eSign.AIeSign.AI

Industry Insights

DPP Compliance for Non-EU Exporters: A Practical Roadmap from Registration to Customs

If you manufacture batteries, textiles, or electronics outside the EU and sell to the EU market, you need a Digital Product Passport. Here's the step-by-step compliance roadmap for non-EU exporters.

eSign.AI Digital Trust Research Team7 min read

The EU deadline is coming — and it doesn't care where you manufacture

From 18 February 2027, every EV battery, LMT battery (e-bikes, scooters, motorcycles under 25 kg), and industrial battery above 2 kWh entering the EU market must carry a valid Digital Product Passport (DPP) registered in the EU central registry. This obligation applies regardless of where the product was manufactured. For non-EU exporters — battery makers in China, textile mills in Vietnam, electronics manufacturers in South Korea — the path to compliance looks different from EU-based competitors. This guide walks through the practical steps, costs, timelines, and pitfalls specific to non-EU manufacturers.

Feb 2027

Mandatory from

7

Registration steps

Yes (EU Trusted List)

QSeal required

4–8 weeks

Typical setup time

Who is affected — and when

The DPP obligation attaches to the act of 'placing on the EU market' — not to EU origin. If your product crosses an EU border, you need a DPP.

Battery manufacturers — February 2027

The first and most urgent category. All EV batteries, LMT batteries, and industrial batteries above 2 kWh. For Chinese manufacturers — CATL, BYD, SVOLT, CALB, Gotion, and hundreds of second-tier suppliers — this is the hard deadline. Batteries shipped after 18 February 2027 without a registered DPP will be blocked at EU customs, and penalties apply retroactively to products already in the supply chain.

Textiles and footwear — 2028

The European Commission's working plan adds textiles and footwear in 2028. Brands and their contract manufacturers (Vietnam, Bangladesh, Cambodia, China) will need DPP systems in place by the delegated act's entry into force — typically 18 months after publication. Factories should start preparation in 2026.

Electronics and appliances — 2028–2029

Consumer electronics, household appliances, and IT equipment follow. South Korean (Samsung, LG), Japanese (Sony, Panasonic), and Chinese (Haier, Xiaomi, Lenovo) manufacturers selling in the EU will need DPP infrastructure. The scope is vast — a single product line may require thousands of individual DPPs.

Tyres, furniture, mattresses — 2029–2030

Later waves extend to tyres, furniture, mattresses, and additional product categories. Exporters in these sectors have more preparation time but should monitor delegated acts closely.

The 7-step registration roadmap for non-EU operators

Non-EU manufacturers follow the same Verified Economic Operator (VEO) registration process as EU-based operators. The difference is in logistics: identity verification, QSeal acquisition, and national identifier formatting.

Steps 1–3: Account and identity

Create an account on the EU DPP Registry (registry.product-passport.ec.europa.eu). Submit your organisation's legal name, registered address, and national identifier. Chinese companies use a 'CN'-prefixed identifier (e.g., CN91110000XXXXXXXXXX — your Unified Social Credit Code). Vietnamese manufacturers use 'VN' + tax ID. South Korean companies use 'KR' + business registration number. The Registry validates the identifier format but does not verify the underlying legal entity at this stage.

Step 4: Obtain and apply QSeal

Download the operator declaration PDF from the Registry. This PDF already carries the European Commission's institutional seal. You must apply a Qualified Electronic Seal (QSeal) from a QTSP on the EU Trusted List. For non-EU operators, this is typically the most complex step. You need to: (1) Choose a QTSP with a Registration Authority in your region (eSign.AI serves as RA for ANF AC in Asia-Pacific), (2) Complete identity verification (business registration documents, authorised representative verification, video attestation), (3) Receive your QSeal certificate, (4) Apply the QSeal to the declaration PDF using a signing tool. The QSeal certificate subject name must match your registered organisation name character-for-character — including legal suffixes like 'Co., Ltd.' or 'Limited.'

Steps 5–7: Validation and activation

Submit the dually-signed PDF to the Registry. The Registry validates: (a) the European Commission seal, (b) your QSeal against the EU Trusted List, (c) certificate subject name matching. Upon validation, your operator account is activated. You can now register product passports — but each passport still needs its own XAdES-LTA signature (see the DPP × eSignature Solution Guide for details).

Realistic costs and timeline

Budgeting for DPP compliance involves one-time setup costs and recurring per-product costs. Here's what non-EU manufacturers should expect.

01

One-time cost for certificate issuance from a QTSP. Identity verification adds 3–10 business days depending on the Registration Authority's presence in your region.

02

Engineering effort to integrate XAdES-LTA batch signing into your manufacturing execution system (MES). Simpler for greenfield deployments; more complex for legacy ERP integration.

03

QTSP API fee per qualified signature. At 10,000 DPPs/day, this ranges from €36,500 to €365,000 per year. Negotiate volume tiers early.

04

Annual budget for customs audit response — retrieving signed audit logs, TSA receipts, and TSL snapshots. Often overlooked until the first audit.

05

From QSeal application to first DPP registered. The critical path is identity verification (1–2 weeks) and signing API integration (2–6 weeks depending on complexity).

Common pitfalls for non-EU exporters

Based on early operator registrations and sandbox testing, these are the most frequent failure points for non-EU manufacturers.

Name mismatch on QSeal certificate

The #1 cause of registration rejection. Your QSeal certificate subject name must exactly match the organisation name in the Registry. Common issues: Chinese company names with different English transliterations (e.g., '宁德时代' registered as 'CATL Technology Co., Limited' but QSeal issued to 'CATL Technology Co., Ltd.'), missing legal suffixes, or extra spaces. Verify the exact registered name before applying for QSeal.

Choosing a QTSP without regional presence

Selecting a QTSP that requires physical document shipping to Europe for identity verification adds weeks. QTSPs with Registration Authorities in your region (like eSign.AI for ANF AC in Asia-Pacific) complete verification in days, not weeks.

Underestimating signing throughput needs

A battery factory producing 10,000 units/day needs 10,000 qualified signatures/day. Some QTSPs cap API throughput at levels far below this. Test signing throughput in the sandbox before committing to a QTSP.

Ignoring certificate renewal planning

When your signing certificate expires, new DPP signing stops until the certificate is renewed. Plan renewal 60–90 days before expiry. Automate renewal notifications and have a rollover procedure documented.

Assuming the Registry validates signatures

The EU DPP Registry does NOT validate signatures at submission time — it checks structure and link integrity. But customs authorities and market surveillance teams DO verify signatures during audits. Missing signatures may go unnoticed at registration but surface during a customs inspection, resulting in product seizure and fines.

China-specific guidance: Battery manufacturers

Chinese battery manufacturers face the tightest timeline. Key actions before February 2027: (1) Register as a Verified Economic Operator using the 'CN' prefix + Unified Social Credit Code as national identifier, (2) Obtain QSeal from a QTSP with Registration Authority presence in China — eSign.AI provides ANF AC QSeal issuance for Asia-Pacific operators, completing identity verification in 3–5 business days, (3) Integrate XAdES-LTA batch signing API with your MES — eSign.AI's signing API supports up to 100 DPPs per call with throughput exceeding 1,000 operations per minute, (4) Complete sandbox testing on the EU DPP Registry before the battery DPP module goes live, (5) Maintain a compliance audit trail — signed API logs, TSA timestamp receipts, and TSL snapshots — ready for EU customs inspections. The window between now and the February 2027 deadline is the optimal integration period. Factories that wait until Q4 2026 will face capacity constraints at QTSPs and Registration Authorities as thousands of manufacturers compete for the same resources.

Frequently asked questions

The DPP obligation falls on the 'economic operator' placing the product on the EU market. This can be the manufacturer, importer, or authorised representative. If the EU-based distributor takes legal responsibility as the importer, they can register as the VEO. However, the manufacturer still needs to provide product data and DPP content. Most large manufacturers prefer to register themselves to maintain control over product data.

Team discussing the right eSignature approach for a business

Explore the right eSignature approach for your business

Talk to our team about eSignature requirements, compliance considerations, and document workflows across your target markets.