Frequently Asked Questions

A Digital Product Passport is a standardized, machine-readable record that captures a product's identity, materials, manufacturing origin, compliance certifications, and end-of-life instructions. It is accessible via a QR code or URL and is designed to follow the product throughout its lifecycle — from production to recycling.

The EU's Ecodesign for Sustainable Products Regulation (ESPR) requires DPPs for an expanding list of product categories starting in 2026. PassportBox automates the creation, hosting, and distribution of compliant DPPs.

No. PassportBox is a fully managed platform with a point-and-click interface. You can create products, build passports, generate labels, and connect Shopify without writing any code. For teams that want to automate or integrate at scale, a REST API is available on Growth and Enterprise plans.

Most users complete their first published passport in under 10 minutes by following the Quickstart Guide. The time depends on how much materials and compliance data you have ready. If you are importing an existing catalog via CSV, bulk setup can be completed in one session.

Yes. New accounts start with a 14-day free trial on the Starter plan with no credit card required. Passports created during the trial remain available if you subscribe before the trial ends. After the trial expires, the account is locked until a plan is selected.

PassportBox is designed to align with the ESPR delegated regulations and the GS1 Digital Link standard for DPP data carrier requirements. The compliance score on each passport indicates how complete your data is against the required field set. However, PassportBox is a tool — final legal compliance depends on the accuracy and completeness of the data you provide. We recommend consulting a regulatory advisor for your specific product category.

A GS1 Digital Link is a web-based URI format that encodes a product's Global Trade Item Number (GTIN) into a scannable URL following the pattern https://id.gs1.org/01/[GTIN]. It allows a single QR code to serve multiple use cases — consumer product info, retailer lookup, and regulatory DPP access — depending on the scanning context.

For EU DPP compliance under ESPR, a GS1 Digital Link is the mandated data carrier format. PassportBox generates GS1-compliant links automatically when you publish a passport, provided your organization's GTIN prefix is configured in Settings.

Each passport displays a Compliance Score (0–100%) that reflects how many of the required and recommended ESPR fields are populated. A score of 100% means all required fields are present. Required fields are marked with a red indicator in the passport edit form; recommended fields are marked with an orange indicator. The passport must reach a minimum threshold to be published.

The required fields vary by product category under ESPR delegated regulations. The general minimum set that PassportBox enforces includes:

• –Unique product identifier (GTIN or SKU)
• –Product name and description
• –Manufacturer or supplier identity and location
• –Material composition (materials list with percentages)
• –Recycled content percentage
• –Carbon footprint per unit
• –End-of-life and recyclability information
• –Applicable compliance certifications

A Product is your internal catalog entry — it holds the SKU, name, category, and basic attributes. It is not publicly accessible. A Passport is the compliance record attached to a product. It adds materials, certifications, supplier links, sustainability data, and a public URL. One product can have one active published passport at a time.

Yes. You can create multiple passport versions for the same product — for example, to reflect a formulation change or a new compliance cycle. Only one passport per product can be in PUBLISHED status at a time. Previous versions can be archived and remain accessible via their original URLs for audit purposes.

Yes, with restrictions. Minor data corrections (contact details, descriptions) can be made to a published passport without changing its version. Changes to compliance-critical fields (materials, certifications, carbon footprint) require creating a new passport version, which must go through the publish flow again. This ensures the audit trail remains intact.

Archived passports remain accessible via their original public URL — they are not deleted. The public page shows an "archived" notice alongside the last published data. QR codes and GS1 Digital Links continue to resolve. If you publish a new passport version for the same product, the new version becomes the primary one and the archived version is accessible only via its direct URL.

You connect your Shopify store via OAuth in Settings → Integrations. Once connected, PassportBox can import your Shopify product catalog as PassportBox products, mapping Shopify product titles, descriptions, and variants to PassportBox fields. The sync is one-way (Shopify to PassportBox). Products are not created in Shopify from PassportBox. After importing, you build passports on top of the imported products as normal.

Currently, native integrations are available for Shopify only. For other platforms (WooCommerce, Magento, custom ERPs), you can use the CSV import to bulk-load your product catalog. The PassportBox REST API (available on Growth and Enterprise plans) can be used to build custom integrations with any system that can make HTTP requests.

Yes. A versioned REST API is available on Growth and Enterprise plans. It covers product and passport CRUD, label generation, and scan event retrieval. API keys are managed in Settings → Developer. Full API documentation is available at /docs/api.

PassportBox accepts all major credit and debit cards (Visa, Mastercard, American Express) via Stripe. Bank transfers (ACH and SEPA) are available on Enterprise annual plans. All payments are processed securely by Stripe — PassportBox does not store card details.

Yes. Upgrades take effect immediately and are prorated for the remainder of the billing period. Downgrades take effect at the end of the current billing cycle. If your usage (products, passports) exceeds the limits of the new plan at the time of downgrade, you will be prompted to archive items to bring usage within limits before the downgrade completes.

When you reach a plan limit (product count, passport count, or monthly scan events), you will be blocked from creating new items in that category. Existing data is not affected. A banner will appear prompting you to upgrade. You can also archive unused items to free up capacity without upgrading.

Monthly subscriptions are non-refundable once the billing cycle has started. Annual subscriptions are eligible for a prorated refund within 14 days of the renewal date if requested in writing. To request a refund, email support@rogueonetech.com from your account's billing email.

Internal product data (SKUs, cost fields, supplier contacts, import logs) is visible only to members of your organization with the appropriate role. The public passport page (/p/[slug]) is publicly accessible but only shows the fields you have explicitly marked as public in the passport edit form. Sensitive fields (e.g. cost, internal notes) are never exposed publicly.

Yes. PassportBox databases are backed up continuously with point-in-time recovery retained for 30 days. Backups are stored in a separate availability zone from the primary database. In the event of data loss due to a platform error, contact support immediately with a description of the affected data.

No. You control which fields are exposed on the public passport page. Each data section (materials, certifications, carbon footprint, supplier) has a visibility toggle in the passport edit form. Only fields set to "Public" are shown to consumers. Required ESPR compliance fields are public by default; all other fields default to private.