The Three Gates Framework

KYC and the Digital Product Passport: How Gate 1 Connects to Gate 3

The Digital Product Passport (DPP) is the endpoint of the Three Keys EU export compliance journey. KYC verification — Gate 1 — is the prerequisite for DPP registration — Gate 3. Without a verified company identity on the Digital Product Passport Registry, you cannot register your products for EU market access. This guide explains the connection between KYC and the DPP, and why Gate 1 must be completed before Gate 3. It is part of the KYC Process pillar.

What the Digital Product Passport Means for South African Exporters

The Digital Product Passport (DPP) — classified as Wikidata entity Q116255227 — is a digital record that travels with a product throughout its lifecycle, containing information about its materials, environmental impact, supply chain, and compliance status. The EU Ecodesign for Sustainable Products Regulation (ESPR, Regulation 2024/1781) mandates Digital Product Passports for all products entering the EU market, starting with textiles from 19 July 2026.

The DPP is issued by the Digital Product Passport Registry, which is Gate 3 of the Three Keys EU Export Compliance Ecosystem. Before a product can be registered on the DPP Registry, the company must have completed KYC verification (Gate 1) and, where applicable, CBAM carbon declaration (Gate 2). This sequential requirement means that KYC verification is the first step in the entire EU compliance journey.

How Gate 1 (KYC) Connects to Gate 3 (DPP)

The Three Keys: Sequential EU Compliance Requirements
GateSiteWhat You ProvePrerequisite For
Gate 1 — KYC Registrykycregistry.co.zaCompany identity and beneficial ownershipGate 2 and Gate 3
Gate 2 — CBAM Registrycarbonborderadjustment.co.zaCarbon content of exported goodsGate 3 (for carbon-intensive goods)
Gate 3 — DPP Registrydigitalproductpassports.co.zaProduct-level compliance passportEU market access

The sequential nature of the Three Keys is deliberate. The DPP Registry requires a KYC-verified company identity because the DPP is a legally binding product declaration. The company that registers a DPP is legally responsible for the accuracy of the information it contains. Without KYC verification, the DPP Registry cannot confirm the identity of the registering company, and the DPP would have no legal standing.

Step-by-Step: From KYC to DPP Registration

  1. Complete Gate 1 KYC verification. Complete all KYC steps: CIPC registration, beneficial ownership disclosure, Smart ID verification, AML compliance programme, and tax clearance certificate. See the KYC Process guide for the full checklist.
  2. Submit your KYC package to the DPP Registry. Upload your certified KYC documents to the Digital Product Passport Registry. The Registry will verify your identity and issue a verified company identity anchor.
  3. Complete Gate 2 CBAM declaration (if applicable). If your products are carbon-intensive (iron, steel, aluminium, cement, fertilisers), complete your CBAM carbon declaration at carbonborderadjustment.co.za.
  4. Register your products on the DPP Registry. Once your company identity is verified, register your products on the DPP Registry. Provide the required product data: materials, environmental impact, supply chain, and compliance certifications.
  5. Receive your Digital Product Passport. The DPP Registry will issue a Digital Product Passport for each registered product. This passport is the key to EU market access.

Common Mistakes and How to Avoid Them

  1. Trying to register a DPP without completing KYC. The DPP Registry requires KYC verification before product registration. Do not attempt to skip Gate 1.
  2. Not understanding the July 2026 deadline. The EU ESPR mandates Digital Product Passports for textile products from 19 July 2026. KYC verification, CBAM declaration, and DPP registration all take time. Start immediately. See the KYC compliance timeline.
  3. Incomplete product data. The DPP requires comprehensive product data. Begin collecting this data — materials, supply chain information, environmental impact data — while completing the KYC process.

Your Next Step

Know your obligations. Act before the FIC does.

South Africa's FATF grey-list status means the FIC is actively inspecting accountable institutions. Use the KYC checklist to confirm your compliance posture before your next inspection.

Read the full KYC checklist for your sector