For AI agents: a documentation index is available at the root level at /llms.txt and /llms-full.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
  • Getting Started
    • Introduction
    • Getting Started
    • Tia — Operations Assistant
    • Architecture
    • Security Architecture
  • Onboarding & Plans
    • Onboarding Overview
    • Plans & Subscriptions
    • Tia Credits
  • Tenancy & Governance
    • Roles & Members
    • Audit Log
    • Notifications
    • Economic Operators
  • Authoring Studios
    • Content Studio
    • Theme Studio
    • Advanced Studio (Track B)
  • Product Module
    • Products
    • Custom Fields
    • Global Search
    • Identifiers
    • Product Import
    • Bulk Editing
    • Bulk Updates
    • Resolver & GS1 Digital Link
    • GS1 Digital Link Contract
  • Localisations
    • Overview
    • Market Packs
    • Multilingual Content
  • Domains & Custom Hostnames
    • Domain Architecture
    • Resolver Domain Flow
    • Custom Hostname Setup
    • DNS Setup Guide
    • Resolver & Passport Rendering
    • Custom Hostname Lifecycle
    • Troubleshooting
  • Passports
    • Overview
    • Passport Operations
    • Lifecycle States
    • Controlled Update & Break-Glass
    • Content & Templates
    • Themes & Presentation
    • Consumer Experience
    • Publication Lifecycle
    • Brand Setup & Readiness
    • Drafts
  • Passport Intelligence
    • Passport Intelligence
    • Intelligence Overview
    • Scan Visibility
    • Trust Signals
    • Engagement Insights
    • Investigation Timelines
    • Data & Privacy
    • Roadmap
  • Minting
    • Overview
    • Lifecycle
    • Architecture
    • Limits & Performance
    • Token Preview
    • Exports & Print Jobs
    • Carrier Output Profiles
    • Bring-Your-Own Serials
    • Security
    • FAQ
  • API Reference
    • API Credentials Guide
    • API: Credentials
    • API: Products
    • API: Identifiers
    • API: Import
    • API: Batches
    • API: Attachments
    • API: Bulk Updates
    • API: Minting
    • API: Resolver
    • API: Search
On this page
  • Platform Architecture
  • Design Principles
  • Key Concepts
  • Workspaces and Brands
  • Roles
  • Identifier Architecture
  • DPP Schema & Custom Fields
  • Passport Content Model
  • Localisation Layer
  • Integration Model
  • FAQ
  • Core Architectural Layers
  • Related docs
Getting Started

tieback Architecture Overview

Was this page helpful?
Previous

Enterprise Security & Trust Architecture

Next
Built with

tieback

is structured as a SaaS platform for Digital Product Passport and product identity workflows. Its architecture separates identity, resolver logic, passport content, localisation, lifecycle events, and API access into clear modules — so organisations can scale from compliance preparation to high-assurance authentication without reissuing identifiers.

Platform Architecture

tieback

is designed around a set of principles that prioritise data integrity, tenant isolation, and minimal public disclosure.

Design Principles

1

Tenant isolation

Every brand operates in its own logical workspace. Data access is scoped to the brand level — users, products, identifiers, localisations, and jobs are all partitioned by brand.

2

Controlled mutations

All write operations go through server-side functions rather than direct table access. This ensures validation, audit logging, and access control are applied consistently regardless of the client.

3

Immutable audit trails

Identifier changes, product updates, and administrative actions produce permanent audit records. Nothing is silently overwritten.

4

Minimal public disclosure

Public-facing endpoints (such as the resolver) return only the minimum data required — typically a UUID. No product details, pricing, or sensitive data are exposed without authentication.

5

Additive localisation

Market-specific content layers on top of the base passport without altering its structure. Localisation enhances the consumer experience without compromising the integrity of the core product record.

Key Concepts

Workspaces and Brands

A brand is the primary organisational unit. Each brand has its own product catalogue, identifier space, passport templates, Market Packs, team members, and configuration. Users can belong to multiple brands with different roles.

Roles

RoleScope
OwnerFull administrative control, including billing and team management
AdminProduct management, identifier edits, imports, localisations, and API credential management
Marketing EditorProduct attribute editing (non-identifier fields)
Compliance ApproverReview and approval workflows
ViewerRead-only access to products and settings

Identifier Architecture

Every product has an immutable system UUID. Mutable identifiers (SKU, GTIN, EAN, UPC) are stored as aliases with full change history. The public resolver uses a “forever valid” strategy — retired codes fall back gracefully so printed barcodes never break.

See Identifiers for details.

DPP Schema & Custom Fields

Product attributes are governed by a schema derived from your brand’s industry classification (NACE code). The schema defines which fields are required, their data types, and any value-set constraints. This schema drives mint readiness checks.

In addition to the standard schema, brands can define custom fields — brand-specific attributes that extend the data model for operational or compliance purposes. Custom fields are first-class data: they appear in product records, flow through to passport rendering, and participate in the three-layer data inheritance model. See Custom Fields.

Passport Content Model

Passports are composed of configurable content blocks — structured sections covering product identity, materials, sustainability, compliance, and care. Brands control which blocks and fields appear through a template configuration layer, ensuring precise control over disclosure. See Content & Templates.

Localisation Layer

Market Packs provide market-specific formatting, recycling guidance, disclaimers, and multilingual content. Each pack is linked to one or more passports and layers supplementary content on top of the base passport structure. The localisation layer supports 31 pre-configured markets with configurable locale rules, date and number formatting, and measurement systems. See Localisations Overview.

Integration Model

tieback

exposes a set of authenticated endpoints for programmatic access:

  • Product management — create, update, and query products
  • Identifier management — read and write identifiers with history
  • Import workflows — upload, validate, and commit product data
  • Bulk updates — apply changes across many products asynchronously
  • Credential management — create and rotate API keys

All API operations require authentication. The only public endpoint is the Resolver, which returns UUIDs only.

FAQ

Where is product data stored?

Product data is stored in a managed database with tenant-level isolation. All access is mediated through server-side functions with role-based access control.

Is the platform multi-tenant?

Yes. Each brand is a fully isolated tenant with its own data, team, identifiers, localisations, and configuration.

Can I self-host tieback?

tieback

is currently offered as a managed service. Self-hosting is not available at this time.

How does localisation work with passports?

Market Packs provide an additive content layer that supplements the base passport with market-specific information. The base passport content and template structure remain unchanged — localisation adds recycling guidance, disclaimers, and formatting conventions for the target market.

Core Architectural Layers

  • Identity layer — SKU and item-level records with immutable UUIDs
  • Resolver layer — GS1 Digital Link support with permanent scan URLs
  • Passport layer — content templates, themes, and publication lifecycle
  • Localisation layer — Market Packs, multilingual content, and market-specific formatting
  • Lifecycle event logging — immutable audit trails for all operations
  • API access and integration controls — authenticated endpoints with role-based permissions

Related docs

  • Introduction
  • Getting Started
  • Identifiers
  • Localisations Overview
  • Resolver & GS1 Digital Link