Product Identity Graph
Digital Product Passport with Immortal Provenance
Executive Summary
Dynamic digital product passports for EU regulatory compliance. Every physical product gets an immortal digital identity that carries its full lifecycle — manufacturing, ownership, repairs, recycling — as mutable token state on DUAL. EU Digital Product Passport regulation makes this mandatory by 2027.
Token Data Schema
What this token holds — every field is specific to Product Identity Graph:
{
"immutable": {
"graph_id": "UUID",
"merchant_id": "string",
"product_sku": "string",
"channel_id": "string"
},
"mutable": {
"identity_score": "float",
"risk_level": "enum",
"confidence_percentile": "float",
"last_verified": "timestamp"
},
"compliance": {
"gdpr_compliant": "bool",
"data_retention_policy": "string",
"consent_record_id": "UUID"
}
}
User Journey
Registers product catalog with identity attributes (brand, origin, certification)
Token: graph_id created, immutable SKU binding
Computes identity confidence score using cross-channel purchase history
Token: identity_score updated, risk_level computed
Queries identity graph to prevent unauthorized grey-market sales
Token: access_log appended
Verifies GDPR compliance and updates data retention policy
Token: gdpr_compliant = true, consent_record_id recorded
Flags counterfeit listings matching authentic product identity
Token: risk_level elevated, alert_sent
Token Lifecycle
State machine transitions:
Why Not Just a Database?
| Approach | Portability | Mutable State | Cross-Org | Compliance |
|---|---|---|---|---|
| Traditional ERP | Vendor-locked | Update-in-place | Limited to enterprise | Internal only |
| Blockchain NFT | Portable | Immutable; new NFTs for updates | Smart contract interaction | No privacy controls |
| Centralized Identity Provider | Proprietary API | Centralized updates | Pay-per-query | GDPR limited |
| DUAL Identity Token | Open Event Bus access | Cryptographic state proofs | Cross-brand queries | Privacy-by-design |
Market Opportunity
Mutable state tracks full product lifecycle; Compliance Layer embeds EU DPP regulation; immutable provenance chain proves authenticity; geo-positioning pins products to manufacturing origin.
Business Model & Unit Economics
- Per-Brand License: $500-$2,500/month for identity graph access and updates
- Verification API Calls: $0.01-$0.05 per API call; avg. 10K calls/brand/month
- Brand Protection Service: $250/month monitoring + manual counterfeit takedown assistance
- Licensing Analytics: De-identified brand performance and identity misuse reports
Per-brand: $500-$3,000/month license + $0.01-$0.05 per API call (10K calls = $100-$500). COGS ~$50/month (query processing). Gross margin: 85%+. Payback in 2-3 months.
5-Year Projections
| Year | ARR | Customers | Notes |
|---|---|---|---|
| Y1 | $100K | 50 brands | Pharma + luxury goods verticalization |
| Y2 | $750K | 200 brands | Grey-market detection AI deployed |
| Y3 | $2M | 600 brands | GDPR data residency compliance |
| Y4 | $4.5M | 1,200 brands | Cross-brand identity federation |
| Y5 | $7M | 2,000 brands | Industry identity standard adoption |
Competitive Positioning
| Competitor | Weakness | DUAL Advantage |
|---|---|---|
| Shopify Verified by Shopify | Shopify-only ecosystem; no cross-brand identity; limited GDPR support | Open identity graph; cross-brand queries; privacy-by-design |
| Trustpilot / ScanSource Reviews | Reputation-only; no product identity; centralized review bias | Product identity + brand verification + immutable audit trail |
| Authenticity Ledger (Custom Solutions) | Enterprise-locked; expensive implementation | Plug-and-play DUAL token + affordable API |
Go-to-Market
Launch with top 5 pharmaceutical brands in US market. Integrate authentication, lot-number verification, cold-chain tracking. Target: 50 brands, $100K ARR.
Add luxury watch, handbag, sneaker brands. Grey-market detection AI trained on 100M+ transactions. Target: 200 brands, $750K ARR.
Cross-brand identity federation. Become the identity layer for retail authentication. Licensing partnerships with major e-commerce platforms.
90-Day MVP
- Identity graph data model: SKU, merchant, channel, brand attributes
- Cross-channel identity computation: Purchase history risk scoring algorithm
- GDPR-compliant data residency: EU + US data isolation
- Anti-counterfeiting detection: Anomaly detection on identity attribute mismatches
- Merchant admin portal: Upload product catalog + identity rules
- API for brand identity queries: Confidence score + risk level response
Risk Factors
Luxury and pharma brands may resist revealing product identity data (competitive concerns).
Mitigation: Anonymized data aggregation; opt-in transparency tiers; IP protection with GDPR-grade encryption.
GDPR, CCPA, and emerging regulations may restrict cross-brand data queries.
Mitigation: Zero-knowledge proof architecture; data residency options; legal reviews pre-launch.
ML models may have false positives, flagging legitimate products as fraudulent.
Mitigation: Conservative scoring thresholds; human review for flagged items; continuous model retraining.
Each brand has proprietary supply chain systems. Custom API integrations slow deployment.
Mitigation: Pre-built connectors for SAP, Oracle, Salesforce; data import templates; managed integration service.
VC Pack Documents
Complete pre-seed investment package:
Get Started with AI
Prerequisites: Complete the DUAL Quick Start Guide to set up your environment and API keys before building this concept.
# Build Product Identity Graph on DUAL You are building a cross-brand identity verification system. Start here: 1. Design the identity graph schema: immutable SKU, merchant_id, channel_id; mutable identity_score, risk_level, confidence_percentile; compliance gdpr_compliant, data_retention_policy. 2. Create the identity computation engine: - Ingest merchant product catalogs (brand, origin, certification) - Compute identity confidence score from purchase history - Flag anomalies (counterfeit indicators) - Update risk level dynamically 3. Build the query interface: - Brand protection teams query "Is this product authentic?" - Return confidence score + risk signals - Log all queries for audit trail 4. Implement GDPR compliance: - Data residency (EU vs US) - Consent records per brand - Right-to-be-forgotten support 5. Create the grey-market detection: - Detect unauthorized channel sales - Flag counterfeit products by attribute mismatch - Alert brand protection teams Start by designing the identity attributes and confidence algorithm.