A cloud-native platform that turns a single GS1 Digital Link scan into trusted, up-to-date product information — unifying GS1 Digital Link, the EU Digital Product Passport, and EPCIS 2.0 for patients, partners, and regulators.
Hosted by the PharmaLedger Association — governed by its members, not owned by any one of them.
The platform turns a GS1 Digital Link — the web address behind a 2D DataMatrix — into a gateway to a product’s electronic product information, digital labelling, and supply-chain history. It is engineered cloud-native for unimpeachable data integrity, with no token or cryptocurrency.
Trust comes from a cryptographically verifiable, tamper-evident audit trail: every change is written to a hash-chained history and independently validated, so any tampering is immediately detectable — proof of integrity without the complexity of a blockchain. Born out of the EU IMI PharmaLedger project, the platform unifies three standards — GS1 Digital Link, the EU Digital Product Passport (DPP), and EPCIS 2.0 — to complement the systems members already run rather than replace them.
From the live ePI app and AstraLabel in members' hands to AstraTrace's near real-time supply-chain intelligence — each runs on the same Product Trust Platform and is configurable to your operating model, not the other way around.



Regulator-approved electronic product information — authored once, verifiable everywhere. Multilingual ePI that propagates across markets in minutes, from manufacturer to the patient's phone.
A single regulator-approved master flows to every market in IDMP format, with translations and per-jurisdiction overlays.
Pharmacies, hospitals, and patients scan a 2D code and read the current authorized ePI — guaranteed to match the regulator's record.
Safety and label changes reach every dispensing endpoint within minutes of approval.
3 / 3 signatures · Manufacturer → Wholesaler → Pharmacy
Serialized, end-to-end visibility from API manufacturer to patient — built to satisfy DSCSA and FMD without locking your data in a single vendor's silo.
Cross-organization signature checks flag clones in seconds, not days.
Geographic and channel anomaly detection across the network.
Trace any lot across every hop and broadcast withdrawal in under 15 minutes.
The patient- and HCP-facing surface of the fabric. Verifiable consent, immutable audit trails, and cross-site eCRF reconciliation for decentralized clinical research.
Signed by the participant, witnessed cryptographically, reviewable by IRBs in real time.
Sites enter data through the platform; discrepancies are surfaced for monitors to reconcile.
Randomization and unblinding are governed by the network — no single party rewrites history.
Across the network, members run the platform from the factory floor to the dispensing pharmacy — with AstraLabel, the ePI app, and AstraTrace live, and the full AstraEngage platform coming soon.

A recall today means phone calls, spreadsheets, and partner-by-partner reconciliation across markets. On the platform, AstraTrace captures standardized EPCIS 2.0 visibility events keyed to a product’s GS1 Digital Link, so manufacturers, wholesalers, and pharmacies can trace the same product across every hop from a single, verifiable record. The Supply Chain Intelligence Suite turns those events into a geospatial track-and-trace view, an event timeline, and near real-time intelligence on where every product is.
Read the full case study →"Connect, not replace — a shared, verifiable source of truth for the whole supply chain."
PharmaLedger Association · Digital Trust Ecosystem
Originated in the €22.1M PharmaLedger project (2020–2022), Novartis-led, EU and EFPIA funded.
12 pharmaceutical companies and 17 partners launched the network; backed by the EU pharma industry federation.
Built in the open on GitHub (pharmaledgerassoc) — cloud-native on AWS, with no token or cryptocurrency.
Aligned to the open standards — including HL7 FHIR for ePI — that regulators and the supply chain already rely on.
One guided pass through the evidence: analytics, verification, cold chain, audit. Real screens from the environment members run in production.




One scan on the pack resolves to the current, verified leaflet — in the patient's language, on their phone.
The QR code on the pack brings trusted, up-to-date information to the patient — from the Product Trust Platform and other trusted data sources.
The products are delivered to members and marketing authorisation holders across the network. Membership adds governance: a voice in the roadmap, the bylaws, and the architecture of a non-profit, member-led association.
Run AstraLabel and the live ePI app with onboarding engineering and support — as managed SaaS, or self-hosted in your own cloud.
Talk to the network →The platform is developed in the open on GitHub (pharmaledgerassoc) and packaged as infrastructure-as-code. Self-host it in your own AWS account, or evaluate the managed SaaS — no token, no cryptocurrency.
Get sandbox keys →Become a member of the non-profit: a voice in the roadmap and bylaws, working-group participation, and a seat in shaping the architecture. See membership
A conversation with a member engineer. Bring your data-flow diagram; we map it to the platform. No procurement, no NDA.
A scoped pilot on a dedicated sandbox tenant — production-equivalent, isolated, and connected to the platform APIs.
Go live on the managed multi-tenant SaaS, or self-host a dedicated instance in your own AWS account.
A 30-minute architecture review with a PLA platform specialist. Bring your data-flow diagram; we'll bring the Product Trust Platform reference architecture. No procurement, no NDA.