EN 18220:2026 · EN 18221:2026 · EU 2024/1781 (ESPR) · CBAM Reg. 2023/956

Is your Digital Product Passport
actually compliant?

Paste any DPP code, GS1 Digital Link, or external registry URL. PassportLab checks what creates legal liability for EU importers — 8 ESPR compliance requirements that determine your market access, plus CBAM field readiness for iron & steel. Free. No login required.

Enter DPP code or URL
No code?
8 ESPR compliance checks
EU legal requirements — not just credential structure
C1
VC Signature (prEN 18246 §4.3)
C2
Passport Data Hash (prEN 18246 §4.5)
C3
DPP Code Format (EN 18222:2026 §5.2)
C4
Registry Active (EN 18222:2026 §5.3 · EU registry live)
C5
Audit Trail Integrity (prEN 18246 §4.7)
C6
ESPR Annex I Fields (EU 2024/1781 Art. 7)
C7
Data Carrier Conformance (EN 18220:2026)
C8
Data Persistence (EN 18221:2026)
C9
RFC 3161 Trusted Timestamp (prEN 18246 §4.9)
Free tier: 10 verifications/day · Need more? Get a Verify API key (1,000/day)

Most DPP validators confirm a passport is technically valid — correctly structured and signed. PassportLab goes further and checks the EU-specific obligations: registry registration, ESPR Annex I field completeness, and conformance to the published EN 18220 and EN 18221 standards. Technical validity is table stakes; regulatory readiness is the point. The draft EU DPP Registry regulation (Art. 3(c)) requires the Commission to build its own official verification platform — until that ships, this is the closest thing available today.

A readiness check based on the latest published standards — not a guarantee of conformity under any specific delegated act.

Built to EN 18220:2026 & EN 18221:2026JRC ESPR StakeholderCIRPASS-2Verified PassportLab DPPs pass every live check.

Standards notice: Standards status: EN 18216:2026–EN 18223:2026 — including the data-carrier standard EN 18220 and the data-persistence standard EN 18221 — were published by CEN/CENELEC on 27 May 2026. They are not yet cited in the Official Journal of the EU, so they do not yet confer formal presumption of conformity. EN 18239 (access rights) and EN 18246 (data authentication) remain in draft, expected late 2026. ESPR (EU 2024/1781) delegated acts and per-category Annex I requirements are still being finalised. CBAM Reg. 2023/956 obligations continue to evolve under Commission guidance. Results are a readiness indication based on the latest available standards and drafts, and do not constitute legal advice.