Best Iron & Steel DPP Software: 2026 Buyer's Guide

Research cut-off: 28 October 2026. Publisher: GoodsTag, a DPP software vendor appearing in these comparisons. Disclosure: this is vendor-published purchasing research based on public supplier documentation, not independent laboratory testing or a negotiated-quote exercise. No vendor is declared “EU certified” on this evidence.

Buyer takeaway

No final iron-and-steel ESPR delegated-act data schema and compliance date had been adopted on the research cut-off. Compare operational readiness (heat genealogy, QA, PCF, supplier links) independently from final legal conformance. Carbon Border Adjustment Mechanism reporting is not the same as an ESPR Steel Passport.

Regulatory guardrail: Not yet a final steel DPP mandate: ESPR (EU) 2024/1781 establishes the framework; the iron and steel product-specific delegated act, final content/granularity and binding application date were still pending on 27 October 2026. Model, heat/batch and coil identities here are recommended data capabilities, not confirmed mandatory legal passport units. CBAM ≠ DPP, and a material test certificate ≠ DPP.

Market structure: compare solutions doing the same job

A complete project can have multiple layers: (1) legally scoped product data and evidence, (2) upstream supplier and environmental collection, (3) stable product/lot/item identifiers, (4) compliant publication and permission management, and (5) hosting, backup and lifecycle operations. Some vendors sell only one or two of these layers. If a supplier's site shows a mill certificate or EPD engine but no proof of passport issuance and continuity, treat the tool as complementary, not as a failed passport provider.

Detailed functionality benchmark

Status legend (user-facing - never treat unknown as No):

• Y = Supported / Included (Starter unless a higher tier is noted)
• Pro / Scale / Ent = Available from that plan
• Cfg = Configurable / implementation required; not yet proven in a customer deployment for this sector
• Test = Tested in EU Registry sandbox (actual registration succeeded)
• Pend = Awaiting external dependency (for example final production Registry API access)
• NV = Not publicly verified for that vendor from reviewed sources
• No = Explicitly unsupported
• n/a = Not applicable

Coverage for competitors: D = documented/claimed by that supplier; T = tier-dependent in public materials. NV replaces earlier lone ? marks - it is not evidence of inability.

Mill genealogy and quality

Feature	GoodsTag	ChainTraced	Cirtrace	Transpareo	S1SEVEN	Siemens DPP4.0
ⓘ Model / batch / item granularity	Y	D	D	D	NV	NV
ⓘ Parent-child heat/lot genealogy model	Y	D	NV	D	NV	NV
ⓘ Split / merge process rules	Cfg	NV	NV	NV	NV	NV
ⓘ EN 10204 3.1/3.2 association	Cfg	D	D	D	D	NV
Chemistry / mechanical lab evidence intake	Y	D	D	NV	D	NV
Scrap / recycled-input evidence structures	Y	D	NV	NV	NV	NV

Emissions and reporting

Feature	GoodsTag	ChainTraced	Cirtrace	Transpareo	S1SEVEN	Siemens DPP4.0
PCF / carbon data store and publish	Y	D	D	D	NV	NV
ⓘ CBAM filing (not a DPP)	n/a	NV	NV	NV	NV	NV
Native LCA calculation engine	No	NV	NV	NV	NV	NV

Interoperable publishing and trust

Feature	GoodsTag	ChainTraced	Cirtrace	Transpareo	S1SEVEN	Siemens DPP4.0
ⓘ EU DPP Central Registry - test registration	Test	NV	NV	NV	NV	NV
EU Registry production automated API	Pend	NV	NV	NV	NV	NV
ⓘ Cryptographic create/change authentication	Y	NV	NV	D	D	NV
ⓘ VC issuance / change attribution	Y	NV	NV	NV	NV	D
ⓘ Independent third-party backup	Y	NV	NV	NV	NV	NV
ⓘ 10-year hosting per new DPP	Y	NV	NV	NV	NV	NV
Manual machine-readable export	Y	D	NV	D	D	NV
Automated export / REST API	Pro	D	D	D	NV	D
ⓘ AAS / ⓘ IDTA / ⓘ Catena-X	Cfg / Cfg / Cfg	NV	NV	NV	NV	D
ⓘ GCP hosting certifications	Y	NV	NV	NV	NV	NV
Vendor organisational ISO 27001	No	NV	NV	NV	NV	NV
Published starting subscription + quota metric	Y	NV	NV	D	NV	NV
Complete scenario cost transparency	Partial	NV	NV	Partial	NV	NV

Provider-by-provider analysis and price/licence implications

GoodsTag - Cross-sector DPP platform

Buyer fit: Manufacturers that need a configurable DPP publisher with model/batch/item identities, signing/VC attribution, independent backup and published DPP plan pricing for commercialised verticals (Batteries, Iron & Steel, Cement).

Documented strengths (owner-confirmed 28 October 2026): Create/host/publish; model/batch/item granularity; parent-child inheritance; multilingual content; GS1 core + identifier-agnostic technical support; QR; cryptographic authentication of every creation and change with demonstrable Verifiable Credentials for change attribution; manual machine-readable export on Starter; manual supplier forms and QR/form lifecycle updates on Starter (including permitted lifecycle attributes); independent third-party backup; 10 years hosting per newly created DPP (extensions quoted); successful EU Registry TEST registrations. REST API and automated import/export from Pro; supplier subtenants from Scale; IoT device management and extended carriers from Enterprise.

Risks and contractual checks: Advanced GS1 resolver, API automation and supplier subtenants are not Starter entitlements. AAS/IDTA/Catena-X are technically feasible but not implemented/tested as dedicated GoodsTag offerings. Production Registry automated API integration is pending final EC specifications/access - do not equate sandbox success with finished production automation. GoodsTag is not ISO 27001 certified as an organisation; hosting is on GCP (provider certifications). Sector-specific steel certificate workflows and cement EPD/DoPC mappings may require configuration and are not claimed as live customer deployments unless separately evidenced. EN 10204 workflows are configurable/API-ready but not yet implemented at a steel customer. Do not treat pending ESPR delegated acts as binding mill deadlines.

Public pricing (DPP tab on /pricing, applies to Battery, Iron & Steel and Cement): Starter 300 €/month (3,600 €/year) for 5,000 NEW DPPs/year; Pro 800 €/month (9,600 €/year); Scale 1,500 €/month (18,000 €/year); Enterprise quote. Volume beyond 5,000/year, setup and bespoke integrations: quote. Standard updates to existing DPPs are not billed as new creations. Do not use the Smart Products / Digital Twin tab as a DPP comparator.

Evidence: Pricing - DPP plans; Battery; Iron & Steel; Cement; owner confirmation 28 October 2026.

ChainTraced - Steel and metallic-value-chain data & DPP

Buyer fit: One of the strongest actual vertical-operational competitors. Steel mills, processors and metallic-component suppliers consolidating heat certificates, PCF and product QA.

Documented strengths: Explicit EN 10204 3.1 certificate workflow, material chemistry/mechanics, lot transaction, PCF and data consolidation into DPP.

Risks and contractual checks: A 3.1 mill certificate repository is not automatically an Article 10-compliant passport system; confirm Registry integration, cryptographic signing and independent backup in working demo.

Public pricing: Quote only.

Evidence: Source 1; Source 2

Cirtrace - Sector-template DPP publisher; steel vertical

Buyer fit: Direct steel-labelled DPP vendor. Manufacturers seeking an existing marketed steel template, DoPC/EPD inclusion and QR/API.

Documented strengths: Published sectoral steel solution discusses DoPC, EN 15804 EPD, ERP and QR, supply-chain traceability and recycled content.

Risks and contractual checks: Some published claims about steel timeline and universal retention are over-specific compared with pending delegated acts; use neutral law sources. Steel mill genealogy/independent backup claims not substantiated.

Public pricing: Quote only.

Evidence: Source 1; Source 2

Transpareo - Cross-sector product publisher + metals vertical

Buyer fit: Public low-to-mid-scale metals DPP publisher, not evidence of deep rolling mill genealogy. Self-service metals DPP publishing with transparent recurring pricing, own domain and signed versions.

Documented strengths: Metals-specific use cases and heat/certificate fields, full feature set on all plans, API/export and verifiable signed versions.

Risks and contractual checks: Vendor mentions future legal fields as though settled; do not repeat those predictions. Backup is self-hostable viewer, not necessarily independent DPP data custody. Published capacity denominator is not annual creations.

Public pricing: EUR public monthly plans: 219 € up to 100 published passports; 899 € up to 1,000; 2,199 € up to 10,000; 5,499 € unlimited. Beta discounts currently shown (153.30 € / 629.30 € / 1,539.30 € / 3,849.30 €). Counts are published/passports in account, not annual new creations; never compare as yearly quotas.

Evidence: Source 1; Source 2; Source 3

S1SEVEN - Digital material certificates for metals

Buyer fit: Digital test certificate specialist to combine with a passport platform. Steel quality/certificate authenticity and structured machine-readable EN 10168 / DIN SPEC 9012 material certificates.

Documented strengths: Developer/user documentation describes JSON digital mill certificates and notarization workflows.

Risks and contractual checks: Complementary certificate exchange provider; no proof of complete steel DPP issuance, Registry submission, carbon scope or retention. Should be in “complementary tools” not listed as equivalent full DPP platform.

Public pricing: Quote only; no evidenced stand-alone DPP passport pricing.

Evidence: Source 1

Siemens DPP4.0 - Industrial/automotive enterprise DPP

Buyer fit: Industrial integration potential; no public mill heat-to-coil proof reviewed. Large enterprises with existing Siemens/AAS/Catena-X and complex industrial components.

Documented strengths: Explicit AAS/IDTA, Catena-X, open API and nested-asset modelling, with a released DPP SaaS offer.

Risks and contractual checks: Licensing, backup provider independence and particular battery checklist validation to be established contractually.

Public pricing: Quote only.

Evidence: Source 1

Minespider - Battery-native passport + mineral traceability

Buyer fit: Upstream provenance complement; steel-heat operational capability not documented here. Battery teams needing structured supplier/data governance and material-chain evidence, not only a QR viewer.

Documented strengths: Detailed public plan matrix specifies users, linked battery passports, evidence storage, data access, Catena-X, BMS support, registry and backup tiers.

Risks and contractual checks: Base lacks linked packs/modules, supplier external data requests, tracing view and advanced integration assistance per plan table; even annual-unlimited language has conditions. Backup described as standard/enhanced; independence and exit details require proof.

Public pricing: Base 11,900 €/year (table up to 5,000), Plus 19,700 €/year (unlimited per table), Enterprise 34,500 €/year; service and integration tiers differ. Conflicting page headline about unlimited: verify.

Evidence: Source 1; Source 2

Circularise - Confidential chain of custody and supply-chain sharing

Buyer fit: Mass-balance and recycled/renewable materials adjunct. Complex multi-tier chains concerned about confidential supplier data, mass-balance and material allocation.

Documented strengths: Data collection, supplier-level evidence, mass balance/chain-of-custody and confidential sharing are explicit product themes.

Risks and contractual checks: Do not assume supplier traceability equals a full EU Registry issuer, independent DPP backup or item-level regulated passport without a working demo.

Public pricing: Quote only.

Evidence: Source 1

osapiens HUB - Enterprise product and supply-chain compliance platform

Buyer fit: General enterprise backbone, steel certificate depth unproven in source. Enterprises consolidating DPP with adjacent product, supplier and sustainability compliance processes.

Documented strengths: DPP alongside wider supplier/compliance workflows, suited to data governance at scale.

Risks and contractual checks: Confirm sector schema, Registry workflow, external data backup and detailed plant-specific genealogy with proof, not brand reputation.

Public pricing: Quote only.

Evidence: Source 1

Pricing and five-year ownership economics

Table A - published commercial facts

Vendor	Plan	Advertised price	Quota / unit	Notes	Source	Verified
GoodsTag	Starter / Pro / Scale	300 / 800 / 1,500 €/month	5,000 new DPP/year each base plan	Same published DPP plans for Iron & Steel	/pricing	2026-10-28
Transpareo	Listed tiers	from ~219 €/month	Published/hosted stock, not new/year	Do not equate to GoodsTag new/year	transpareo.com	2026-10-27
ChainTraced / S1SEVEN / Cirtrace / Siemens	Quote	Quote	Vendor-specific	Treat certificate tools as complements unless full DPP hosting is proven	Vendor sites	2026-10-27

Live demo checklist

Run the same short checklist with every shortlisted vendor. Your team and the vendor should complete these steps together in one session.

1. Import one real mill test certificate (EN 10204 3.1) and match it to a heat.
2. Trace that heat to slab, coil and a downstream product, with clear parent-child links.
3. Show emissions or recycled-content evidence without exposing supplier prices.
4. Correct one material value and create a new passport version.
5. Mark which fields are already required today and which are still preparatory.
6. Export the data and explain how recovery works if the publisher is down.

Red flags that should change the award decision

• The sales team treats planned sector rules as legally adopted, or states that one qualified eIDAS seal must be attached to every passport without a legal reference.
• The vendor offers only a human-readable QR landing page with no demonstrable machine-readable data, version tracking and audience restrictions.
• “Independent backup” means only a second region under the same provider, with no third-party custody or recoverable export.
• A five-year price quote ignores cumulative retained passports, production volumes, API events, data carriers and exit costs.
• “Compliant” refers only to a PDF/checklist generated by the vendor and not to relevant product law, access/Registry obligations and actual test output.
• A supplier traceability or EPD calculator is sold as an all-in-one EU passport while no Registry, publishing or continuity architecture is demonstrated.

Evaluation method and limitations

FLAG for separate /pricing editorial review (not changed here): the main GoodsTag pricing page may still show shorthand such as “ISO 27001 security”. Owner confirmation 28 October 2026: GoodsTag is not ISO 27001 certified; hosting is on GCP infrastructure that holds provider certifications. Prefer wording such as “Hosted on an ISO 27001-certified GCP infrastructure”.

1. Regulation first: the current EU product law and official Commission guidance are the legal baseline; vendor claims cannot change legal applicability or dates.
2. Source-grounded only: features marked documented are supplier-published claims, not independently audited delivery results. Public case studies are identified explicitly. Unknown is not failure.
3. Plan-aware: a vendor capability on Enterprise must not be marked as available on its Starter tier; included/optional/Beta features need separate confirmation.
4. No fake scoring: a weighted RFP should be populated after your team sees proof and the commercial terms. Public documentation counts do not equal product quality, SLA performance or compliance certification.
5. Commercial comparability: new creation/year, active published stock, SKU/model, scans, API calls and unlimited-fair-use licences are different price denominators. Cross-denominator cost comparisons are prohibited.
6. Publisher disclosure: GoodsTag appears as a evaluated supplier. The article is not an independent analyst ranking and is not neutral third-party certification.

Recommended weighted RFP exercise (after demos): regulatory/applicability + identity + restricted access 25%; data collection and source evidence 20%; integration and operating workflow 20%; trust, independent backup, provenance and portability 20%; verifiable five-year TCO and support 15%. Adapt the weights for each sector and display measured demo results, not vendor marketing ratings.

Regulatory and industry primary references

• ESPR (EU) 2024/1781
• Commission iron & steel DPP status
• CBAM (EU) 2023/956

Terms explained

Complex comparison rows use the definitions below (also available as ⓘ tooltips in the matrices).

Term	What it means	Why buyers care	Ask in the demo
Model / batch / item granularity	Passport identifies a design, a lot, or one physical unit	Legal duties often attach to a specific identity level	Show model, batch and item passports from one family
Parent-child genealogy	Upstream records link to derived lots with inherited attributes	Traceability without rewriting every field	Demonstrate inheritance after a rework event
New DPP/year vs active stock	Creations in a period versus hosted passport inventory	Vendors price different units	Confirm the quota denominator in writing
Identifier-agnostic support	Platform can accept several ID schemes technically	Technical support ≠ automatic legal acceptance	Which schemes passed Registry validation for our category?
EU Central Registry	EU index of identifiers - not the passport host	Registration and hosting are separate controls	Show test registration vs hosting recovery
Registry test vs production API	Sandbox registration versus automated live submission	Sandbox success ≠ finished production API	Is live registration manual, assisted or API-integrated today?
Cryptographic signature	Integrity and attribution of creates/updates	Needed across the passport lifetime	Sign a create and an update; verify both
W3C Verifiable Credential	Verifiable assertion with issuer, subject and proof	Ecosystems may exchange credentials, not only signed blobs	Export a VC and name tested profiles
Independent third-party backup	Separate-service continuity, not same-cloud replicas only	Continuity and exit planning	Recover a passport without the primary host
10-year hosting vs extension	Included retention per new DPP; extra years may be quoted	Long-life products may need year 11+	Confirm included years and extension pricing
Manual export vs API export	Machine-readable download (Starter) versus automated/API (Pro)	Exit and integration paths differ by plan	Export a full pack; then show the Pro API path
Supplier form vs API vs subtenant	Manual forms (Starter), API (Pro), isolated supplier workspaces (Scale)	Supply-chain maturity drives plan choice	Run a form, then show API and subtenant boundaries
Manual SoH vs BMS vs IoT	QR/form (Starter), BMS/API (Pro), device management (Ent)	Dynamic battery data cost and complexity differ	Update SoH manually and via API
LCA engine vs LCA ingestion	Calculating impacts versus storing/publishing external results	DPP host ≠ EPD authoring tool	Import an EN 15804 result without recalculating GWP
EN 10204 3.1/3.2	Mill inspection documents associated to heats/batches	Certificate association is not automatic mill software	Ingest a 3.1 file against a heat and export it
AAS / IDTA / Catena-X	Industrial twin and data-space ecosystems	Not implied by a generic REST API	Is each path tested product or custom-only?
GCP ISO vs vendor ISO 27001	Cloud provider certificates versus the DPP vendor's own certification	GoodsTag is hosted on GCP; GoodsTag itself is not ISO 27001 certified	Separate vendor certificates from hosting attestations
Published price vs five-year TCO	Public base subscription versus all quoted unknowns	Sticker prices misrank vendors	Complete a five-year worksheet with known subtotal and listed unknowns

Related GoodsTag guides and next actions

• General DPP buying guide
• Battery solutions · Iron & steel solutions · Cement solutions
• Ask three shortlisted vendors to run the same live demo checklist before you buy.

Editorial last checked 28 October 2026. Owner-confirmed GoodsTag capability clarifications applied. Reverify current prices, legislation and provider capabilities immediately before release.