eIDAS (EU) 910/2014 · qualified timestamp + blockchain record
Digital Product Passport with eIDAS Timestamp and Blockchain
DPP with qualified eIDAS timestamp (Reg. 910/2014 Art. 42) plus blockchain anchor: legal validity and tamper-evident auditability. How it works, FAQ. Hoken Pass applies a qualified eIDAS timestamp to every published passport version and, from the Base plan, records its hash on a blockchain: legal evidence plus tamper-evident auditability.
See also: Battery passport · ESPR compliance · Pricing
eIDAS is the legal layer, blockchain the integrity layer
The trust layer with legal weight is eIDAS; blockchain is an optional tamper-evident log. Hoken Pass uses both: every published passport version gets a qualified timestamp from InfoCert, a QTSP, and on the Base plan and above its SHA-256 hash is anchored on a public blockchain for independent verification.
- Qualified timestamp (eIDAS Art. 41(2)): presumption of accuracy across the EU
- SHA-256 hash anchored on EOS/Vaulta (Base plan and above): independently verifiable years later
- Versioned passport history: prove what the data looked like at any date
- EU DPP Registry export with the passport identifiers
Sources and references
Frequently asked questions
Is blockchain legally enough to prove a Digital Product Passport existed?
No. A blockchain record proves ordering and tamper evidence, but only a qualified electronic timestamp carries a legal presumption of the accuracy of the date and time and of the integrity of the data across the EU (eIDAS Regulation (EU) 910/2014, Art. 41(2)). Hoken Pass uses both: eIDAS for legal evidence, blockchain for independent auditability.
What is a qualified eIDAS timestamp?
A timestamp issued by a qualified trust service provider (QTSP) that meets the requirements of eIDAS Art. 42. Under Art. 41(2) it enjoys a presumption of accuracy of the date and time it indicates and of the integrity of the data it is bound to. Hoken Pass timestamps every published passport version through InfoCert, a QTSP on the EU Trusted List.
Why combine an eIDAS timestamp with blockchain for a DPP?
The timestamp gives legal evidence; the blockchain gives a decentralised integrity log that anyone can check (SHA-256 hash anchored on EOS/Vaulta). If a dispute arises years later, you can show when the passport data existed and that it was not altered.
Does ESPR require eIDAS timestamps on passports?
No. ESPR does not require timestamps. A qualified timestamp is evidence of what your passport data said at a given time, with the legal presumption of eIDAS Art. 41(2).
How much does a DPP with an eIDAS timestamp cost for SMEs?
Hoken Pass starts free for 3 passports, and every published passport version gets a qualified eIDAS timestamp on all plans. Blockchain notarization is included from the Base plan (120 EUR per year).