Changelog

The biggest release since 1.0. Twelve workstreams in one push, all aimed at one thing: making Provini the Shopify app you reach for when ESPR 2027 starts to look real.

New: physical tags beyond QR

You can now attach an NFC sticker or a UHF RFID inlay to any serialised product, alongside or instead of the QR code.

• NFC works automatically on every modern phone: customers tap, the phone opens the verify page, no app install needed.
• RFID is for production lines doing carton-level reads with Zebra / Impinj writers. Provini generates the GS1 SGTIN-96 binary EPC for each unit so your reader software has the right bytes.
• The verify URL is the same regardless of how it's read: QR, NFC, or RFID. One identifier per unit, three carriers.

The Admin shows the NDEF URI record bytes for each serial so your NFC-writing tool (NFC Tools, NXP TagWriter, or a custom CI pipeline) can program tags in bulk.

Digital Product Passport at the unit level

The DPP got the per-product polish ESPR-ready brands need:

• Five new fields per product track — material composition, care instructions, manufacturer, country of origin, brand name — surface directly in the Admin, the DPP JSON-LD, and the storefront theme block.
• Variant overrides: same five fields available per variant, so a t-shirt with one organic-cotton colourway and one conventional-cotton colourway can speak truthfully about each.
• AI auto-fill suggests realistic material breakdowns, care instructions, and country of origin from your product title + description. You confirm before publishing — nothing is auto-applied.
• Bulk CSV import for both serials and full DPP content. Download a template, fill in the rows, import. Validates GTIN check digits and ISO 3166 country codes per row.

Now speaks 7 languages

Italian, Dutch, Spanish, and Polish join English, German, and French. The merchant Admin, the customer verify page, and the storefront theme block all switch automatically to the customer's browser locale — nl-BE, es-MX, it-IT, pl-PL all resolve correctly.

Plans live in Shopify

We migrated off the legacy Billing API onto Shopify's new App Pricing flow:

• Plans (Core $29, Signal $99, Enterprise $199) are managed from Shopify directly, not from inside Provini.
• 14-day free trial on every paid plan.
• Live billing card visible inside your Shopify admin — no more "why was I charged?" support tickets.

The flow is the one Shopify recommends for new app submissions. Plans can change without a Provini deploy.

Customer-side resale (preview)

We're calling this a preview — the merchant side is live, the customer side ships in 1.2.

• Connect your Stripe Connect Express account from Settings → Resale (preview).
• Set a brand commission rate (0–50%) that you earn whenever one of your customers resells one of your products through Hebby.
• The plumbing for ownership transfer (identity preserved across owners) is in place; the listing-creation UX comes next.

Bigger picture

• EU data residency is unchanged — your data stays in the EU, full stop.
• GDPR coverage is now exhaustive: every table that holds customer-attributable data is correctly redacted on customers/redact, and shop/redact cleans up the entire shop within Shopify's 30-day compliance window.
• Public APIs are now rate-limited per IP so the verify URL can't be used to scrape your catalogue.
• App Store + Built-for-Shopify prerequisites are now met or in collection — Web Vitals telemetry started accumulating today; we're aiming for badge submission in June.

Coming next

• Workstream A — supplier-data ingestion via email. Send a TC or invoice PDF to your dedicated Provini inbox, Claude extracts the certification batch, you approve it, and the certified serials get the upgraded badge tier. ETA: summer 2026.
• Hebby Sell — the customer-side resale UI. Owner sets price, Provini issues a Stripe-backed payment link, ownership transfers post-payment with the badge tier preserved.
• Direct certification body integrations — OEKO-TEX Label Check first (this one's already partly scaffolded), followed by GOTS, GRS, Fairtrade, and bluesign.

— The Provini team

A polishing release between 1.0 launch and the bigger 1.1 push. No new merchant-facing features — instead, the regulatory and architectural foundations Provini stands on are now documented inside the product itself.

Every regulation, every standard, bundled

If you're a sustainability officer, a compliance reviewer, or a Shopify App Store assessor, you should never have to take our word for it. We bundle the source documents:

• EU regulations (EUR-Lex PDFs): ESPR (2024/1781), GPSR (2023/988), EAA (2019/882), GDPR (2016/679), Empowering Consumers (2024/825), Textile Labelling (2011/1007).
• GS1 standards: General Specifications 25.0, Digital Link URI Syntax 1.6.0, Conformant Resolver 1.1.0, Web Vocabulary.
• W3C Recommendations: Verifiable Credentials Data Model 2.0, Data Integrity, DI EdDSA, Bitstring Status List, DIDs 1.0, JSON-LD 1.1.
• Certifications: GOTS 7.0, Textile Exchange GRS 4.0 and RWS 2.2, OEKO-TEX Standard 100 Ed. 02.2025, Fairtrade Trader Standard v2.3.

Every claim Provini makes is anchored to one of these documents with a section and paragraph citation.

Built-for-Shopify checklist

A code-level optimisation guide for the four BFS performance metrics (LCP, CLS, INP, response time) is now part of the project, with our current status per criterion and the work needed to hit certification. We share this transparently with merchants and the App Store reviewers.

Architecture documented

The system is now described in 10 numbered docs (architecture, database, GS1, verification, integration, deployment, environments, billing, security, Shop Mini) plus a portfolio plan covering the next year of work. Every cross-tenant data invariant, every webhook, every public surface is described in one place.

What's not in this release

Nothing merchant-facing. Brands using Provini won't see a difference in the product. The next release (1.1) is where the merchant surfaces materially change — see 2026-05-13.

— The Provini team

Provini ships its full v1 feature set. Every piece announced in early access is now live, plus the customer-facing experience that makes the substrate worth something.

For merchants

Track products end-to-end

Create a Product Track for any item in your Shopify catalogue. Provini issues serial numbers at the unit level (one per physical product) or at the batch level (one per LGTIN batch), generates QR codes, and prints labels on demand. Tracks support per-variant GTIN, lot numbers, expiry dates, and inventory quantity.

Print labels the way your factory wants them

Bulk-export to PDF with seven paper-format presets: EU A4, A5, A6, Avery 5160, plus thermal sizes for Zebra / Brother / Dymo printers. Each label carries the QR plus optional brand colour, logo, and SKU. Pick the format once; reuse across runs.

See who owns what

The dashboard surfaces every registered customer with the products they own, the date they claimed, their tags and notes. Filter by badge tier, search by serial or customer email, export to CSV.

Reports + analytics

Daily / weekly / monthly trends on registrations, scans, and badge tiers. Generate compliance-ready reports as CSV or JSON. Built-in Shopify Billing API integration for plan upgrades.

For customers

Hebby — the Shop Mini

Your customers scan the QR code with their phone and land in Hebby, a Shop Mini that lets them:

• Claim ownership of the product they just bought.
• Decorate it with emoji and stickers (the decoration travels with the product on resale).
• Share the personalised version as a deep-link image — Instagram, WhatsApp, anywhere.

Hebby is built on Shopify's Shop Minis SDK, so it inherits the trust badge customers already give to the Shop app.

Trust at a glance

The public verification page shows a 5-tier badge indicating how strongly Provini can vouch for the item:

• CONFIRMED — serial is real, GTIN matches the brand's catalogue.
• VERIFIED — same, plus GS1-issued identifiers (full Digital Link compliance).
• CERTIFIED — has an active third-party sustainability or quality certification.
• SECURED — under active customer ownership (claimed, not transferred).
• AUTHENTIC — registered + cross-checked against the brand's order history.

The badge is computed live from the database — no static screenshots, no faked numbers.

Certificate of authenticity

Optional PDF certificate per serial number, downloadable from the verify page. Comes with the Provini Digital Product Passport URL, the GS1 Digital Link, and the ownership history.

For retail

POS Scanner extension

Drop the Provini POS Scanner onto any Shopify POS terminal's home grid. Tap the tile, point the camera at a QR code, see the verification status in under two seconds. Auto-verify on scan, sound feedback, hardware barcode scanner support — all of it merchant-configurable per terminal.

Compliance by default

• GDPR webhooks wired for customers/data_request, customers/redact, and shop/redact. Customer PII is anonymised on redact; product event history is preserved without personal data.
• HMAC validation on every webhook and every app-proxy request via the Cloudflare Workers Web Crypto API.
• Per-shop session isolation with separate tokens per merchant; no cross-tenant data access.

What's not in 1.0

We're holding the following for later releases:

• Resale flows (P2P + buyback) — the database tracks it; the UI doesn't expose it yet.
• Email-ingestion pipeline for supplier certifications — coming in v2 alongside direct integrations with OEKO-TEX, GOTS, and other certification bodies.
• Full DPP JSON-LD export in the W3C Verifiable Credentials envelope — schema is ESPR-aware, but the regulator-facing endpoint awaits the EU DPP Registry going live in July 2026.

— The Provini team

Provini opens its first private alpha to invited fashion and lifestyle brands. The product is incomplete on purpose: we ship the identity substrate first — every product gets a globally unique, GS1-compliant serial number that downstream features can hang off — and validate it with a small handful of brands before turning on the wider feature set in January.

What works in early access

• Per-unit serial numbers following the GS1 General Specifications. Every unit gets a unique identifier you can scan, search, and audit. Compatible with anything your supply chain already does with GTIN / EAN / UPC.
• QR code generation in print-ready PNG and SVG. Bulk-export to PDF for label runs in EU paper formats (A4, A5, A6, Avery) and thermal-printer sizes.
• Verification pages at a public URL per serial — no installation needed for the customer. Scan the QR with the phone's default camera, the URL opens, the product's authenticity status is right there.
• GS1 Digital Link resolver routes through your own Shopify domain via the Shopify App Proxy. The URLs your customers see are yours — https://yourshop.com/a/prv/01/{gtin}/21/{serial} — not a third-party redirect.

Built on Cloudflare from day one

We moved Provini onto Cloudflare Workers + D1 in December — every request runs from the nearest Cloudflare edge to the customer scanning the QR. No central server to wait for, no cold-start surprises, no data leaving the EU when EU data sovereignty matters.

Who it's for

Fashion and textile brands preparing for the ESPR Textile rollout in late 2027, when item-level identifiers become mandatory on every unit placed on the EU market. We help you build the substrate now so you're not retrofitting it under deadline pressure.

Coming in 1.0

January 2026 brings: customer-facing Digital Product Passport pages, the Hebby Shop Mini for the customer-side claim/decorate/share flow, the POS Scanner for in-store retail verification, ownership transfer with secure 72-hour claim tokens, full GDPR compliance (customers/data_request, customers/redact, shop/redact), and the billing flow.

— The Provini team