E-Commerce Software Development

The Ecodesign for Sustainable Products Regulation makes the Digital Product Passport the way sustainability and compliance data travels with a product. The European Commission describes it as a digital container linked to the item by a QR code, registered before the product is placed on the EU market, and registered at customs for imports.

The EU-level DPP Registry went live on 20 July 2026 with a testing environment alongside it. The first hard deadline is 18 February 2027 for certain large batteries. Textiles, aluminium, tyres, furniture, and further ecodesign groups follow on their own delegated acts.

What that means in the build: a versioned schema per product category, an ID resolver fast enough for a consumer scan anywhere in the world, role-based access so a shopper, a recycler, and a regulator see different fields, and a composer service that assembles the record from PIM, ERP, PLM, and supplier portals with provenance retained.

The European Commission lists e-commerce among the services the Act covers, and the national provisions apply after 28 June 2025. It reaches any provider concluding consumer contracts in the EU, wherever the company is registered.

The working technical benchmark is EN 301 549, which carries WCAG at level AA inside it, and the harmonised standards are still being updated toward WCAG 2.2. Compliance is not a certificate: you publish an accessibility statement, keep procedures that maintain conformity as the site changes, and cooperate with national enforcement authorities.

The cheapest time to do this work is while the checkout is being designed. Retrofitting a live purchase flow after a complaint costs several times more and lands on the worst possible schedule.

The GPSR has applied since 13 December 2024, covers products sold online including used, repaired, and reconditioned goods, and requires a responsible economic operator established in the EU for each product.

Article 19 pushes compliance onto the product page itself. A distance-selling offer must clearly show the manufacturer name plus postal and electronic address, information identifying the product including a picture and type, and warnings or safety information in a language consumers understand. Burying it in terms and conditions does not count.

Marketplace operators carry more. Per EU-OSHA, providers register on Safety Gate, designate a single contact point, run internal product safety processes, and must notify affected buyers and remove or disable unsafe listings on order from a market surveillance authority. That is a data model and a workflow, not a policy page.

The Council agreed to remove the EUR 150 customs duty relief for e-commerce parcels, with a simple temporary method for calculating duties running until the EU Customs Data Hub provides that functionality from mid-2028.

For a storefront this is engineering, not a finance ticket. Landed cost shown before payment, duty and VAT rules per destination, IOSS handling, returns and refunds that reverse duty correctly, and invoice records that survive an audit all live in code and in the order state machine.

This is also the requirement that most often exposes a platform ceiling. Multi-country pricing, currency, warehouse, and duty logic is exactly what a monolithic template struggles to express, and it is a common trigger for moving to a composable stack.