Back

Traceability & Supply Chain Transparency

Product Traceability: A Complete Guide for Premium Brands

Eugenia Vitali


13 Oct 2026

black dots gif

Product traceability is the ability to follow a product’s history, location and custody from origin to end of life. For premium brands, the useful level is the individual item, not the batch: each unit carries a unique identity, events are recorded at every stage in a standard format, and field scans extend visibility past the distributor to retail, consumers and resale.

A shipment leaves a production facility: twelve thousand units, split across four markets. Six months later, the brand’s grey market team flags a cluster of the same product on European secondary platforms at 35% below the recommended retail price. The logistics records confirm the shipment existed. They can’t say which units diverted, through which distributor, or when.

That gap is the difference between batch traceability and item-level traceability, and closing it is the central traceability challenge for premium brands today. Batch traceability is mature: it tells quality teams which lots of which inputs went into which runs, and which customers received them. It stops at the first customer. The questions commercial, brand protection and compliance teams now ask (where did this unit sell, is it genuine, who owns it, which shipment leaked) all begin after that point.

This guide is the complete reference: what traceability is at item level, how NFC-based traceability works step by step, when NFC or QR is the right carrier, the standards and data model, what it costs, how it applies by sector, what regulation requires, and how to build, measure and govern a programme.

What is product traceability?

Product traceability is the ability to follow a product’s history, location and custody from its point of origin through to end of life. Three elements make it operational:

  • A unique identity on each unit, structured to a standard so any system can read it (GTIN plus serial, expressed as a GS1 Digital Link).
  • A standard format for recording events at each stage, so partners and systems can share them without custom mapping (GS1 EPCIS).
  • A mechanism for capturing those events across the supply chain, including stages the brand doesn’t control: distributors, retailers, consumers and resellers.

Traceability isn’t the same as tracking. Shipment tracking tells you where a container or pallet is now. Traceability builds a history for each product that persists after the shipment is broken down, and that’s the part premium brands are missing. How Product-Level Traceability Differs From Shipment-Level Tracking covers the distinction in detail.

Batch traceability vs item traceability

Traceability means different things to a quality manager and to a brand protection director. For the first, it’s batch traceability: if a raw material is contaminated, which lots are affected? For the second, it’s item traceability: this specific bottle, where was it supposed to go and where did it end up?

Batch-level Item-level
Unit of record Lot or production run Individual product
Answers Which batches contain this input? Where did they ship? Where is this unit? Is it genuine? Who owns it?
Typical carrier Printed lot code NFC, secured QR, RFID with a unique serial
Visibility ends At the first customer (distributor) Wherever the item is scanned, including after sale
Supports diversion detection Only at distributor level Down to the shipment and channel
Supports authentication No Yes, with a secure carrier
Typical regulatory use Quality recalls, food safety (HACCP) Digital Product Passports, consumer information (AGEC), anti-counterfeiting enforcement

The two aren’t alternatives. Item-level traceability is built on top of batch traceability: each item links to its batch, and inherits everything the batch knows. What item level adds is the ability to follow individual units after the batch has been split across customers, markets and channels.The cost difference between them is mainly the carrier and serialisation on each unit. For products where a single unit is worth tens or hundreds of euros, and where counterfeiting, diversion or resale are real concerns, that cost is usually small relative to what item-level data reveals.

Why item-level traceability matters now

Four commercial pressures and one regulatory one have converged on the same products.

Price corridors between markets

Threat
Retail prices for the same product differ between markets.
Mechanism
Stock flows from cheaper markets to more expensive ones through unofficial channels.
Outcome
Allocation and pricing decisions are made on wrong sell-through data.

Online marketplaces

Threat
Diverted genuine stock sold online alongside counterfeits.
Mechanism
Batch data can’t distinguish a diverted unit from a counterfeit.
Outcome
Enforcement targets the wrong sellers or none.

Resale growth

Threat
Pre-owned goods trade without the brand’s involvement.
Mechanism
Without item identity, the brand can’t verify or follow resold items.
Outcome
Third parties own authentication and the customer.

Regulation

Threat
Digital Product Passports require a unique identifier and data carrier.
Mechanism
Products in scope must be identifiable through a carrier.
Outcome
Identity infrastructure becomes necessary anyway.

The scale of the counterfeiting problem: The most recent OECD and EUIPO study, Mapping Global Trade in Fakes 2025, estimates counterfeit goods at USD 467 billion in 2021, or 2.3% of global imports. For the EU, the estimate is USD 117 billion, 4.7% of imports. Clothing, footwear and leather goods together accounted for 62% of seized counterfeits. Those are customs figures; they don’t include genuine goods sold outside their intended markets, which is a separate and largely unmeasured problem.

What traceability covers, stage by stage

  1. Origin: Raw materials, suppliers, certifications
  2. Production: Batch, line, site, commissioning of each item
  3. Packing: Items aggregated into cases and pallets
  4. Distribution: Shipments, intended market, custody changes
  5. Market: Retail, on-trade, consumer scans, location
  6. After sale: Ownership, resale, repair, end of life
Upstream stages are covered by supplier data and production systems. Downstream stages depend on scans by people the brand doesn’t employ. A traceability programme that ignores the last two stages stops exactly where the commercial risks begin. The detail of what to capture at each stage is in End-to-End Traceability: What Data Brands Need at Each Supply Chain Stage.

A useful way to see the scope is by who records events at each stage. Upstream, it’s suppliers and the brand’s own production. In the middle, it’s the brand’s warehouses and logistics partners. Downstream, it’s distributors, retailers, consumers and resellers: people with no obligation to record anything. Programme design is mostly about making downstream recording happen.

There’s a practical asymmetry here too. Upstream data improves slowly, because suppliers have to be persuaded and systems connected. Downstream data can grow quickly once products carry a carrier people want to tap. Many programmes therefore deliver their first commercial results from the downstream end, while upstream data matures in parallel.

How NFC product traceability works

NFC-based item traceability puts a chip in or on each product. The chip carries the item’s unique identifier and, for secure chips, produces a new cryptographic proof every time it’s tapped. The process runs from the production line to the consumer.

  1. Commissioning: On the line, each item’s tag is encoded with a GS1 Digital Link URL (GTIN plus a unique serial) and linked to its batch, site and certifications.
  2. Inline verification: A station reader checks each tag before the item leaves the facility, so only working, correctly commissioned tags ship.
  3. Logistics events: Packing, warehouse and shipping scans record aggregation and custody changes, each with time, location and handler.
  4. Retail or consumer tap: Any recent phone reads the tag with no app: iPhone XS/XR and later in the background, Android natively with the screen on.
  5. Server-side authentication:The tag returns a one-time signed message. The platform recomputes the signature with the chip’s key and checks the tap counter. A copy can’t produce a valid message.
  6. Result and action: The verified scan triggers the right output (verification page, product passport, ownership registration, engagement) and is recorded against the item.

What the chip actually does

The chip class used for product authentication is NXP’s NTAG 424 DNA (ISO/IEC 14443-A, NFC Forum Type 4). It uses SUN (Secure Unique NFC) messaging: on each tap, the chip increments a counter and computes a message authentication code from that counter using an AES-128 key that never leaves the chip. The code is appended to the URL the phone opens.

A SUN message as received by the platform
https://id.brand.com/01/03012345678900/21/A7X9K2M4
    ?ctr=00007F&cmac=8F3A1C0D9B44E2A7

platform:  recompute CMAC with this item's key   -> match
           counter 127 > last seen 126             -> fresh
result:    genuine, first scan in this market

Strictly speaking this is not a challenge-response: the server doesn’t send the chip a challenge. The chip signs a fresh counter on its own, and the server checks it. The effect is the same for the user: every tap produces a different, verifiable proof. A photograph of the tag, a copied URL or a cloned identifier fails, because only the genuine chip can produce the next valid code. For sealed products, the TagTamper variant (NTAG 424 DNA TT) adds a conductive loop across the closure and reports whether it has been opened.

The detail of chip-level security is covered in How Secure NFC Tags Work.

NFC vs QR for traceability: which carrier when

Indicative prices from public catalogues, 2026; programme pricing depends on volume and form factor

 

NFC (NTAG 424 DNA class) Serialised printed QR
How it proves identity New signed message on every tap, verified server-side A unique code, sometimes digitally signed, but identical on every scan
Copied by photograph or photocopy? No Yes, unless the print carries a copy-detection feature
App needed? No (iPhone XS+ and Android native) No (any phone camera)
Supply chain scanning Phone or NFC reader at close range Any camera or barcode scanner
Tamper evidence Yes, with TagTamper variant Not inherent
Indicative unit cost USD 0.45–0.65 for NTAG 424 DNA-class labels at five-figure volumes Near-zero marginal print cost; real cost is serialisation and platform
On metal Needs a ferrite-backed on-metal tag, typically +7–30% cost No constraint
Role in a DPP Trust layer: authentication and ownership Common visible carrier for passport access

 

When QR is the better choiceNFC is not always the right answer, and a programme that ignores this over-specifies and under-delivers. Printed QR is usually the better carrier when:

  • Unit values are low. Below a few euros per unit, a secure chip costs more than the value at risk.
  • Line speeds are very high. QR fits existing print processes without adding encoding stations.
  • The goal is passport access, not authentication. A GS1 Digital Link QR is a widely used visible carrier for Digital Product Passports.
  • There’s no counterfeiting, diversion or resale exposure. Without those threats, cryptographic security adds cost without return.

Between the two sits a third option: printed codes with a physical copy-detection feature. ACM-secured barcodes and Diamond Dust, both part of Selinko’s portfolio, make a printed code hard to reproduce, which brings authentication to products where an NFC chip isn’t economic.

The data model: what, when, where, why

Every traceability event answers the same questions. Using a standard model, GS1 EPCIS 2.0 being the most widely adopted, means partners and systems can write and read events without custom mapping. Two points about the model are worth emphasising. First, events are recorded against the most convenient unit (a pallet when shipping, an item when scanned by a consumer) and aggregation relationships link them, so nobody has to scan every item at every stage. Second, events are immutable: if something was recorded wrongly, a correcting event is added rather than the original being edited. That’s what makes the record usable as evidence.

The standards you'll meet

Traceability involves many parties, so standards matter more here than in almost any other area of product data. These are the ones that come up most in premium consumer goods.

Standard What it identifies or describes Used for
GTIN Product type What the item is
GTIN + serial (SGTIN) Individual item Which unit it is
SSCC Logistic unit (case, pallet) Shipping and aggregation
GLN Location or party Where events happen, who is involved
GS1 Digital Link Identifiers as web addresses Phone-readable resolution, DPP access
EPCIS 2.0 Events (what, when, where, why, how) Recording and sharing traceability events
Core Business Vocabulary (CBV) Standard values for business steps and statuses Making events comparable across partners

You don’t need all of these on day one. GTIN plus serial, SSCC and EPCIS cover most of what an item-level programme needs. Digital Link becomes important as soon as consumers or passport readers are involved

Choosing carriers for each stage

Carrier Why
Production line NFC or secured code on the item, encoded in-line Commissioning at the moment of manufacture
Cases and pallets UHF RFID or SSCC barcode Fast, bulk reads in warehouses and docks
Distributor and retail Item carrier read by handheld or phone Receipt and spot checks without unpacking everything
Consumer and resale Cryptographic NFC Readable by any phone, can’t be cloned

Mixing carriers is normal. What matters is that every carrier resolves to the same item identity, so a UHF read in a warehouse and an NFC tap in a bar land on one record.

Security requirements change along the chain. In the warehouse, the main risk is error, not fraud, so fast bulk reads matter more than cryptography. At the consumer end, the main risk is copying, so cryptography is essential. That’s why many programmes combine UHF on cases with cryptographic NFC on items.

Physical constraints matter as much as security. Standard NFC antennas detune on metal, so watches, metal closures and cans need on-metal tags with a ferrite layer. Small or curved formats (cigars, lipsticks, miniatures) need thin, flexible inlays. Liquids near the antenna reduce read range, which affects where a tag sits on a bottle.

What item-level traceability is used for

Use Case Threat Mechanism Outcome
Grey market diversion Allocated stock resold in a higher-price market. Intended market set at shipment; field scans show where items surface. The leak is traced to a shipment and distributor. See Grey Market Detection Explained: How Brands Find and Stop Diversion.
Targeted recall A faulty component affects some units of a batch. Item records link each unit to its inputs and current location. Recall only affected units, and know where they are.
Origin and provenance claims Claims about origin or craftsmanship are challenged. Origin events and certificates attach to each item record. Claims are backed by per-item evidence, not brochure copy.
Digital Product Passport Regulation requires product data via a data carrier. The passport is served from the traced item record. Compliance reuses traceability data. See Digital Product Passport: A Practical Guide for Brands.
These use cases share one requirement that’s easy to underestimate: someone has to act on the signal. A diversion alert that nobody follows up is a dashboard, not traceability. Before launch, decide who receives each type of signal and what they’re expected to do with it.

Worked example: tracing a diverted shipment

An anonymised but representative case shows how the pieces combine. A fragrance brand notices a discount retailer in a Gulf market selling its products below the authorised price. Nobody in the brand shipped to that retailer.

  1. Field scans cluster: Consumer scans of the fragrance in that market rise. All authenticate as genuine. None of the scanned items has that market as its intended market.
  2. Items point to shipments: Each scanned item’s record links, through aggregation, to the pallet it shipped on. Most trace to two pallets.
  3. Shipments point to a distributor: Both pallets shipped to the same authorised distributor in a neighbouring market, three months earlier.
  4. Timing confirms the route: First scans in the Gulf market appear within weeks of the distributor’s receipt.
  5. Action: The brand raises the case with the distributor using item-level evidence, not test purchases or estimates.

Every step relies on data captured earlier: commissioning, aggregation, intended market at shipment. If any of them is missing, the trail stops at ‘genuine products are in a market we don’t serve’, which is where most brands are today. For the mechanics of building a diversion map, see How Grey Tracking Actually Works: Turning Verification Scans Into a Diversion Map.

Product traceability by sector

Sector Primary traceability question Critical stage Carrier considerations
Spirits Did allocated stock sell in its market, and is it being refilled? Distributor to on-trade and retail TagTamper NFC in the capsule or closure
Wine Is this bottle genuine and from the claimed vintage and estate? Secondary market and auction Capsule NFC with first-open evidence
Luxury leather goods Is this item genuine, and who has owned it? Resale Sewn-in or embedded NFC
Watches Is it genuine, and what’s its service history? Service and resale On-metal NFC, or tag in box or certificate card
Beauty and fragrance Which channels leak stock into unauthorised retail? Distributor to online marketplaces NFC or secured codes; fast commissioning for high SKU counts
Fashion Where was this made, from what, and is it genuine? Origin and resale, plus DPP Woven or care-label NFC, QR for passport
Cigars Is this genuine, and from the stated origin and age? Collectors and specialist retail Thin, flexible tags that tolerate humidity
Furniture and premium audio Who owns it, and what’s its warranty and service history? After sale NFC or UHF; registration and service

What changes by sector

  • Wine and spirits: Traceability runs from appellation or vintage certification through bottling and closure commissioning to the consumer. A TagTamper chip in the capsule gives a verifiable first-open indicator a standard tag can’t, which turns refill fraud into evidence. Diversion between duty-free, export and domestic allocations becomes visible unit by unit.
  • Watches: Metal cases rule out standard tags; on-metal tags in the same chip class solve this. Downstream value sits in warranty registration, authenticated service history and ownership transfer at resale.
  • Beauty and fragrance: High SKU counts and short product cycles make commissioning speed a priority. Consumer scans at point of use support reorder journeys and expiry communication, which also produces the scan density diversion detection needs.
  • Leather goods and fashion: With 62% of seized counterfeits in clothing, footwear and leather goods, secure item-level identity gives customs and field enforcement a reliable way to tell genuine from fake, and fashion’s early place in the DPP working plan makes the same identity a compliance asset.

For spirits specifically, see NFC Authentication for Wine & Spirits: How It Works and Why It Matters; for luxury, NFC Product Authentication for Luxury Brands.

What item-level traceability costs

The carrier is the most visible cost and rarely the biggest. Indicative public catalogue prices in 2026 put NTAG 424 DNA-class labels at around USD 0.45–0.65 per unit at five-figure volumes, with on-metal variants adding 7–30%. Above roughly 50,000 units, pricing is usually quote-only. Standard, non-secure NFC tags list at around EUR 0.19–0.23 at 1,000–10,000 units, but they can be cloned and don’t support authentication.

Cost line Behaviour What drives it
Carrier Per unit Chip class, form factor, volume
Application and commissioning Per unit plus step per line Where the tag is applied, encoding stations, line speed
Serialisation and data Mostly one-off Identifier set-up, ERP or WMS link for intended market
Platform Recurring Units, modules, markets
Partner and consumer activation Recurring Content and incentives that drive scans downstream

Judge the programme on cost per traced unit in market, not on tag price. The full model is in How Much Does NFC Product Authentication Cost?.

How to build a traceability programme

Every traceability programme has four components. Weakness in any one limits the others.

Component What it is Key decision
Identity The identifier structure on every unit GS1 Digital Link with GTIN and serial, on a brand-owned domain
Capture Carriers and readers at each stage NFC where authentication matters, QR or UHF where speed or cost does; inline commissioning for full coverage
Platform Where each item’s history is stored and queried Standard events, open export, intended market from ERP
Activation Who acts on what the data shows Alerts, verdicts, ownership records and passport views routed to named owners
Downstream capture is the design challenge, not the technical one: distributors, retailers, consumers and resellers have no obligation to scan anything. And activation is where programmes quietly fail. Data that nobody reviews is a cost, not an asset.

  1. Define the questions: Diversion? Recall? Provenance? The questions decide granularity and which stages matter.
  2. Set identity standards: GTIN plus serial, GS1 Digital Link, EPCIS events, a brand-owned resolver domain.
  3. Instrument production: Encode and commission items on the line, with batch data attached.
  4. Capture aggregation and shipment: Link items to cases, pallets and intended market through ERP or WMS.
  5. Extend into the market: Distributor receipt scans, retail checks, and consumer scans driven by real value.
  6. Measure and act: Track coverage and anomalies; route signals to the teams who can act.

The order matters. Brands that start with step 5 (consumer scans) without steps 3 and 4 get engagement data with nothing to compare it to. Brands that do steps 3 and 4 without step 5 get a perfect record that ends at the distributor. Value appears when both ends are connected.

Traceability and regulation

Regulatory pressure on traceability is increasing, though rarely through a single rule that covers all premium goods.

Regime What it requires Timing
ESPR / Digital Product Passport (Regulation (EU) 2024/1781) A unique identifier and a data carrier giving access to passport data, for products in scope Framework in force; requirements set per product group by delegated act
EU DPP registry Central registry of passport identifiers Live since 20 July 2026
Textiles delegated act Passport requirements for textiles and apparel Expected indicatively in 2027; obligations apply around 18 months after entry into force
Battery Regulation Battery passport for in-scope batteries From 18 February 2027
AGEC law (France, 2020) Product information accessible to French consumers In force; digital carriers are the practical delivery route
EU Deforestation Regulation Evidence of origin for in-scope commodities, including cattle-derived leather Check current application dates

ESPR is carrier-neutral in principle, and in 2026 the EU formally recognised NFC as a compliant data carrier (Implementing Decision (EU) 2026/1736, referencing EN 18220). In practice, a GS1 Digital Link QR is a common visible carrier for passport access, with NFC providing the trust layer for authentication.

The strategic point: brands that build item-level identity for passport compliance acquire, as a by-product, the capability to address counterfeiting, diversion and consumer engagement. The compliance investment and the commercial infrastructure are the same build. The practical guide is Digital Product Passport: A Practical Guide for Brands.

How to measure traceability

A useful measurement model has three dimensions. A programme that measures coverage but not capture knows it deployed tags. One that measures all three knows what those tags found.

Dimension Metric Target or signal
Coverage Identity coverage: share of units commissioned on the line 99% or above
Coverage Aggregation completeness: share of items linked to a shipment and intended market As close to 100% as possible; gaps blind diversion detection
Capture Scan events per item, by stage A gap in distributor scans before a diversion event is a signal
Capture Field read rate: share of items scanned after shipment How far visibility reaches past the distributor
Value Grey market cases identified and resolved Linked to shipment and distributor
Value Authentication verdicts, engagement after purchase, DPP coverage Each tied to a commercial or regulatory outcome
Value Signal latency: time from anomalous scan to alert Diversion evidence goes stale quickly

For how traceability relates to authentication, see Track & Trace vs Product Authentication: Where Each One Starts and Stops.

Privacy and data sharing

Item-level traceability creates two kinds of data that need different handling. Item and event data (where a product was made, shipped and scanned) is business data. Personal data (who scanned, who owns the item) is regulated, and in Europe falls under GDPR.

Designing this separation in from the start avoids two problems: a record that can’t be shared with partners because personal data is mixed into it, and consent flows retrofitted after launch.

Business data

  • Retained for the product’s life
  • Shared with partners on a need-to-know basis
  • Location at country or city level is usually enough

Personal data

  • Collected only with clear notice and, where needed, consent
  • Kept separate from item events where possible
  • Owner identity never exposed to subsequent owners or partners

Who owns traceability

Traceability touches production, logistics, commercial, brand protection, quality and compliance. Without clear ownership it ends up with whichever team bought the first system.

  • A single accountable owner for the item record and its standards, usually in operations or supply chain.
  • Data owners per stage: production for commissioning, logistics for aggregation and shipment, commercial for intended market.
  • Signal owners per use case: brand protection for counterfeits and refills, commercial for diversion, quality for recalls.
  • A partner programme that makes scanning part of distributors’ and retailers’ normal work.

Traceability that works is less a system than an agreement between these owners about what each stage records and who acts on what the record shows.

A traceability maturity model

Most premium brands sit somewhere on this scale. Placing yourself honestly helps decide the next step, which is rarely to jump straight to the top.

Level What exists What you can answer Typical next step
1. Batch Lot codes, ERP shipments Which batches went to which customers Serialise one product line
2. Serialised Unique items, commissioned at production Which unit is this; was it made by us Capture aggregation and intended market
3. Linked Items linked to shipments and intended market Where each item was supposed to go Add field scans past the distributor
4. Field-connected Consumer, retail and partner scans on secure carriers Where items actually are; whether they’re genuine Route signals to teams; act on them
5. Operational Signals drive decisions in several teams Diversion, counterfeits, recalls, resale, passport from one record Extend to the full range and new use cases
The jump from level 3 to level 4 is where most of the commercial value appears, because it’s where visibility extends past the brand’s control. It’s also where carrier security becomes essential: field data from copyable carriers can’t be trusted.

Common pitfalls

  • Tracking without a question: Programmes that capture everything without a decision in mind produce data nobody uses.
  • Stopping at the distributor: The most valuable visibility is after the last controlled handover.
  • Copyable carriers: Traceability built on printed serials can be polluted by copies, and the record then lies.
  • No intended market: Scan location without intended market is just a map.
  • Separate systems per team: Brand protection and supply chain looking at different records of the same items.

How Selinko approaches traceability

Selinko, part of TOPPAN, has helped premium brands across wine and spirits, luxury, cosmetics and fashion build item-level traceability on NFC, secure QR, RFID, ACM-secured barcodes and Diamond Dust. Because we work across carriers, programmes are designed around the threat and the product, not one technology.

  • Commissioning on the line with ILM Station, so every unit ships with a working, registered identity.
  • SelinkoTrack holds each item’s history and compares every scan with its intended market, so the same tags that authenticate also reveal diversion.
  • One identity for every use: authentication, grey market detection, ownership certificates, consumer engagement and DPP access.

The infrastructure that closes the gap between batch and item is the same infrastructure that supports authentication, engagement and passport compliance.

Get in Touch

Blog

Discover more articles

All our articles