All articles
Guideintermediate7 min read

How to Choose a GS1 QR Code Provider

You need a resolver to make your GS1 Digital Link QR codes work. Several companies offer this as a service, and the differences between them matter more than you'd expect.

Here's what to actually look for.

First: are you buying a generator or a resolver?

Almost every confusion in this category comes from these two things being sold under the same words.

A GS1 Digital Link QR code does not carry your product page inside it. It carries a URL built around your GTIN, something like /01/09506000149301. When a shopper scans it, their phone makes a request to whatever host is in that URL. If nothing is listening there, the scan fails.

So there are two products:

  • A generator produces the artwork. It is a one-time thing, it is not hard, and plenty of tools do it for free (including ours).
  • A resolver is a live service that answers that code for as long as the packaging exists. It looks the product up by GTIN and returns a destination for a shopper, or a machine-readable linkset for a retailer's systems.

Only the second one is a commitment, and it is the only one worth evaluating carefully. If a provider's marketing talks exclusively about "GS1 compliant QR code generation" and never mentions a resolver, you are looking at artwork.

One more thing worth stating plainly, because it catches people out: nobody in this category can sell you a GTIN. The number inside the code has to be licensed to your company by GS1. A resolver service and a GS1 licence are two separate purchases from two different kinds of organisation.

GS1 compliance is non-negotiable

This is the first filter. A GS1 Digital Link resolver must implement the standard correctly:

  • Proper URI structure with Application Identifiers in the path
  • Content negotiation (different responses for browsers vs. supply chain systems)
  • Support for standard link types
  • HTTP 307 redirects (not JavaScript forwarding or 301 permanent redirects)
  • Linkset JSON responses for machine clients

Some providers market "QR code management" without actually implementing the GS1 Digital Link standard. These are generic QR services -- they won't work at retail point-of-sale and aren't compliant with the Sunrise 2027 transition.

If a provider can't clearly explain how their resolver meets the GS1-Conformant Resolver Standard, move on.

SunriseQR's resolver is fully conformant and validated against the official GS1 test suite.

The standard evolves. Your resolver needs to keep up.

GS1 Digital Link has gone through six versions since its first publication in 2019. Each update can introduce new requirements, deprecate old patterns, or change how conformance is validated.

This is easy to overlook when choosing a provider. A resolver that's compliant today can fall behind if nobody's actively maintaining it. Ask how the provider handles spec updates.

Reliability and infrastructure

Your resolver needs to be available every time someone scans one of your QR codes. A scan that fails is worse than no QR code at all -- the consumer tried, got nothing, and now has a negative impression of your brand.

What to look for:

  • Edge caching or CDN: Resolvers that run on a global edge network respond faster and stay available even during origin disruptions. A centralized server in one region means slower scans everywhere else and a single point of failure.
  • Cached failover: If the origin goes down, do cached responses keep serving? This is the difference between a brief backend issue and a complete outage for every scan worldwide.

SunriseQR uses edge caching with global distribution, so scans resolve from the nearest location and cached responses continue working during origin disruptions.

Can you leave?

Most provider comparisons skip this, and it is the one thing a reprint cannot undo cheaply.

The URL is printed on your packaging. If it carries the provider's domain -- id.theirservice.com/01/... -- then only that provider can ever resolve it. If they raise prices, get acquired, or shut down, your options are to accept it or reprint every carton, label, and case in your supply chain. Codes already in the field are theirs to serve.

If the URL carries your domain, the same code can be pointed at a different provider, or at a resolver you run yourself, by changing one DNS record. Nothing gets reprinted. Nothing in the warehouse stops working.

What to look for:

  • Can you use your own domain, and at what plan? A provider that only ever serves codes on their own hostname is selling you something you cannot take with you.
  • Can you export your product and link data in a form another resolver could ingest?
  • Who controls the DNS? It should be you. If the provider needs to own the domain for it to work, you have not solved the problem.

SunriseQR serves custom domains on the Retail plan. You point a domain you own at the resolver with two DNS records, and your codes resolve there. If you ever want to leave, you repoint the record and every printed code keeps working -- we would rather earn the renewal than hold the packaging hostage. Using your own domain walks through it.

Pricing that doesn't penalize success

Provider pricing models vary, and the wrong one can surprise you:

ModelHow it worksThe catch
Per-scan feePay per QR code scan

The more consumers engage with your products, the more you pay. A viral moment or holiday spike can blow up your bill.

Per-GTIN flat feePay per product registeredPredictable, but can get expensive as your catalog grows.
Tiered subscriptionMonthly fee based on product countMost predictable. You know your cost regardless of scan volume.
Enterprise customNegotiated pricing with SLAs

Usually includes dedicated support and integration help. Overkill for most brands.

Avoid per-scan pricing. It discourages the exact consumer engagement you're trying to create with QR codes in the first place.

Also watch for hidden costs: setup fees, overage charges, extra fees for QR code generation or support. These add up. SunriseQR uses tiered subscriptions with no per-scan fees. See pricing

Scan analytics from day one

One of the most immediate benefits of moving to GS1 Digital Link QR codes is visibility into how consumers interact with your products. Every scan is a data point: when, where, what device, which product.

Not every provider includes analytics, and some charge extra for it. Make sure scan data is part of what you're getting -- it's one of the strongest reasons to make the switch now, even ahead of any compliance deadline.

Team access and collaboration

If multiple people manage your product data (marketing, packaging, compliance), you need role-based access. Look for:

  • Multiple user seats so team members have their own logins
  • Role-based permissions so you can control who can edit vs. view
  • Multi-brand support if you manage more than one brand

Simplicity matters

Some providers bury product management behind complex interfaces or require API integration to do basic things. If adding a product, configuring link types, and downloading a QR code isn't straightforward, you'll avoid using it -- and your data will go stale.

Look for a provider where the day-to-day workflow is simple: add a product, set your links, download the QR code, done. Also consider whether you need team access with different permission levels, or multi-brand support if you manage more than one brand.

Red flags

Be cautious of providers that:

  • Offer to sell you a GTIN or a "barcode number" alongside the service. GTINs come from GS1. A number resold from somebody else's licensed prefix will pass a check digit test and still get rejected by Amazon and Walmart, because validity and ownership are different things.
  • Never mention a resolver, only QR code generation. You would be buying artwork for a code nothing answers.
  • Can't explain GS1 conformance clearly. "We support QR codes" is not the same as "we implement the GS1 Digital Link standard."
  • Charge per scan. This model works against your goals.
  • Show ads to the people scanning. Some providers fund a free or entry-level tier by serving a full-screen advertisement between the scan and your destination. On retail packaging this is disqualifying: you are printing a code that will be scanned for years, you do not control what is advertised on it, and the shopper has no way to tell it was not you. Ask outright, and then test it yourself rather than taking the answer on trust.
  • Require long-term contracts. Month-to-month should be standard. Annual discounts are fine; multi-year lock-ins are unusual.
  • Don't mention spec updates. If they built a resolver once and moved on, compliance will drift.
  • Have no scan analytics. You're leaving one of the biggest benefits on the table.