Applications · Erasoft PPWR

PPWR Compliance & Digital Product Passport Platform

Q: Does the platform replace legal advice?

No. The rule engine is an engineering interpretation of the regulation text and is not legal advice. It makes your compliance process easier, documented and faster, but you should still seek expert opinion for final legal assessment.

Q: Is my data shared with other customers?

No. Every customer runs on their own virtual server, with their own database and keys.

Q: What information on the passport page is public?

Technical compliance data and uploaded documents are designed to be published. User emails, supplier contact persons and similar personal data are never shown on public pages.

Q: What happens if a signed document is altered?

The verification page shows the mismatch immediately. The signature also covers the document's SHA-256 digest.

Q: What happens when the regulation changes?

The rule engine is versioned; every evaluation records which engine version produced it. Rules are updated as new implementing acts are published.

Q: What is the PPWR and who does it cover?

The PPWR is the EU Packaging and Packaging Waste Regulation (Regulation (EU) 2025/40). It covers manufacturers, importers and exporters placing packaging or packaged goods on the EU market, and has been generally applicable since 12 August 2026.

If you ship packaging to the EU, this is the fastest and most reliable way to prove compliance.

EU Packaging and Packaging Waste Regulation (EU) 2025/40 · generally applicable since 12 August 2026

Send a demo request and we will walk through the platform with your own packaging data.

Request a demo See the features

Why now?

The EU Packaging and Packaging Waste Regulation (PPWR, Regulation (EU) 2025/40) has been generally applicable since 12 August 2026. Every manufacturer and exporter placing packaging or packaged goods on the European market must keep a verifiable compliance file: chemical limits, recyclability, empty-space ratio and recycled content.

Spreadsheets, email attachments and scattered PDFs cannot carry that load. At customs, in a buyer audit or on a sample query, you need to answer "where is your evidence?" in seconds, verifiably. The Erasoft PPWR & DPP Platform does exactly that.

What does the platform do?

You enter your packaging components and material data; the platform evaluates them automatically against the PPWR rules, generates a GS1-compliant Digital Product Passport (DPP) for every product and prepares a cryptographically signed EU Declaration of Conformity (DoC). Your customer or a customs officer scans the QR code and instantly sees the right information.

The 8 features that matter

Automatic PPWR compliance engine

As soon as you enter product data, a server-side rule engine evaluates every rule one by one and shows its reasoning:

Check	What is verified
Heavy metals	Sum of Pb + Cd + Hg + Cr(VI) ≤ 100 mg/kg, for each component separately
PFAS restriction	Food-contact packaging: single PFAS < 25 ppb, total PFAS < 250 ppb, PFAS < 50 ppm; total fluorine screening
Empty-space ratio	Empty space of outer packaging ≤ 50 % (filler materials count as empty space)
Recyclability	Design-for-recycling (DfR) score mapped to grade A / B / C
Recycled content (PCR)	Tracked per plastic part against the 2030 / 2040 targets

Every result is reported as PASS / FAIL / MISSING DATA / REVIEW, with the article number and source. When the empty-space limit is exceeded, the platform suggests ways to reduce packaging size.

2030 readiness indicator

Even rules that are not yet in force show a readiness status: "would it pass today?". When recyclability and PCR obligations arrive there are no surprises, and you already know which SKU needs investment.

Digital Product Passport + GS1 Digital Link

Every product gets a passport address in the standard format: https://your-domain/01/{GTIN}/21/{SERIAL}

Consumer view: a plain recycling and sorting guide with waste routing.
Detailed view: test results, compliance status, documents and a DoC download link.
One-click switching between views. Only the default presentation changes by device; access never does.

Print-ready QR codes

Download passport QR codes as vector SVG and high-resolution PNG, with the GS1 text label, and send them straight to the printer.

Tamper-proof, signed EU Declaration of Conformity (DoC)

Generated as a PDF using the wording of Annex VIII of Reg. (EU) 2025/40.
Editable in 7 languages: English, German, French, Dutch, Italian, Spanish and Polish.
Sealed with an Ed25519 digital signature (RFC 8785 canonical JSON, including the PDF's SHA-256 digest).
Anyone can verify the document on a public verification page; public keys are published as a JWKS, so verification works even without trusting our server.
A document is never edited: a change creates a new version, and records are immutable at database level.

Material, supplier and BOM management

Primary, secondary and transport packaging hierarchy (BOM).
Material and supplier catalogues.
Upload lab reports, SDS and certificates (PDF / PNG / JPEG).
Total packaging weight and material shares are calculated automatically.

Enterprise-grade security

Mandatory two-factor authentication (2FA) for admin roles; role-based access, deny by default.
Immutable, hash-chained audit log: every action is chained with SHA-256, so retroactive tampering is detected.
Every uploaded file goes through a format allow-list, magic-byte check, size limit and virus scan.
Nonce-based CSP, HSTS and a full set of security headers.
The signing private key is held only as a Docker secret and never enters the database, code or logs.

Dedicated, EU-hosted, isolated infrastructure

A separate virtual server per customer, in the EU. Your data never shares a database with another customer.
Your own database, your own signing key, your own secrets.
Encrypted (age) backups and restore procedures.
GDPR-compliant: personal data is never shown on public pages, and deletion requests pseudonymise personal data.

Want to see PPWR compliance live with your own product data?

Request a demo

How it works

Step	What you do	What the platform does
1. Define	Enter your product, packaging components and materials	Builds the BOM tree and weight / share calculation
2. Prove	Upload lab reports and certificates	Scans, verifies and versions the files
3. Evaluate	Save	The PPWR rule engine produces results, reasoning and improvement suggestions
4. Document	Click "Create DoC"	A signed, multilingual Declaration of Conformity PDF is prepared
5. Publish	Print the QR code on the packaging	The passport page goes live; customers and customs scan it

Who is it for?

Packaging manufacturers exporting to the EU (plastic, paper-board, corrugated, film and flexible packaging)
Brands and exporters of packaged goods
Food-contact packaging producers (the group under most pressure from the PFAS limits)
Suppliers who must show compliance evidence to EU buyers
Compliance, quality and export teams

What do you gain?

Time

Automatic, repeatable evaluation instead of manual calculation and document gathering.

Confidence

Every result is traceable to an article number and source; results are computed on the server, and results sent by the client are never trusted.

Sales advantage

Giving your EU buyer verifiable compliance by QR scan sets you apart from competitors.

Lower risk

Do not get stuck at customs or in an audit over a missing document; your evidence is one link away.

Future readiness

See the 2030 and later obligations today and plan investment in time.

Data sovereignty

Your data lives on a server dedicated to you, inside the EU, with encrypted backups.

Why Erasoft?

Built for packaging regulation from scratch: Not a general-purpose tool: the rules are coded directly from the text of Regulation (EU) 2025/40 and the Commission guidance.
Precise calculation: Regulatory figures are computed with decimal arithmetic and verified with boundary-value tests, so "what happens exactly at the limit?" has a defined answer.
Transparent regulatory tracking: Implementing acts that are not yet published are not assumed; such rules are explicitly marked "undetermined" instead of guessed.
Security first: Developed with a threat model, independent security review and automated tests.
Dedicated setup: Isolated installation and version management for every customer.

Technical summary

Application	Next.js + TypeScript (strict), server-side business logic
Database	PostgreSQL, least-privilege roles, immutable audit tables
Deployment	Docker, automatic TLS, a separate virtual server per customer
Signature	Ed25519, RFC 8785 canonical JSON, JWKS publication
Standards	PPWR (EU) 2025/40, GS1 Digital Link, ESPR framework, GDPR
Backup	Encrypted backups (age), restore procedures
Testing	Unit, property-based, integration and end-to-end (Playwright) tests

Frequently asked questions

Does the platform replace legal advice?

No. The rule engine is an engineering interpretation of the regulation text and is not legal advice. It makes your compliance process easier, documented and faster, but you should still seek expert opinion for final legal assessment.

Is my data shared with other customers?

No. Every customer runs on their own virtual server, with their own database and keys.

What information on the passport page is public?

Technical compliance data and uploaded documents are designed to be published. User emails, supplier contact persons and similar personal data are never shown on public pages.

What happens if a signed document is altered?

The verification page shows the mismatch immediately. The signature also covers the document's SHA-256 digest.

What happens when the regulation changes?

The rule engine is versioned; every evaluation records which engine version produced it. Rules are updated as new implementing acts are published.

What is the PPWR and who does it cover?

The PPWR is the EU Packaging and Packaging Waste Regulation (Regulation (EU) 2025/40). It covers manufacturers, importers and exporters placing packaging or packaged goods on the EU market, and has been generally applicable since 12 August 2026.

Want to see the platform live with your own products?

Send us a demo request and we will get back to you.

Request a demo info@erasoft.net

This page is for product information. PPWR evaluation results are an engineering interpretation and do not constitute legal advice.

Last updated: 2026-10-19 · Other languages: TR · NL