Conformity & Standards Overview
DPP Kit is built on open standards for supply chain transparency. This section covers the standards DPP Kit implements and how conformity credentials work.
Standards Stack
DPP Kit sits at the intersection of three major standards:
┌─────────────────────────────────────────┐
│ UNTP (UN Transparency Protocol) │ Vocabulary & conformance
│ - Credential types (DFR, DPP, DTE...) │
│ - Data models and vocabularies │
├─────────────────────────────────────────┤
│ W3C Verifiable Credentials v2 │ Credential format & signing
│ - Data model │
│ - Proof mechanisms │
│ - Status lists │
├─────────────────────────────────────────┤
│ GS1 Digital Link │ Identification & resolution
│ - GTIN, GLN identifiers │
│ - QR code / barcode scanning │
│ - Link resolution │
└─────────────────────────────────────────┘
What is Conformity?
In the context of DPP Kit, conformity means:
- Credential conformity — Are your credentials structured according to the UNTP specification?
- Assessment conformity — Has a third party verified claims made in your credentials?
Credential Conformity
DPP Kit aims to produce credentials that conform to UNTP test suites. This ensures interoperability — credentials from DPP Kit can be understood and verified by any UNTP-compatible system.
Assessment Conformity
Digital Conformity Credentials (DCCs) are issued by conformity assessment bodies (labs, auditors, certification bodies) to attest that products or facilities meet specific standards.
Who Issues Conformity Credentials?
| Role | Typical Conformity Activities |
|---|---|
| Standards Body | Issues DCCs for certifications, test results, and audit findings |
| Governing Body | Oversees conformity ecosystems, validates assessment processes |
| Facility/Product Manager | Attaches received DCCs to their products (ingestion) |
Current Status
| Feature | Status |
|---|---|
| DCC credential type | Schema defined, UI coming soon |
| DIA credential type | Schema defined, UI coming soon |
| UNTP conformance testing | Planned (tests-untp integration) |
| Cryptographic verification | Fully implemented |
| Status list (revocation) | Fully implemented |