Every company sees its own data. Nobody sees anybody else's.
A supplier answers only if it trusts where its answer goes. In Tramaproof each party sees its own part of the chain and nothing beyond it: a supplier's sources reach only the customer they were declared to, and only for what that customer bought. The rule is enforced by the platform, not left to good manners.
Declared to you, for what you bought
When a weaver names its spinner in answer to your request, that link carries your name. You see it in your chain, for the product you asked about. A second customer who asks the same weaver is added to the same link; it never replaces you, and it never sees what was declared to you.
Nobody sees sideways
A supplier sees its own request and a preview of what the brand will receive. It does not see your other suppliers, your prices or the chain downstream of it.
A supplier's own list stays its own
A company that a supplier adds to its own list, outside any request, is visible to no brand at all. It is the supplier's business, and the platform treats it that way.
Each party sees its own data, and nothing more.
Access depends on each party's role, and every party sees only the data it needs for its own part of the work. It is the requirement fashion brands are most demanding about when they choose a supplier. In Tramaproof it isn't a configuration — it's the architecture.
Market surveillance authorities
All the compliance data, the documents that prove it and the record of every change, available on request as the regulation requires.
End consumers
Composition, origin, certifications and care instructions — the public part, which adds value to the product and the brand.
Supply-chain partners
No supplier can access another partner's data. Formulations, tier-2 sources and volumes stay confidential: the know-how stays with its owner.
A certificate can be filed without being handed over
Some suppliers will prove a certification but will not let a customer keep the paper. For them a document can be sealed: the supplier files it with Tramaproof, the brand sees that it is there and whether it has been checked, and the file itself stays closed.
The supplier decides once, at the first upload, whether its certificates are open to its customers or held by Tramaproof, and can make exceptions customer by customer. A brand cannot open a sealed document by saying it needs it: it opens only with the supplier's consent.
A public control authority, or the certification body that issued the document, can ask for it. Tramaproof first establishes who is asking, then hands the document over whole.
Three situations the rules are written for
A spinner that sells to two brands
The spinner answers each brand once. Each brand sees the yarn declared for its own product. Neither learns that the other is a customer, and neither sees the other's volumes.
A weaver that names its spinner
The weaver names its spinner for the fabric you bought, so the chain continues beyond it. The name reaches you, for that fabric. The weaver's other customers, and whatever else it buys, stay out of sight.
A dye house that keeps its certificate closed
The dye house seals its certificate. You see that the certificate exists and whether it has been checked against the issuer's register. If an authority asks, the document reaches the authority whole.
The passport does not require the chain to be public
The Commission's preparatory study for the textile passport, published by the Joint Research Centre in May 2026, states that the ESPR does not regulate the collection of data across the whole supply chain. Its proposed table of access rights contains no list of suppliers.
What the study proposes as public is the product: composition, recycled content, instructions, the manufacturer and the importer, and the place where the product was made. The spinner, the weaver and the dyer behind it are not on that list. Tramaproof publishes the fields the regulation asks for, and a field for which nobody has yet decided who may see it is left off the public page rather than shown by default.
Exports follow the same rules as the screen: a CSV file or a read through the API never shows more than the person asking could already see.
Questions
Can a brand see its suppliers' suppliers?
Yes, for what it bought. A supplier's sources reach a brand when the supplier declares them in answer to that brand's request, and only for the product concerned. Sources declared to other customers stay invisible to it.
Can two brands that share a supplier see each other?
No. Each brand sees what was declared to it. The supplier's other customers, their products and their volumes are not shown to anyone.
Does a supplier have to name its own suppliers?
Only when the request asks for the supply chain. When it does not, the step stays optional: a supplier may still name a source, for instance so that the source can be asked for a certificate directly.
Who can open a sealed document?
A public control authority and the certification body that issued it, once Tramaproof has established who they are. A brand only with the supplier's consent.
What does the public passport show about the chain?
Only the fields the regulation asks for. The names of the companies upstream of the maker are not published, and no field reaches the public page until it has been decided who may see it.