From principles
to practice.
COMPLIANCE4DPP makes compliance an operational capability for trusted industrial data ecosystems — moving Gaia-X principles from architecture into deployed infrastructure.
Compliance as
infrastructure.
European regulation — ESPR, the Data Act, the AI Act, the upcoming Digital Product Passport obligations — moves faster than manual processes can absorb. COMPLIANCE4DPP delivers the mechanisms that turn those rules into something that runs.
We work at the layer where policies-as-code, verifiable credentials and federated trust meet real industrial value chains. The project's outputs are open building blocks, designed for adoption far beyond a single sector or pilot.
The Digital Product Passport is our flagship showcase. The approach is generic.
Four principles, made operational.
Trust
Verifiable identities, credentials and policies — not trust by assumption.
Transparency
Compliance flows that can be inspected, audited and reproduced.
Interoperability
Federated mechanisms that work across sectors and data spaces.
Sovereignty
Data holders keep control of what is shared, with whom, and under which rules.
Bring Your Own Rules
Sectors and communities express their own compliance requirements as machine-verifiable policies. Those policies plug into shared trust infrastructure without forcing every actor onto the same ruleset — the Gaia-X "Bring Your Own Rules" pattern, delivered as production code.
Digital Product Passport
The DPP is our lead implementation context. It exercises every layer of the stack — identity, credentials, policy enforcement, federated exchange — in real industrial conditions, and proves the approach generalises.