Tier-2 supplier data collection for UK textile DPP: how it actually works

The most expensive line item in a Digital Product Passport implementation is not the platform, the QR labels, or the EU Authorised Representative. It is the tier-2 supplier data collection that populates the passport with fibre composition, country of origin, chemical declarations, and material certifications. This post walks through what tier-2 actually looks like for a UK textile brand and how the data collection unfolds in practice.

The tier structure

For a garment, the typical tier structure looks like:

• Tier 1: garment factory (cut, make, trim). This is the assembler that stitches your product together. Usually easy to identify because it is on the country-of-origin label.
• Tier 2: fabric mill (weaving, knitting, dyeing, printing). This is where the fabric your tier-1 uses comes from.
• Tier 3: yarn spinner. Turns fibre into yarn.
• Tier 4: raw fibre source. Cotton farm, wool grower, synthetic-fibre chemical plant.

The tier is defined by the position in the supply chain, not the size of the operation. A large vertically-integrated mill might be tier 2 (weaving/dyeing) and tier 3 (spinning) in the same building.

What tier-2 data the DPP needs

Working from the ESPR draft field structure, tier-2 data supports:

• Fibre composition per component (fibres above 5% named with percentages)
• Country of origin at fabric level (where the fabric was woven or knitted)
• Dye and finishing chemical declarations (feeds into REACH and SVHC compliance)
• Certifications applied to the fabric (OEKO-TEX 100, GOTS, Bluesign)
• Durability data (pilling, colour fastness, tensile strength)

Some of this data is already in the fabric mill's records because retailers already require it for other purposes. Some of it is not, particularly the chemical declarations and durability data. The gap is where the 6-12 month collection window comes from.

The typical data collection workflow

Six-step workflow that most UK textile SMBs converge on:

1. Inventory your tier-1 factories. Pull them from your ERP or PO history. Usually 5-30 for an SMB.
2. Ask each tier-1 for their tier-2 mill list per fabric. Some tier-1 factories work with a fixed set of mills; some source per-order.
3. Contact each tier-2 mill directly. Introduce yourself as the brand at the end of the supply chain using their fabric. Explain the DPP obligation and the data fields you need.
4. Send a structured data submission template. CSV or spreadsheet with clear column definitions. Do not ask for free-text answers, they arrive in unusable formats.
5. Verify against certifications. Where the mill submits OEKO-TEX 100 or GOTS certification, verify the certificate is current and covers the specific fabric.
6. Load into the DPP platform. With Filovera, tier-2 data attaches to the SKU record and populates the passport automatically.

The bottleneck is usually step 3 (contact) and step 5 (verify). Contact takes multiple rounds because mills often route emails through commercial teams who need to loop in the technical team. Verify takes rounds because certifications sometimes lapse, or the certificate covers a different fabric than the one you use.

Common patterns that speed collection

Four practices that shorten the timeline:

• Consolidate your mill base. A brand working with 40 mills has a longer collection window than one working with 12. Consolidation has commercial risks but SEO for DPP purposes it accelerates the collection.
• Pay for verified submissions. Some mills charge a fee for verified data submission. The fee (typically £200-£1,000 per mill) is often cheaper than months of chase work.
• Use a third-party audit firm. Firms like SGS, Bureau Veritas, Intertek offer supplier data collection services. Expensive per mill but faster than in-house chase.
• Start with your top 20%. Your top 20% suppliers by volume typically cover 80% of your SKU catalogue. Get them done first, tail suppliers second.

What "verified" means in the DPP audit trail

The passport records not just the data but the provenance: who submitted, when, what evidence attached. When a regulator queries the basis of a fibre composition claim, the audit trail should show: mill name, submission date, certificate reference (OEKO-TEX cert number, GOTS cert number, etc.), and verification status. Filovera's audit trail records all of this automatically as data is loaded.

Passports that lack audit trail metadata are still technically compliant but are much harder to defend under scrutiny. A regulator that cannot see the basis of a claim will ask, and the answer needs to be more than "the mill told us."

When to start

Now, if you plan to be DPP-compliant by 2028. Tier-2 collection takes 6-12 months. Working back from a mid-2028 mandatory date, kicking off collection in Q3 2026 gives you comfortable margin. Waiting until Q1 2027 makes the timeline uncomfortable but still possible. Waiting until 2028 makes non-compliance the default.

Where Filovera fits

Filovera provides the supplier data submission workflow: templated data collection forms mills can complete via a web link, evidence upload (certificates, test reports, chemical declarations), and automatic loading into the SKU passport records. The audit trail is built in.

For the broader UK textile compliance workload, see /uk/uk-textile-compliance-2026-checklist.

The supplier data you collect once feeds every regime in the country-by-country DPP guide, not just ESPR.