Everything an RFP asks for, already documented.
- SOC 2 TYPE II
- ANNUAL PENTEST
- GDPR
- EU HOSTING
- OPENID CONNECT
- TLS 1.3 · AES-256
- RBAC JRC145830
- GS1
- NF Z42-013
- eIDAS 2.0
- AFNOR
- REVERSIBILITY
What we have, point by point
Certifications & audits
SOC 2 Type II
Security, availability, confidentiality, integrity.
Annual pentest
Penetration test run every year.
ISMS aligned with ISO 27001
Aligned, not certified to date.
Audit logging
Every API call logged, timestamped, exportable.
Hosting & data
European hosting provider
Database and servers in Europe.
No transfer outside the EU
Across the whole processing chain.
TLS 1.3 · AES-256
Encrypted in transit and at rest.
Personal data & GDPR
GDPR compliance
Full data reversibility, no lock-in.
Minimisation by design
A DPP describes a product, not a person.
Data subject rights
Dedicated contact: privacy@arianee.org.
Identity & access
OpenID Connect
Or API key, your choice.
OAuth 2.0 · JWT
Short-lived tokens.
5-tier RBAC
Public, consumer, operator, repairer, authority (JRC145830).
IP restriction
Allow-listing per environment.
Standards & interoperability
GS1 · Digital Link
GS1 partner.
JSON-LD · Schema.org · W3C
Open data model, no proprietary format.
AFNOR member
French and European standardisation.
EU DPP Registry
DPP Service Provider, ESPR Art. 3.f.
Legal archiving & evidence
Arkhineo · NF Z42-013
French third-party archiver (Docaposte).
eIDAS 2.0
Timestamping and electronic seals.
Evidence pack
Dated PDF, field by field, admissible.
Non-repudiation
No deletion, no silent rewrite.
The passport outlives your choice of provider.
A formal exit plan, ready to attach to your file as-is.
Reversibility plan
Exit procedure, formats, timelines.
Full export
Product data and event history, in JSON-LD.
Portable identifiers
QR codes already printed stay resolvable.
No vendor dependency
Open standards, replaceable operator.
What you get
- 01Security questionnaire filled in — yours, in your own format
- 02Architecture diagram and data location
- 03Reversibility plan and exit procedure
- 04Attestations and audit reports, under NDA
François Pujo
Industrial & Battery Project Manager
François is our Battery Pass expert, working alongside industrial players worldwide to integrate DPP into their production lines and across the entire life of the product.