Digital accessibility does not automatically establish evidentiary quality. DPP data still needs reliable identifiers, source provenance, version control and durable access.
In July 2026 the Commission published six harmonised DPP standards, adopted the implementing arrangements for the DPP Registry and launched the Registry and testing environment on 20 July. These measures make identifiers, interoperability, storage and persistence practical implementation questions.
Product → unique identifier → responsible economic operator → required data field → source system or supplier → source evidence → version → passport data. A review asks whether each published field can still be traced through that chain, rather than assuming that digital availability proves provenance.
Regulatory data may come from suppliers, manufacturers, installations, commercial intermediaries, ERP systems, monitoring systems, declarations, certificates and external source records. The review asks where the information came from, who produced it, what it relates to, which period and version apply, and whether different records reconcile.
Typical provenance failures include an identifier that points to the wrong product variant, data that was valid for an earlier version, a product claim without accessible source evidence, a supplier value that changed without the passport being updated, loss of version history, an unclear responsible operator, or two systems publishing conflicting product information. These are evidence-governance problems even when the passport itself is technically accessible.
identifier mismatch
outdated data
unsupported product claim
wrong product variant
source no longer available
supplier-data changes not propagated
loss of version history
unclear responsible economic operator
conflicting product information
EN 18216:2026 · EN 18219:2026 · EN 18220:2026 · EN 18221:2026 · EN 18222:2026 · EN 18223:2026
The ESPR does not create one universal passport data set for every product on the same date. Product-specific information requirements arise through the applicable delegated acts or other product legislation, so generic templates should not be presented as final requirements where product rules are not yet adopted.
CBAM is Weetra’s current primary operational review application. EUDR and DPP are developing regulatory-evidence applications and are not presented as identical commercial services.
Official regulatory sources are used to describe the current legal position. Weetra commentary explains documentary implications and is not legal advice.