The barcode is becoming a QR code. Deadline: 31 December 2027.
GS1 — the body behind every retail barcode — has set the date: by the end of 2027, point-of-sale should scan 2D barcodes. [GS1] One QR on the pack will check out at the till and open web content in a shopper's camera. Behind every one of those codes sits a managed, re-pointable redirect — which is exactly what xengo runs.
One code on the pack. Two jobs.
The till lane is the GS1 standard doing its job — a 2D barcode replacing the stripes. The bottom lane is ours: the printed code resolves through a redirect on your domain — so the destination can change forever, and every scan can fire an event the moment it happens.
The dates are set
- Now
Puma, PepsiCo and P&G are piloting 2D codes on packaging; Walmart, Target and Carrefour are committed. A third of GS1 UK's 60,000 members plan implementation within 12 months. [GS1 UK]
- Feb 2027
EU Digital Product Passports become mandatory for batteries — QR codes are the expected data carrier; textiles and more follow. [European Commission]
- 31 Dec 2027
GS1 Sunrise 2027: retail point-of-sale should scan 2D barcodes. Every pack that wants one code for both checkout and content needs a resolvable, managed QR by then. [GS1 US]
What we do for the 2D barcode transition — today
Codes on your domain, not ours
The QR on your packaging should belong to your brand. Bring-your-own-domain with automatic HTTPS means the printed code points at infrastructure you name — and you keep the exit. Custom domains →
Printed once, re-pointed forever
Packaging runs are printed months ahead. Dynamic codes let you change the destination — campaign, regulatory content, a recall notice — without reprinting. Destination edits are unmetered on every plan. Dynamic QR →
A code per SKU, in one call
Bulk-create up to 500 codes per request via CSV or the REST API, then pull print-ready SVG per code — a label pipeline in two calls. Bulk API →
Every scan is an event
Scans arrive in your systems within seconds — signed webhooks, Slack, Teams or 20+ channels. Supply-chain telemetry, market surveillance, recall monitoring: the scan is the trigger. Real-time events →
Analytics by product, place and time
Bot-filtered scan analytics with country, city, device and source — see which SKUs get scanned, where, and when. Analytics →
Codes that can't die with a subscription
Packaging outlives billing cycles. Our continuity promise, in writing: codes are never deleted, no ads are ever injected, and your domain is your exit. The promise →
Need full GS1 Digital Link resolver conformance — the
/01/{gtin} URI syntax and linkset responses?
That's an engagement we scope together.
Talk to us.