Verification, by design

Product authentication, built into every product.

A dual-frequency chip and tamper-proof audit log that turn any item into its own verifiable record — the physical anchor for the EU Digital Product Passport.

Fixed fee 14-day written report No commitment to proceed
DSCSAEU DPPEU Battery PassportFMDEUDRForced Labour RegDFARSTatmeen
Ask us anything

Type the question you actually came here with.

Interoperable with the systems and standards regulated supply chains already run
Member, INCITS Digital Product Passport — the U.S. Technical Advisory Group to ISO/IEC JTC 5, the international committee developing DPP standards.

GS1 DIGITAL LINKEPCIS 2.0ISO/IEC 19987W3C VERIFIABLE CREDENTIALSUNTPopenFDAEU SAFETY GATETATMEENDMCCAWS GS1 DIGITAL LINKEPCIS 2.0ISO/IEC 19987W3C VERIFIABLE CREDENTIALSUNTPopenFDAEU SAFETY GATETATMEENDMCCAWS

On the record

A real company, and you can check every line of it.

We sell proof. So none of the numbers below are ours to assert — each one is a filing you can look up, a standards body you can ring, or an endpoint you can call right now without asking us for anything.

2021
Founded. 5 years building authentication for physical products.
2
Operating entities — Lumi Enterprises Corporation (US) and AEROZ AI FZCO, DMCC Free Zone, Dubai.
DMCC-1030750
UAE trade licence, issued 30 June 2026. Checkable in the DMCC public register.
INCITS
Member, U.S. Technical Advisory Group to ISO/IEC JTC 5 — the committee writing Digital Product Passport standards.
US · EU · UAE
Regulatory sources monitored on a schedule: openFDA, EU Safety Gate, Tatmeen.
<300ms
Verification response. Our system, our measurement — not a benchmark we were given.
Don’t take our word for it — the API answers without an account.
No signup, no key, no sales call. If a vendor can’t show you a live system in one command, ask why.
curl https://api.aeroz.io/v1/capabilities

Entity particulars from the DMCC eLicence Certificate and eEstablishment Card. INCITS membership is participation in the standards process — not an endorsement or certification of Aeroz or its products by INCITS, ANSI or ISO/IEC.

Free · no signup · sixty seconds

Find out what your passport is missing before we do.

Pick your product group, tick the data you already hold, and see the named gaps and the time left — scored against the same field sets our compliance agent runs for customers. It runs in your browser. We never see your answers.

<300ms
Field verification — phone or dock reader confirms a unit is authentic.
<60sec
Recall traceback — pull every event for a unit from the append-only log.
4–8weeks
Pilot to live, on top of TraceLink, Antares, and MediLedger — no rip-and-replace.
The gap

Serialisation proves a product existed. Not what happened to it.

The record breaks at the joins — and the joins are where counterfeits, diversion and recall delay live.

TODAY · SERIALISATION ALONE Each system knows its own leg. Nobody owns the joins. ????ManufacturerWholesaler3PLPharmacyPatient WITH AEROZ · ONE BONDED IDENTITY The unit carries its own proof. Every handoff signs the same record. ManufacturerserialisedWholesalerreceived3PLin transitPharmacydispensedPatientin hand
Same five handoffs. One chain can answer for a single unit; the other cannot.
Verification scan<300ms
Recall traceback<60s
Granularityunit-level
Audit logappend-only
How it works

Four steps from line to proof.

1.0 — Tag

Every unit gets an identity it can't fake.

A tamper-resistant dual-frequency chip is bonded at packaging and assigned an AES-128 identity through the 72-hour No-Encode workflow.

NFC 13.56 MHzUHF 860–960 MHzAES-128
2.0 — Scan

A tap confirms authenticity in under 300ms.

A phone reads the NFC tag at the point of use; a dock reader reads UHF at distance. One encrypted identity, verified anywhere in the chain.

<300msPhone · dockWeb · iOS · Android
3.0 — Trace

Every handoff writes a signed event.

Commission, ship, receive, dispense — each custody change lands in an append-only EPCIS 2.0 ledger with no UPDATE, DELETE, or TRUNCATE for any role.

EPCIS 2.0Append-onlyPer-event signing
4.0 — Prove

The record is regulator-pullable in seconds.

Every unit becomes its own Digital Product Passport — recall traceback in under 60 seconds, Form 3911-ready, and defensible in front of an auditor or your board.

<60s tracebackDPP-readyForm 3911
The chain, covered

From packaging line to port to point of use.

The same chip that survives the dock reader answers a phone at the pharmacy counter. One identity, verified at every handoff — across oceans, borders, and four-tier supply chains.

1 chip
Dual-frequency NFC + UHF, bonded at packaging
Every handoff
Signed into an append-only EPCIS 2.0 record
0 gaps
Chain of custody that survives an audit
Compliance frameworks we serve

Ready for the mandates arriving now.

A wave of unit-level mandates converges over the next 24 months. Aeroz is the physical anchor each one needs. Compare the options →

The technology

Three components. One verification layer.

Dual-frequency NFC + UHF hardware, AES-128 encrypted unit identity, and an append-only audit log — engineered to sit on top of the serialization stack you already run.

01 · NFC + UHF chip

Dual-frequency. AES-128.

NFC (13.56 MHz) is phone-readable for point-of-use checks. UHF (860–960 MHz) is dock-readable at distance. One encrypted identity across both.

Frequencies13.56 · 860–960 MHz
EncryptionAES-128
Activation72h No-Encode
02 · The audit log

Append-only. Signed.

Every scan, seal-state change, and approval lands in an append-only ledger — no UPDATE, DELETE, or TRUNCATE for any role. EPCIS 2.0 native, Form 3911-ready.

ModelAppend-only
StandardEPCIS 2.0
SigningPer-event AES
03 · Dashboard & app

Desk to edge.

An operations dashboard for brands, products, tags, and custody — plus a verification app for the dock, dispenser, regulator, and consumer phone. One scan, full provenance.

Scan latency<300ms
PlatformsWeb · iOS · Android
Sits onTraceLink · Antares
Industries

One layer. Every regulated sector.

We touch every industry that has to prove what a product is and where it has been. Each gets a dedicated playbook.

Pharmaceutical blister packs at unit level Pharma · DSCSA
A hand tapping a phone to a circular NFC authentication tag in ambient fog Tap to verify · point of use
Container ship crossing open water Global · cross-border
The product, today

One portal. Every unit. Real-time.

Manage brands, products, tags, sellers, and rewards — and track every unit's chain of custody live, with every scan, seal state, and location on an append-only record.

app.aeroz.io/custody
The Aeroz operations dashboard showing live chain-of-custody for tracked units
Audits we offer

Find out where you're exposed — in 14 days.

Every Aeroz audit is fixed-fee, 14-day turnaround, and produces a written gap analysis you can defend in front of a regulator or your board. We map your regulation, we get you compliant.

Turnaround
14 days
Engagement
Fixed fee
Deliverable
Written report
Commitment
None to proceed
Fixed fee 14-day written report No commitment to proceed

What's included

  • Gap analysis against your regulation and current stack.
  • EPCIS 2.0 readiness across TraceLink, Antares, MediLedger.
  • Recall-traceback simulation on a sampled unit.
  • Scoped remediation plan with cost and timeline.
  • Pilot scope for unit-level authentication on one SKU or line.
Resources

Latest from the field.

All resources

Make authenticity undeniable.

A 20-minute conversation, or skip ahead and start your audit.

Latest writing

What we’re publishing this month.

From the blog

What we are writing about right now.

Every post → Latest: September 18, 2026