Skip to main content

v0.99.20: Archived passports stay readable, a guided start and Excel import

This release keeps withdrawn and deprecated passports readable under a clear notice, gives new operators a guided start, makes the product list and Excel imports easier to work with, limits how long Traceable stores AI data, and adds stronger sign-in protection for administrators.

Passports stay available​

  • Read-only access after withdrawal. Withdrawn and deprecated passports stay online read-only with a visible notice.
  • Clearer withdrawals. The notice shows the withdrawal date, the reason and a link to the successor product when the operator names one.

See DPP endpoints for the responses.

A guided start for operators​

  • Onboarding checklist. A new account sees four steps on the dashboard: add company details, add your GS1 company prefix, add your first product and publish your first passport. Each step is ticked from your own data.
  • Status cards. Two rows of dashboard cards show live passports, product status, data completeness, access requests to decide, expiring certificates and EU registry preparation.

Products, import and QR codes​

  • A clearer My products list. A Publish check column, a Filter panel and a row menu with Product records and Copy or export. See the products overview.
  • Excel import. Import CSV accepts CSV and Excel (.xlsx) files, with templates in both formats and a preview before anything is created.
  • Export for re-import. Export a product as an Excel or CSV file you can edit and import again.
  • QR codes. A product with a GTIN gets a GS1 Digital Link QR code, and products that already carry a printed GS1 code can keep it. See QR codes.

AI data retention​

  • AI data that Traceable stores is deleted after 90 days. Unfinished Bulk AI uploads are deleted after 30 days.
  • The consent dialog and the Privacy & data page now state this retention period.

Security and privacy​

  • Stronger sign-in protection for administrators.
  • Public passport pages load no analytics or tag manager.

Machine-readable passports​

  • GS1 link sets are served for passports.
  • The platform health endpoint is available. See Health endpoint.

What to update​

  • Withdrawn, deprecated and suspended-company passports now answer 200 with an availability block and the response header X-DPP-Availability: archived. A revoked passport is not served. Integrations that expected an error status for withdrawn passports should read the availability block instead.
  • The passport JSON-LD no longer carries dpp:did, dpp:issuerDid, dpp:lastVerified, or the document-level dpp:verificationStatus and dpp:complianceStatus. These terms were introduced in the JSON-LD notes in v0.99.19 and are now removed. Read dpp:dateTimeOfLatestUpdate for the time of the latest update. See JSON-LD format.