In depth

Digital Product Passport

What is the Digital Product Passport

Every product can tell its own story

A product’s digital identity card

The Digital Product Passport opens with a QR code printed on the item or its packaging, and gathers in one place the information that matters: what it is made of, where it comes from, how to use it, how to repair it, where it ends up.

Where it comes from

The digital passport stems from a choice made by Europe: moving from an economy that produces, uses and throws away to one that keeps value within the cycle. The technical tool for that choice is the ESPR regulation, in force since July 2024. The obligation to adopt it arrives progressively, one sector at a time.

It follows the product
throughout its life

A label says things once, at the moment of sale. The passport, instead, is constantly updated: for example, it can record the stages of the product’s life such as maintenance, repairs, changes of ownership, and its delivery for recycling at end of life.

One single piece of data
for different audiences

The same passport speaks to several parties, and each sees what they need: consumers the information to choose and use the product, companies what they need to prove their claims, authorities the control data, recyclers the technical data. Confidential information remains protected: the right to know concerns the product, not the secrets of those who make it.

How it works, in brief

Three elements make it work:

  • A unique digital identity for each product, its passport number
  • A European registry that lists passports and makes them traceable by the authorities
  • A set of common technical rules, so that a passport filled in in Italy is readable and reliable throughout the European Union

The actual data stays with the company that produces it, or with whoever manages it on its behalf.

But a passport
is only worth as much as its data?

It can contain solid information or approximate information, and readers cannot tell them apart at a glance. What makes the difference is the reliability of what is inside. This is where The Nest Company’s work begins.

Building value together

Bring your company into the world of certified data

Enable reliable processes, reduce operational risk and guarantee the quality of information along the entire value chain. Choose Nest Company’s technology.

Contact us

1. POLICY AND MANAGEMENT COMMITMENT

1.1 Policy Statement

The Management of The Nest Company Srl (TNC), aware of the strategic importance of quality and information security in the context of SMEs working with significantly larger enterprise clients, has implemented an appropriate Integrated Management System (IMS) aligned with the principles of ISO 9001:2015 and ISO/IEC 27001:2022 standards, extended to ISO/IEC 27017.

The management of chain of custody, authenticated digital declarations, and the digital product passport involves handling sensitive and critical data for our clients. TNC recognizes that client trust is based on the continuous demonstration of technical competence, regulatory compliance, and management maturity comparable to the highest industry standards.

1.2 Strategic Objectives

Quality Objectives

  • Deliver software and services that meet the specifications and contractual commitments agreed with clients.
  • Ensure that development projects meet traceability, authenticity, and data integrity requirements.
  • Enhance the professional skills of employees and collaborators.
  • Develop innovation initiatives while respecting security and compliance constraints.
  • Maintain a performance-based results evaluation system.

Information Security Objectives

  • Ensure confidentiality, integrity, availability, and resilience of information.
  • Ensure full awareness of managed information and evaluation of its criticality.
  • Guarantee secure access by preventing unauthorized processing.
  • Ensure secure collaboration with third parties.
  • Promote awareness of security-related issues.
  • Promptly detect anomalies and incidents.
  • Ensure authorized access to operational facilities.
  • Ensure compliance with legal and contractual requirements.
  • Detect abnormal events and vulnerabilities.
  • Ensure Business Continuity and Disaster Recovery.

1.3 Commitment of Top Management

  1. Provide adequate resources: Allocate human, technical, and financial resources for the IMS.
  2. Establish clear governance: Define roles, responsibilities, and reporting structures.
  3. Ensure competence: Guarantee continuous staff training.
  4. Promote a security culture: Integrate security into the company culture.
  5. Manage the supply chain: Ensure security standards are applied to suppliers as well.
  6. Monitor and review: Conduct annual reviews of performance and processes.
  7. Communicate the policy: Publish it on the website and communicate it internally.