The scenario below is drawn from patterns we see across enterprise fashion brands. If you work in sustainability or supply chain compliance, it will probably feel familiar.
Picture a global fashion brand with EUR 800 million in revenue, 500 suppliers across 14 countries, and a sustainability team of eight working alongside a compliance lead and a supply chain director who has run regulatory compliance programmes since 2020. By every measure leadership tracks, this brand is in good shape: it has hit every deadline, never had a shipment detained, and is considered a compliance-mature organisation.
It is also running five separate compliance tools on top of a core IT landscape that was already fragmented before any of them arrived. None of these systems talk to each other, and the cost of that never shows up on an invoice.
AT A GLANCE
- Data fragmentation in enterprise fashion brands operates at two layers: the core IT systems (PLM, ERP, audit platforms) and the point solutions added for each new regulation. The two layers compound each other.
- The real cost is not licensing fees. It is supplier fatigue, duplicated internal work, and data that lives in several places and never gives you one consistent picture.
- In a 2026 TrusTrace survey, data fragmentation and disconnected systems ranked as the third most cited barrier to traceability progress, named by 51% of respondents.
- The Digital Product Passport (DPP) is the clearest stress test of your current data architecture, and siloed systems will fail it.
- A unified data foundation does more than cut cost. It changes what your compliance team is capable of.
HOW RESPONSIBLE BRANDS END UP HERE
No brand sets out to build a fragmented compliance stack. It accumulates one sensible decision at a time, across two layers that quietly compound each other.
The first layer was in place long before any compliance programme began. Product master data sits in a PLM system, purchase orders in an ERP, supplier audits in Higg, certifications in a separate portal. These systems were never designed to share data; they were built to solve discrete operational problems, and they do that well. What they have never done is form a connected picture of a brand's supply chain.
The second layer is the compliance stack built on top, and this is where each new regulation multiplies the problem. EUDR came into focus, so the brand selected a deforestation compliance platform. As forced labor prevention regulations tightened and peer brands started seeing shipments held at customs, a risk screening solution went in. The largest retail partner wanted certificate management with expiry alerts, so the team extended an existing system to handle it. CSRD wave one brought a disclosure tool chosen to satisfy the auditor. Then leadership greenlit a Digital Product Passport pilot, and a fifth system joined the stack.
Every one of those calls was defensible. Each tool solved a real problem under real deadline pressure, and the compliance team delivered every time. But each mandate also landed on top of an already fragmented core, adding another supplier data request and another integration that connected to nothing already in place. The compliance-tool problem and the core-IT problem are not two problems. They are the same architecture failure seen from two angles.
In a 2026 TrusTrace survey of 35 sustainability and supply chain professionals at fashion brands, data quality, fragmentation, and disconnected systems ranked as the third most cited barrier to traceability progress, named by 51% of respondents. Gartner's 2025 Supply Chain Technology survey reached a similar conclusion, finding that technical dependencies such as data and integration issues are the top internal challenge eroding value for supply chain leaders. This is simply what happens when every regulation is treated as a separate project.
WHAT THIS LOOKS LIKE ON A TUESDAY
Here is what the compliance lead actually does on a Tuesday morning.
She opens the deforestation platform to check whether three new Vietnamese viscose suppliers have submitted their geolocation data. Two have; one hasn't, so she flags it and moves to the certificate management system to check expiry alerts. Four certificates across seven suppliers are approaching expiry. Because the certificate system doesn't connect to the supplier communication tool, she exports the list to a spreadsheet and drafts the reminder emails by hand.
Then her phone rings. The supply chain director needs a CSRD-ready supplier assessment summary for a board presentation on Friday. That data lives in the ESG reporting platform, which drew on a different supplier questionnaire than the deforestation workflow used, so the numbers don't match. She spends the afternoon reconciling them. None of this is a bad day; it is an ordinary one.
The suppliers are living their own version of the same thing. Over the past 90 days, the brand's tier-one dye house in Turkey has fielded a certificate submission request from the PLM system, a sustainability questionnaire from the ESG reporting platform, and a supply chain mapping request from the deforestation tool. Same brand, three portals, three logins, three formats.
Some of it is the same document. A GOTS scope certificate the dye house uploaded for a product compliance check six weeks ago is being requested again by a different team, through a different portal, for a different regulation. The certificate hasn't changed and neither has the dye house's certification status. Only the system asking for it has. And this is just one of the 40 brands that dye house supplies.
If your systems are siloed, you'll recognise the pattern. A sustainability manager at a global retailer told TrusTrace that fragmented data capture leaves compliance documents scattered and inconsistently stored, with buyers forever chasing vendors for information. One brand's RFP put it more bluntly still, noting there was no single repository where all its data points came together.
THE COST THAT DOES NOT SHOW UP ON THE INVOICE
The licence fees for five compliance tools are easy to see. The cost of the architecture itself is not, and it surfaces in three places.
Supplier fatigue and data quality erosion
When a supplier gets three data requests from the same brand in a single quarter, they answer the most urgent one and let the rest wait. The same document often ends up in three systems at three different moments, and if anything changed in between, a renewed certificate, an updated contact, a revised volume, each system now holds a different version of the truth. Nobody reconciles them.
Supplier resistance or limited supplier capability was the top barrier in the TrusTrace survey, cited by 60% of respondents. The root cause is rarely unwillingness; it is overload, and much of that overload is the structural duplication fragmented systems create.
The duplication tax on internal teams
The compliance lead isn't doing strategic work when she reconciles two supplier assessments that diverged because they ran on different questionnaires and different platforms. The supply chain director isn't managing risk when he spends two days piecing together a compliance status overview from four separate system exports.
The tax runs deeper than daily reconciliation. Every new tool means fresh integration work, configuration, supplier re-onboarding, training, and change management, all starting from zero because nothing carries over from the last system. These aren't one-off project costs. They are a fragmented architecture billed as a series of projects that never add up to a foundation.
Data quality, fragmentation, and disconnected systems ranked as the second most cited barrier in the TrusTrace survey, at 52%, with internal resource and bandwidth constraints tied for third at 50% alongside the complexity of multi-tier supply chains. A good share of that constraint comes from the architecture, not the workload itself.
The cost of not having one authoritative answer
When a regulator, a retail partner, or a board member asks for supply chain evidence, neither the answer nor the deadline is optional. Information requests come with response windows, audits with submission dates, and the Friday board presentation happens whether the data is ready or not.
If that evidence is spread across five systems in five different states of completeness, the honest answer is that you don't have a single verified picture. The consequences go well beyond inconvenience: compliance risk, reputational exposure, restricted market access, and, where enforcement follows, direct financial loss.
A leading global sports brand told TrusTrace that assembling chain-of-custody evidence by hand “can take several weeks to complete for a single PO,” with document review alone averaging a week per audit. That is the time cost of siloed data on a single purchase order under deadline. Multiply it across hundreds of suppliers and several active regulations, and the architecture cost simply becomes the compliance cost.
WHAT DPP REVEALS ABOUT YOUR DATA INFRASTRUCTURE
The Digital Product Passport (DPP) is the clearest test of whether your data architecture is fit for purpose. Not because it is the most urgent regulation on most brands' desks today, but because it makes fragmentation impossible to ignore.
The EU central DPP Registry opened on 19 July 2026. The Textile Delegated Act, which will define the exact requirements for apparel (footwear and home textiles are deferred to a later review), is expected in 2027, with a transition period of approximately 36 months and mandatory compliance pointing to 2029-2030. Timelines are still evolving, so brands should track official Commission publications as the delegated act progresses.
A compliant DPP calls for structured, evidence-backed product data covering unique product and facility identifiers, material composition, substances of concern, environmental footprint, durability, recycled content, and compliance documentation, at the granularity (model, batch, or item level) set by the delegated act. In TrusTrace's DPP pilot work with Kappahl, Marimekko, ETON, and Gina Tricot, 126 likely data points were identified per textile product.
Now hold that requirement up against a brand running five disconnected tools on a fragmented core. Material composition data sits in the PLM system, certificate records in the compliance platform, supply chain mapping in the deforestation tool, supplier assessments in the ESG platform. None of it is linked, evidenced to a consistent standard, or mapped to a product record at the granularity the DPP will require.
That brand wouldn't be deploying a DPP so much as rebuilding its data infrastructure from scratch, under a compliance deadline, while keeping five other programmes running, and while chasing Tier 2, 3, and 4 suppliers for data most of them don't yet collect in structured form.
The brands that started building connected traceability infrastructure in 2024 and 2025 are already piloting. They have working multi-tier supplier data flows, evidenced product records, and a data model that can absorb the Delegated Act's requirements once confirmed. Their advantage isn't a better tool. It's a data foundation built before the deadline rather than in a scramble to meet it.
WHAT A DIFFERENT ARCHITECTURE MAKES POSSIBLE
The real question isn't whether a brand should consolidate its tools; that's a procurement conversation. It's what becomes possible when traceability and compliance data is collected once, verified, and reused across every regulation, risk assessment, and impact analysis.
The compliance lead spends less of her Tuesday reconciling and more of it deciding. Suppliers submit their data and documents once, and when the next regulation arrives, their verified profiles, certificates, and chain-of-custody records are already on hand rather than collected all over again.
When a regulator, retail partner, or board member asks for compliance status, the answer no longer takes weeks of manual assembly across disconnected systems. It's already there, verified and current.
And when the DPP Delegated Act is published, the supplier data, certifications, and chain-of-custody records already exist, not scattered across five tools on a fragmented core, but held in one verified foundation that every programme runs on and every new regulation builds on rather than duplicates.
This isn't a future state. A platform that collects and verifies traceability and compliance data once and reuses it across every programme a brand runs, EUDR, forced labor prevention, CSRD, CSDDD, and DPP, on a single verified foundation, exists today. Brands representing over $200 billion in combined retail sales are building that foundation with TrusTrace to substantiate their claims, guide responsible sourcing, and get ahead of regulation instead of reacting to it.
If your data still doesn't give you one consistent picture, the architecture is worth examining now, before the next regulation forces the conversation for you.
FREQUENTLY ASKED QUESTIONS
What is siloed supply chain data and why does it matter?
Siloed supply chain data is product, supplier, and compliance information spread across disconnected systems such as PLM, ERP, audit platforms, and compliance tools, with nothing connecting them. Each system holds only part of the picture and none holds the whole. The result is constant manual reconciliation, inconsistent records, and a compliance position you can't state with confidence.
Why does data fragmentation cost more than the licence fees suggest?
The visible cost is the sum of your tool licences. The hidden cost is the staff time lost reconciling inconsistent data, the supplier fatigue from duplicate requests, the integration and re-onboarding every new tool demands, and the inability to answer compliance questions from one authoritative source. For enterprise brands with large supplier bases, those hidden costs compound with every regulation added to the stack.
How does supplier fatigue affect data quality?
When suppliers get multiple requests from the same brand across different platforms, response rates fall and accuracy slips. The same document lands in different systems at different times, and if anything changed in between, each system ends up holding a different version of the truth. What's left is a data foundation you can't rely on for audit-ready evidence.
What does the Digital Product Passport require from a data perspective?
The Digital Product Passport, mandated under the EU's Ecodesign for Sustainable Products Regulation (ESPR), requires structured, evidence-backed product data covering unique identifiers, material composition, substances of concern, environmental footprint, durability, recycled content, and compliance documentation, at the granularity set by each category's delegated act. That depends on structured, multi-tier supplier data flowing from Tier 4 upward, which means brands relying on self-declared spreadsheets and manual PDFs will need to rebuild their supplier data foundation before they can reliably populate a DPP.
When do DPP requirements apply to fashion and apparel?
The EU central DPP Registry opened on 19 July 2026. The Textile Delegated Act, which will define the exact requirements for apparel (footwear and home textiles are deferred to a later review), is expected in 2027, with a transition period of approximately 36 months and mandatory compliance pointing to 2029-2030. Timelines are still evolving, so brands should track official Commission publications as the delegated act progresses.
Talk to TRUSTRACE
TrusTrace is the traceability and compliance platform trusted by brands representing over $200 billion in combined retail sales. One verified data foundation, one platform for EUDR, CSDDD, forced labor prevention, CSRD, and DPP. Collect once, use everywhere, and never ask your suppliers twice. Speak with our team to assess your current data architecture, or explore the TrusTrace platform.
Disclaimer: This content is for informational purposes only and does not constitute legal advice. Please consult qualified legal professionals for guidance specific to your situation.
