Reguly
Reguly

PPWR

Every piece of evidence is ready, none expires quietly.

The compliance vault is the repository for all of your brand’s evidence — across regulations, versioned and with an eye on every expiry date.

Compliance vault in Reguly with the counts of active, soon-to-expire and expired documents
Regulation
PPWR (EU) 2025/40
Context
Art. 5, 7, 39, Annex VII
Module
Compliance vault
Document types
6

Compliance & quality

In an audit you have to produce evidence — not start looking for it.

Management

You want to see the evidence position before a certificate has expired.

Law firms & consultants

You assemble and review your clients’ technical documentation.

Der Unterschied

The same evidence, two repositories

The PPWR requires conformity to remain demonstrable through technical documentation under Annex VII — findable, current, with traceable provenance. The vault does not assess evidence; it is the repository underneath.

Inboxes and network drives

  • The certificate sits in the inbox of whoever requested it back then.
  • Nobody notices that a test report has expired — until someone asks for it.
  • The new version is saved over the old one, and the chain of succession is gone.

With the compliance vault

  • Every piece of evidence in one place, with type, title and — where it belongs — a product reference.
  • Every expiry date becomes a status: amber under 30 days, red after that, plus a banner and a reminder.
  • A new version increments the counter; checksum, uploader and provenance stay attached to the document.

How you work with it

01

Bring evidence in

Two routes lead in. When uploading you record the file, type, title and the issue and expiry dates; Reguly records the checksum, size and uploader itself. The second route runs through the specialist modules: recycled-content and substance reports land here directly and versioned via “File PDF in vault” — nothing is exported, saved locally and uploaded again later.

Recycled-content tracking in Reguly with the “File PDF in vault” action
02

Monitor validity

Every expiry date becomes a status: expired, under 30 days, valid or no deadline. A banner names the affected documents while there is still time to request replacements, and an email reminder runs alongside — so the warning lands even when nobody is in the module. Sorting works by title, type or deadline; entries without an expiry date come last.

03

Keep the version provable

Instead of overwriting, you upload a new version: the counter goes up, the superseded version points to its successor, and a checksum secures the content. Every upload, change and archival additionally appears in the audit log. The thread from packaging component through the DoC project to the signed evidence is therefore in the data model — it is not yet visible end to end in the table view.

Audit log in Reguly with entries for uploaded compliance documents including timestamp and version

Im Zusammenspiel

Ein Datenbestand, der weiterreicht

  1. 01

    DoC generator

    produces the declaration of conformity

    DoC under Annex VIII · project provenance

  2. 02

    Compliance vault

    files every piece of evidence with versioning and watches its validity

    Version · Checksum · Expiry date

  3. 03

    Product passports

    shows product-related evidence in the digital product passport

    Evidence on the product

Frequently asked questions

What is the difference to the DoC archive?

The DoC archive holds declarations of conformity only — both generated and self-uploaded — with signature and audit trail. The vault is the repository for all evidence: DoCs, test reports, certificates, safety data sheets and audit records, across regulations.

Can I export all evidence as one package?

Not at the moment. You download individual documents via a signed, time-limited URL; on top of that come the topic-specific PDF reports from the specialist modules, which sit versioned in the vault. A bundled audit binder as a ZIP is not implemented.

What happens when a certificate expires?

The vault flags it: amber as soon as fewer than 30 days remain, red after expiry. The expiry banner additionally lists the affected documents, and an email reminder is active.

Is the e-signature legally binding?

The vault documents the signature status — unsigned, signed or revoked — with timestamp, signing person, method and evidence hash; revocation is reserved for admin and owner roles. Whether the method used counts as a simple, advanced or qualified signature is for you or your law firm to assess.

Find out which evidence is missing

Five questions show you what the PPWR requires from you in terms of evidence — free and without signing up.

Reguly

Compliance & customer experience on one platform — PPWR, ESPR and EU AI Act, one data pool.

GDPR compliantEU hosted

Reguly is software for documenting and organizing regulatory requirements and does not provide legal advice within the meaning of the German Legal Services Act (RDG). All content and automatically generated assessments are for information only and do not replace a case-by-case legal review. Responsibility for meeting regulatory obligations remains with the user.

© 2026 Reguly. Made in Düsseldorf · EU compliance for brands.