Scan any product.
See its halal proof in seconds.
An OIC-aligned trust fabric that complements national halal authorities — SiHalal · JAKIM · ESMA · SFDA · MUIS · AFIC. Two PNBP services are live today (Halal Passport per-SKU, Halal Shipment Certificate per-batch); more PNBP and B2B modules are on the roadmap. Every credential resolves through a single QR.
Two structural problems Indonesia must solve before October 2026
PP 42/2024 mandates that every halal-labelled import SKU be registered with BPJPH by October 2026. The paper process cannot carry that load — it would take BPJPH staff decades to clear manually.
Indonesian exporters pay SGS, Intertek, and the commercial arms of foreign LHLNs for per-shipment certificates BPJPH should be issuing. HaraShield closes that gap at Rp 200K per batch, < 4-hour turnaround.
The data side and the money side, one trust fabric
Halal Passport carries the credential data and resolves the QR. Halal Payment Gateway carries the money — collection, split, NTPN, audit. Every cert is paid through HPG; every Rupiah HPG collects produces a verifiable cert. The two surfaces are inseparable by design.
Per-SKU credential bound to a national halal cert, with 4-role attestations (certification · inspection · lab · trade), Polygon anchor, and a QR that resolves in any country.
Orchestration + audit + reconciliation API on top of BI-licensed PSPs (DANA MPN G3 today). Splits Kas Negara PNBP from HARA platform fees in T+1. Daily Merkle root anchored on Polygon.
Four service clusters on one HARA Trust OS
Clients and PJAH reach the BPJPH core only through API/SDK; the core reaches the OS the same way. Identity is two-plane — Numira = who acts (subject DIDs), Atlas = what is certified (object DIDs), Registry = the ledger.
Ownership: OS = HARA · BPJPH core operated by PJAH under licence to BPJPH (for now) · consortium governs the shared schema. Topology + migration: docs/architecture/target-architecture-and-migration.md.
Digital credentials issued under Indonesia's PNBP framework
Each PNBP service is a paid government credential issued by BPJPH, anchored on Polygon for public verifiability. Halal Passport sits at the SKU layer (one per product). Halal Shipment Certificate (HaraShield) sits at the consignment layer (one per shipment, referencing one or more passports or LHLN certs). Every payment for these services routes through Halal Payment Gateway — see Section 2 below.
One verifiable identity per halal SKU
Per-product digital credential bound to the underlying BPJPH halal certificate, with 4-role attestations (certification, inspection, lab, trade), Polygon anchor, and a QR that resolves in any country. Tariff: Rp 50,000–100,000 per SKU, valid 2 years.
- · import-passport-flow — Berkah verifies a foreign supplier, delta panel, recall feed (~85s)
- · consumer-scan — QR scan → live verification (~64s)
- · recognition-delta — field-level ADR 0001 wedge (~75s)
- · importer-equivalency — pre-shipment recognition check (~70s)
- · exporter-submission — submit new passport to BPJPH queue (~75s)
- · authority-approval — review → seal → Polygon anchor (~80s)
- · consortium-edit — schema governance + audit chain (~75s)
- · recall-cascade — SiHalal webhook → consumer verdict flips (~90s)
Per-batch halal proof for export consignments
Per-shipment certificate that closes Indonesia's biggest export gap. Exporters pay USD 50–300 to SGS/Intertek today. HaraShield replaces that at Rp 200,000 per batch, < 4-hour turnaround, recognised under bilateral MRAs, anchored to Polygon, and emitted as a W3C Verifiable Credential.
- · import-shipment-flow — bulk RSHLN, NTPN, Bea Cukai clearance, money trail (~95s)
- · harashield-flow — exporter request → BPJPH approve → Polygon anchor → SFDA verifier (~75s)
Single checkout, dual-stream disbursement, real-time audit trail
HPG sits underneath every PNBP and B2B service in the ecosystem. One payer-facing intent → one DANA checkout → automatic T+1 disbursement to MPN G3 (Kas Negara) and HARA Principal in parallel. NTPN issued immediately. Three-way reconciliation runs nightly: HPG ledger ↔ DANA statement ↔ MPN G3 receipts.
Three primitives that make every payment auditable end-to-end
PNBP + B2B in one transaction. Caller passes line items by code, never by amount — HPG looks up the canonical tariff server-side.
PSP performs two disbursements: PNBP to MPN G3 (Kas Negara), B2B fees to HARA Principal. HPG owns the split logic; the PSP just moves money.
Every intent, settlement, NTPN, and disbursement is hash-chained. Daily Merkle root anchored on Polygon. BPK / BPKP can verify independently without trusting the database.
- · import-shipment-flow — end-to-end HPG loop: bulk pay → NTPN → 60 RSHLNs auto-issue → Bea Cukai clears → Ops sees money trail (~95s)
- · DANA — primary PSP (BI-licensed, SNAP-BI / MPN G3-connected)
- · DOKU / Xendit / Midtrans — multi-PSP swap-ready (one routing change)
- · T+1 disbursement — PNBP → Kas Negara, B2B fee → HARA Principal
- · Daily 3-way recon — HPG ledger ↔ DANA statement ↔ MPN G3 NTPN
Per-facility credential for ruminant + poultry abattoirs. Bilateral with SFDA + UAE supply chains.
MS 2400-aligned per-route credential for cold-chain and bulk transport of halal goods.
Identity primitive for smaller exporters that don't need full HaraPass but need verifiable provenance.
More PNBP and B2B modules are planned. Each reuses the same Hara Numira identity graph + Hara Registry anchor — no platform fragmentation.
Consoles & apps, by service cluster
Each surface belongs to one tier and reaches the BPJPH core through API/SDK. The four requester portals consolidate into one role-aware Requester Console (see the architecture above).
Clients · Requester Console
· exporter · importer · LPH · LHLN (role-aware, consolidating)Manufacturers · brand owners
- · Register passports + completeness
- · HaraShield shipments
- · Trade readiness · alerts
Destination-country importers of record
- · Pre-shipment equivalency + delta
- · Order tracking · recall feed
- · Customs prep
Inspection auditors accredited under SJPH
- · Spot-check queue
- · Inspection findings
- · Hash-chained audit on submit
Lembaga Halal Luar Negeri (MRA partners)
- · Accreditation self-service
- · Certificate upload
- · PNBP-05 payments
Clients · Halal Value Services
· lab · logisticsGSI Lab · Sucofindo · accredited testing labs
- · Sample intake
- · Results submission
- · Polygon-anchored attestation
Halal-logistics facilities & fleets
- · Facility / fleet compliance
- · Cold-chain capture
- · Segregation records
Clients · Public PWA Verifier
· auth-free scan-to-verifyBPJPH core extended services
· operated by PJAH under licence to BPJPHHalal Consortium core services
· shared-schema governance · API laterPJAH services
· commercial operatorPlatform operator
- · Tenants · billing · revenue
- · Halal Payment Gateway · blockchain ops
- · National-system integrations
Reseller / white-label partners
- · Commission ledger
- · Lead pipeline
- · White-label · payouts
Who decides what a halal passport must contain
Operator and standards body are deliberately separate so no single party can rewrite the rules unilaterally. Member authorities keep sovereignty over their own jurisdiction.
Builds and runs the platform. Holds the audit chain and anchors to Polygon. Cannot edit halal requirements.
Governs the Core schema + HS-code dictionary. Founding sole member: BPJPH. Open to other national halal authorities.
Consortium consoleOwn their National + Category overlays. Issue and revoke passports. BPJPH today; JAKIM, ESMA/MoIAT, SFDA, MUIS, AFIC as they accede.
The three-layer requirements model
Universal floor seeded from SMIIC 1 + Codex CAC/GL 24-1997. Identity, applicant, manufacturer, ingredient list, 4-role credentials.
BPJPH SJPH layer (penyelia halal, KBLI); JAKIM MS-1500 layer when MY joins; SFDA-FD 2172 layer for SA; and so on.
Slaughter method for meat, alcohol type for cosmetics, gelatin source for pharma. Conditional rules — irrelevant fields don't escalate.
What every Halal Passport tells you
See the certifying body (BPJPH, JAKIM, ESMA, SFDA, MUIS, AFIC) and the original cert number. Tap the halal mark to view the actual certificate document.
A live recognition matrix shows which countries accept this passport — and which need extra paperwork.
Plain-language summary built from the real credentials. Madhab acceptance row. Ingredient flags for gelatin, alcohol residue, emulsifiers.
If the certifying authority ever revokes the cert, every consumer who scanned it sees a recall banner instantly.
How it works
- 1National authority issues the cert
BPJPH, JAKIM, ESMA, SFDA, MUIS or AFIC certifies the product through their existing system. That remains the legal source of truth.
- 2Halal Passport mirrors and anchors it
The cert hash, all 5 credentials and the supply-chain journey are anchored on Polygon, mintable as an NFT for cross-border use.
- 3Anyone can verify in seconds
Consumers scan the QR. Importers run pre-shipment checks. Customs agents confirm acceptance. All from one passport.