technically incapable of deleting or altering them for the length of their retention. A compromised system cannot destroy back-up history.
Encrypted before it leaves us
Data is encrypted in transit and at rest throughout. Off-platform copies are additionally encrypted on our own infrastructure before upload, with keys the storage provider never holds.
Recovery that has been practised
Automated drills retrieve and validate back-up copies on a schedule, and recovery runbooks are kept under version control so restoration never depends on one person's memory. Back-up runs are monitored and a missed run raises an alert.
Built for qualified electronic sealing, ahead of live registry onboarding.
Under the registry Implementing Regulation the qualified electronic seal sits at operator verification — the enrolment step — not on each submission. A legal person attains verified economic-operator status by evidencing its identity with a qualified electronic seal supported by a qualified certificate from a QTSP on an EU Trusted List (Article 4(2)), and that status lasts until the credential expires, to a maximum of three years. The registry's automatic checks on a submission cover semantic conformity, coherence between the registry data and the passport payload, granularity, commodity code, and the back-up link. Dynamic Systems Consulting Limited holds a qualified eSeal and completed its economic-operator verification in July 2026.
Source: Implementing Regulation (EU) 2026/1778, adopted 16 July 2026 (OJ 17.7.2026, in force 6 August 2026), Articles 4 and 8. Checked against the adopted text on 27 July 2026 — the submission seal check present in the draft was removed before adoption.
Where the record lives, stated plainly.
Procurement asks this first, so it is answered here rather than in a questionnaire.
Primary passport data
The platform database runs in the United Kingdom (London region). Passport records, audit evidence and account data are held there at rest, encrypted.
Independent back-up copies
Encrypted copies of every published passport are held in the European Union (Frankfurt region) on separate infrastructure under object lock, in an account isolated from the platform, so a copy exists inside the EU independently of the primary.
Retention
Records are retained for the full period the regulation requires, ten years and beyond, including after a passport retires and after a customer leaves.
Access and processors
Every access to restricted passport data is logged. The third parties that process data on our behalf are listed in the Privacy Policy and are available as a schedule on request.
Everything a buyer's procurement needs, on one page.
The facts a supplier questionnaire asks for, each linked to the page where it is stated in full.
- Legal entity
- Dynamic Systems Consulting Limited, trading as EU Digital Passport Processor. Company no. 15569270, England and Wales. ICO registration ZA00013577864.
- Role
- DPP service provider under ESPR Article 2(32): we create, host, register and hold passports on behalf of the economic operator, who keeps the regulatory obligation.
- Commercial terms
- Annual platform licence per goods-group module, per-passport activation and passport custody, and the standalone custody service, as set out in the Terms of Service.
- Terms of Service
- Data residency
- Primary in the United Kingdom, independent back-up copies in the European Union. Detail above.
- DATA RESIDENCY
- Back-up and continuity
- Three-layer architecture, immutable storage, rehearsed restore. Detail above; every claim is bound to a control in our controls register.
- Back-up architecture
- Qualified sealing
- Qualified electronic seal held; economic-operator verification completed under Implementing Regulation (EU) 2026/1778.
- eIDAS sealing
- Availability
- Target of 99.9% for the platform and the public passport viewer, stated in the Terms of Service. No RTO or RPO figure is published without a measured basis.
- Terms of Service
- Privacy and processors
- UK GDPR lawful bases, retention and the list of third-party processors are in the Privacy Policy.
- Privacy Policy
Supplier questionnaires and security questions: legal@eudigitalpassportprocessor.com. We answer from this page; where a fact is not on it, we say so.
The obligation doesn’t end when the sale does.
Every passport stays live, queryable and sealed for ten years and beyond — independently of any single operator, including us.
Last reviewed 25 August 2026