A Digital Product Passport for textiles requires verified supply chain data across four tiers: Tier 1 (assembly), Tier 2 (fabric, dyeing, and finishing), Tier 3 (yarn and spinning), and Tier 4 (raw material origin). Under the ESPR Regulation (EU) 2024/1781, brands must document which products are made from, where and how they are made, and their environmental and chemical profiles. The textiles delegated act is expected to be adopted in late 2026 or early 2027, with compliance following around 2028.
Your DPP is only as good as the supply chain data behind it.
You can pick the best platform and design a beautiful QR code. None of it matters if you cannot answer the basics: Where was this made? What is it made from? Who dyed the fabric? Where did the fibre come from?
For most brands, supply chain data is the hardest part of DPP compliance. The information exists, but it lives in fragments: a fabric spec sheet here, a test certificate there, a certification that expired without anyone noticing.
This guide maps what data the DPP requires at each supply chain tier, what you probably have today, and where the real gaps are.
Last updated: March 2026
Key takeaways:
- DPP supply chain data spans four tiers, from finished garment assembly back to raw material origin
- Most brands can fill roughly half of the required DPP fields with data they already hold
- Tier 2 (fabric mills, dyeing, finishing) is where data is most critical and least available
- Certifications like GOTS, RWS, GRS, and RDS provide evidence for specific material claims
- BCI cotton's mass balance model does not meet DPP-grade physical origin verification
What Supply Chain Data Does a Digital Product Passport Require?
According to ESPR Regulation (EU) 2024/1781, a textile Digital Product Passport must contain verified data about what a product is made from, where and how it was made, and its environmental and chemical profile. This data must cover each stage of the supply chain, from finished garment back to raw material origin.
The regulation identifies three categories of required information:
- 1.What the product is made from: fibres, percentages, treatments, recycled content
- 2.Where and how it was made: facilities, locations, production stages, certifications
- 3.Its environmental and safety profile: hazardous substances, durability, recyclability
The specific required fields will be confirmed in that delegated act, but the framework above is already established.
That data lives across four supply chain tiers.
Tier 1: Assembly
Tier 1 is where you have the strongest relationships and the most existing data.
Tier 1 data to collect for DPP
- Facility identity and location: all production sites, not just the primary one
- Production stages: cutting, sewing, embroidery, washing, finishing, QC and which stages happen where
- Certifications: social compliance, environmental, quality, including expiry dates (the detail most brands track poorly)
- Subcontracting disclosure: does any work go to unapproved facilities?
Most brands have reasonable Tier 1 data. Common gaps include expired certifications, undisclosed subcontracting, and missing documentation for secondary facilities like the washing plant or embroidery unit.
Tier 2: DPP Data for Fabric Mills, Dye Houses, and Finishers
Tier 2 is where the most critical DPP data lives, and where most brands have the least visibility.
Tier 2 data to collect for DPP
- Mill identity and location: weaving, knitting, dyeing, and finishing may be separate facilities
- Yarn specifications: fibre type, blend percentages, yarn count
- Dyestuff category: reactive, disperse, direct, vat, or acid (not exact formulas; categories suffice; acid dyes apply to wool, silk, and nylon)
- Finishing treatments: waterproofing, softener, sanforizing, enzyme washing, each identified
- Chemical management: ZDHC MRSL conformance, OEKO-TEX, or bluesign certification
Most fabric mills have this information embedded in their processes, but have never been asked for it in DPP format. Expect a translation exercise, not a simple handover.
Tier 3: Yarn and Spinning Data for DPP Compliance
Tier 3 data is essential for recycled content claims and fibre traceability. Under ESPR textile requirements, recycled content must be verified through a certified chain-of-custody, not self-declaration.
Tier 3 data to collect for DPP
- Spinner identity and location
- Fibre origin country
- For recycled fibres: GRS or RCS chain-of-custody certificates and transaction certificates per production lot
- For organic fibres: GOTS or OCS scope certificate from the spinner
Many brands have no direct Tier 3 relationships. Data collection requires your Tier 2 supplier to collect and relay the information, or a traceability platform that creates direct channels. For small brands with two or three fabric suppliers, the chain is short enough to trace directly.
Tier 4: Raw Material Origin and Required Certifications
Tier 4 is most relevant for animal-derived materials and certified organic fibres.
| Material | Key data | Certification |
|---|---|---|
| Wool | Origin country, farm identity | RWS, non-mulesed declaration |
| Leather | Hide origin, tannery environmental performance | Leather Working Group (LWG) |
| Down | Animal welfare compliance, supply chain traceability | Responsible Down Standard (RDS) |
| Cotton | Origin country | GOTS or OCS (both provide physical chain-of-custody). Note: BCI's mass balance model does not meet DPP-grade origin verification. |
| Linen/Hemp | Origin country | Organic cert where applicable |
If you make origin claims such as "New Zealand Merino" or "Egyptian cotton," they must be verifiable in your DPP. Unsubstantiated provenance claims are a greenwashing risk under the Empowering Consumers for the Green Transition Directive (EU 2024/825), which applies from September 2026.
Future DPP Data Requirements: What Is Coming
Future DPP phases are expected to add labour conditions, social compliance audits, facility environmental performance, and health and safety data. These are not required at launch, but building your data architecture to accommodate them now will save effort later.
The Traceability Gap: What Most Brands Are Missing
What most brands currently have
- Fibre composition for the main outer fabric
- Country of assembly (Tier 1)
- Basic certifications for direct suppliers
- Occasional restricted substance test reports
What the DPP requires
- Component-level composition for shell, lining, and trims separately
- Tier 2 supplier identities in structured format
- Dyeing and finishing process data
- Recycled content chain-of-custody certification
- Tier 3 and Tier 4 supplier information
- Chemical treatment identification beyond a binary compliant or non-compliant result
For most brands, that gap is significant. A practical audit usually reveals that roughly half of the required fields cannot be filled with data already on hand.
How to Assess Your DPP Supply Chain Data Gaps
The fastest way to understand where you stand is to run a practical data audit, not a planning exercise.
Pick 10 to 20 representative SKUs that cover your main fabric types, production countries, and material categories. Try to populate a complete DPP record for each one using only the data you currently hold. Every field you cannot fill is a gap that needs to be addressed through a supplier data collection process.
Group your gaps by tier. Tier 1 gaps (missing facility names, expired certifications) are usually the fastest to close. Tier 2 gaps (dyestuff categories, chemical management certs) require a structured supplier outreach process. Tier 3 and Tier 4 gaps depend on whether your Tier 2 suppliers have already collected that information from their own supply chains.
Most brands find they can fill roughly half the required fields from existing data. The exercise takes a day or two and will tell you more than weeks of abstract planning.
DPP Compliance for Small Fashion Brands
If you run a brand with 1 to 10 employees, your supply chain is almost certainly shorter than that of a large enterprise. You work with a handful of factories and a limited number of fabric suppliers. You may even know them personally. Fewer suppliers mean faster data collection and closer relationships. That is a genuine advantage.
Delvet's supplier data collection workflows are structured by tier, capturing exactly what regulators require and delivering it in a format that flows directly into your DPP. For small brands, you are not building traceability from scratch. You are filling structured templates with data from suppliers you already know.
Related reading: