Skip to main content

Platform · Product twin infrastructure

Passports are the output. The product twin is the infrastructure.

Norruva is the runtime that turns fragmented product, supplier and lifecycle data into a governed product twin. It validates every claim against regulation and evidence, then compiles the Digital Product Passport views each actor is allowed to see.

Start nowTry it in the sandbox

Fragmented inputs

ERPPLMPIMLCA / EPDPDFsSuppliersIoT

Governed product twin

evidence-backed · versioned · policy-controlled

Compiled passport views

ConsumerAuthorityCustomsRecyclerRepairerRegistry / AASX

The runtime

One pipeline, from fragmented data to a governed passport.

Every stage is canonical-model-first, event-driven, evidence-backed and audit-ready, not a form wired to a QR page.

  1. 01

    Ingest & evidence

    Connectors, files, OCR/AI extraction with provenance and confidence.

  2. 02

    Semantic normalization

    Units, materials, AAS & GS1 terms mapped to one ontology.

  3. 03

    Product twin graph

    The canonical graph of identity, composition, supply chain and lifecycle.

  4. 04

    Regulation runtime

    Rule packs model what each product must prove, per sector and jurisdiction.

  5. 05

    Claim & validation

    Evidence-backed claims, checked for sufficiency and publication-readiness.

  6. 06

    Passport compiler

    Actor-specific DPP views generated from approved claims.

  7. 07

    Exchange layer

    AAS/AASX, GS1 Digital Link, EPCIS, JSON-LD, registry, wallet, data spaces.

  8. 08

    Event & audit memory

    Who changed what, under which rule version, audit replay by design.

Why it matters

Most DPP tools are shallow. Compliance isn't.

The difference between a disclosure that survives an audit and one that doesn't is what sits underneath it.

The shallow DPP

product form › database › QR page

  • No product hierarchy or composition
  • Fields with no evidence or provenance
  • No access control or actor-specific views
  • No versioning, lifecycle or audit replay

The Norruva runtime

data › governed twin › claims › views

  • A canonical graph of identity, composition and supply chain
  • Evidence-backed claims with provenance and confidence
  • Policy-controlled, actor-specific passport views
  • Versioned lifecycle with full audit replay
“A passport without a governed product twin underneath is just a webpage with compliance risk.”
Most digital twins model how a product works. Norruva models what a product must prove.

The product twin graph

The canonical model of product reality.

Not a record. A graph of identity, composition, supply chain, evidence and lifecycle state, at whatever granularity a regulation demands.

Identity & granularity

Product Family

family

Product Model

model

SKU

sku

Batch / Lot

batch

Serialized Item

item

Every node carries

Component → Material → Substance

Composition for SoC, recycled content, dismantling.

Supplier & Facility

Who supplied it, where it was made.

Evidence & Claims

Defensible data points, each with its source.

Lifecycle events

Repair, recycling, ownership, regulatory change.

Illustrative. Object names follow the Norruva canonical model.

Evidence-backed claims

Store claims, not fields.

A DPP is generated from approved claims, never raw fields. Each claim carries its evidence, source anchor, confidence and validity, so every published statement is defensible.

ExtractedPending reviewApprovedPublishedExpired / Revoked

Claim

Recycled content: 34%

Approved
Confidence
High
Valid until
2027-06-30
Evidence · with its source

supplier_declaration.pdf · p.3

lab_report_2026.pdf · tbl.2

Illustrative claim, sample values shown.

Regulation-as-runtime

Rules are data, not code.

Regulation packs model what a product must prove, per sector, per jurisdiction, with effective dates, so requirements change without rewriting the platform.

Mode 01

Readiness

Ingest a portfolio, extract evidence, score DPP readiness and surface the gaps and supplier actions.

→ readiness score & gap report

Mode 02

Publication

Select the rule pack, validate approved claims, compile actor views, assign GS1 Digital Link, publish.

→ published passport views

Mode 03

Runtime

Ingest lifecycle events, detect regulation changes, recalculate state, republish, record the trail.

→ living state & audit replay

RegulationPackRequirementEvidenceRecipeAccessRulePublicationRuleEffectiveDateSectorPackJurisdiction

The passport compiler

One twin. The views each actor is allowed to see.

DPPs are views, not the system of record. The compiler generates each from approved claims, with its own data access, evidence visibility and publication rules.

Consumer

Sees:

care, origin, recyclability

Authority

Sees:

full evidence & compliance state

Customs

Sees:

identity, origin, classification

Recycler

Sees:

materials, substances, dismantling

Repairer

Sees:

parts, documentation, repair steps

Supplier

Sees:

the scope they contributed

Interoperability & exchange

AAS-compatible, not AAS-dependent.

The twin exports through whatever rail the reader speaks. The Asset Administration Shell is one of them, a structured exchange format Norruva ingests and emits, mapped to the canonical twin.

AAS / AASX

Shell + submodels, ingested and exported.

GS1 Digital Link

Resolves the product to its views.

EPCIS

Supply-chain and lifecycle events.

JSON-LD / RDF

Linked-data serialization.

EU DPP Registry

Registry submission packages.

EUDI / EUBW Wallet

Verifiable-credential flows.

Data spaces

Sovereign, policy-governed exchange.

REST / GraphQL

Direct API + webhooks.

AAS-valid ≠ DPP-compliant

A structurally valid AASX can still lack evidence, required fields, access control, actor views and audit trail. Norruva bridges the gap: ingest the shell, then check what compliance actually needs.

POST /v1/twins/importsandbox
// Ingest an AASX package, get DPP readiness back
{
  "format": "aasx",
  "file": "file_9f3a21"
}

// 200 OK
{
  "twin_id": "twin_batt_7F3A",
  "aas_valid": true,
  "dpp_ready": false,
  "readiness_score": 0.72,
  "missing_evidence": ["carbon_footprint"],
  "views_available": ["consumer", "recycler"]
}

Data spaces

Sovereign exchange, not a public scrape.

Partners consume the twin through connectors governed by usage policies negotiated between them. The data owner stays in control, following Gaia-X and IDSA principles.

Norruva connector

EDC-compatible · you

usage policy
contract negotiated

Partner connector

Catena-X · participant

Data sovereigntyVerifiable credentialsCatena-XManufacturing-X / Factory-XEU DPP Registry

Build it in the sandbox

Model the twin before you go live.

The full-parity sandbox is where the twin becomes real: import an AASX package, watch the readiness score and evidence gaps, compile the actor views, and rehearse a data-space handshake, all before the live activation gate.

Open the sandbox

Build the twin. The passports follow.

Start with a DPP readiness scan in the full-parity sandbox, or talk to our team about a product-twin rollout.

Start now Contact sales