TracePass · Live product, our own build

Prove where every product came from — before the regulator asks.

TracePass is our own Digital Product Passport & supply-chain traceability platform, live at tracepass.esipick.ai. It builds GS1-standard QR passports, scores every product against EUDR, ESPR and FSMA 204 in real time, maps the full supply chain back to origin, and flags counterfeit scans automatically — all from one dashboard.

EUDR HAS BEEN ACTIVE FOR LARGE OPERATORS SINCE DECEMBER 2025

tracepass.esipick.ai/scan
Consumer-facing product passport page showing Verified Authentic badge after scanning a GS1 QR code
93%
EUDR compliance score, generated automatically from real supply-chain data
3
Regulations scored per product — EUDR, ESPR, and FSMA 204, plus GS1 Sunrise readiness
5
Supply-chain stages traced end to end — origin, processing, packaging, distribution, retail
17
Suspicious scans caught automatically by anti-counterfeit velocity detection
What's inside

Every stage of the passport, in one product.

From the product catalog to the QR code a customer scans in-store — every screen below is the real, live TracePass dashboard.

TracePass product catalog showing 16 products with categories, SKUs and GTINs
Catalog

Product Catalog

Every SKU, GTIN and category in one place — import by CSV or add products one at a time, each ready to link to a passport.

DPP Studio showing a completeness score and real GS1 QR codes generated for a product
DPP Studio

Digital Product Passport + GS1 QR

A completeness score, materials, certifications, and a real GS1 Digital Link QR code — plus a 1D barcode for POS systems, generated from the product's actual GTIN.

Supply chain map showing origin, processing, packaging, distribution and retail nodes, plus critical tracking events
Traceability

Supply Chain Map

Every node from origin to retail, each independently verified, plus Critical Tracking Events with real batch/lot numbers — and a recall simulation tool.

Compliance dashboard showing EUDR, ESPR, FSMA204 and GS1 Sunrise scores with an AI compliance assistant
Compliance

EUDR / ESPR / FSMA 204 Engine

Each regulation is scored from real product and supply-chain data, not a static checklist — with a downloadable PDF report and an AI assistant to ask what's missing.

Suppliers directory across 12 countries with verification status
Suppliers

Supplier Network

Every supplier tracked by verification status and country, with a document-based invite portal so suppliers can verify themselves — no login required on their side.

Analytics dashboard showing QR scan activity by country, device, and consumer engagement
Analytics

Consumer Engagement

Every scan, review, and survey response rolled up by country and device — real signal on who's actually checking where your product came from.

The command center

Every regulation, every deadline, on one screen.

Compliance by regulation, upcoming deadlines — including exactly when EUDR, the EU's Digital Product Passport mandate, and the Battery Passport come into force — and how many suppliers are actually verified.

tracepass.esipick.ai/dashboard
TracePass dashboard showing DPPs published, suppliers verified, compliance by regulation, and upcoming regulatory deadlines
Why it matters

EUDR isn't optional anymore. Most brands still can't answer it.

The EU Deforestation Regulation has been active for large operators since December 2025 — coffee, cocoa, palm oil, rubber, soy, wood and cattle all require proof of origin and a due-diligence statement. Most product teams still track this in spreadsheets, if at all.

Compliance scored from real data, not a checklist

EUDR, ESPR and FSMA 204 scores are computed from the product's actual GPS-tagged origin, verified supplier documents, and logged supply-chain events — and the engine tells you exactly which gap is costing you points.

Real GS1 standard, not a proprietary code

Every passport gets a genuine GS1 Digital Link QR code and a standard GTIN barcode — the same format major retailers already scan at the till, not a QR code that only works inside one app.

It catches counterfeits automatically

Every scan is checked against velocity rules — the same QR scanned in two countries within hours, or scanned far more than a real product could be — and flags it before it becomes a brand-trust problem.

Inside the compliance engine

One product, three regulations, scored live.

This is a real product in TracePass today — Ethiopian coffee, an EUDR-covered commodity — scored against all three regulations from its actual origin and supplier data.

tracepass.esipick.ai/dashboard/compliance
Product compliance screen showing ESPR 96%, EUDR 93%, FSMA204 89%, GS1 Sunrise 95%, with an AI compliance assistant
Inside traceability

Farm to shelf, five verified stages.

The same coffee, mapped end to end: Yirgacheffe Farm Estate → Addis Ababa Washing Station → Djibouti Packing Facility → Rotterdam Distribution Hub → London Flagship — each stage independently verified, with Critical Tracking Events logged by real lot number.

tracepass.esipick.ai/dashboard/traceability
Supply chain map with five verified nodes from origin to retail, critical tracking events, and a recall simulation tool
How it works

From product to verified passport in six steps.

The same path every product takes — from being added to the catalog to a customer scanning it in their hand.

1

Add the product

Name, SKU, GTIN, category, country of origin — or import the whole catalog by CSV.

2

Build the passport

Materials, certifications, and recyclability info feed a live completeness score in DPP Studio.

3

Map the supply chain

Origin, processing, packaging, distribution and retail nodes, each with GPS and verified supplier documents.

4

Run the compliance check

EUDR, ESPR and FSMA 204 are scored automatically from that data — gaps are named, not just flagged.

5

Publish & generate the QR

A real GS1 Digital Link QR code and GTIN barcode are generated, ready to print on packaging.

6

Consumers scan, you see everything

Every scan logs to Analytics; suspicious patterns raise an Alert automatically — no one has to go looking.

The moment it pays off

What your customer sees when they scan.

Every QR code resolves to a public, no-login page with a "Verified Authentic" badge and the product's real passport data — the same page that proves EUDR compliance to a regulator also builds trust with the person holding the product.

No app required Public GS1 Digital Link Scan events logged automatically
Public consumer scan page with Verified Authentic badge
Anti-counterfeit

If a QR code gets cloned, TracePass notices first.

Detection rules run on every scan: the same code scanned in two countries within hours, more than three scans in five minutes from different IPs, or a single code scanned over a hundred times an hour. No one has to be watching — the alert is already there.

tracepass.esipick.ai/dashboard/alerts
Anti-counterfeit alerts dashboard showing 17 critical alerts with detection rules, country, device and scan number for each
Under the hood

Built like compliance software has to be built.

Multi-tenant, encrypted, and audited by default — this isn't a prototype wearing a compliance label.

FastAPILayered architecture — routers, services, and models cleanly separated, portable between SQLite and PostgreSQL.
ClaudePowers the compliance assistant, AI gap analysis, and document reading — degrades gracefully, never crashes, if unconfigured.
GS1 Digital LinkReal GS1-standard QR codes and GTIN barcodes — the same format global retailers already scan.
AES-256 + RBACField-level encryption for sensitive data, role-based access control, and an immutable audit log on every sensitive action.
Multi-tenant isolationEvery query scopes by organization; cross-tenant access returns a 404, existence is never leaked.
StripeStarter, Growth and Scale plans with usage-based quotas, billed automatically.

Live and in active use today · EUDR, ESPR, FSMA 204 and GS1 Sunrise all scored today, not roadmap items

EUDR is already active. ESPR is next.

If your product touches coffee, cocoa, palm oil, rubber, soy, wood or cattle, EUDR already applies to you. TracePass is live at tracepass.esipick.ai — or we build the compliance layer directly into your existing catalog.

"Esipick AI pricing is tied to business generated — you only pay for results."