DPP Guide — Buying Houses & Agents

Supply Chain Traceability for Buying Houses

Buying houses and sourcing agents sit between the EU brand that must publish a Digital Product Passport and the factories that hold the data. This guide sets out what traceability means in practice — the four tiers, the evidence each one needs, how it maps to passport fields — and why the EU Forced Labour Regulation turns it from a buyer preference into a border condition on 14 December 2027.

Written by the DPPLive Team · Last updated: 23 September 2026

Why Now

Three laws, one question: where did this come from?

None of them mentions buying houses. All of them are answered with data that flows through you.

ESPR 2024/1781

Digital Product Passport

Each apparel item placed on the EU market will carry a passport with identifiers, composition, substances of concern and — as drafted — supply-chain information. The brand publishes it; the factory and its suppliers hold the facts. The textile delegated act is expected in 2027 with obligations following in 2028–29.

Product-level data

Reg. (EU) 2024/3015

Forced Labour Regulation · applies 14 Dec 2027

Prohibits placing on the EU market any product made with forced labour, at any tier. Authorities investigate and can withhold, withdraw or destroy goods. Importers will be asked to show where every input came from — and a chain they cannot document is a chain they will replace.

Border enforcement

CSDDD (as amended 2026)

Due diligence for the largest groups · from 26 July 2029

After the Omnibus I amendments published in February 2026, the directive applies to groups with more than 5,000 employees and €1.5 billion turnover (or €1.5 billion EU turnover for non-EU groups). That is precisely the tier of brand that sources through buying houses at scale.

Company-level due diligence

The Four Tiers

What each tier must be able to show

Tier numbering counts upstream from the finished garment. The evidence column is what a buyer’s auditor — or a customs officer under the Forced Labour Regulation — will accept.

Tier	Who	Minimum data	Evidence that stands up	Passport field
TIER 1	Sewing / finishing factory and its direct suppliers of fabric, trims, packaging	Legal name, address, facility identifier, licence numbers, contact; production dates per order	Trade licence, BGMEA/BKMEA membership, current social audit (SMETA, BSCI, WRAP), subcontractor register, packing list and invoice per shipment	Facility identifier · manufacturer · supply-chain information
TIER 2	Fabric mills, dyeing and printing houses, spinners supplying the mill	Legal name, address, country; lot or batch numbers linking fabric to garments	Mill invoice and delivery challan per lot, fabric test report, transaction certificate where a GOTS / GRS / OCS claim is made, ZDHC wastewater test for wet processors	Composition evidence · substances of concern · recycled content
TIER 3	Yarn spinners (if not Tier 2), fibre processors, ginners	Country of origin of fibre, spinner identity for main fabrics	Spinner declaration, TC chain back to the ginner for certified programmes, origin declaration on invoice	Country of origin of materials
TIER 4	Raw material — cotton farms, polyester chip producers, recyclers	Country and region of origin; certification programme if any	Programme certificates (Better Cotton, organic), recycler licence and TC for recycled inputs. Farm-level identity is rarely available; region-level origin usually suffices	Origin · recycled-content source

A Working Method

Six steps a buying house can run this season

Step 1

Pick the programmes that matter

Rank running programmes by EU volume and by cotton content. The top ten styles usually cover most of the exposure. Do the exercise for those first; do not try to map every SKU.

Volume × cotton = risk

Step 2

Issue one supplier data sheet

One page per supplier: identity, licences, certifications with expiry, subcontractor list, and a declaration of origin for main inputs. Collect it from Tier 1 yourself; require Tier 1 to collect it from Tier 2.

Same sheet, every tier

Step 3

Link documents to lots

Every fabric lot that enters the sewing factory should carry its mill invoice, challan, test report and (where claimed) transaction certificate. File them against the purchase order, not in a general folder.

PO → lot → documents

Step 4

Verify on visits

You are in the factories anyway. Check the subcontractor register against the floor, spot-check three lots against their documents, photograph the chemical store. Ten minutes per visit turns a paper trail into a verified one.

Presence is your advantage

Step 5

Put it into a passport

Once Tier 1 and the main-fabric Tier 2 are documented for a style, the passport’s supply-chain section can be filled. DPPLive’s agent portal lets a buying house create and review passports on behalf of its factories and hand the brand a QR, not a spreadsheet.

Data becomes a product

Step 6

Go one tier deeper each season

Tier 3 for cotton programmes, then origin. By 14 December 2027 the cotton chain for your main EU programmes should be documented to the spinner and the country of origin of the lint.

Deadline-driven depth

Evidence Hierarchy

What counts, and what does not

Not every document carries the same weight. At the top sit third-party documents tied to a specific lot: transaction certificates issued by a certification body, laboratory test reports, customs declarations. Below them sit first-party documents that are hard to fake because they are also used for money — invoices, delivery challans, bank records. Below those sit declarations: a supplier signing a form that says where its inputs came from. Declarations are necessary and cheap, but on their own they are what an authority will test first under the Forced Labour Regulation.

A buying house adds value precisely by upgrading evidence: turning a declaration into a checked declaration by visiting, and a checked declaration into a documented one by demanding the invoice and TC behind it. This is also why brands that have tried to bypass agents with software platforms keep coming back — the platform records what it is told; the agent can see whether it is true.

One warning on certificates: a scope certificate on a supplier’s wall proves eligibility, not delivery. Only a transaction certificate for the specific lot proves that the certified material reached your garment. Passport claims about organic or recycled content that are backed by scope certificates alone will not survive a market-surveillance check.

DPPLive’s agent portal is built for this workflow: a buying house creates passports for its factories, attaches supplier evidence per lot, and reviews and approves before anything publishes. See how a factory scores today with the free assessment, then talk to us about a pilot on one programme.

Talk to us about a pilot

Traceability FAQ

Questions agents ask

Does a buying house have any legal duty under ESPR?

Usually not directly. The passport duties fall on the economic operator placing the product on the EU market — the brand or importer — and on manufacturers. But brands discharge those duties through their sourcing chain, and the contract clauses they are writing into 2027 purchase orders name the agent as the party responsible for collecting and warranting supplier data. Read the six clause patterns before you sign the next one.

How deep do we really need to go — Tier 2, 3 or 4?

For the passport as currently drafted: Tier 1 (the sewing factory and its direct fabric and trim suppliers) with the mill named for the main fabric. For the Forced Labour Regulation: as deep as the risk. Cotton is the exposed input in apparel, so for cotton-heavy programmes brands will want the spinner (Tier 2) and the origin of the lint (Tier 3–4). Start with your top ten styles by volume and go one tier deeper each season.

What is the difference between a scope certificate and a transaction certificate?

A scope certificate says a company is certified to handle a standard (GOTS, GRS, OCS). A transaction certificate (TC) says a specific shipment of certified material moved from one certified company to another. Only the TC proves the claim for a specific lot — and only the TC can back a recycled-content or organic claim inside a passport.

Can EPCIS or blockchain replace collecting documents?

They record events; they do not create evidence. An EPCIS event that says a lot of fabric shipped from a mill still needs the mill’s invoice, TC and test report behind it. Use event data to organise the documents and prove the chain of custody, not to avoid collecting them. DPPLive anchors the passport hash on-chain for tamper evidence, but the documents still have to exist.

What happens if a factory in our chain subcontracts without telling us?

Under buyer codes of conduct it is a critical audit failure today. Under the Forced Labour Regulation it becomes a gap in the traceability an authority can ask for, and the product — not the factory — is what gets stopped at the border. Make the subcontractor register a standing requirement, verify it on visits, and put the disclosure duty in your factory agreements.

Keep Reading