Digital Product Passport
Digital Product Passport: the product data ESPR asks you for, and where you already have it
The Digital Product Passport (DPP) is the digital identity record that the EU ESPR regulation progressively imposes on products sold in the Union: composition, origin, certifications, repairability, recycling, value chain. Most of that data already exists in your quotes, orders, invoices and supplier documents. Zylio reads them, cross-checks them and links every value to its proof.
The framework
What the European regulation requires, category by category
ESPR (the EU Ecodesign for Sustainable Products Regulation) replaces the ecodesign directive and extends its reach well beyond energy. It creates the Digital Product Passport: a set of data specific to each product, accessible through a data carrier on the product or its packaging, and intended for consumers, repairers, recyclers and market surveillance authorities.
The regulation does not set a single date. It proceeds by delegated acts, one product category at a time, each specifying the required attributes and the deadline. The announced timelines place textiles among the first categories concerned, around 2027, and electronics later, towards 2030. Other texts add to it: the French AGEC law on environmental information, the EUDR regulation on deforestation for certain commodities.
For a procurement, quality or sustainability team, the consequence is the same whatever the category: for each product reference, you will have to produce verifiable data on what the product is made of, where it comes from and how it is repaired or recycled. And you will have to be able to prove every one of those data points.
The data
Six families of product data to collect for a Digital Product Passport
The exact attributes depend on the delegated act for your category. The families come back everywhere.
Composition and materials
Materials and components, their proportions, substances of concern. Often written into technical sheets and detailed quotes.
Origin and provenance
Country of manufacture, site, origin of raw materials. Found on invoices, delivery notes and customs documents.
Certifications and labels
Supplier certificates, their validity dates, their scope. PDFs attached to offers, rarely centralised.
Durability and repairability
Availability of spare parts, warranty period, repair terms. Negotiated in contracts, forgotten afterwards.
End of life and recycling
Sorting instructions, recycled content, take-back schemes. Declared by the supplier, to be verified over time.
Value chain
Tier one, tier two, tier three suppliers and beyond, and the documents that attest each link.
The mechanism
This data already exists: in your purchasing documents
The difficulty with the DPP is not missing data but scattered data. A detailed quote describes the composition. An invoice carries the origin. A delivery note confirms the batch and the site. A certificate attached to an offer attests a label. All of it exists, as PDFs, in mailboxes and shared folders, with no link between the documents.
Zylio reads these documents as they are (native PDFs, scans, spreadsheets, emails) and extracts every attribute, linked to the page and line it came from. The Capture agent reads; the Matching agent cross-checks quote, order, invoice and delivery for the same reference; Graph, the knowledge graph layer, links each attribute to the product, the supplier and the source document. What you get is not one more data entry: it is a sourced product dataset, ready to feed your DPP register.
Capture
Zylio reads these documents as they are (native PDFs, scans, spreadsheets, emails) and extracts every attribute, linked to the page and line it came from.
DiscoverGraph
Graph, the knowledge graph layer, links each attribute to the product, the supplier and the source document.
Discover
The steps, the data model and the inconsistencies flagged.
The proof
Every declaration linked to its proof, every inconsistency flagged
The regulation does not only require data: it requires that the data be verifiable. An origin declared without a document is worth nothing in front of a surveillance authority. That is why Zylio never separates a value from its source. The attribute “origin: Portugal” stays linked to the invoice, the page and the line where it was read, time-stamped, exportable.
Cross-checking between documents does the rest. When the quote states one material and the invoice another, when the certificate expired before the delivery, when two suppliers declare different origins for the same reference, the discrepancy comes up with its reason. Nothing is smoothed over in silence: missing data is declared missing, never estimated.
Each extracted value stays linked to the exact place in the document where it was read.
What changes
What changes for procurement, quality and sustainability teams
The first change is the starting point. Instead of an information system overhaul, or an investment in a product data management tool before a single data point exists, you start from the documents you already have. The DPP register, the PIM or whichever tool you choose receives data that is already structured and sourced.
The second change is scale. The platform absorbs more than 10,000 supplier documents a week, across all formats, languages and structures: a catalogue of several thousand references and hundreds of suppliers is not an obstacle. Procurement, quality and sustainability teams work on the same dataset, each on its own attributes.
The third change is duration. Delegated acts will evolve, and so will the required attributes. A dataset linked to its sources gets completed; a manual entry gets redone.
Our limits
What Zylio does not do in a DPP project
Zylio contacts no supplier. When a data point is missing from your documents, it is flagged as missing; the request to the supplier remains yours. Zylio does not replace your DPP register or your product data management tool: it feeds them. And it commits nothing without your validation: every consolidated attribute is proposed, never published on your behalf.
Your documents are hosted in France, under ISO 27001 and SOC 2 Type II certifications. They are never used to train a model and never shared between customers. The audit trail (who read what, when, with what result) is complete and exportable.
Hosting in France, certifications, data usage, audit trail.
Matching
Purchase order, goods receipt and invoice matching, automated.
Matches the three documents line by line and applies your tolerances by supplier, by purchasing category and by amount.
Compliant cases go through on their own. The others arrive qualified, with the discrepancy already costed.
What Matching detects
- Quantity discrepancies
- Partial receipts, deliveries split or grouped
- Units of measure to convert
- Diverging item references
- Additional charges absent from the purchase order
- Invoicing before the goods were actually received
Nothing is lost. Everything can be checked, everything can be proven.
- The contract clause and the invoice line, highlighted side by side.
- Every extracted value stays linked to the exact place in the document where it was read.
- The same case produces the same decision, today as in six months: the rules are applied deterministically.
- No discrepancy is set aside in silence. Anything that matches no rule is raised, with its reason.
- The agent records what it did, in the order it did it: who, what, how much, when.
Frequently asked questions
What is the Digital Product Passport?
It is the digital identity record of a product, created by the EU ESPR regulation on ecodesign. It brings together verifiable data on composition, origin, certifications, repairability and recycling, accessible through a data carrier on the product. The exact attributes are set category by category.
Which products are concerned, and when?
The regulation proceeds by delegated acts: each product category receives its list of attributes and its deadline. Announced timelines place textiles among the first categories, around 2027, and electronics towards 2030. If your category is not yet covered, it probably will be; the data to collect is the same.
Do you need a product data management tool before starting?
No. Most of the data already exists in your quotes, invoices, delivery notes and supplier certificates. Zylio extracts and structures it from those documents; the DPP register or PIM, when you choose one, will receive data that is already sourced. Starting from the documents avoids building an empty tool.
How do you prove a data point to a surveillance authority?
Every attribute consolidated by Zylio stays linked to the document, the page and the line it came from, with the time stamp of its reading. An origin or a certification is therefore proven by opening the source document. Inconsistencies between documents are flagged, never smoothed over, and missing data is declared missing.
Measurable impact in every environment
More than 5 million procurement documents analysed
Between 1 and 7% of margin recovered
on the scope analysed
From 15 to 45% of time given back to teams, per FTE
depending on the scope and on data maturity
Zylio fits into your existing ecosystem.
The ERP runs the process. Zylio handles the exception and recovers the value that escapes it: invoices without a purchase order, line-by-line price discrepancies, duplicates and overbilling, off-contract spend.
Your data under high security.
Zylio meets the most demanding standards, and nothing is committed without your approval.
- Certifications
- Hosting
- Encryption
- Access
Going further
- Digital product passport: structuring supplier dataHow Zylio collects, structures and cross-checks data to feed the passport.
- Collect supplier ESG dataCertificates, declarations and attestations, read and tracked over time.
- OCR and extraction of purchasing documentsWhat the Capture agent reads, line by line, and how each value stays sourced.
- See the platform in a demoOne concrete case on your documents, agents and evidence on screen.
See what this looks like on your own data
Twenty minutes, on a spend category of your choosing. We show you what the agents detect, with the evidence behind it.
- No commitment, on your own data
- Result in 3 weeks
- 20 minutes, no sales pitch
- Your data stays hosted in France
- No change of tool or process