PharmaLedger.org
Book a consultation

One verified product record.
Every market, every scan.

A cloud-native platform that turns a single GS1 Digital Link scan into trusted, up-to-date product information — unifying GS1 Digital Link, the EU Digital Product Passport, and EPCIS 2.0 for patients, partners, and regulators.

GDPRGxP21 CFR Part 11EU Annex 11Trust Center
Product Trust Platform

One neutral platform. Three products.

Hosted by the PharmaLedger Association — governed by its members, not owned by any one of them.

The Product Trust Platform

Trusted product information, verifiably.

The core
Trust Platform
VerifiableEvery change is tamper-evident — hash-chained and independently validated by an external audit log.
Standards-basedGS1 Digital Link, the EU Digital Product Passport, and EPCIS 2.0 unified in one architecture.
Cloud-nativeServerless on AWS — run it as managed SaaS or self-host it in your own cloud.

The platform turns a GS1 Digital Link — the web address behind a 2D DataMatrix — into a gateway to a product’s electronic product information, digital labelling, and supply-chain history. It is engineered cloud-native for unimpeachable data integrity, with no token or cryptocurrency.

Trust comes from a cryptographically verifiable, tamper-evident audit trail: every change is written to a hash-chained history and independently validated, so any tampering is immediately detectable — proof of integrity without the complexity of a blockchain. Born out of the EU IMI PharmaLedger project, the platform unifies three standards — GS1 Digital Link, the EU Digital Product Passport (DPP), and EPCIS 2.0 — to complement the systems members already run rather than replace them.

Read the architecture Get sandbox access
Step into the platform

Three products. One trusted platform.

From the live ePI app and AstraLabel in members' hands to AstraTrace's near real-time supply-chain intelligence — each runs on the same Product Trust Platform and is configurable to your operating model, not the other way around.

AstraLabel
Digital labelling & ePI
AstraTrace
Supply-chain intelligence
AstraEngage
Patient & HCP engagement
01 · Digital labelling

AstraLabel

Regulator-approved electronic product information — authored once, verifiable everywhere. Multilingual ePI that propagates across markets in minutes, from manufacturer to the patient's phone.

  • Authored once, distributed everywhere

    A single regulator-approved master flows to every market in IDMP format, with translations and per-jurisdiction overlays.

  • Verifiable at point of dispense

    Pharmacies, hospitals, and patients scan a 2D code and read the current authorized ePI — guaranteed to match the regulator's record.

  • Updates in minutes, not months

    Safety and label changes reach every dispensing endpoint within minutes of approval.

Book an AstraLabel demo
epi.pharmaledger.org / leaflet
● VERIFIED · v4.2 · EN-EU
VERAXIN® 50 MG · FILM-COATED TABLETS

Patient Information Leaflet

ENFRDEES+18
Attestation chain valid

3 / 3 signatures · Manufacturer → Wholesaler → Pharmacy

02 · Inventory observability

AstraTrace

Serialized, end-to-end visibility from API manufacturer to patient — built to satisfy DSCSA and FMD without locking your data in a single vendor's silo.

  • Counterfeit detection in seconds

    Cross-organization signature checks flag clones in seconds, not days.

  • Anti-diversion on every event

    Geographic and channel anomaly detection across the network.

  • Recall-in-minutes

    Trace any lot across every hop and broadcast withdrawal in under 15 minutes.

Talk to an AstraTrace engineer
SCAN · 100846261-NRX-0042
Lot tracked across 6 hops
APIFORMULATEPACKWHOLESALEPHARMACYDISPENSEDANOMALYDiversion 0.3%
Anti-counterfeit
99.97% YTD
Recall window
< 14 min
03 · Patient & HCP engagement

AstraEngage

The patient- and HCP-facing surface of the fabric. Verifiable consent, immutable audit trails, and cross-site eCRF reconciliation for decentralized clinical research.

  • eConsent, regulator-verifiable

    Signed by the participant, witnessed cryptographically, reviewable by IRBs in real time.

  • Cross-site eCRF reconciliation

    Sites enter data through the platform; discrepancies are surfaced for monitors to reconcile.

  • Sponsor-agnostic governance

    Randomization and unblinding are governed by the network — no single party rewrites history.

See AstraEngage
CONSENT · v3 · EN-US · 2026-04-22
Signed by P-1042 · Witnessed
Cross-site eCRF
SITE 01
SITE 07
QUERY
42 reconciled · 1 query open
Across the industry

One platform,
across the supply chain.

Across the network, members run the platform from the factory floor to the dispensing pharmacy — with AstraLabel, the ePI app, and AstraTrace live, and the full AstraEngage platform coming soon.

SectorOperationProduct
ManufacturingDigital labelling and electronic product information (ePI) authoring, approval, and real-time deliveryAstraLabel / ePI
Distribution & supplyEPCIS 2.0 visibility events on GS1 Digital Link and 2D DataMatrix for near real-time track-and-traceAstraTrace
Hospital pharmacyScan-to-verify the approved ePI via GS1 2D DataMatrix at the point of dispenseePI
Clinical researchPatient and HCP engagement — AstraEngage Lite live; full platform (patient journeys, PROMs) coming soonAstraEngage
RegulatorsVerification, EU Digital Product Passport access, and standards-aligned complianceTrust Center

One platform.
Global impact.

Before: fragmented product information scattered across leaflets, PDFs, spreadsheets and email. After: one verified product record that manufacturers, regulators, pharmacists and patients all connect to.
Capability spotlight · AstraTrace

When the supply chain shares standardized events, a recall stops being a phone tree.

A recall today means phone calls, spreadsheets, and partner-by-partner reconciliation across markets. On the platform, AstraTrace captures standardized EPCIS 2.0 visibility events keyed to a product’s GS1 Digital Link, so manufacturers, wholesalers, and pharmacies can trace the same product across every hop from a single, verifiable record. The Supply Chain Intelligence Suite turns those events into a geospatial track-and-trace view, an event timeline, and near real-time intelligence on where every product is.

Read the full case study
IdentifierGS1 Digital Link
EventsEPCIS 2.0
Carrier2D DataMatrix

"Connect, not replace — a shared, verifiable source of truth for the whole supply chain."

PharmaLedger Association · Digital Trust Ecosystem

Manufacturing
Real-time ePI
Approved labelling content delivered in real time from a single source, aligned to EU IDMP and HL7 FHIR with AstraLabel.
GSK
Core · Solo · Edge
Digital labelling deployable to fit the operating model, from full Core to lightweight Edge, across the membership.
MSD
GMP-qualified
The patient and HCP ePI app has been in production since 2023, live in 46 countries and 29 languages — free, GDPR-compliant, and GMP-qualified.
AbbVie
Distribution & supply
GS1 Digital Link
Near real-time inventory intelligence built on GS1 Digital Link and 2D DataMatrix with AstraTrace.
Takeda
EPCIS 2.0
Standardized EPCIS 2.0 visibility events give track-and-trace across every hop from one verifiable record.
Zuellig Pharma
DSCSA · FMD
Designed to support serialized traceability obligations such as DSCSA and FMD.
Glemser Technologies
Clinical research
Lite is live
AstraEngage Lite, the free-to-all patient app, is live; the full AstraEngage platform with patient journeys and PROMs is coming soon.
Moderna
Tamper-evident
Consent and audit events are written to a hash-chained trail and independently validated for verifiable integrity.
Elanco
21 CFR Part 11
Clinical engagement is being designed against the regulations that govern electronic records and signatures.
PDMFC
Recognition

Built on a foundation the industry already backs.

EU IMI / IHI

Horizon 2020 funded project

Originated in the €22.1M PharmaLedger project (2020–2022), Novartis-led, EU and EFPIA funded.

EFPIA

Industry-backed consortium

12 pharmaceutical companies and 17 partners launched the network; backed by the EU pharma industry federation.

Open source

Developed in the open

Built in the open on GitHub (pharmaledgerassoc) — cloud-native on AWS, with no token or cryptocurrency.

Standards

GS1 Digital Link · EU DPP · EPCIS 2.0

Aligned to the open standards — including HL7 FHIR for ePI — that regulators and the supply chain already rely on.

Inside the platform

Not slideware.
The actual product.

One guided pass through the evidence: analytics, verification, cold chain, audit. Real screens from the environment members run in production.

Leaflet Analytics — screen from the Product Trust Platform
Patient engagement

What the patient sees

One scan on the pack resolves to the current, verified leaflet — in the patient's language, on their phone.

AstraEngage · Patient Engagement

One scan. Everything a patient needs.

The QR code on the pack brings trusted, up-to-date information to the patient — from the Product Trust Platform and other trusted data sources.

Working with the network

Adopt the products.

The products are delivered to members and marketing authorisation holders across the network. Membership adds governance: a voice in the roadmap, the bylaws, and the architecture of a non-profit, member-led association.

Path 01 · Most common

Adopt the products

Run AstraLabel and the live ePI app with onboarding engineering and support — as managed SaaS, or self-hosted in your own cloud.

Talk to the network
Path 03

Build on the open source

The platform is developed in the open on GitHub (pharmaledgerassoc) and packaged as infrastructure-as-code. Self-host it in your own AWS account, or evaluate the managed SaaS — no token, no cryptocurrency.

Get sandbox keys

Become a member of the non-profit: a voice in the roadmap and bylaws, working-group participation, and a seat in shaping the architecture. See membership

From first call to production

STEP 01 · WEEK 0

Architecture review

A conversation with a member engineer. Bring your data-flow diagram; we map it to the platform. No procurement, no NDA.

STEP 02 · PILOT

Pilot on a sandbox tenant

A scoped pilot on a dedicated sandbox tenant — production-equivalent, isolated, and connected to the platform APIs.

STEP 03 · PRODUCTION

Production rollout

Go live on the managed multi-tenant SaaS, or self-host a dedicated instance in your own AWS account.

Deployment

Self-hosted, managed, or hybrid — always behind your firewall.

Integration

REST & GraphQL APIs, EDI, and ERP connectors.

Security

GxP-qualified & GDPR by architecture — documentation in the Trust Center.

Data residency

Your node, your region. No data leaves your control.

Get started

Build on the
Trust Platform.

A 30-minute architecture review with a PLA platform specialist. Bring your data-flow diagram; we'll bring the Product Trust Platform reference architecture. No procurement, no NDA.

AstraLabelAstraTraceAstraEngageDeveloper sandbox
What you get
  • A 30-minute consultation matched to your role and timeline
  • Fit against AstraLabel, AstraTrace & AstraEngage
  • Your deployment path — managed SaaS or self-hosted
  • A follow-up architecture reference
No procurement, no NDA. Immediate timelines get a same-day response.