Issue provenance and traceability credentials that travel with a product —
so buyers, retailers, auditors, and customs can verify origin instantly,
and counterfeits have nowhere to hide.
1
Manufacturer issues
Provenance credential attached to each batch
2
Product carries it
Through distributors, retailers, and resale
3
Buyer or auditor verifies
Scan -- origin confirmed, tamper-evident
No central database -- proof travels with the product -- DSCSA / FSMA / UFLPA ready
What it feels like to use
The technology is invisible by design. Here's what each person actually
does — and what they no longer have to.
The brand issues an authenticity credential
At the point of manufacture, each product gets a signed provenance
credential — origin, materials, date — linked to a tag or QR on the
item. It's issued once and travels with the product.
No shared central database for counterfeiters to mimic.
The product carries it through the supply chain
As the item moves through distributors, retailers, and resale, the
credential moves with it. Each handoff can add its own signed event
without anyone rewriting history.
Ownership can transfer without phoning the brand.
A buyer or auditor verifies it
A buyer, retailer, or compliance auditor scans the tag, taps
"Verify", and instantly sees where it came from and that it's
genuine — cryptographically, not a website or spreadsheet that could be
faked.
Proof of origin in seconds, even years later.
What the buyer experiences
One scan, real proof. Authenticity you can check yourself.
No counterfeit guesswork. The proof is cryptographic, not a logo.
Works on resale. Provenance survives every change of hands.
Their choice of app. Any conformant wallet or scanner works.
What the manufacturer experiences
Counterfeits lose their cover. Fakes can't produce a valid credential.
No central honeypot. Nothing to breach; proofs are self-contained.
No vendor lock-in. Pick a provider, swap it later, work with every scanner.
Provenance across borders. Verifiable anywhere that reads the standard.
These are one capability under different names. In the US, the need shows up
as supply chain traceability and provenance
— driven by rules like the Drug Supply Chain Security Act (DSCSA), the Food
Safety Modernization Act (FSMA), and the Uyghur Forced Labor Prevention Act
(UFLPA). In the EU, the same record is the
Digital Product Passport (DPP) mandated by the ESPR.
Verifiable Credentials over VCALM cover all of them: one tamper-evident,
portable record any party can verify.
Why VCALM vs. the alternative
You pick a VCALM provider and can swap it. The credential works with any
conformant wallet or scanner — you aren't locked to one vendor's app across
your whole supply chain.