
A DPP service provider is an independent third party authorised by the economic operator to process digital product passport data and make it available to entitled actors under ESPR.
“A natural or legal person that is an independent third party authorised by the economic operator which places the product on the market or puts it into service, and that processes the digital product passport data for that product for the purpose of making such data available to economic operators and other relevant actors with a right to access those data under this Regulation or other Union law.”Regulation (EU) 2024/1781 — establishing a framework for the setting of ecodesign requirements for sustainable products
While the economic operator — the brand or manufacturer — remains legally responsible for the data, the provider assumes the role of technical facilitator.
Generating and linking data carriers — such as unique identifiers (UIDs) and QR codes — to specific products.
Providing secure, machine-readable storage for product lifecycle data.
Ensuring that passport data complies with EU standards so it can be read through the EU's central product passport registry.
One of the most important technical requirements for DPPs is information persistence. This creates a clear distinction between hosting roles:
Manufacturers are allowed to host their own DPP data on their on-premises servers. They are not required to use an external provider for primary storage.
Regardless of who hosts the primary data, the law requires an independent third-party backup provider. This ensures that in the event of manufacturer insolvency or server failure, product data remains accessible to consumers and authorities for at least 10 years.
All DPP providers who meet IDIPPA member requirements and the applicable authorization and registration regulations can apply. The application process takes about one month from receipt to final decision.