Best Digital Product Passport Software: 2026 Buyer's Guide

Research cut-off: 28 October 2026. Publisher: GoodsTag, a DPP software vendor appearing in these comparisons. Disclosure: this is vendor-published purchasing research based on public supplier documentation, not independent laboratory testing or a negotiated-quote exercise. No vendor is declared “EU certified” on this evidence.

Buyer takeaway

A DPP purchasing decision is not just vendor selection: some providers offer issuance/hosting, others supplier traceability, industrial identity, environmental calculation, or construction documentation. Purchase against the specific product regulation, granularity and expected system landscape.

Regulatory guardrail: Sector law controls actual obligations: ESPR (EU) 2024/1781 is horizontal; EU battery passports have a fixed February 2027 commencement for covered categories, while iron and steel and construction products take different future routes. Neither buying a QR service nor obtaining an ISO 27001 certificate alone certifies final DPP compliance. Registry operator verification, passport integrity, decentralised passport hosting and independent continuity are distinct controls.

Market structure: compare solutions doing the same job

A complete project can have multiple layers: (1) legally scoped product data and evidence, (2) upstream supplier and environmental collection, (3) stable product/lot/item identifiers, (4) compliant publication and permission management, and (5) hosting, backup and lifecycle operations. Some vendors sell only one or two of these layers. If a supplier's site shows a mill certificate or EPD engine but no proof of passport issuance and continuity, treat the tool as complementary, not as a failed passport provider.

Detailed functionality benchmark

Status legend (user-facing - never treat unknown as No):

• Y = Supported / Included (Starter unless a higher tier is noted)
• Pro / Scale / Ent = Available from that plan
• Cfg = Configurable / implementation required; not yet proven in a customer deployment for this sector
• Test = Tested in EU Registry sandbox (actual registration succeeded)
• Pend = Awaiting external dependency (for example final production Registry API access)
• NV = Not publicly verified for that vendor from reviewed sources
• No = Explicitly unsupported
• n/a = Not applicable

Coverage for competitors: D = documented/claimed by that supplier; T = tier-dependent in public materials. NV replaces earlier lone ? marks - it is not evidence of inability.

Identity and regulation

Feature	GoodsTag	osapiens	Siemens	Narravero	Veribl	Transpareo	Minespider	Circularise
ⓘ Model / batch / item	Y	NV	D	D	D	D	D	NV
ⓘ Identifier-agnostic support	Y	NV	NV	D	D	NV	NV	NV
GS1 core / advanced resolver	Y / Pro	NV	NV	D	D	NV	NV	NV
Sector schema configurability	Y	D	D	D	D	D	D	NV

Trust and long-term use

Feature	GoodsTag	osapiens	Siemens	Narravero	Veribl	Transpareo	Minespider	Circularise
ⓘ EU DPP Central Registry test registration	Test	NV	NV	NV	NV	NV	D	NV
Production Registry automated API	Pend	NV	NV	NV	NV	NV	NV	NV
ⓘ Create/change cryptographic authentication	Y	NV	NV	NV	D	D	NV	NV
ⓘ VC issuance / change attribution	Y	NV	D	NV	D	NV	D	NV
ⓘ Independent third-party backup	Y	NV	NV	NV	NV	NV	D	NV
10y hosting / beyond 10y	Y / Quote	NV	NV	D	NV	NV	NV	NV
ⓘ GCP hosting certifications / vendor ISO 27001	Y / No	NV / NV	NV / NV	NV / NV	NV / NV	NV / NV	NV / D	NV / D

Collection / integration

Feature	GoodsTag	osapiens	Siemens	Narravero	Veribl	Transpareo	Minespider	Circularise
Manual supplier forms	Y	D	NV	NV	D	NV	T	D
Supplier API	Pro	D	D	NV	D	NV	T	D
Supplier subtenants	Scale	NV	NV	D	NV	NV	T	NV
Manual export / API export	Y / Pro	NV / D	NV / D	NV / NV	D / D	D / D	D / D	NV / D
ⓘ AAS / ⓘ IDTA / ⓘ Catena-X	Cfg	NV	D	NV	NV	NV	D	NV

Environmental / ecosystem

Feature	GoodsTag	osapiens	Siemens	Narravero	Veribl	Transpareo	Minespider	Circularise
ⓘ LCA data ingestion	Y	NV	NV	NV	NV	NV	NV	NV
Native LCA/EPD calculation engine	No	NV	NV	NV	NV	NV	NV	NV
Published starting subscription + quota	Y	NV	NV	Partial	D	D	D	NV
Complete scenario TCO transparency	Partial	NV	NV	NV	Partial	Partial	Partial	NV

GoodsTag publishes DPP plans from 300 €/month for its currently commercialised DPP verticals (Batteries, Iron & Steel, Cement). Validate sector eligibility and project scope with GoodsTag before assuming the same package for every industry.

Provider-by-provider analysis and price/licence implications

GoodsTag - Cross-sector DPP platform

Buyer fit: Manufacturers that need a configurable DPP publisher with model/batch/item identities, signing/VC attribution, independent backup and published DPP plan pricing for commercialised verticals (Batteries, Iron & Steel, Cement).

Documented strengths (owner-confirmed 28 October 2026): Create/host/publish; model/batch/item granularity; parent-child inheritance; multilingual content; GS1 core + identifier-agnostic technical support; QR; cryptographic authentication of every creation and change with demonstrable Verifiable Credentials for change attribution; manual machine-readable export on Starter; manual supplier forms and QR/form lifecycle updates on Starter (including permitted lifecycle attributes); independent third-party backup; 10 years hosting per newly created DPP (extensions quoted); successful EU Registry TEST registrations. REST API and automated import/export from Pro; supplier subtenants from Scale; IoT device management and extended carriers from Enterprise.

Risks and contractual checks: Advanced GS1 resolver, API automation and supplier subtenants are not Starter entitlements. AAS/IDTA/Catena-X are technically feasible but not implemented/tested as dedicated GoodsTag offerings. Production Registry automated API integration is pending final EC specifications/access - do not equate sandbox success with finished production automation. GoodsTag is not ISO 27001 certified as an organisation; hosting is on GCP (provider certifications). Sector-specific steel certificate workflows and cement EPD/DoPC mappings may require configuration and are not claimed as live customer deployments unless separately evidenced. Do not assume the published DPP package automatically covers every industry (including Textile) without scoped confirmation.

Public pricing (DPP tab on /pricing, applies to Battery, Iron & Steel and Cement): Starter 300 €/month (3,600 €/year) for 5,000 NEW DPPs/year; Pro 800 €/month (9,600 €/year); Scale 1,500 €/month (18,000 €/year); Enterprise quote. Volume beyond 5,000/year, setup and bespoke integrations: quote. Standard updates to existing DPPs are not billed as new creations. Do not use the Smart Products / Digital Twin tab as a DPP comparator.

Evidence: Pricing - DPP plans; Battery; Iron & Steel; Cement; owner confirmation 28 October 2026.

osapiens HUB - Enterprise product and supply-chain compliance platform

Buyer fit: Broad compliance-oriented enterprise choice. Enterprises consolidating DPP with adjacent product, supplier and sustainability compliance processes.

Documented strengths: DPP alongside wider supplier/compliance workflows, suited to data governance at scale.

Risks and contractual checks: Confirm sector schema, Registry workflow, external data backup and detailed plant-specific genealogy with proof, not brand reputation.

Public pricing: Quote only.

Evidence: Source 1

Siemens DPP4.0 - Industrial/automotive enterprise DPP

Buyer fit: Industrial systems-led DPP infrastructure. Large enterprises with existing Siemens/AAS/Catena-X and complex industrial components.

Documented strengths: Explicit AAS/IDTA, Catena-X, open API and nested-asset modelling, with a released DPP SaaS offer.

Risks and contractual checks: Licensing, backup provider independence and particular battery checklist validation to be established contractually.

Public pricing: Quote only.

Evidence: Source 1

Narravero - Cross-sector DPP / customer experience

Buyer fit: Brand experience and multilingual DPP alternative. Multi-sector brand-led DPP, after-sales and product-content experiences.

Documented strengths: Public vertical battery cases, multilingual consumer experience, marketing/analytics and ERP/PIM connection claims.

Risks and contractual checks: Pricing inconsistencies, and lack of independent proof for third-party backup and Registry fulfilment in reviewed sources. For a compliance-first manufacturer, request granular evidence.

Public pricing: Public pricing page displays conflicting excerpts: optional pilot from 8,000 € one-time; “Plus from 660 €/month”, another “from 6,500 €/year”, and Pro variations. Treat licensing as custom quote until reconciled.

Evidence: Source 1; Source 2

Veribl - DPP publisher + consumer service

Buyer fit: Strong regulated data and consumer engagement hybrid. Brands seeking DPP and consumer support / warranties with test reports and portability.

Documented strengths: Detailed vendor-published interoperability test reports and commitments to version signatures, export, 10-year uptime and GS1/AAS/Catena-X.

Risks and contractual checks: Self-published test assertions; independently verify test artefacts. Crucially growth plan limits products, not DPP passport creation units, and uses USD with scan limits. Vendor claims second-provider backup export, not necessarily an independent operated backup.

Public pricing: Product-platform Growth $499/month for 100 PRODUCTS and 25k scans/mo; Enterprise quote. This is a product/scan limit, NOT 100 battery units. Official public DPP battery pricing may differ.

Evidence: Source 1; Source 2

Transpareo - Cross-sector product publisher + metals vertical

Buyer fit: Transparent self-service publisher with own domain. Self-service metals DPP publishing with transparent recurring pricing, own domain and signed versions.

Documented strengths: Metals-specific use cases and heat/certificate fields, full feature set on all plans, API/export and verifiable signed versions.

Risks and contractual checks: Vendor mentions future legal fields as though settled; do not repeat those predictions. Backup is self-hostable viewer, not necessarily independent DPP data custody. Published capacity denominator is not annual creations.

Public pricing: EUR public monthly plans: 219 € up to 100 published passports; 899 € up to 1,000; 2,199 € up to 10,000; 5,499 € unlimited. Beta discounts currently shown (153.30 € / 629.30 € / 1,539.30 € / 3,849.30 €). Counts are published/passports in account, not annual new creations; never compare as yearly quotas.

Evidence: Source 1; Source 2; Source 3

Minespider - Battery-native passport + mineral traceability

Buyer fit: Cross-sector traceability component rather than generic easy-install publishing choice. Battery teams needing structured supplier/data governance and material-chain evidence, not only a QR viewer.

Documented strengths: Detailed public plan matrix specifies users, linked battery passports, evidence storage, data access, Catena-X, BMS support, registry and backup tiers.

Risks and contractual checks: Base lacks linked packs/modules, supplier external data requests, tracing view and advanced integration assistance per plan table; even annual-unlimited language has conditions. Backup described as standard/enhanced; independence and exit details require proof.

Public pricing: Base 11,900 €/year (table up to 5,000), Plus 19,700 €/year (unlimited per table), Enterprise 34,500 €/year; service and integration tiers differ. Conflicting page headline about unlimited: verify.

Evidence: Source 1; Source 2

Circularise - Confidential chain of custody and supply-chain sharing

Buyer fit: Traceability layer; separate passport publishing proof required. Complex multi-tier chains concerned about confidential supplier data, mass-balance and material allocation.

Documented strengths: Data collection, supplier-level evidence, mass balance/chain-of-custody and confidential sharing are explicit product themes.

Risks and contractual checks: Do not assume supplier traceability equals a full EU Registry issuer, independent DPP backup or item-level regulated passport without a working demo.

Public pricing: Quote only.

Evidence: Source 1

Spherity VERA - Verifiable-credentials / data-space DPP platform

Buyer fit: Cross-sector identity and verifiability specialist. Enterprises prioritising W3C verifiable credentials, identity wallets and data-space sharing.

Documented strengths: Detailed documentation for DPP templates, credential exchange, API, permissions and W3C identity/security workflows.

Risks and contractual checks: Cryptographic credential handling is not proof of an independent backup provider, Registry integration or low-effort onboarding; request separate proofs.

Public pricing: Quote only.

Evidence: Source 1; Source 2

Kezzler - Enterprise serialized identity & traceability

Buyer fit: Strong identity/trace layer, potential DPP platform component. Very-high-volume item-level identities and event-based logistics / consumer traceability.

Documented strengths: Specialisation in identification and serialization at scale.

Risks and contractual checks: Check Battery Annex XIII forms, Registry, signing and independent backup separately; site not fully assessed for sector-specific features.

Public pricing: Quote only.

Evidence: Source 1

Cirtrace - Sector-template DPP publisher; steel vertical

Buyer fit: Sector-template vendor; objective comparison should distinguish actual product demo from template promises. Manufacturers seeking an existing marketed steel template, DoPC/EPD inclusion and QR/API.

Documented strengths: Published sectoral steel solution discusses DoPC, EN 15804 EPD, ERP and QR, supply-chain traceability and recycled content.

Risks and contractual checks: Some published claims about steel timeline and universal retention are over-specific compared with pending delegated acts; use neutral law sources. Steel mill genealogy/independent backup claims not substantiated.

Public pricing: Quote only.

Evidence: Source 1; Source 2

Emidat - Construction EPD/LCA + DPP

Buyer fit: Vertical LCA/data engine, not blanket general DPP incumbent. Construction manufacturers wanting native EPD production/data integration and regulatory product information.

Documented strengths: Explicit EPD-to-DPP mapping; LCA/EPD and construction data agents, APIs and flat-file imports.

Risks and contractual checks: Quote-dependent licence and no cement kiln/recipe lot genealogy evidenced; require actual machine-readable CPR DPP, role/access, external backup and Registry tests.

Public pricing: Licence-based portfolio/regulation scope, quote only.

Evidence: Source 1; Source 2

Cobuilder Supply - Construction technical product/DoP data specialist

Buyer fit: Construction domain specialist, not general DPP platform. Construction producers prioritising digital DoP/DoPC properties, interoperability and data readiness.

Documented strengths: Concrete digitised DoP/DoPC workflows and field completion support; leads CIRPASS-2 construction DPP pilot.

Risks and contractual checks: The vendor itself warns no construction provider can claim final mandated/certified DPP status. Construction DPP readiness is not full future regulatory conformance.

Public pricing: Quote only.

Evidence: Source 1; Source 2; Source 3

Pricing and five-year ownership economics

Table A - published facts

Vendor	Plan	Price	Quota unit	Source	Verified
GoodsTag	Starter / Pro / Scale	300 / 800 / 1,500 €/month	5,000 new DPP/year (commercialised DPP verticals)	/pricing	2026-10-28
Minespider	Base / Plus	11,900 / 19,700 €/year	Battery plan table (verify unlimited claims)	minespider	2026-10-27
Transpareo	Hosted tiers	from ~219 €/month	Active published stock	transpareo	2026-10-27
Veribl	Growth	$499/month	100 products + scans	veribl	2026-10-27
Narravero	Mixed public excerpts	Reconcile / quote	Unclear	narravero	2026-10-27

Live demo checklist

Run the same short checklist with every shortlisted vendor. Your team and the vendor should complete these steps together in one session.

1. Create one battery-style passport and one construction-style passport on the same platform without mixing their legal fields.
2. Show model, batch and item identities, including how the QR resolves.
3. Show who can see what (public vs restricted) and a simple access change log.
4. Request missing data from a supplier, then approve or reject the answer.
5. Export in an open format that another system can open, and explain the backup.
6. Share a simple five-year cost example for your expected yearly volume.

Red flags that should change the award decision

• The sales team treats planned sector rules as legally adopted, or states that one qualified eIDAS seal must be attached to every passport without a legal reference.
• The vendor offers only a human-readable QR landing page with no demonstrable machine-readable data, version tracking and audience restrictions.
• “Independent backup” means only a second region under the same provider, with no third-party custody or recoverable export.
• A five-year price quote ignores cumulative retained passports, production volumes, API events, data carriers and exit costs.
• “Compliant” refers only to a PDF/checklist generated by the vendor and not to relevant product law, access/Registry obligations and actual test output.
• A supplier traceability or EPD calculator is sold as an all-in-one EU passport while no Registry, publishing or continuity architecture is demonstrated.

Evaluation method and limitations

FLAG for separate /pricing editorial review (not changed here): the main GoodsTag pricing page may still show shorthand such as “ISO 27001 security”. Owner confirmation 28 October 2026: GoodsTag is not ISO 27001 certified; hosting is on GCP infrastructure that holds provider certifications. Prefer wording such as “Hosted on an ISO 27001-certified GCP infrastructure”.

1. Regulation first: the current EU product law and official Commission guidance are the legal baseline; vendor claims cannot change legal applicability or dates.
2. Source-grounded only: features marked documented are supplier-published claims, not independently audited delivery results. Public case studies are identified explicitly. Unknown is not failure.
3. Plan-aware: a vendor capability on Enterprise must not be marked as available on its Starter tier; included/optional/Beta features need separate confirmation.
4. No fake scoring: a weighted RFP should be populated after your team sees proof and the commercial terms. Public documentation counts do not equal product quality, SLA performance or compliance certification.
5. Commercial comparability: new creation/year, active published stock, SKU/model, scans, API calls and unlimited-fair-use licences are different price denominators. Cross-denominator cost comparisons are prohibited.
6. Publisher disclosure: GoodsTag appears as a evaluated supplier. The article is not an independent analyst ranking and is not neutral third-party certification.

Recommended weighted RFP exercise (after demos): regulatory/applicability + identity + restricted access 25%; data collection and source evidence 20%; integration and operating workflow 20%; trust, independent backup, provenance and portability 20%; verifiable five-year TCO and support 15%. Adapt the weights for each sector and display measured demo results, not vendor marketing ratings.

Regulatory and industry primary references

• ESPR (EU) 2024/1781
• Batteries Regulation
• CPR Regulation
• DPP Registry regulation
• CIRPASS-2 Community of Practice

Terms explained

Complex comparison rows use the definitions below (also available as ⓘ tooltips in the matrices).

Term	What it means	Why buyers care	Ask in the demo
Model / batch / item granularity	Passport identifies a design, a lot, or one physical unit	Legal duties often attach to a specific identity level	Show model, batch and item passports from one family
Parent-child genealogy	Upstream records link to derived lots with inherited attributes	Traceability without rewriting every field	Demonstrate inheritance after a rework event
New DPP/year vs active stock	Creations in a period versus hosted passport inventory	Vendors price different units	Confirm the quota denominator in writing
Identifier-agnostic support	Platform can accept several ID schemes technically	Technical support ≠ automatic legal acceptance	Which schemes passed Registry validation for our category?
EU Central Registry	EU index of identifiers - not the passport host	Registration and hosting are separate controls	Show test registration vs hosting recovery
Registry test vs production API	Sandbox registration versus automated live submission	Sandbox success ≠ finished production API	Is live registration manual, assisted or API-integrated today?
Cryptographic signature	Integrity and attribution of creates/updates	Needed across the passport lifetime	Sign a create and an update; verify both
W3C Verifiable Credential	Verifiable assertion with issuer, subject and proof	Ecosystems may exchange credentials, not only signed blobs	Export a VC and name tested profiles
Independent third-party backup	Separate-service continuity, not same-cloud replicas only	Continuity and exit planning	Recover a passport without the primary host
10-year hosting vs extension	Included retention per new DPP; extra years may be quoted	Long-life products may need year 11+	Confirm included years and extension pricing
Manual export vs API export	Machine-readable download (Starter) versus automated/API (Pro)	Exit and integration paths differ by plan	Export a full pack; then show the Pro API path
Supplier form vs API vs subtenant	Manual forms (Starter), API (Pro), isolated supplier workspaces (Scale)	Supply-chain maturity drives plan choice	Run a form, then show API and subtenant boundaries
Manual SoH vs BMS vs IoT	QR/form (Starter), BMS/API (Pro), device management (Ent)	Dynamic battery data cost and complexity differ	Update SoH manually and via API
LCA engine vs LCA ingestion	Calculating impacts versus storing/publishing external results	DPP host ≠ EPD authoring tool	Import an EN 15804 result without recalculating GWP
EN 10204 3.1/3.2	Mill inspection documents associated to heats/batches	Certificate association is not automatic mill software	Ingest a 3.1 file against a heat and export it
AAS / IDTA / Catena-X	Industrial twin and data-space ecosystems	Not implied by a generic REST API	Is each path tested product or custom-only?
GCP ISO vs vendor ISO 27001	Cloud provider certificates versus the DPP vendor's own certification	GoodsTag is hosted on GCP; GoodsTag itself is not ISO 27001 certified	Separate vendor certificates from hosting attestations
Published price vs five-year TCO	Public base subscription versus all quoted unknowns	Sticker prices misrank vendors	Complete a five-year worksheet with known subtotal and listed unknowns

Related GoodsTag guides and next actions

• General DPP buying guide
• Battery solutions · Iron & steel solutions · Cement solutions
• Ask three shortlisted vendors to run the same live demo checklist before you buy.

Editorial last checked 28 October 2026. Owner-confirmed GoodsTag capability clarifications applied. Reverify current prices, legislation and provider capabilities immediately before release.