Supply chain traceability & provenance with VCALM

Issue provenance and traceability credentials that travel with a product — so buyers, retailers, auditors, and customs can verify origin instantly, and counterfeits have nowhere to hide.

  1. Manufacturer issues

    Provenance credential attached to each batch

  2. Product carries it

    Through distributors, retailers, and resale

  3. Buyer or auditor verifies

    Scan -- origin confirmed, tamper-evident

What it feels like to use

The technology is invisible by design. Here's what each person actually does — and what they no longer have to.

  1. The brand issues an authenticity credential

    At the point of manufacture, each product gets a signed provenance credential — origin, materials, date — linked to a tag or QR on the item. It's issued once and travels with the product.

    No shared central database for counterfeiters to mimic.

  2. The product carries it through the supply chain

    As the item moves through distributors, retailers, and resale, the credential moves with it. Each handoff can add its own signed event without anyone rewriting history.

    Ownership can transfer without phoning the brand.

  3. A buyer or auditor verifies it

    A buyer, retailer, or compliance auditor scans the tag, taps "Verify", and instantly sees where it came from and that it's genuine — cryptographically, not a website or spreadsheet that could be faked.

    Proof of origin in seconds, even years later.

What the buyer experiences

  • One scan, real proof. Authenticity you can check yourself.
  • No counterfeit guesswork. The proof is cryptographic, not a logo.
  • Works on resale. Provenance survives every change of hands.
  • Their choice of app. Any conformant wallet or scanner works.

What the manufacturer experiences

  • Counterfeits lose their cover. Fakes can't produce a valid credential.
  • No central honeypot. Nothing to breach; proofs are self-contained.
  • No vendor lock-in. Pick a provider, swap it later, work with every scanner.
  • Provenance across borders. Verifiable anywhere that reads the standard.

How it works

One diagram, three actors, one loop.

    BRAND                  PRODUCT               BUYER / RETAILER
  (issuer)             (its credential)          (verifier)
     |                      |                          |
     | -- delivers -->      |                          |
     |  authenticity VC     |                          |
     |                      | <-- asks for --           |
     |                      |   proof of origin         |
     |                      | -- presents -->           |
     |                      |   authenticity VC         |
     |                      |                     verifies (ok)
  

A good fit if…

Start building

Provenance, traceability, and product passports

These are one capability under different names. In the US, the need shows up as supply chain traceability and provenance — driven by rules like the Drug Supply Chain Security Act (DSCSA), the Food Safety Modernization Act (FSMA), and the Uyghur Forced Labor Prevention Act (UFLPA). In the EU, the same record is the Digital Product Passport (DPP) mandated by the ESPR. Verifiable Credentials over VCALM cover all of them: one tamper-evident, portable record any party can verify.

Why VCALM vs. the alternative

You pick a VCALM provider and can swap it. The credential works with any conformant wallet or scanner — you aren't locked to one vendor's app across your whole supply chain.