What we offer.
Two ZIP downloads, both behind your manufacturer login:
- Per-passport bundle — JSON-LD, printable PDF, QR image, and the audit chain (revisions with hash_before / hash_after) in a single ZIP. Available from every passport detail page.
- Full-account bundle — every passport you own, plus a portable resolver template. Drop the entire archive on any static host and your
/p/<short_code>URLs continue to resolve. Available from your account settings.
What it means.
If we ceased operating tomorrow, every passport you've published is recoverable from the bundle you've already downloaded — or, if you'd rather wait until the moment of need, from the bundle you can pull on demand from this dashboard. The bundle is self-contained: no calls back to our infrastructure. The included resolver template renders /p/<short_code> URLs from the JSON-LD files alone.
What changes for your QR codes.
The URL printed on every label and product is part of the legal record (ESPR Article 10 requires it to be permanent). You change which host serves that URL, not the URL itself — easiest path is a DNS swap on a custom domain you've verified with us. The bundle itself doesn't reissue QR codes; you reprint labels at your own pace.
Verifying integrity offline.
Every JSON-LD document carries a passportHash field — SHA-256 over the canonical (sorted-key, minified, UTF-8) form of the rest of the document. A regulator reviewing your archive months from now can re-compute this hash and confirm nothing has drifted, without trusting our infrastructure.
What we explicitly don't do.
We don't sign reciprocal hand-off contracts with peer DPP service providers. We don't pay outside counsel for an escrow agreement. Both options have ongoing cost and yield no regulatory ✅ beyond what the bundle already gives you. Article 11(e) places the obligation on the manufacturer, and the right answer is to hand the manufacturer everything they need to discharge that obligation themselves.
The bundle is the artefact. The portable resolver is the migration path. The continuity claim is honest because both ship today.
When to download.
Whenever your record retention policy requires. The dashboard's “Export this passport” action is one click; the “Export all passports” action is one click. There's no rate limit on the export endpoints. Procurement teams asking about Article 11(e) typically want to see the bundle once during onboarding plus a refresh schedule — quarterly is more than enough for our scale today.
Questions on this policy? Use the contact form — or email the team through the details on the contact page.